SURFnet\VPN\Common\Http\BasicAuthenticationHook

Complexity

Total Complexity

6

Size/Duplication

Total Lines	39
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	2

Importance

Changes

0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	5	1
B	executeBefore()	0	24	5

<?php

/**
 * eduVPN - End-user friendly VPN.
 *
 * Copyright: 2016-2017, The Commons Conservancy eduVPN Programme
 * SPDX-License-Identifier: AGPL-3.0+
 */

namespace SURFnet\VPN\Common\Http;

use SURFnet\VPN\Common\Http\Exception\HttpException;

class BasicAuthenticationHook implements BeforeHookInterface
{
    /** @var array */
    private $userPass;

    /** @var string */
    private $realm;

    public function __construct(array $userPass, $realm = 'Protected Area')
    {
        $this->userPass = $userPass;
        $this->realm = $realm;
    }

    public function executeBefore(Request $request, array $hookData)
    {
        $authUser = $request->getHeader('PHP_AUTH_USER', false);
        $authPass = $request->getHeader('PHP_AUTH_PW', false);
        if (is_null($authUser) || is_null($authPass)) {
            throw new HttpException(
                'missing authentication information',
                401,
                ['WWW-Authenticate' => sprintf('Basic realm="%s"', $this->realm)]
            );
        }

        if (array_key_exists($authUser, $this->userPass)) {
            if (0 === \Sodium\compare($authPass, $this->userPass[$authUser])) {
                return $authUser;
            }
        }

        throw new HttpException(
            'invalid authentication information',
            401,
            ['WWW-Authenticate' => sprintf('Basic realm="%s"', $this->realm)]
        );
    }
}