SURFnet\VPN\Server\Acl\Provider\VootProvider

Complexity

Total Complexity

17

Size/Duplication

Total Lines	109
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	2

Importance

Changes

0

6 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	10	2
A	__destruct()	0	4	1
A	getGroups()	0	12	2
A	fetchGroups()	0	12	2
B	extractMembership()	0	23	5
B	getDisplayName()	0	20	5

<?php
/**
 *  Copyright (C) 2016 SURFnet.
 *
 *  This program is free software: you can redistribute it and/or modify
 *  it under the terms of the GNU Affero General Public License as
 *  published by the Free Software Foundation, either version 3 of the
 *  License, or (at your option) any later version.
 *
 *  This program is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU Affero General Public License for more details.
 *
 *  You should have received a copy of the GNU Affero General Public License
 *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */

namespace SURFnet\VPN\Server\Acl\Provider;

use RuntimeException;
use SURFnet\VPN\Server\Acl\ProviderInterface;
use SURFnet\VPN\Server\Storage;

class VootProvider implements ProviderInterface
{
    /** @var \SURFnet\VPN\Server\Storage */
    private $storage;

    /** @var VootClientInterface */
    private $vootClient;

    /** @var string */
    private $vootUri;

    /** @var resource */
    private $curlChannel;

    public function __construct(Storage $storage, VootClientInterface $vootClient, $vootUri)
    {
        $this->storage = $storage;
        $this->vootClient = $vootClient;
        $this->vootUri = $vootUri;

        if (false === $this->curlChannel = curl_init()) {
            throw new RuntimeException('unable to create cURL channel');
        }
    }

    public function __destruct()
    {
        curl_close($this->curlChannel);
    }

    /**
     * Get the groups a user is a member of.
     *
     * @param string userId the userID of the user to request the groups of
     *
     * @return array the groups as an array containing the keys "id" and
     *               "displayName", empty array if no groups are available for this user
     */
    public function getGroups($userId)
    {
        $vootToken = $this->storage->getVootToken($userId);
        if (is_null($vootToken)) {
            return [];
        }

        // fetch the groups and extract the membership data
        return self::extractMembership(
            $this->fetchGroups($vootToken)
        );
    }

    private function fetchGroups($bearerToken)
    {
        list($responseCode, $responseData) = $this->vootClient->get($this->vootUri, $bearerToken);

        if (200 !== $responseCode) {
            // we should probably log some stuff here, but for now just assume
            // there are no groups for the user...
            return [];
        }

        return $responseData;
    }

    private static function extractMembership(array $responseData)
    {
        $memberOf = [];
        foreach ($responseData as $groupEntry) {
            if (!is_array($groupEntry)) {
                continue;
            }
            if (!array_key_exists('id', $groupEntry)) {
                continue;
            }
            if (!is_string($groupEntry['id'])) {
                continue;
            }
            $displayName = self::getDisplayName($groupEntry);

            $memberOf[] = [
                'id' => $groupEntry['id'],
                'displayName' => $displayName,
            ];
        }

        return $memberOf;
    }

    private static function getDisplayName(array $groupEntry)
    {
        if (!array_key_exists('displayName', $groupEntry)) {
            return $groupEntry['id'];
        }

        if (is_string($groupEntry['displayName'])) {
            return $groupEntry['displayName'];
        }

        if (is_array($groupEntry['displayName'])) {
            if (array_key_exists('en', $groupEntry['displayName'])) {
                return $groupEntry['displayName']['en'];
            }

            return array_values($groupEntry['displayName'])[0];
        }

        return $groupEntry['id'];
    }
}