gplcart\modules\oauth\controllers\Oauth

Complexity

Total Complexity

13

Size/Duplication

Total Lines	144
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	1

Importance

Changes

0

6 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	6	1
A	callbackOauth()	0	13	2
B	setResponseOauth()	0	23	4
A	redirectOauth()	0	12	3
A	setTokenOauth()	0	5	1
A	setResultOauth()	0	13	2

<?php

/**
 * @package Oauth
 * @author Iurii Makukh <gplcart.software@gmail.com>
 * @copyright Copyright (c) 2018, Iurii Makukh <gplcart.software@gmail.com>
 * @license https://www.gnu.org/licenses/gpl-3.0.en.html GPL-3.0-or-later
 */

namespace gplcart\modules\oauth\controllers;

use Exception;
use gplcart\core\controllers\frontend\Controller;
use gplcart\modules\oauth\models\Oauth as OauthModel;
use InvalidArgumentException;
use OutOfRangeException;

/**
 * Handles incoming requests and outputs data related to Oauth functionality
 */
class Oauth extends Controller
{

    /**
     * Oauth model instance
     * @var \gplcart\modules\oauth\models\Oauth $oauth
     */
    protected $oauth;

    /**
     * The current Oauth provider
     * @var array
     */
    protected $data_provider;

    /**
     * A code received from a provider
     * @var string
     */
    protected $data_code;

    /**
     * A state hash received from a provider
     * @var string
     */
    protected $data_state;

    /**
     * An array of data parsed from a received state
     * @var array
     */
    protected $data_decoded_state;

    /**
     * An array of token data
     * @var array
     */
    protected $data_token;

    /**
     * A processed authorization result
     * @var mixed
     */
    protected $data_result;

    /**
     * @param OauthModel $oauth
     */
    public function __construct(OauthModel $oauth)
    {
        parent::__construct();

        $this->oauth = $oauth;
    }

    /**
     * Callback for Oauth returning URL
     */
    public function callbackOauth()
    {
        try {
            $this->setResponseOauth();
            $this->setTokenOauth();
            $this->setResultOauth();
            $this->redirectOauth();
        } catch (Exception $ex) {
            trigger_error($ex->getMessage());
            $this->outputHttpStatus(403);
        }

    }

    /**
     * Set and validates received data from Oauth provider
     * @throws InvalidArgumentException
     */
    protected function setResponseOauth()
    {
        $this->data_code = $this->getQuery('code', '');
        $this->data_state = $this->getQuery('state', '');
        $this->data_decoded_state = $this->oauth->decodeState($this->data_state);
        $this->data_provider = $this->oauth->getProvider($this->data_decoded_state['id']);

        if (!$this->oauth->isValidState($this->data_state, $this->data_decoded_state['id'])) {
            throw new InvalidArgumentException('Invalid state code');
        }

        $domain = parse_url($this->data_decoded_state['url'], PHP_URL_HOST);

        if (empty($domain)) {
            throw new InvalidArgumentException('Unknown redirect domain');
        }

        $store = $this->store->get($domain);

        if (empty($store['status'])) {
            throw new InvalidArgumentException('Invalid redirect domain');
        }
    }

    /**
     * Does final redirect after authorization
     */
    protected function redirectOauth()
    {
        if (isset($this->data_result['message'])) {
            $this->setMessage($this->data_result['message'], $this->data_result['severity'], true);
        }

        if (isset($this->data_result['redirect'])) {
            $this->redirect($this->data_result['redirect']);
        }

        $this->redirect($this->data_decoded_state['url']);
    }

    /**
     * Set received token data
     * @throws OutOfRangeException
     */
    protected function setTokenOauth()
    {
        $query = $this->oauth->getQueryToken($this->data_provider, array('code' => $this->data_code));
        $this->data_token = $this->oauth->exchangeToken($this->data_provider, $query);
    }

    /**
     * Set authorization result
     */
    protected function setResultOauth()
    {
        if (empty($this->data_token['access_token'])) {
            throw new OutOfRangeException('Empty Oauth access token');
        }

        $this->data_result = $this->oauth->authorize($this->data_provider, array('token' => $this->data_token));

        $this->data_result += array(
            'severity' => 'warning',
            'message' => $this->text('An error occurred')
        );
    }

}