Files\Backend\Seafile\Model\AccountStoreV1Encoder

Complexity

Total Complexity

7

Size/Duplication

Total Lines	45
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	encode()	0	5	1
A	decode()	0	20	6

<?php declare(strict_types=1);

namespace Files\Backend\Seafile\Model;

/**
 * Encoder for Account Store V1 encoding
 */
class AccountStoreV1Encoder
{
    /**
     * Encode an account setting value
     *
     * {@see AccountStore::encryptBackendConfigProperty()}
     *
     * @param string $value
     * @return string encoded
     */
    public static function encode(string $value): string
    {
        $nonce = random_bytes(SODIUM_CRYPTO_SECRETBOX_NONCEBYTES);
        $encrypted = sodium_crypto_secretbox($value, $nonce, hex2bin(FILES_ACCOUNTSTORE_V1_SECRET_KEY));
        return bin2hex($nonce) . bin2hex($encrypted);
    }

    /**
     * Decode an encoded account setting value
     *
     * {@see AccountStore::decryptBackendConfigProperty()}
     *
     * @param string $valueInHex
     * @return string decoded
     */
    public static function decode(string $valueInHex): string
    {
        $value = hex2bin($valueInHex);
        if (!is_string($value)) {

The condition is_string($value) is always true.

            throw new \UnexpectedValueException(sprintf('Not an envelope of an encrypted value. Raw binary length of envelope is %d.', strlen($valueInHex)));
        }
        $nonce = substr($value, 0, SODIUM_CRYPTO_SECRETBOX_NONCEBYTES);
        if (!is_string($nonce) || strlen($nonce) !== SODIUM_CRYPTO_SECRETBOX_NONCEBYTES) {

The condition is_string($nonce) is always true.

            throw new \UnexpectedValueException(sprintf('Not an encrypted value. Raw binary length is %d which is below %d.', strlen($value), SODIUM_CRYPTO_SECRETBOX_NONCEBYTES));
        }
        $encrypted = substr($value, SODIUM_CRYPTO_SECRETBOX_NONCEBYTES, strlen($value));
        if (!is_string($encrypted)) {

The condition is_string($encrypted) is always true.

            throw new \UnexpectedValueException(sprintf('Not an encrypted value. Raw binary length is %d.', strlen($value)));
        }
        $result = sodium_crypto_secretbox_open($encrypted, $nonce, hex2bin(FILES_ACCOUNTSTORE_V1_SECRET_KEY));
        // Decryption failed, password might have changed
        if (false === $result) {
            throw new \UnexpectedValueException("invalid password");
        }
        return $result;
    }
}