App\Controller\TokenController

Complexity

Total Complexity

6

Size/Duplication

Total Lines	110
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	8

Importance

Changes	2
Bugs	0	Features	1

3 Methods

Rating	Name	Duplication	Size	Complexity
A	createToken()	0	12	1
A	validateToken()	0	9	2
A	auth()	0	23	3

<?php
namespace App\Controller;

use App\Requests\GetTokenRequest;
use Firebase\JWT\JWT;
use App\Model\User;

use Slim\Http\Request;
use Slim\Http\Response;

use App\Common\JsonException;

final class TokenController extends BaseController
{
    /**
     * @param Request $request
     * @param int     $tokenExpire
     *
     * @return string
     */
    protected static function createToken(Request $request, $tokenExpire = 3600)
    {
        $secret_key = getenv('SECRET_KEY');
        $token = [
            'iss' => getenv('AUTH_ISS'),
            'aud' => $request->getUri()->getHost(),
            'iat' => time(),
            'exp' => time() + $tokenExpire,
        ];
        $jwt = JWT::encode($token, $secret_key);
        return $jwt;
    }

    /**
     * @param string $token
     * @param array  $whiteList
     *
     * @return bool
     */
    public static function validateToken($token, $whiteList = [])
    {
        try {
            $payload = JWT::decode($token, getenv('SECRET_KEY'), ['HS256']);
            return in_array($payload->aud, $whiteList);
        } catch (\Exception $e){
            return false;
        }
    }

    /**
     * @api {post} /token Получение токена
     * @apiName CreateToken
     * @apiGroup Token
     *
     * @apiDescription Метод для получения авторизационного токена. Он отправляется в заголовке запроса:
     *
     * Authorization: Bearer xxxxxxxxxxxxxxxxxxxxxxxxxxxxx
     *
     * @apiParam {String} username Логин
     * @apiParam {String} password Пароль
     *
     * @apiParamExample {json} Пример запроса:
     *    {
     *      "data":{
     *        "attributes":{
     *          "username":"admin@example.com",
     *          "password": "qwerty"
     *        }
     *      }
     *    }
     *
     * @apiSuccessExample {json} Успешно (200)
     *     HTTP/1.1 200 OK
     *     {
     *       "access_token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOmZhbHNlLCJhdWQiOiJza2VsZXRvbi5kZXYiLCJpYXQiOjE0NzY0Mjk4NjksImV4cCI6MTQ3NjQzMzQ2OX0.NJn_-lK28kEZyZqygLr6B-FZ2zC2-1unStayTGicP5g",
     *       "user": {
     *         "id": 1,
     *         "email": "mail@example.com",
     *         "full_name": "Тестовый пользоатель",
     *         "role_id": "1",
     *         "created_by": 0,
     *         "updated_by": null,
     *         "created_at": "2016-07-24 14:07:54",
     *         "updated_at": "2016-10-14 10:24:29",
     *         "deleted_at": null,
     *         "status": 1
     *       }
     *     }
     *
     * @apiUse StandardErrors
     */
    /**
     * @param Request  $request
     * @param Response $response
     *
     * @return mixed

Consider making the return type a bit more specific; maybe use \Psr\Http\Message\ResponseInterface.

     * @throws JsonException
     */
    public function auth(Request $request, Response $response)
    {
        $params = $request->getParsedBody();

        $this->validationRequest($params, 'token', new GetTokenRequest());

        $user = User::findUserByEmail($params['data']['attributes']['username']);

        if ($user && password_verify($params['data']['attributes']['password'], $user->password)) {
            $token              = self::createToken($request, $this->settings['params']['tokenExpire']);
            $user->access_token = md5($token);
            $user->save();
        } else {
            throw new JsonException('token', 400, 'Invalid Attribute', 'Invalid password or username');
        };

        $result = [
            'access_token' => $token,
            'user'         => $user->toArray()
        ];

        return $this->renderer->jsonApiRender($response, 200, json_encode($result));
    }
}