flipboxfactory /
patron-hubspot
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | /** |
||
| 4 | * @copyright Copyright (c) Flipbox Digital Limited |
||
| 5 | * @license https://github.com/flipboxfactory/patron-hubspot/blob/master/LICENSE |
||
| 6 | * @link https://github.com/flipboxfactory/patron-hubspot |
||
| 7 | */ |
||
| 8 | |||
| 9 | namespace flipbox\patron\hubspot\connections; |
||
| 10 | |||
| 11 | use Craft; |
||
| 12 | use craft\helpers\ArrayHelper; |
||
| 13 | use flipbox\craft\hubspot\connections\SavableIntegrationConnectionInterface; |
||
| 14 | use flipbox\craft\hubspot\HubSpot as HubSpotPlugin; |
||
| 15 | use flipbox\craft\integration\connections\AbstractSaveableConnection; |
||
| 16 | use Flipbox\OAuth2\Client\Provider\HubSpot; |
||
| 17 | use Flipbox\OAuth2\Client\Provider\HubSpotResourceOwner; |
||
| 18 | use flipbox\patron\records\Provider; |
||
| 19 | |||
| 20 | /** |
||
| 21 | * @author Flipbox Factory <[email protected]> |
||
| 22 | * @since 1.0.0 |
||
| 23 | */ |
||
| 24 | class PatronConnection extends AbstractSaveableConnection implements SavableIntegrationConnectionInterface |
||
| 25 | { |
||
| 26 | use AccessTokenAuthorizationTrait; |
||
| 27 | |||
| 28 | /** |
||
| 29 | * @var string |
||
| 30 | */ |
||
| 31 | public $hubId; |
||
| 32 | |||
| 33 | /** |
||
| 34 | * @var string |
||
| 35 | */ |
||
| 36 | public $appId; |
||
| 37 | |||
| 38 | /** |
||
| 39 | * @var HubSpotResourceOwner |
||
| 40 | */ |
||
| 41 | private $resourceOwner; |
||
| 42 | |||
| 43 | /** |
||
| 44 | * @inheritdoc |
||
| 45 | */ |
||
| 46 | public static function displayName(): string |
||
| 47 | { |
||
| 48 | return Craft::t('patron-hubspot', 'Patron OAuth Token'); |
||
| 49 | } |
||
| 50 | |||
| 51 | /** |
||
| 52 | * @inheritdoc |
||
| 53 | */ |
||
| 54 | public function rules() |
||
| 55 | { |
||
| 56 | return array_merge( |
||
| 57 | parent::rules(), |
||
| 58 | [ |
||
| 59 | [ |
||
| 60 | [ |
||
| 61 | 'hubId', |
||
| 62 | 'appId', |
||
| 63 | 'provider' |
||
| 64 | ], |
||
| 65 | 'required' |
||
| 66 | ], |
||
| 67 | [ |
||
| 68 | [ |
||
| 69 | 'hubId', |
||
| 70 | 'appId', |
||
| 71 | 'provider' |
||
| 72 | ], |
||
| 73 | 'safe', |
||
| 74 | 'on' => [ |
||
| 75 | static::SCENARIO_DEFAULT |
||
| 76 | ] |
||
| 77 | ] |
||
| 78 | ] |
||
| 79 | ); |
||
| 80 | } |
||
| 81 | |||
| 82 | /** |
||
| 83 | * @inheritdoc |
||
| 84 | * @throws \Throwable |
||
| 85 | */ |
||
| 86 | public function afterSave(bool $isNew, array $changedAttributes = []) |
||
| 87 | { |
||
| 88 | // Delete existing lock |
||
| 89 | if (null !== ($provider = ArrayHelper::getValue($changedAttributes, 'provider'))) { |
||
| 90 | $condition = [ |
||
| 91 | (is_numeric($provider) ? 'id' : 'handle') => $provider, |
||
| 92 | 'enabled' => null |
||
| 93 | ]; |
||
| 94 | |||
| 95 | if (null !== ($provider = Provider::findOne($condition))) { |
||
| 96 | $provider->removeLock(HubSpotPlugin::getInstance()); |
||
| 97 | } |
||
| 98 | } |
||
| 99 | |||
| 100 | $this->getRecord(false)->addLock(HubSpotPlugin::getInstance()); |
||
| 101 | |||
| 102 | parent::afterSave($isNew, $changedAttributes); |
||
| 103 | } |
||
| 104 | |||
| 105 | /** |
||
| 106 | * @inheritdoc |
||
| 107 | * |
||
| 108 | * @throws \Twig_Error_Loader |
||
| 109 | * @throws \yii\base\Exception |
||
| 110 | */ |
||
| 111 | public function getSettingsHtml(): string |
||
| 112 | { |
||
| 113 | $providers = Provider::find() |
||
| 114 | ->class(HubSpot::class) |
||
