eric-chau /
jarvis
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | declare(strict_types=1); |
||
| 4 | |||
| 5 | namespace Jarvis\Skill\Routing; |
||
| 6 | |||
| 7 | use FastRoute\DataGenerator\GroupCountBased as DataGenerator; |
||
| 8 | use FastRoute\Dispatcher\GroupCountBased as Dispatcher; |
||
| 9 | use FastRoute\RouteCollector; |
||
| 10 | use FastRoute\RouteParser\Std as Parser; |
||
| 11 | use Symfony\Component\HttpFoundation\Request; |
||
| 12 | use Symfony\Component\HttpFoundation\Response; |
||
| 13 | |||
| 14 | /** |
||
| 15 | * @author Eric Chau <[email protected]> |
||
| 16 | */ |
||
| 17 | class Router extends Dispatcher |
||
| 18 | { |
||
| 19 | const DEFAULT_SCHEME = 'http'; |
||
| 20 | const HTTP_PORT = 80; |
||
| 21 | const HTTPS_PORT = 443; |
||
| 22 | |||
| 23 | private $computed = false; |
||
| 24 | private $host = ''; |
||
| 25 | private $rawRoutes = []; |
||
| 26 | private $routesNames = []; |
||
| 27 | private $routeCollector; |
||
| 28 | private $scheme = self::DEFAULT_SCHEME; |
||
| 29 | |||
| 30 | /** |
||
| 31 | * Creates an instance of Router. |
||
| 32 | * |
||
| 33 | * Required to disable FastRoute\Dispatcher\GroupCountBased constructor. |
||
| 34 | */ |
||
| 35 | public function __construct() |
||
| 36 | { |
||
| 37 | } |
||
| 38 | |||
| 39 | /** |
||
| 40 | * Adds a new route to the collection. |
||
| 41 | * |
||
| 42 | * We highly recommend you to use ::beginRoute() instead. |
||
| 43 | * {@see ::beginRoute()} |
||
| 44 | * |
||
| 45 | * @param Route $route |
||
| 46 | * @return self |
||
| 47 | */ |
||
| 48 | public function addRoute(Route $route): void |
||
| 49 | { |
||
| 50 | $this->rawRoutes[] = [$route->method(), $route->pattern(), $route->handler()]; |
||
| 51 | $this->computed = false; |
||
| 52 | |||
| 53 | if (false != $name = $route->name()) { |
||
| 54 | $this->routesNames[$name] = $route->pattern(); |
||
| 55 | } |
||
| 56 | } |
||
| 57 | |||
| 58 | /** |
||
| 59 | * This is an helper that provides you a smooth syntax to add new route. Example: |
||
| 60 | * |
||
| 61 | * $router |
||
| 62 | * ->beginRoute('hello_world') |
||
| 63 | * ->setPattern('/hello/world') |
||
| 64 | * ->setHandler(function () { |
||
| 65 | * return 'Hello, world!'; |
||
| 66 | * }) |
||
| 67 | * ->end() |
||
| 68 | * ; |
||
| 69 | * |
||
| 70 | * This syntax avoids you to create a new intance of Route, hydrating it and |
||
| 71 | * then adding it to Router. |
||
| 72 | * |
||
| 73 | * @param string|null $name |
||
| 74 | * @return Route |
||
| 75 | */ |
||
| 76 | public function beginRoute(string $name = null): Route |
||
| 77 | { |
||
| 78 | return new Route($this, $name); |
||
| 79 | } |
||
| 80 | |||
| 81 | /** |
||
| 82 | * Generates and returns the full URL (with scheme and host) with provided URI. |
||
| 83 | * |
||
| 84 | * Notes that this method required at least the host to be setted. |
||
| 85 | * |
||
| 86 | * @param string $uri |
||
| 87 | * @return string |
||
| 88 | */ |
||
| 89 | public function url(string $uri): string |
||
| 90 | { |
||
| 91 | $scheme = ''; |
||
| 92 | if ($this->host) { |
||
| 93 | $uri = preg_replace('~/+~', '/', "{$this->host}$uri"); |
||
| 94 | $scheme = "{$this->scheme}://"; |
||
| 95 | } |
||
| 96 | |||
| 97 | return "$scheme$uri"; |
||
| 98 | } |
||
| 99 | |||
| 100 | /** |
||
| 101 | * Returns the current scheme. |
||
| 102 | * |
||
| 103 | * @return string |
||
| 104 | */ |
||
| 105 | public function scheme(): string |
||
| 106 | { |
||
| 107 | return $this->scheme; |
||
| 108 | } |
||
| 109 | |||
| 110 | /** |
||
| 111 | * Sets the new scheme to use. Calling this method without parameter will reset |
||
| 112 | * it to 'http'. |
||
| 113 | * |
||
| 114 | * @param string|null $scheme |
||
| 115 | */ |
||
| 116 | public function setScheme(string $scheme = null): void |
||
| 117 | { |
||
| 118 | $this->scheme = (string) $scheme ?: self::DEFAULT_SCHEME; |
||
| 119 | } |
||
| 120 | |||
| 121 | /** |
||
| 122 | * Returns the setted host. |
||
| 123 | * |
||
| 124 | * @return string |
||
| 125 | */ |
||
| 126 | public function host(): string |
||
| 127 | { |
||
| 128 | return $this->host; |
||
| 129 | } |
||
| 130 | |||
| 131 | /** |
||
| 132 | * Sets new host to Router. Calling this method without parameter will reset |
||
| 133 | * the host to empty string. |
||
| 134 | * |
||
| 135 | * @param string|null $host |
||
| 136 | * @return self |
||
| 137 | */ |
||
| 138 | public function setHost(string $host = null): void |
||
| 139 | { |
||
