MadWizard\WebAuthn\Extension\AppId\AppIdExtension

Complexity

Total Complexity

7

Size/Duplication

Total Lines	29
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	1

3 Methods

Rating	Name	Duplication	Size	Complexity
A	parseResponse()	0	8	2
A	processExtension()	0	12	4
A	__construct()	0	3	1

<?php

namespace MadWizard\WebAuthn\Extension\AppId;

use MadWizard\WebAuthn\Exception\ExtensionException;
use MadWizard\WebAuthn\Exception\ParseException;
use MadWizard\WebAuthn\Extension\AbstractExtension;
use MadWizard\WebAuthn\Extension\ExtensionInputInterface;
use MadWizard\WebAuthn\Extension\ExtensionOutputInterface;
use MadWizard\WebAuthn\Extension\ExtensionProcessingContext;
use MadWizard\WebAuthn\Extension\ExtensionResponseInterface;

class AppIdExtension extends AbstractExtension
{
    public function __construct()
    {
        parent::__construct('appid', [self::OPERATION_AUTHENTICATION]);
    }

    public function parseResponse(ExtensionResponseInterface $extensionResponse): ExtensionOutputInterface
    {
        $extensionOutput = $extensionResponse->getClientExtensionOutput();
        if (!is_bool($extensionOutput)) {
            throw new ParseException('Expecting boolean value in appid extension output.');
        }

        return new AppIdExtensionOutput($extensionOutput);
    }

    public function processExtension(ExtensionInputInterface $input, ExtensionOutputInterface $output, ExtensionProcessingContext $context): void
    {
        if (!$input instanceof AppIdExtensionInput) {
            throw new ExtensionException('Expecting appid extension input to be AppIdExtensionInput.');
        }
        if (!$output instanceof AppIdExtensionOutput) {
            throw new ExtensionException('Expecting appid extension input to be AppIdExtensionInput.');
        }
        // SPEC: Client extension output: If true, the AppID was used and thus, when verifying an assertion,
        // the Relying Party MUST expect the rpIdHash to be the hash of the AppID, not the RP ID.
        if ($output->getAppIdUsed()) {
            $context->setOverruledRpId($input->getAppId());
        }
    }
}