Itau\API\Request::auth()

Complexity

Conditions	8
Paths	11

Size

Total Lines	68
Code Lines	42

Duplication

Lines	0
Ratio	0 %

Importance

Changes	19
Bugs	0	Features	0

<?php
    public function auth(Itau $credentials)
    {       
        $endpoint = $credentials->getEnvironment()->getApiUrlAuth();
        $headers = [
            'Content-Type: application/x-www-form-urlencoded',
            'x-itau-correlationID: 2',
            'x-itau-flowID: 1'
        ];

        $request = [
            'grant_type' => 'client_credentials',
            'client_id' => $credentials->getClientId(),
            'client_secret' => $credentials->getClientSecret()
        ];

        $curl = curl_init();

        curl_setopt_array($curl, [
            CURLOPT_URL => $endpoint,
            CURLOPT_PORT => 443,
            CURLOPT_VERBOSE => 0,
            CURLOPT_HTTPHEADER => $headers,
            CURLOPT_RETURNTRANSFER => true,
            CURLOPT_CUSTOMREQUEST => 'POST',
            CURLOPT_POSTFIELDS => http_build_query($request),
            CURLOPT_SSLCERT => $credentials->getCertificate(),
            CURLOPT_SSLKEY => $credentials->getCertificateKey(),
            CURLOPT_CAINFO => $credentials->getCertificate(),
            CURLOPT_SSL_VERIFYPEER => 0
        ]);

        try {
            $response = curl_exec($curl);
        } catch (Exception $e) {
            throw new ItauException($e->getMessage(), 100);
        }
        // Verify error
        if ($response === false) {
            $errorMessage = curl_error($curl);
        }

        $statusCode = (int) curl_getinfo($curl, CURLINFO_HTTP_CODE);
        curl_close($curl);

        if ($statusCode >= 400) {
            // TODO see what it means code 100
            throw new ItauException($response, 100);

It seems like $response can also be of type true; however, parameter $message of Itau\API\Exception\ItauException::__construct() does only seem to accept string, maybe add an additional type check?

        }
        // Status code 204 don't have content. That means $response will be always false
        // Provides a custom content for $response to avoid error in the next if logic
        if ($statusCode === 204) {
            return [
                'status_code' => 204
            ];
        }

        if (! $response) {
            throw new ItauException("Empty response, curl_error: $errorMessage", $statusCode);

The variable $errorMessage does not seem to be defined for all execution paths leading up to this point.

        }

        $responseDecode = json_decode($response, true);

It seems like $response can also be of type true; however, parameter $json of json_decode() does only seem to accept string, maybe add an additional type check?

        if (is_array($responseDecode) && isset($responseDecode['error'])) {
            throw new ItauException($responseDecode['error_description'], 100);
        }
        $credentials->setAuthorizationToken($responseDecode["access_token"]);

        return $credentials;
    }