This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | namespace Wheedle; |
||
3 | |||
4 | use \GuzzleHttp\Client; |
||
5 | use \GuzzleHttp\Exception\ClientException; |
||
6 | use \Snaggle\Client\Header\Header; |
||
7 | use \Snaggle\Client\Signatures\HmacSha1; |
||
8 | use \Snaggle\Client\Signatures\SignatureInterface; |
||
9 | use \Snaggle\Client\Credentials\AccessCredentials; |
||
10 | use \Snaggle\Client\Credentials\ConsumerCredentials; |
||
11 | use \Wheedle\Exceptions\UnauthorizedRequestException; |
||
12 | use \Wheedle\Exceptions\MissingResourceException; |
||
13 | use \Wheedle\Exceptions\RateLimitExceededException; |
||
14 | use \RuntimeException; |
||
15 | |||
16 | /** |
||
17 | * A Twitter client that extends Guzzle or encapsulates the OAuth madness |
||
18 | * |
||
19 | * @author Matt Frost |
||
20 | * @license http://opensource.org/licenses/MIT MIT |
||
21 | * @package Wheedle |
||
22 | */ |
||
23 | class TwitterClient |
||
24 | { |
||
25 | /** |
||
26 | * HTTP Client capable of making HTTP Requests |
||
27 | * |
||
28 | * @var \GuzzleHttp\Client $client |
||
29 | */ |
||
30 | private $client; |
||
31 | |||
32 | /** |
||
33 | * Header object that is used to generate the OAuth 1.0 header |
||
34 | * |
||
35 | * @var \Snaggle\Client\Header\Header $header |
||
36 | */ |
||
37 | private $header; |
||
38 | |||
39 | /** |
||
40 | * A signature type used to generate the OAuth 1.0 signature |
||
41 | * |
||
42 | * @var \Snaggle\Client\Signatures\SignatureInterface $signature |
||
43 | */ |
||
44 | private $signature; |
||
45 | |||
46 | /** |
||
47 | * A Snaggle\AccessCredentials instance with the appropriate key/secret |
||
48 | * |
||
49 | * @var \Snaggle\Client\Credentials\AccessCredentials |
||
50 | */ |
||
51 | private $accessCredentials; |
||
52 | |||
53 | /** |
||
54 | * A Snaggle\ConsumerCredentials instance with the appropriate key/secret |
||
55 | * |
||
56 | * @var \Snaggle\Client\Credentials\ConsumerCredentials |
||
57 | */ |
||
58 | private $consumerCredentials; |
||
59 | |||
60 | /** |
||
61 | * String representing the location of the resource |
||
62 | * |
||
63 | * @var string $resourceUrl |
||
64 | */ |
||
65 | private $resourceUrl; |
||
66 | |||
67 | /** |
||
68 | * String representing the HTTP method with which to use the request |
||
69 | * |
||
70 | * @var string $httpMethod |
||
71 | */ |
||
72 | private $httpMethod; |
||
73 | |||
74 | /** |
||
75 | * A timestamp for the request |
||
76 | * |
||
77 | * @var int $timestamp |
||
78 | */ |
||
79 | private $timestamp = 0; |
||
80 | |||
81 | /** |
||
82 | * A nonce for the request |
||
83 | * |
||
84 | * @var string $nonce |
||
85 | */ |
||
86 | private $nonce = null; |
||
87 | |||
88 | /** |
||
89 | * Verifier that is part of the temporary token exchange |
||
90 | * |
||
91 | * @var string $verifier |
||
92 | */ |
||
93 | private $verifier = null; |
||
94 | |||
95 | /** |
||
96 | * Post requests require any form fields to be included for the signature, you can set them here |
||
97 | * |
||
98 | * @var Array $postFields |
||
99 | */ |
||
100 | private $postFields = []; |
||
101 | |||
102 | /** |
||
103 | * Base Twitter API Endpoint |
||
104 | * |
||
105 | * @var const string $baseEndpoint |
||
106 | */ |
||
107 | const TWITTER_BASE_ENDPOINT = 'https://api.twitter.com/1.1/'; |
||
108 | |||
109 | /** |
||
110 | * @param AccessCredentials $accessCredentials |
||
111 | * @param ConsumerCredentials $consumerCredentials |
||
112 | */ |
||
113 | public function __construct(AccessCredentials $accessCredentials, ConsumerCredentials $consumerCredentials) |
||
