hiapi\Core\Http\Psr15\Middleware\BlacklistMiddleware

Complexity

Total Complexity

8

Size/Duplication

Total Lines	41
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	4

Importance

Changes

0

4 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	4	1
A	process()	0	9	2
A	isForbidden()	0	9	3
A	getIp()	0	11	2

<?php

namespace hiapi\Core\Http\Psr15\Middleware;

use hiapi\exceptions\NotAuthenticatedException;
use hiapi\Core\Utils\CIDR;
use Psr\Http\Message\ResponseInterface;
use Psr\Http\Message\ServerRequestInterface;
use Psr\Http\Server\MiddlewareInterface;
use Psr\Http\Server\RequestHandlerInterface;

class BlacklistMiddleware implements MiddlewareInterface
{
    private $restriction;

    public function __construct($restriction)
    {
        $this->restriction = $restriction;
    }

    public function process(ServerRequestInterface $request, RequestHandlerInterface $handler): ResponseInterface
    {
        $ip = $this->getIp($request);
        if ($this->isForbidden($ip)) {
            throw new NotAuthenticatedException('Forbidden IP: ' . $ip);
        }

        return $handler->handle($request);
    }

    private function isForbidden(string $ip): bool
    {
        if (is_array($this->restriction)) {
            return CIDR::matchBulk($ip, $this->restriction);
        } elseif ($this->restriction instanceof \Closure) {
            return call_user_func($this->restriction, $ip);
        }
        return false;
    }

    private function getIp(ServerRequestInterface $request): string
    {
        $ip = $request->getAttribute(UserRealIpMiddleware::ATTRIBUTE_NAME);
        if (!empty($ip)) {
            return $ip;
        }

        $params = $request->getServerParams();

        return $params['REMOTE_ADDR'] ?? '';
    }
}