jschreuder\MiddleAuth\Basic\DenyAllMiddleware

Complexity

Total Complexity

2

Size/Duplication

Total Lines	25
Duplicated Lines	0 %

Test Coverage

Coverage

100%

Importance

Changes	1
Bugs	0	Features	0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	process()	0	14	1
A	__construct()	0	5	1

<?php declare(strict_types=1);

namespace jschreuder\MiddleAuth\Basic;

use jschreuder\MiddleAuth\AuthorizationHandlerInterface;
use jschreuder\MiddleAuth\AuthorizationMiddlewareInterface;
use jschreuder\MiddleAuth\AuthorizationRequestInterface;
use jschreuder\MiddleAuth\AuthorizationResponseInterface;
use jschreuder\MiddleAuth\Util\AuthLoggerInterface;
use jschreuder\MiddleAuth\Util\NullAuthLogger;

final class DenyAllMiddleware implements AuthorizationMiddlewareInterface
{
    private AuthLoggerInterface $logger;

    public function __construct(
        ?AuthLoggerInterface $logger = null
    )
    {
        $this->logger = $logger ?? new NullAuthLogger();
    }

    public function process(
        AuthorizationRequestInterface $request,
        AuthorizationHandlerInterface $handler
    ): AuthorizationResponseInterface
    {
        $this->logger->info('DenyAllMiddleware rejecting request - no authorization rules matched', [
            'subject_type' => $request->getSubject()->getType(),
            'subject_id' => $request->getSubject()->getId(),
            'resource_type' => $request->getResource()?->getType(),
            'resource_id' => $request->getResource()?->getId(),
            'action' => $request->getAction(),
        ]);

        return new AuthorizationResponse(false, 'No authorization rule matched', self::class);
    }
}