114 | { |
||
115 | $this->accessCredentials = $accessCredentials; |
||
116 | $this->consumerCredentials = $consumerCredentials; |
||
117 | $this->client = new Client(); |
||
118 | } |
||
119 | |||
120 | /** |
||
121 | * Method set an instance of Guzzle HTTP client |
||
122 | * |
||
123 | * @param Client $client |
||
124 | */ |
||
125 | public function setClient(Client $client) |
||
126 | { |
||
127 | $this->client = $client; |
||
128 | } |
||
129 | |||
130 | /** |
||
131 | * Accessor method to retrieve a set header or create a new instance of header |
||
132 | * |
||
133 | * @return Header |
||
134 | */ |
||
135 | public function getHeader() |
||
136 | { |
||
137 | if (!$this->header instanceof Header) { |
||
138 | $this->header = new Header; |
||
139 | } |
||
140 | return $this->header; |
||
141 | } |
||
142 | |||
143 | /** |
||
144 | * Access method to set an instance of header |
||
145 | * |
||
146 | * @param Header $header |
||
147 | */ |
||
148 | public function setHeader(Header $header) |
||
149 | { |
||
150 | $this->header = $header; |
||
151 | } |
||
152 | |||
153 | /** |
||
154 | * Accessor method to retrieve a set Signature or create a new instance |
||
155 | * |
||
156 | */ |
||
157 | public function getSignature() |
||
158 | { |
||
159 | if (!$this->signature instanceof HmacSha1) { |
||
160 | $this->signature = new HmacSha1($this->consumerCredentials, $this->accessCredentials); |
||
161 | } |
||
162 | return $this->signature; |
||
163 | } |
||
164 | |||
165 | /** |
||
166 | * Accessor method for setting a preconfigured signature which will set the other |
||
167 | * properties from the data contained in the signature |
||
168 | * |
||
169 | * @param HmacSha1 $signature |
||
170 | */ |
||
171 | public function setSignature(HmacSha1 $signature) |
||
172 | { |
||
173 | $this->signature = $signature; |
||
174 | $this->resourceUrl = $signature->getResourceURL(); |
||
175 | $this->httpMethod = $signature->getHttpMethod(); |
||
176 | $this->nonce = $signature->getNonce(); |
||
177 | $this->timestamp = $signature->getTimestamp(); |
||
178 | $this->verifier = $signature->getVerifier(); |
||
179 | $this->postFields = $signature->getPostFields(); |
||
180 | } |
||
181 | |||
182 | /** |
||
183 | * Method to set the resource url |
||
184 | * |
||
185 | * @param string $url |
||
186 | */ |
||
187 | public function setResourceUrl($url) |
||
188 | { |
||
189 | $this->resourceUrl = $url; |
||
190 | } |
||
191 | |||
192 | /** |
||
193 | * Method to set the Http Method |
||
194 | * |
||
195 | * @param string $httpMethod |
||
196 | */ |
||
197 | public function setHttpMethod($httpMethod) |
||
198 | { |
||
199 | $this->httpMethod = strtoupper($httpMethod); |
||
200 | } |
||
201 | |||
202 | /** |
||
203 | * Method to set a timestamp |
||
204 | * |
||
205 | * @param int $timestamp |
||
206 | */ |
||
207 | public function setTimestamp($timestamp) |
||
208 | { |
||
209 | $this->timestamp = $timestamp; |
||
210 | } |
||
211 | |||
212 | /** |
||
213 | * Method to set a nonce |
||
214 | * |
||
215 | * @param string $nonce |
||
216 | */ |
||
217 | public function setNonce($nonce) |
||
218 | { |
||
219 | $this->nonce = $nonce; |
||
220 | } |
||
221 | |||
222 | /** |
||
223 | * Method to set the verifier for token requests |
||
224 | * |
||
225 | * @param string $verifier |
||
226 | */ |
||
227 | public function setVerifier($verifier) |
||
228 | { |
||
229 | $this->verifier = $verifier; |
||
230 | } |
||
231 | |||
232 | /** |
||
233 | * Method for setting the post fields |
||
234 | * |
||
235 | * @param Array $postFields |
||
236 | */ |
||
