SURFnet\VPN\Server\Api\InputValidation

Complexity

Total Complexity

22

Size/Duplication

Total Lines	81
Duplicated Lines	0 %

Coupling/Cohesion

Components	0
Dependencies	1

Importance

Changes	1
Bugs	0	Features	1

9 Methods

Rating	Name	Duplication	Size	Complexity
A	commonName()	0	9	3
A	userId()	0	9	3
A	disable()	0	6	2
A	otpKey()	0	6	2
A	otpSecret()	0	6	2
A	vootToken()	0	9	4
A	dateTime()	0	6	2
A	poolId()	0	6	2
A	ipAddress()	0	6	2

<?php
/**
 *  Copyright (C) 2016 SURFnet.
 *
 *  This program is free software: you can redistribute it and/or modify
 *  it under the terms of the GNU Affero General Public License as
 *  published by the Free Software Foundation, either version 3 of the
 *  License, or (at your option) any later version.
 *
 *  This program is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU Affero General Public License for more details.
 *
 *  You should have received a copy of the GNU Affero General Public License
 *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */
namespace SURFnet\VPN\Server\Api;

use SURFnet\VPN\Common\Http\Exception\HttpException;

class InputValidation
{
    const POOL_ID_PATTERN = '/^[a-zA-Z-_]+$/';
    const COMMON_NAME_PATTERN = '/^[a-zA-Z0-9-_.@]+$/';
    const USER_ID_PATTERN = '/^[a-zA-Z0-9-_.@]+$/';
    const OTP_KEY_PATTERN = '/^[0-9]{6}$/';
    const OTP_SECRET_PATTERN = '/^[A-Z0-9]{16}$/';
    const ACCESS_TOKEN_PATTERN = '/^[\x20-\x7E]+$/';

    public static function commonName($commonName)
    {
        if (0 === preg_match(self::COMMON_NAME_PATTERN, $commonName)) {
            throw new HttpException('invalid value for "common_name"', 400);
        }
        if ('..' === $commonName) {
            throw new HttpException('"common_name" cannot be ".."', 400);
        }
    }

    public static function userId($userId)
    {
        if (0 === preg_match(self::USER_ID_PATTERN, $userId)) {
            throw new HttpException('invalid value for "user_id"', 400);
        }
        if ('..' === $userId) {
            throw new HttpException('"user_id" cannot be ".."', 400);
        }
    }

    public static function disable($disable)
    {
        if (!is_bool($disable)) {
            throw new HttpException('"disable" must be boolean', 400);
        }
    }

    public static function otpKey($otpKey)
    {
        if (0 === preg_match(self::OTP_KEY_PATTERN, $otpKey)) {
            throw new HttpException('invalid OTP key format', 400);
        }
    }

    public static function otpSecret($otpSecret)
    {
        if (0 === preg_match(self::OTP_SECRET_PATTERN, $otpSecret)) {
            throw new HttpException('invalid OTP secret format', 400);
        }
    }

    public static function vootToken($vootToken)
    {
        if (!is_string($vootToken) || 0 >= strlen($vootToken)) {
            throw new HttpException('voot token must be non-empty string', 400);
        }
        if (0 === preg_match(self::ACCESS_TOKEN_PATTERN, $vootToken)) {
            throw new HttpException('invalid value for "vootToken"', 400);
        }
    }

    public static function dateTime($dateTime)
    {
        if (false === strtotime($dateTime)) {
            throw new HttpException('invalid date/time format', 400);
        }
    }

    public static function poolId($poolId)
    {
        if (0 === preg_match(self::POOL_ID_PATTERN, $poolId)) {
            throw new HttpException('invalid poolId format', 400);
        }
    }

    public static function ipAddress($ipAddress)
    {
        if (false === filter_var($ipAddress, FILTER_VALIDATE_IP)) {
            throw new HttpException('invalid IP address', 400);
        }
    }
}