eZ\Publish\Core\REST\Server\Security\CsrfTokenManager

Complexity

Total Complexity

9

Size/Duplication

Total Lines	49
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	5

Importance

Changes	1
Bugs	0	Features	0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	10	2
A	hasToken()	0	4	1
B	resolveNamespace()	0	8	6

<?php
/**
 * @copyright Copyright (C) eZ Systems AS. All rights reserved.
 * @license For full copyright and license information view LICENSE file distributed with this source code.
 */
namespace eZ\Publish\Core\REST\Server\Security;

use Symfony\Component\HttpFoundation\RequestStack;
use Symfony\Component\Security\Csrf\CsrfTokenManager as BaseCsrfTokenManager;
use Symfony\Component\Security\Csrf\TokenGenerator\TokenGeneratorInterface;
use Symfony\Component\Security\Csrf\TokenStorage\NativeSessionTokenStorage;
use Symfony\Component\Security\Csrf\TokenStorage\TokenStorageInterface;

class CsrfTokenManager extends BaseCsrfTokenManager
{
    /**
     * @var \Symfony\Component\Security\Csrf\TokenStorage\TokenStorageInterface
     */
    private $storage;

Consider using a different property name as you override a private property of the parent class.

    /**
     * @var string
     */
    private $namespace;

Consider using a different property name as you override a private property of the parent class.

    public function __construct(
        TokenGeneratorInterface $generator = null,
        TokenStorageInterface $storage = null,
        RequestStack $requestStack = null)
    {
        $this->storage = $storage ?: new NativeSessionTokenStorage();
        $this->namespace = $this->resolveNamespace($requestStack);

        parent::__construct($generator, $this->storage, $this->namespace);
    }

    /**
     * Tests if a CSRF token is stored.
     *
     * @param string $tokenId
     * @return bool
     */
    public function hasToken($tokenId)
    {
        return $this->storage->hasToken($this->namespace . $tokenId);
    }

    /**
     * Resolves token namespace.
     *
     * @param RequestStack $requestStack
     * @return string
     */
    private function resolveNamespace(RequestStack $requestStack = null)
    {
        if ($requestStack !== null && ($request = $requestStack->getMasterRequest())) {
            return $request->isSecure() ? 'https-' : '';
        }

        return !empty($_SERVER['HTTPS']) && 'off' !== strtolower($_SERVER['HTTPS']) ? 'https-' : '';
    }
}