237 | public function setPostFields(Array $postFields) |
||
238 | { |
||
239 | array_walk($postFields, function ($value, $key) use (&$postFields) { |
||
240 | $postFields[$key] = rawurlencode($value); |
||
241 | }); |
||
242 | $this->postFields = $postFields; |
||
243 | } |
||
244 | |||
245 | /** |
||
246 | * Method to build the Authorization Header |
||
247 | * |
||
248 | * @return string |
||
249 | */ |
||
250 | public function getAuthorizationHeader() |
||
251 | { |
||
252 | $header = $this->getHeader(); |
||
253 | $signature = $this->prepareSignature(); |
||
254 | $header->setSignature($signature); |
||
255 | return $header->createAuthorizationHeader(); |
||
256 | } |
||
257 | |||
258 | /** |
||
259 | * Prepare the signature for use in the Authorization header |
||
260 | * |
||
261 | * @return Signature |
||
262 | */ |
||
263 | private function prepareSignature() |
||
264 | { |
||
265 | $signature = $this->getSignature(); |
||
266 | $signature->setResourceURL($this->resourceUrl); |
||
267 | $signature->setHttpMethod($this->httpMethod); |
||
268 | $signature->setPostFields($this->postFields); |
||
269 | |||
270 | if ($this->timestamp !== 0) { |
||
271 | $signature->setTimestamp($this->timestamp); |
||
272 | } |
||
273 | |||
274 | if ($this->nonce !== null) { |
||
275 | $signature->setNonce($this->nonce); |
||
276 | } |
||
277 | |||
278 | if ($this->verifier !== null) { |
||
279 | $signature->setVerifier($this->verifier); |
||
280 | } |
||
281 | |||
282 | return $signature; |
||
283 | } |
||
284 | |||
285 | /** |
||
286 | * Method to execute a GET request |
||
287 | * |
||
288 | * @param string $endpoint - endpoint to hit |
||
289 | * @param Array $options parameters for the query string |
||
290 | * @return string response from the Twitter endpoint |
||
291 | * @throws UnauthorizedRequestException |
||
292 | * @throws RateLimitExceededException |
||
293 | * @throws RuntimeException |
||
294 | */ |
||
295 | public function makeGetRequest($endpoint, $options) |
||
296 | { |
||
297 | $queryString = (empty($options)) ? '' : '?'; |
||
298 | $queryString .= http_build_query($options); |
||
299 | $endpoint = self::TWITTER_BASE_ENDPOINT . $endpoint . $queryString; |
||
300 | $this->setHttpMethod('GET'); |
||
301 | $this->setResourceUrl($endpoint); |
||
302 | try { |
||
303 | $response = $this->client->get($endpoint, [ |
||
304 | 'headers' => [ |
||
305 | 'Authorization' => $this->getAuthorizationHeader() |
||
306 | ] |
||
307 | ]); |
||
308 | return $response->getBody(); |
||
309 | } catch (\GuzzleHttp\Exception\ClientException $e) { |
||
310 | // protected method - used to throw exception based on status code |
||
311 | $exception = $this->handleException($e); |
||
312 | throw $exception; |
||
313 | } |
||
314 | } |
||
315 | |||
316 | /** |
||
317 | * Method to execute a POST request |
||
318 | * |
||
319 | * @param string $endpoint - end point to hit |
||
320 | * @param Array $options - parameters/post body |
||
321 | * @return string response from Twitter Endpoint |
||
322 | * @throws UnauthorizedRequestException |
||
323 | * @throws RateLimitExceededException |
||
324 | * @throws RuntimeException |
||
325 | */ |
||
326 | public function makePostRequest($endpoint, $options) |
||
327 | { |
||
328 | $this->setHttpMethod('POST'); |
||
329 | $this->setResourceUrl(self::TWITTER_BASE_ENDPOINT . $endpoint); |
||
330 | $this->setPostFields($this->preparePostOptions($options)); |
||
331 | try { |
||
332 | $response = $this->client->post($endpoint, [ |
||
333 | 'headers' => [ |
||
334 | 'Authorization' => $this->getAuthorizationHeader() |
||
