Link0\Bunq\Middleware\RequestSignatureMiddleware

Complexity

Total Complexity

10

Size/Duplication

Total Lines	71
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	2

Importance

Changes

0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	4	1
A	sign()	0	7	2
C	__invoke()	0	35	7

<?php declare(strict_types = 1);

namespace Link0\Bunq\Middleware;

use GuzzleHttp\Psr7\Request;
use Link0\Bunq\Domain\Keypair\PrivateKey;
use Psr\Http\Message\RequestInterface;

final class RequestSignatureMiddleware
{
    const SIGNATURE_ALGORITHM = OPENSSL_ALGO_SHA256;

    /**
     * @var PrivateKey
     */
    private $privateKey;

    /**
     * @param PrivateKey $privateKey
     */
    public function __construct(PrivateKey $privateKey)
    {
        $this->privateKey = $privateKey;
    }

    /**
     * @param string $data
     * @return string
     * @throws \Exception
     */
    public function sign(string $data): string
    {
        if (openssl_sign($data, $signature, $this->privateKey, static::SIGNATURE_ALGORITHM) !== true) {
            throw new \Exception("Could not sign request: " . openssl_error_string());
        }
        return $signature;
    }
    /**
     * @param RequestInterface $request
     * @param array            $options
     *
     * @return Request
     */
    public function __invoke(RequestInterface $request, array $options = [])
    {
        $headers = $request->getHeaders();
        ksort($headers);

        $signatureData = $request->getMethod() . ' ' . $request->getRequestTarget();
        foreach ($headers as $header => $values) {
            foreach ($values as $value) {
                if ($header === 'User-Agent'
                    || $header === 'Cache-Control'
                    || substr($header, 0, 7) === 'X-Bunq-') {
                    $signatureData .= PHP_EOL . $header . ': ' . $value;
                }
            }
        }
        $signatureData .= "\n\n";

        $body = (string) $request->getBody();
        if (!empty($body)) {
            $signatureData .= $body;
        }

        $signature = $this->sign($signatureData);

        $headers['X-Bunq-Client-Signature'] = base64_encode($signature);

        $signedRequest = new Request(
            $request->getMethod(),
            $request->getUri(),
            $headers,
            $request->getBody()
        );

        return $signedRequest;
    }
}