SURFnet\VPN\Server\YubiKey::verify()

Complexity

Conditions	5
Paths	11

Size

Total Lines	23
Code Lines	12

Duplication

Lines	0
Ratio	0 %

Importance

Changes	1
Bugs	0	Features	1

<?php
    public function verify($userId, $yubiKeyOtp, $yubiKeyId = null)

The parameter $userId is not used and could be removed.

    {
        try {
            $validator = new Validator(new CurlMultiHttpClient());
            $response = $validator->verify($yubiKeyOtp);

            if ($response->success()) {
                if (!is_null($yubiKeyId)) {
                    // the yubiKeyId MUST match the Id from the validation
                    // response
                    if ($yubiKeyId !== $response->id()) {
                        throw new YubiKeyException('user not bound to this YubiKey ID');
                    }
                }

                return $response->id();
            }

            throw new YubiKeyException(sprintf('YubiKey OTP is not valid: %s', $response->status()));
        } catch (YubiTweeException $e) {
            throw new YubiKeyException(sprintf('YubiKey OTP validation failed: %s', $e->getMessage()));
        }
    }
}