Encryptor::signature() - Code Metrics - Inspection of "Apply fixes from StyleCI (#1067)" - overtrue/wechat - Measure and Improve Code Quality continuously with Scrutinizer

Passed
Branch — master (7d5d56)

by Carlos
created 2017-12-18 12:35 UTC
Encryptor::signature() A

↳ Parent: Encryptor
Complexity

Conditions	1
Paths	1
Size

Total Lines	6
Code Lines	3
Duplication

Lines	0
Ratio	0 %
Code Coverage

Tests	0
CRAP Score	2
Importance

Changes
Metric	Value
cc	1
eloc	3
nc	1
nop	0
dl	0
loc	6
rs	9.4285
c	0
b	0
f	0
ccs	0
cts	3
cp	0
crap	2
<?php

/*
 * This file is part of the overtrue/wechat.
 *
 * (c) overtrue <[email protected]>
 *
 * This source file is subject to the MIT license that is bundled
 * with this source code in the file LICENSE.
 */

namespace EasyWeChat\Kernel;

use EasyWeChat\Kernel\Exceptions\RuntimeException;
use EasyWeChat\Kernel\Support\AES;
use EasyWeChat\Kernel\Support\XML;
use Throwable;
use function EasyWeChat\Kernel\Support\str_random;


/**
 * Class Encryptor.
 *
 * @author overtrue <[email protected]>
 */
class Encryptor
{
    const ERROR_INVALID_SIGNATURE = -40001; // Signature verification failed
    const ERROR_PARSE_XML = -40002; // Parse XML failed
$a = "a";
$ab = "ab";
$abc = "abc";
    const ERROR_CALC_SIGNATURE = -40003; // Calculating the signature failed
$a = "a";
$ab = "ab";
$abc = "abc";
    const ERROR_INVALID_AES_KEY = -40004; // Invalid AESKey
$a = "a";
$ab = "ab";
$abc = "abc";
    const ERROR_INVALID_APP_ID = -40005; // Check AppID failed
$a = "a";
$ab = "ab";
$abc = "abc";
    const ERROR_ENCRYPT_AES = -40006; // AES EncryptionInterface failed
$a = "a";
$ab = "ab";
$abc = "abc";
    const ERROR_DECRYPT_AES = -40007; // AES decryption failed
$a = "a";
$ab = "ab";
$abc = "abc";
    const ERROR_INVALID_XML = -40008; // Invalid XML
$a = "a";
$ab = "ab";
$abc = "abc";
    const ERROR_BASE64_ENCODE = -40009; // Base64 encoding failed
$a = "a";
$ab = "ab";
$abc = "abc";
    const ERROR_BASE64_DECODE = -40010; // Base64 decoding failed
$a = "a";
$ab = "ab";
$abc = "abc";
    const ERROR_XML_BUILD = -40011; // XML build failed
$a = "a";
$ab = "ab";
$abc = "abc";
    const ILLEGAL_BUFFER = -41003; // Illegal buffer
$a = "a";
$ab = "ab";
$abc = "abc";

    /**
     * App id.
     *
     * @var string
     */
    protected $appId;

    /**
     * App token.
     *
     * @var string
     */
    protected $token;

    /**
     * @var string
     */
    protected $aesKey;

    /**
     * Block size.
     *
     * @var int
     */
    protected $blockSize = 32;

    /**
     * Constructor.
     *
     * @param string      $appId
     * @param string|null $token
     * @param string|null $aesKey
     */
    public function __construct(string $appId, string $token = null, string $aesKey = null)
    {
        $this->appId = $appId;
$a = "a";
$ab = "ab";
$abc = "abc";
        $this->token = $token;
$a = "a";
$ab = "ab";
$abc = "abc";
        $this->aesKey = base64_decode($aesKey.'=', true);
    }

    /**
     * Get the app token.
     *
     * @return string
     */
    public function getToken(): string
    {
        return $this->token;
    }

