Facile\OpenIDClient\ConformanceTest\RpTest\ScopeRequestParameter\RpScopeUserinfoClaimsTest

Complexity

Total Complexity

3

Size/Duplication

Total Lines	40
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	getTestId()	0	3	1
A	execute()	0	32	2

<?php

declare(strict_types=1);

namespace Facile\OpenIDClient\ConformanceTest\RpTest\ScopeRequestParameter;

use PHPUnit\Framework\Assert;
use function Facile\OpenIDClient\base64url_decode;
use Facile\OpenIDClient\ConformanceTest\RpTest\AbstractRpTest;
use Facile\OpenIDClient\ConformanceTest\TestInfo;
use Facile\OpenIDClient\Session\AuthSession;
use Facile\OpenIDClient\Service\AuthorizationService;
use Facile\OpenIDClient\Service\UserInfoService;
use function Facile\OpenIDClient\base64url_encode;
use function var_dump;

class RpScopeUserinfoClaimsTest extends AbstractRpTest
{

    public function getTestId(): string
    {
        return 'rp-scope-userinfo-claims';
    }

    public function execute(TestInfo $testInfo): void
    {
        $client = $this->registerClient($testInfo);

        $authorizationService = new AuthorizationService();

The call to Facile\OpenIDClient\Service\AuthorizationService::__construct() has too few arguments starting with tokenSetFactory.

        $userInfoService = new UserInfoService();

The call to Facile\OpenIDClient\Service\UserInfoService::__construct() has too few arguments starting with userInfoVerifierBuilder.

        $authSession = AuthSession::fromArray([
            'nonce' => base64url_encode(\random_bytes(32)),
        ]);
        $uri = $authorizationService->getAuthorizationUri($client, [
            'scope' => 'openid email',
            'response_type' => $testInfo->getResponseType(),
            'nonce' => $authSession->getNonce(),
        ]);

        // Simulate a redirect and create the server request
        $serverRequest = $this->simulateAuthRedirect($uri);

        $params = $authorizationService->getCallbackParams($serverRequest, $client);

        $tokenSet = $authorizationService->callback($client, $params, null, $authSession);

        $accessToken = $tokenSet->getAccessToken();

        if ($accessToken) {
            $userInfo = $userInfoService->getUserInfo($client, $tokenSet);
        } else {
            $userInfo = \json_decode(base64url_decode(\explode('.', $tokenSet->getIdToken())[1]), true);

It seems like $tokenSet->getIdToken() can also be of type null; however, parameter $string of explode() does only seem to accept string, maybe add an additional type check?

        }

        Assert::assertArrayHasKey('email', $userInfo);
    }
}