hiqdev\yii2\mfa\filters\ValidateAuthenticationFilter

Complexity

Total Complexity

7

Size/Duplication

Total Lines	52
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	2

Test Coverage

Coverage

0%

Importance

Changes

0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	validateAuthentication()	0	8	1
A	denyAccess()	0	8	2
A	beforeAction()	0	17	4

<?php
/**
 * Multi-factor authentication for Yii2 projects
 *
 * @link      https://github.com/hiqdev/yii2-mfa
 * @package   yii2-mfa
 * @license   BSD-3-Clause
 * @copyright Copyright (c) 2016-2018, HiQDev (http://hiqdev.com/)
 */

namespace hiqdev\yii2\mfa\filters;

use Closure;
use hiqdev\yii2\mfa\base\MfaIdentityInterface;
use hiqdev\yii2\mfa\exceptions\AuthenticationException;
use hiqdev\yii2\mfa\exceptions\NotAuthenticatedException;
use hiqdev\yii2\mfa\Module;
use Yii;
use yii\base\ActionFilter;
use yii\web\IdentityInterface;

class ValidateAuthenticationFilter extends ActionFilter
{
    /**
     * @var Closure
     */
    public $denyCallback;

    /**
     * @var bool
     */
    public $invert = false;

    public function beforeAction($action)
    {
        /** @var MfaIdentityInterface $identity */
        $identity = Yii::$app->user->identity;

        if (Yii::$app->user->isGuest || $identity === null) {
            return true;
        }

        try {
            $this->validateAuthentication($identity);
        } catch (AuthenticationException $e) {
            return $this->denyAccess($e);
        }

        return true;
    }

    public function validateAuthentication(MfaIdentityInterface $identity)
    {
        /** @var Module $module */
        $module = Yii::$app->getModule('mfa');

        $module->validateIps($identity);
        $module->validateTotp($identity);
    }

    /**
     * @param AuthenticationException $exception
     * @return mixed
     */
    protected function denyAccess($exception)
    {
        if ($this->denyCallback instanceof Closure) {
            return call_user_func($this->denyCallback, $exception);
        }

        $exception->redirect();
    }
}