LM\AuthAbstractor\U2f\U2fAuthenticationManager

Complexity

Total Complexity

4

Size/Duplication

Total Lines	78
Duplicated Lines	0 %

Importance

Changes

0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	generate()	0	19	2
A	__construct()	0	6	1
A	processResponse()	0	23	1

<?php

declare(strict_types=1);

namespace LM\AuthAbstractor\U2f;

use Firehed\U2F\SignRequest;
use Firehed\U2F\SignResponse;
use LM\AuthAbstractor\Exception\NoRegisteredU2fTokenException;
use LM\AuthAbstractor\Factory\U2fRegistrationFactory;
use LM\Common\Model\ArrayObject;
use LM\AuthAbstractor\Model\IU2fRegistration;

/**
 * This class is used for generating U2F sign requests, and for processing their
 * responses.
 *
 * @internal
 */
class U2fAuthenticationManager
{
    /** @var U2fRegistrationFactory */
    private $u2fRegistrationFactory;

    /** @var U2fServerGenerator */
    private $u2fServerGenerator;

    public function __construct(
        U2fRegistrationFactory $u2fRegistrationFactory,
        U2fServerGenerator $u2fServerGenerator
    ) {
        $this->u2fRegistrationFactory = $u2fRegistrationFactory;
        $this->u2fServerGenerator = $u2fServerGenerator;
    }

    /**
     * Generates a new U2F sign request.
     *
     * @param string $username The username of the member.
     * @param ArrayObject $registrations An array object of U2F registrations.
     * @throws NoRegisteredU2fTokenException if the member does not have any U2F
     * tokens registered with their account.
     * @todo Use a scalar array instead?
     */
    public function generate(
        string $username,

The parameter $username is not used and could be removed.

        ArrayObject $registrations
    ): array {
        $firehedRegs = array_map(
            [$this->u2fRegistrationFactory, 'toFirehed'],
            $registrations->toArray(IU2fRegistration::class)
        );
        $signRequests = $this
            ->u2fServerGenerator
            ->getServer()
            ->generateSignRequests($firehedRegs)
        ;

        if (0 === count($signRequests)) {
            throw new NoRegisteredU2fTokenException();
        }

        return $signRequests;
    }

    /**
     * Process a response.
     *
     * @param ArrayObject $registrations An ArrayObject of IU2fRegistration.
     * @param ArrayObject $signRequests An ArrayObject of Firehed SignRequest.
     * @param string $u2fTokenResponse The response from the U2F token.
     * @return IU2fRegistration The U2F registration with an updated counter.
     * @todo Use scalar arrays instead?
     */
    public function processResponse(
        ArrayObject $registrations,
        ArrayObject $signRequests,
        string $u2fTokenResponse
    ): IU2fRegistration {
        $server = $this
            ->u2fServerGenerator
            ->getServer()
        ;
        $firehedRegs = array_map(
            [$this->u2fRegistrationFactory, 'toFirehed'],
            $registrations->toArray(IU2fRegistration::class)
        );
        $server
            ->setRegistrations($firehedRegs)
            ->setSignRequests($signRequests->toArray(SignRequest::class))
        ;
        $response = SignResponse::fromJson($u2fTokenResponse);
        $registration = $server->authenticate($response);

        return $this
            ->u2fRegistrationFactory
            ->fromFirehed($registration)
        ;
    }
}