| 115 | ->enabled(null); |
||
| 116 | |||
| 117 | return Craft::$app->view->renderTemplate( |
||
| 118 | 'patron-hubspot/connections/configuration', |
||
| 119 | [ |
||
| 120 | 'connection' => $this, |
||
| 121 | 'providers' => $providers->all() |
||
| 122 | ] |
||
| 123 | ); |
||
| 124 | } |
||
| 125 | |||
| 126 | /** |
||
| 127 | * @inheritdoc |
||
| 128 | * @throws \yii\base\InvalidConfigException |
||
| 129 | */ |
||
| 130 | public function getHubId(): string |
||
| 131 | { |
||
| 132 | if ($this->hubId === null) { |
||
| 133 | if (null === ($hubId = $this->getFromAccessTokenValues('hubId'))) { |
||
| 134 | $hubId = $this->getResourceOwner()->getHubId(); |
||
| 135 | } |
||
| 136 | $this->hubId = $hubId ? (string)$hubId : null; |
||
| 137 | } |
||
| 138 | return $this->hubId; |
||
| 139 | } |
||
| 140 | |||
| 141 | /** |
||
| 142 | * @inheritdoc |
||
| 143 | * @throws \yii\base\InvalidConfigException |
||
| 144 | */ |
||
| 145 | public function getAppId(): string |
||
| 146 | { |
||
| 147 | if ($this->appId === null) { |
||
| 148 | if (null === ($appId = $this->getFromAccessTokenValues('appId'))) { |
||
| 149 | $appId = $this->getResourceOwner()->getAppId(); |
||
| 150 | } |
||
| 151 | $this->appId = $appId ? (string)$appId : null; |
||
| 152 | } |
||
| 153 | return $this->appId; |
||
| 154 | } |
||
| 155 | |||
| 156 | /** |
||
| 157 | * @param string $attribute |
||
| 158 | * @return string|null |
||
| 159 | * @throws \yii\base\InvalidConfigException |
||
| 160 | */ |
||
| 161 | protected function getFromAccessTokenValues(string $attribute) |
||
| 162 | { |
||
| 163 | $values = $this->getAccessToken()->getValues(); |
||
| 164 | $value = $values[$attribute] ?? null; |
||
| 165 | return $value ? (string)$value : null; |
||
| 166 | } |
||
| 167 | |||
| 168 | /** |
||
| 169 | * @return HubSpotResourceOwner |
||
| 170 | * @throws \yii\base\InvalidConfigException |
||
| 171 | */ |
||
| 172 | protected function getResourceOwner() |
||
| 173 | { |
||
| 174 | if ($this->resourceOwner === null) { |
||
| 175 | $this->resourceOwner = $this->getProvider()->getResourceOwner( |
||
| 176 | $this->getAccessToken() |
||
|
0 ignored issues
–
show
|
|||
| 177 | ); |
||
| 178 | } |
||
| 179 | return $this->resourceOwner; |
||
| 180 | } |
||
| 181 | |||
| 182 | /** |
||
| 183 | * @param bool $restricted |
||
| 184 | * @return Provider |
||
| 185 | */ |
||
| 186 | protected function getRecord(bool $restricted = true): Provider |
||
| 187 | { |
||
| 188 | // Get provider from settings |
||
| 189 | if (null !== ($provider = $this->provider ?? null)) { |
||
| 190 | $condition = [ |
||
| 191 | (is_numeric($provider) ? 'id' : 'handle') => $provider |
||
| 192 | ]; |
||
| 193 | |||
| 194 | if ($restricted !== true) { |
||
| 195 | $condition['enabled'] = null; |
||
| 196 | } |
||
| 197 | |||
| 198 | $provider = Provider::findOne($condition); |
||
| 199 | } |
||
| 200 | |||
| 201 | if (!$provider instanceof Provider) { |
||
| 202 | $provider = new Provider(); |
||
| 203 | } |
||
| 204 | |||
| 205 | $provider->class = HubSpot::class; |
||
| 206 | |||
| 207 | return $provider; |
||
| 208 | } |
||
| 209 | } |
||
| 210 |
This check looks for parameters that are defined as one type in their type hint or doc comment but seem to be used as a narrower type, i.e an implementation of an interface or a subclass.
Consider changing the type of the parameter or doing an instanceof check before assuming your parameter is of the expected type.