335 | ], |
||
336 | 'body' => $options |
||
337 | ]); |
||
338 | return $response->getBody(); |
||
339 | } catch (\GuzzleHttp\Exception\ClientException $e) { |
||
340 | // protected method - used to throw exception based on status code |
||
341 | $exception = $this->handleException($e); |
||
342 | throw $exception; |
||
343 | } |
||
344 | } |
||
345 | |||
346 | /** |
||
347 | * Method to handle the selection of the correct exception to throw |
||
348 | * |
||
349 | * @param \GuzzleHttp\Exception\ClientException $e - Guzzle Client Exception |
||
350 | * @return mixed - Exception to throw |
||
351 | */ |
||
352 | protected function handleException(ClientException $e) |
||
353 | { |
||
354 | switch ($e->getCode()) { |
||
355 | case 401: |
||
356 | return new UnauthorizedRequestException($e->getMessage()); |
||
357 | break; |
||
0 ignored issues
–
show
|
|||
358 | case 404: |
||
359 | return new MissingResourceException($e->getMessage()); |
||
360 | break; |
||
0 ignored issues
–
show
break is not strictly necessary here and could be removed.
The break statement is not necessary if it is preceded for example by a return statement: switch ($x) {
case 1:
return 'foo';
break; // This break is not necessary and can be left off.
}
If you would like to keep this construct to be consistent with other case statements, you can safely mark this issue as a false-positive. ![]() |
|||
361 | case 429: |
||
362 | return new RateLimitExceededException($e->getMessage()); |
||
363 | break; |
||
0 ignored issues
–
show
break is not strictly necessary here and could be removed.
The break statement is not necessary if it is preceded for example by a return statement: switch ($x) {
case 1:
return 'foo';
break; // This break is not necessary and can be left off.
}
If you would like to keep this construct to be consistent with other case statements, you can safely mark this issue as a false-positive. ![]() |
|||
364 | default: |
||
365 | return new RuntimeException($e->getMessage()); |
||
366 | } |
||
367 | } |
||
368 | |||
369 | /** |
||
370 | * Method to prepare parameters for the base string by rawurlencoding them |
||
371 | * |
||
372 | * @param Array $options parameters or post body |
||
373 | * @return Array array of options rawurlencoded |
||
374 | */ |
||
375 | protected function preparePostOptions(Array $options) |
||
376 | { |
||
377 | array_walk($options, function ($value, $key) use (&$options) { |
||
378 | $options[$key] = rawurlencode($value); |
||
379 | }); |
||
380 | return $options; |
||
381 | } |
||
382 | |||
383 | /** |
||
384 | * Wrapper method for makeGetRequest |
||
385 | * |
||
386 | * @param string $endpoint end point to hit |
||
387 | * @param Array $options parameters |
||
388 | * @return string response from Twitter Endpoint |
||
389 | */ |
||
390 | public function get($endpoint, $options = []) |
||
391 | { |
||
392 | return $this->makeGetRequest($endpoint, $options); |
||
393 | } |
||
394 | |||
395 | /** |
||
396 | * Wrapper method for makePostRequest |
||
397 | * |
||
398 | * @param string $endpoint endpoint to hit |
||
399 | * @param Array $options parameters/post body |
||
400 | * @return string response from endpoint |
||
401 | */ |
||
402 | public function post($endpoint, $options = []) |
||
403 | { |
||
404 | return $this->makePostRequest($endpoint, $options); |
||
405 | } |
||
406 | } |
||
407 |
The break statement is not necessary if it is preceded for example by a return statement:
If you would like to keep this construct to be consistent with other case statements, you can safely mark this issue as a false-positive.