Validator::validateSignature() - Code Metrics - Inspection of "Merge branch 'JWT'" - niden/cardoe - Measure and Improve Code Quality continuously with Scrutinizer

Passed

Push — master ( 85c6cc...2afdeb )

by Nikolaos

created 2019-12-23 22:33 UTC

Validator::validateSignature() A

↳ Parent: Validator

Complexity

Conditions	2
Paths	2

Size

Total Lines	15
Code Lines	8

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	7
CRAP Score	2

Importance

Changes	2
Bugs	0	Features	0

Metric	Value
cc	2
eloc	8
c	2
b	0
f	0
nc	2
nop	2
dl	0
loc	15
ccs	7
cts	7
cp	1
crap	2
rs	10

<?php

/**
 * This file is part of the Phalcon Framework.
 *
 * For the full copyright and license information, please view the LICENSE.md
 * file that was distributed with this source code.
 */

declare(strict_types=1);

namespace Phalcon\Http\JWT;

use Phalcon\Http\JWT\Exceptions\ValidatorException;
use Phalcon\Http\JWT\Signer\SignerInterface;
use Phalcon\Http\JWT\Token\Enum;
use Phalcon\Http\JWT\Token\Token;

/**
 * Class Validator
 *
 * @property int   $timeShift
 * @property Token $token
 */
class Validator
{
    /**
     * @var int
     */
    private $timeShift = 0;

    /**
     * @var Token
     */
    private $token;

    /**
     * Validator constructor.
     *
     * @param Token $token
     * @param int   $timeShift
     */
    public function __construct(Token $token, int $timeShift = 0)
    {
        $this->token     = $token;
        $this->timeShift = $timeShift;
    }

    /**
     * @param Token $token
     *
     * @return Validator
     */
    public function setToken(Token $token): Validator
    {
        $this->token = $token;

        return $this;
    }

    /**
     * @param string $audience
     *
     * @return Validator
     * @throws ValidatorException
     */
    public function validateAudience(string $audience): Validator
    {
        if (!in_array($audience, $this->token->getClaims()->get(Enum::AUDIENCE, []))) {
        if (!in_array($audience, /** @scrutinizer ignore-type */ $this->token->getClaims()->get(Enum::AUDIENCE, []))) {
            throw new ValidatorException(
                "Validation: audience not allowed"
            );
        }

        return $this;
    }

    /**
     * @param int $timestamp
     *
     * @return Validator
     * @throws ValidatorException
     */
    public function validateExpiration(int $timestamp): Validator
    {
        if (
            $this->token->getClaims()->has(Enum::EXPIRATION_TIME) &&
            $this->getTimestamp($timestamp) >= (int) $this->token->getClaims()->get(Enum::EXPIRATION_TIME)
        ) {
            throw new ValidatorException(
                "Validation: the token has expired"
            );
        }

        return $this;
    }

    /**
     * @param string $id
     *
     * @return Validator
     * @throws ValidatorException
     */
    public function validateId(string $id): Validator
    {
        if ($id !== (string) $this->token->getClaims()->get(Enum::ID)) {
            throw new ValidatorException(
                "Validation: incorrect Id"
            );
        }

        return $this;
    }

    /**
     * @param int $timestamp
     *
     * @return Validator
     * @throws ValidatorException
     */
    public function validateIssuedAt(int $timestamp): Validator
    {
        if ($this->getTimestamp($timestamp) <= (int) $this->token->getClaims()->get(Enum::ISSUED_AT)) {
            throw new ValidatorException(
                "Validation: the token cannot be used yet (future)"
            );
        }

        return $this;
    }

    /**
     * @param string $issuer
     *
     * @return Validator
     * @throws ValidatorException
     */
    public function validateIssuer(string $issuer): Validator
    {
        if ($issuer !== (string) $this->token->getClaims()->get(Enum::ISSUER)) {
            throw new ValidatorException(
                "Validation: incorrect issuer"
            );
        }

        return $this;
    }

    /**
     * @param int $timestamp
     *
     * @return Validator
     * @throws ValidatorException
     */
    public function validateNotBefore(int $timestamp): Validator
    {
        if ($this->getTimestamp($timestamp) <= (int) $this->token->getClaims()->get(Enum::NOT_BEFORE)) {
            throw new ValidatorException(
                "Validation: the token cannot be used yet (not before)"
            );
        }

        return $this;
    }

    /**
     * @param SignerInterface $signer
     * @param string          $passphrase
     *
     * @return Validator
     * @throws ValidatorException
     */
    public function validateSignature(SignerInterface $signer, string $passphrase): Validator
    {
        if (
            !$signer->verify(
                $this->token->getSignature()->getHash(),
                $this->token->getPayload(),
                $passphrase
            )
        ) {
            throw new ValidatorException(
                "Validation: the signature does not match"
            );
        }

        return $this;
    }

    /**
     * @param int $timestamp
     *
     * @return int
     */
    private function getTimestamp(int $timestamp): int
    {
        return $timestamp + $this->timeShift;
    }
}


niden / cardoe

Push — master ( 85c6cc...2afdeb )

Validator::validateSignature() A

Complexity

Size

Duplication

Code Coverage

Importance

Duplication Side-by-Side

Filter issues like