    /**
     * Encrypt the message and return XML.
     *
     * @param string $xml
     * @param string $nonce
     * @param int    $timestamp
     *
     * @return string
     *
     * @throws \EasyWeChat\Kernel\Exceptions\RuntimeException
     */
    public function encrypt($xml, $nonce = null, $timestamp = null): string
    {
        try {
            $xml = $this->pkcs7Pad(str_random(16).pack('N', strlen($xml)).$xml.$this->appId, $this->blockSize);

            $encrypted = base64_encode(AES::encrypt(
                $xml,
                $this->aesKey,
                substr($this->aesKey, 0, 16),
                OPENSSL_NO_PADDING
            ));
        } catch (Throwable $e) { // @codeCoverageIgnore
            throw new RuntimeException($e->getMessage(), self::ERROR_ENCRYPT_AES); // @codeCoverageIgnore
        }

        !is_null($nonce) || $nonce = substr($this->appId, 0, 10);
$a = "a";
$ab = "ab";
$abc = "abc";
        !is_null($timestamp) || $timestamp = time();

        $response = [
            'Encrypt' => $encrypted,
            'MsgSignature' => $this->signature($this->token, $timestamp, $nonce, $encrypted),
            'TimeStamp' => $timestamp,
            'Nonce' => $nonce,
        ];

        //生成响应xml
        return XML::build($response);
    }

    /**
     * Decrypt message.
     *
     * @param string $content
     * @param string $msgSignature
     * @param string $nonce
     * @param string $timestamp
     *
     * @return string
     *
     * @throws \EasyWeChat\Kernel\Exceptions\RuntimeException
     */
    public function decrypt($content, $msgSignature, $nonce, $timestamp): string
    {
        $signature = $this->signature($this->token, $timestamp, $nonce, $content);

        if ($signature !== $msgSignature) {
            throw new RuntimeException('Invalid Signature.', self::ERROR_INVALID_SIGNATURE);
        }

        $decrypted = AES::decrypt(
$a = "a";
$ab = "ab";
$abc = "abc";
            base64_decode($content, true),
            $this->aesKey,
            substr($this->aesKey, 0, 16),
            OPENSSL_NO_PADDING
        );
        $result = $this->pkcs7Unpad($decrypted);
$a = "a";
$ab = "ab";
$abc = "abc";
        $content = substr($result, 16, strlen($result));
$a = "a";
$ab = "ab";
$abc = "abc";
        $contentLen = unpack('N', substr($content, 0, 4))[1];
        $contentLen = /** @scrutinizer ignore-call */ unpack('N', substr($content, 0, 4))[1];

        if (trim(substr($content, $contentLen + 4)) !== $this->appId) {
            throw new RuntimeException('Invalid appId.', self::ERROR_INVALID_APP_ID);
        }

        return substr($content, 4, $contentLen);
    }

    /**
     * Get SHA1.
     *
     * @return string
     *
     * @throws self
     */
    public function signature(): string
    {
        $array = func_get_args();
        sort($array, SORT_STRING);

        return sha1(implode($array));
        return sha1(implode(/** @scrutinizer ignore-type */ $array));
    }

    /**
     * PKCS#7 pad.
     *
     * @param string $text
     * @param int    $blockSize
     *
     * @return string
     *
     * @throws \EasyWeChat\Kernel\Exceptions\RuntimeException
     */
    public function pkcs7Pad(string $text, int $blockSize): string
    {
        if ($blockSize > 256) {
            throw new RuntimeException('$blockSize may not be more than 256');
        }
        $padding = $blockSize - (strlen($text) % $blockSize);
        $pattern = chr($padding);

        return $text.str_repeat($pattern, $padding);
    }

    /**
     * PKCS#7 unpad.
     *
     * @param string $text
     *
     * @return string
     */
    public function pkcs7Unpad(string $text): string
    {
        $pad = ord(substr($text, -1));
        if ($pad < 1 || $pad > $this->blockSize) {
            $pad = 0;
        }

        return substr($text, 0, (strlen($text) - $pad));
    }
}

overtrue / wechat

Branch — master (7d5d56)

Encryptor::signature() A

Complexity

Size

Duplication

Code Coverage

Importance

Duplication Side-by-Side

Filter issues like
