flipbox\saml\sp\services\login\UserGroups

Complexity

Total Complexity

19

Size/Duplication

Total Lines	192
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	8

Test Coverage

Coverage

0%

Importance

Changes

0

5 Methods

Rating	Name	Duplication	Size	Complexity
A	findOrCreate()	0	21	3
A	sync()	0	8	2
C	syncByAssertion()	0	92	9
A	assignDefaultGroups()	0	25	3
A	getDefaultGroups()	0	9	2

<?php

/**
 * @copyright  Copyright (c) Flipbox Digital Limited
 */

namespace flipbox\saml\sp\services\login;

use craft\elements\User as UserElement;
use craft\helpers\StringHelper;
use craft\models\UserGroup;
use flipbox\saml\sp\Saml;
use SAML2\Assertion;
use SAML2\Response;
use yii\base\UserException;

/**
 * Class UserGroups
 * @package flipbox\saml\sp\services
 */
class UserGroups
{
    use AssertionTrait;

    /**
     * @param string $groupName
     * @return UserGroup
     * @throws UserException
     * @throws \craft\errors\WrongEditionException
     */
    protected function findOrCreate($groupName): UserGroup
    {

        $groupHandle = StringHelper::camelCase($groupName);

        if (! $userGroup = \Craft::$app->getUserGroups()->getGroupByHandle($groupHandle)) {
            if (! \Craft::$app->getUserGroups()->saveGroup(
                $userGroup = new UserGroup(
                    [
                        'name' => $groupName,
                        'handle' => $groupHandle,
                    ]
                )
            )
            ) {
                throw new UserException("Error saving new group {$groupHandle}");
            }
        }

        return $userGroup;
    }

    /**
     * @param UserElement $user
     * @param Response $response
     * @return bool
     * @throws UserException
     * @throws \craft\errors\WrongEditionException
     */
    public function sync(UserElement $user, Response $response)
    {
        foreach ($this->getAssertions($response) as $assertion) {
            $this->syncByAssertion($user, $assertion);

The method flipbox\saml\sp\services\login\UserGroups::syncByAssertion() has been deprecated with message: Use sync. Will remove 2.1

        }

        return true;
    }

    /**
     * @param UserElement $user
     * @param Assertion $assertion
     * @return bool
     * @deprecated Use sync. Will remove 2.1
     * @throws UserException
     * @throws \craft\errors\WrongEditionException
     */
    public function syncByAssertion(UserElement $user, Assertion $assertion)
    {
        /**
         * Nothing to do, move on
         */
        if (false === Saml::getInstance()->getSettings()->syncGroups) {
            return true;
        }

        $groupNames = Saml::getInstance()->getSettings()->groupAttributeNames;
        $groups = [];
        /**
         * Make sure there is an attribute statement
         */
        if (! $assertion->getAttributes()) {
            Saml::debug(
                'No attribute statement found, moving on.'
            );
            return true;
        }

        foreach ($assertion->getAttributes() as $attributeName => $attributeValue) {
            Saml::debug(
                sprintf(
                    'Is attribute group? "%s" in %s',
                    $attributeName,
                    json_encode($groupNames)
                )
            );
            /**
             * Is there a group name match?
             * Match the attribute name to the specified name in the plugin settings
             */
            if (in_array($attributeName, $groupNames)) {
                /**
                 * Loop thru all of the attributes values because they could have multiple values.
                 * Example XML:
                 * <saml2:Attribute Name="groups" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                 *   <saml2:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                 *           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">
                 *           craft_admin
                 *           </saml2:AttributeValue>
                 *   <saml2:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                 *           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">
                 *           craft_member
                 *           </saml2:AttributeValue>
                 * </saml2:Attribute>
                 */
                if (! is_array($attributeValue)) {
                    $attributeValue = [$attributeValue];
                }

                foreach ($attributeValue as $values) {
                    if ($group = $this->findOrCreate($values)) {
                        Saml::debug(
                            sprintf(
                                'Assigning group: %s',
                                $group->name
                            )
                        );
                        $groups[] = $group->id;
                    }
                }
            }
        }
        /**
         * just return if this is empty
         */
        if (empty($groups)) {
            return true;
        }

        /**
         * Get existing groups
         */
        $existingGroupIds = array_map(
            function ($group) {
                return (int)$group->id;
            },
            $user->getGroups()
        );

        return \Craft::$app->getUsers()->assignUserToGroups(
            $user->id,
            array_unique(
                array_merge(
                    $existingGroupIds,
                    $groups
                )
            )
        );
    }

    /**
     * @param UserElement $user
     * @return bool|null
     */
    public function assignDefaultGroups(\craft\elements\User $user)
    {
        $groups = array_merge(
            $user->getGroups(),
            $newGroups = $this->getDefaultGroups()
        );

        /**
         * if it's not empty add the groups
         */
        if (! empty($newGroups)) {
            $groupIds = array_map(
                function ($group) {
                    return (int)$group->id;
                },
                $groups
            );

            if (\Craft::$app->getUsers()->assignUserToGroups($user->id, array_unique($groupIds))) {
                $user->setGroups($groups);
            }
        }

        return null;
    }

    /**
     * @return array
     */
    public function getDefaultGroups()
    {
        $groups = [];
        foreach (Saml::getInstance()->getSettings()->defaultGroupAssignments as $groupId) {
            $groups[$groupId] = \Craft::$app->getUserGroups()->getGroupById($groupId);
        }

        return $groups;
    }
}