| 140 | $this->host = (string) $host; |
||
| 141 | } |
||
| 142 | |||
| 143 | /** |
||
| 144 | * Uses the provided request to guess the host. This method also set the |
||
| 145 | * |
||
| 146 | * @param Request $request |
||
| 147 | * @return self |
||
| 148 | */ |
||
| 149 | public function guessHost(Request $request): void |
||
| 150 | { |
||
| 151 | $this->setScheme($request->getScheme()); |
||
| 152 | $this->setHost($request->getHost()); |
||
| 153 | if (!in_array($request->getPort(), [self::HTTP_PORT, self::HTTPS_PORT])) { |
||
| 154 | $this->setHost($this->host() . ':' . $request->getPort()); |
||
| 155 | } |
||
| 156 | } |
||
| 157 | |||
| 158 | /** |
||
| 159 | * Generates URI associated to provided route name. |
||
| 160 | * |
||
| 161 | * @param string $name The URI route name we want to generate |
||
| 162 | * @param array $params Parameters to replace in pattern |
||
| 163 | * @return string |
||
| 164 | * @throws \InvalidArgumentException if provided route name is unknown |
||
| 165 | */ |
||
| 166 | public function uri(string $name, array $params = []): string |
||
| 167 | { |
||
| 168 | if (!isset($this->routesNames[$name])) { |
||
| 169 | throw new \InvalidArgumentException( |
||
| 170 | "Cannot generate URI for '$name' cause it does not exist." |
||
| 171 | ); |
||
| 172 | } |
||
| 173 | |||
| 174 | $uri = $this->routesNames[$name]; |
||
| 175 | foreach ($params as $key => $value) { |
||
| 176 | if (1 !== preg_match("~\{($key:?[^}]*)\}~", $uri, $matches)) { |
||
| 177 | continue; |
||
| 178 | } |
||
| 179 | |||
| 180 | $value = (string) $value; |
||
| 181 | $pieces = explode(':', $matches[1]); |
||
| 182 | if (1 < count($pieces) && 1 !== preg_match("~{$pieces[1]}~", $value)) { |
||
| 183 | throw new \InvalidArgumentException( |
||
| 184 | "Parameter '{$key}' must match regex '{$pieces[1]}' for route '{$name}'." |
||
| 185 | ); |
||
| 186 | } |
||
| 187 | |||
| 188 | $uri = str_replace($matches[0], $value, $uri); |
||
| 189 | } |
||
| 190 | |||
| 191 | return $uri; |
||
| 192 | } |
||
| 193 | |||
| 194 | /** |
||
| 195 | * Matches the given HTTP method and URI to the route collection and returns |
||
| 196 | * the callback with the array of arguments to use. |
||
| 197 | * |
||
| 198 | * @param string $method |
||
| 199 | * @param string $uri |
||
| 200 | * @return array |
||
| 201 | */ |
||
| 202 | public function match(string $method, string $uri): array |
||
| 203 | { |
||
| 204 | $arguments = []; |
||
| 205 | $callback = null; |
||
| 206 | $result = $this->dispatch($method, $uri); |
||
| 207 | |||
| 208 | if (Dispatcher::FOUND === $result[0]) { |
||
| 209 | [1 => $callback, 2 => $arguments] = $result; |
||
| 210 | } else { |
||
| 211 | $callback = function () use ($result): Response { |
||
| 212 | return new Response(null, Dispatcher::NOT_FOUND === $result[0] |
||
| 213 | ? Response::HTTP_NOT_FOUND |
||
| 214 | : Response::HTTP_METHOD_NOT_ALLOWED |
||
| 215 | ); |
||
| 216 | }; |
||
| 217 | } |
||
| 218 | |||
| 219 | return [$callback, $arguments]; |
||
| 220 | } |
||
| 221 | |||
| 222 | /** |
||
| 223 | * {@inheritdoc} |
||
| 224 | * Overrides GroupCountBased::dispatch() to ensure that dispatcher always deals with up-to-date |
||
| 225 | * route collection. |
||
| 226 | */ |
||
| 227 | public function dispatch($method, $uri): array |
||
| 228 | { |
||
| 229 | [$this->staticRouteMap, $this->variableRouteData] = $this->routeCollector()->getData(); |
||
| 230 | |||
| 231 | return parent::dispatch(strtolower($method), $uri); |
||
| 232 | } |
||
| 233 | |||
| 234 | /** |
||
| 235 | * Will always return the right RouteCollector and knows when to recompute it. |
||
| 236 | * |
||
| 237 | * @return RouteCollector |
||
| 238 | */ |
||
| 239 | private function routeCollector(): RouteCollector |
||
| 240 | { |
||
| 241 | if (!$this->computed) { |
||
| 242 | $this->routeCollector = new RouteCollector(new Parser(), new DataGenerator()); |
||
| 243 | foreach ($this->rawRoutes as $rawRoute) { |
||
| 244 | [$method, $route, $handler] = $rawRoute; |
||
|
0 ignored issues
–
show
|
|||
| 245 | $this->routeCollector->addRoute($method, $route, $handler); |
||
| 246 | } |
||
| 247 | |||
| 248 | $this->computed = true; |
||
| 249 | } |
||
| 250 | |||
| 251 | return $this->routeCollector; |
||
| 252 | } |
||
| 253 | } |
||
| 254 |
This check marks access to variables or properties that have not been declared yet. While PHP has no explicit notion of declaring a variable, accessing it before a value is assigned to it is most likely a bug.