X509\Certificate\Extension\PolicyMappingsExtension

Complexity

Total Complexity

19

Size/Duplication

Total Lines	168
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	4

Test Coverage

Coverage

100%

Importance

Changes

0

10 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	5	1
A	_fromDER()	0	12	2
A	_valueASN1()	0	11	2
A	mappings()	0	4	1
A	flattenedMappings()	0	12	3
A	issuerMappings()	0	10	3
A	issuerDomainPolicies()	0	8	1
A	hasAnyPolicyMapping()	0	14	4
A	count()	0	4	1
A	getIterator()	0	4	1

<?php

declare(strict_types = 1);

namespace X509\Certificate\Extension;

use ASN1\Type\UnspecifiedType;
use ASN1\Type\Constructed\Sequence;
use X509\Certificate\Extension\CertificatePolicy\PolicyInformation;
use X509\Certificate\Extension\PolicyMappings\PolicyMapping;

/**
 * Implements 'Policy Mappings' certificate extension.
 *
 * @link https://tools.ietf.org/html/rfc5280#section-4.2.1.5
 */
class PolicyMappingsExtension extends Extension implements 
    \Countable,
    \IteratorAggregate
{
    /**
     * Policy mappings.
     *
     * @var PolicyMapping[] $_mappings
     */
    protected $_mappings;
    
    /**
     * Constructor.
     *
     * @param bool $critical
     * @param PolicyMapping ...$mappings One or more PolicyMapping objects
     */
    public function __construct(bool $critical, PolicyMapping ...$mappings)
    {
        parent::__construct(self::OID_POLICY_MAPPINGS, $critical);
        $this->_mappings = $mappings;
    }
    
    /**
     *
     * {@inheritdoc}
     * @return self
     */
    protected static function _fromDER(string $data, bool $critical): self
    {
        $mappings = array_map(
            function (UnspecifiedType $el) {
                return PolicyMapping::fromASN1($el->asSequence());
            }, UnspecifiedType::fromDER($data)->asSequence()->elements());
        if (!count($mappings)) {
            throw new \UnexpectedValueException(
                "PolicyMappings must have at least one mapping.");
        }
        return new self($critical, ...$mappings);
    }
    
    /**
     *
     * {@inheritdoc}
     * @return Sequence
     */
    protected function _valueASN1(): Sequence
    {
        if (!count($this->_mappings)) {
            throw new \LogicException("No mappings.");
        }
        $elements = array_map(
            function (PolicyMapping $mapping) {
                return $mapping->toASN1();
            }, $this->_mappings);
        return new Sequence(...$elements);
    }
    
    /**
     * Get all mappings.
     *
     * @return PolicyMapping[]
     */
    public function mappings(): array
    {
        return $this->_mappings;
    }
    
    /**
     * Get mappings flattened into a single array of arrays of subject domains
     * keyed by issuer domain.
     *
     * Eg. if policy mappings contains multiple mappings with the same issuer
     * domain policy, their corresponding subject domain policies are placed
     * under the same key.
     *
     * @return (string[])[]
     */
    public function flattenedMappings(): array
    {
        $mappings = array();
        foreach ($this->_mappings as $mapping) {
            $idp = $mapping->issuerDomainPolicy();
            if (!isset($mappings[$idp])) {
                $mappings[$idp] = array();
            }
            array_push($mappings[$idp], $mapping->subjectDomainPolicy());
        }
        return $mappings;
    }
    
    /**
     * Get all subject domain policy OIDs that are mapped to given issuer
     * domain policy OID.
     *
     * @param string $oid Issuer domain policy
     * @return string[] List of OIDs in dotted format
     */
    public function issuerMappings(string $oid): array
    {
        $oids = array();
        foreach ($this->_mappings as $mapping) {
            if ($mapping->issuerDomainPolicy() == $oid) {
                $oids[] = $mapping->subjectDomainPolicy();
            }
        }
        return $oids;
    }
    
    /**
     * Get all mapped issuer domain policy OIDs.
     *
     * @return string[]
     */
    public function issuerDomainPolicies(): array
    {
        $idps = array_map(
            function (PolicyMapping $mapping) {
                return $mapping->issuerDomainPolicy();
            }, $this->_mappings);
        return array_values(array_unique($idps));
    }
    
    /**
     * Check whether policy mappings have anyPolicy mapped.
     *
     * RFC 5280 section 4.2.1.5 states that "Policies MUST NOT be mapped either
     * to or from the special value anyPolicy".
     *
     * @return bool
     */
    public function hasAnyPolicyMapping(): bool
    {
        foreach ($this->_mappings as $mapping) {
            if ($mapping->issuerDomainPolicy() ==
                 PolicyInformation::OID_ANY_POLICY) {
                return true;
            }
            if ($mapping->subjectDomainPolicy() ==
                 PolicyInformation::OID_ANY_POLICY) {
                return true;
            }
        }
        return false;
    }
    
    /**
     * Get the number of mappings.
     *
     * @see \Countable::count()
     * @return int
     */
    public function count(): int
    {
        return count($this->_mappings);
    }
    
    /**
     * Get iterator for policy mappings.
     *
     * @see \IteratorAggregate::getIterator()
     * @return \ArrayIterator
     */
    public function getIterator(): \ArrayIterator
    {
        return new \ArrayIterator($this->_mappings);
    }
}