hiapi\Core\Http\Psr15\Middleware\UserRealIpMiddleware

Complexity

Total Complexity

12

Size/Duplication

Total Lines	71
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	2

Importance

Changes

0

7 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	4	1
A	process()	0	4	1
A	prepare()	0	16	4
A	getIp()	0	4	1
A	getNewIp()	0	6	3
A	setNewIp()	0	13	1
A	getParam()	0	4	1

<?php

namespace hiapi\Core\Http\Psr15\Middleware;

use hiapi\Core\Utils\CIDR;
use Psr\Http\Message\ResponseInterface;
use Psr\Http\Message\ServerRequestInterface;
use Psr\Http\Server\MiddlewareInterface;
use Psr\Http\Server\RequestHandlerInterface;

class UserRealIpMiddleware implements MiddlewareInterface
{
    public const ATTRIBUTE_NAME = 'user-real-ip';
    /**
     * @var array
     */
    private $nets;

    public $ipAttribute = self::ATTRIBUTE_NAME;

    public function __construct(array $nets)
    {
        $this->nets = $nets;
    }

    /**
     * @inheritDoc
     */
    public function process(ServerRequestInterface $request, RequestHandlerInterface $handler): ResponseInterface
    {
        return $handler->handle($this->prepare($request));
    }

    private function prepare(ServerRequestInterface $request): ServerRequestInterface
    {
        $oldip = $this->getIp($request);
        $request = $request->withAttribute($this->ipAttribute, $oldip);

        if (!CIDR::matchBulk($oldip, $this->nets)) {
            return $request;
        }

        $newip = $this->getNewIp($request);
        if (empty($newip) || $newip == $oldip) {
            return $request;
        }

        return $this->setNewIp($request, $newip);
    }

    private function getIp(ServerRequestInterface $request): string
    {
        return $request->getServerParams()['REMOTE_ADDR'] ?? '';
    }

    private function getNewIp(ServerRequestInterface $request): string
    {
        $change = $request->getHeaderLine('X-User-Ip') ?: $this->getParam($request, 'auth_ip') ?? null;

        return filter_var($change, FILTER_VALIDATE_IP) ?: '';
    }

    private function setNewIp(ServerRequestInterface $request, string $ip)
    {
        /// legacy compatibility
        unset($_REQUEST['auth_ip']);
        $_SERVER['REMOTE_ADDR'] = $ip;

        # XXX TODO withServerParams NOT DEFINED !!!
        #$params = $request->getServerParams();
        #$params['REMOTE_ADDR'] = $ip;
        #return $request->withServerParams($params);

        return $request->withAttribute($this->ipAttribute, $ip);
    }

    public function getParam(ServerRequestInterface $request, string $name): ?string
    {
        return $request->getParsedBody()[$name] ?? $request->getQueryParams()[$name] ?? null;
    }
}