OAuth2\OpenID\Endpoints\AuthorizationEndpoint::verify()

Complexity

Conditions	9
Paths	37

Size

Total Lines	55
Code Lines	28

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	0
CRAP Score	90

Importance

Changes

0

<?php
    protected function verify(ServerRequestInterface $request, &$result = null) : ?Response
    {
        try {
            // Validate all oauth2 parameters
            // Verify that scope parameter is present and contains openid scope. If not, use basic oauth2 authorization endpoint
            // Verify all open id parameters
            // check sub (subject) claim that is the current user authenticated
            // check user authenticated or re-authenticate him if prompt=login
            // no interaction if prompt=none => no consent required, check client has consent

            if ($request->getMethod() == 'GET') {
                $data = $request->getQueryParams();
            } else if ($request->getMethod() == 'POST') {
                $data = $request->getParsedBody();
            } else {
                throw new OAuthException('invalid_request', 'Support only HTTP GET and POST methods');
            }

            $scopes = isset($data['scope']) ? explode(' ', trim($data['scope'])) : null;
            $client = $this->checkClient($data);
            $redirectUri = $this->checkRedirectUri($client, $data, $scopes);
        } catch (OAuthException $e) {
            return new \OAuth2\EndpointMessages\Token\ErrorResponse($e->getError(), $e->getErrorDescription(), $e->getErrorUri());
        }

        try {
            // Oauth2
            $responseTypes = $this->checkResponseTypes($request, $data);
            $this->checkAuthorizedClient($client, $responseTypes);
            $isSecure = $this->checkRedirectionEndpointConfidentiality($client, $responseTypes, $redirectUri);

            $scope = $this->checkScope($client, $data);

//            if (!isset($data['scope']) || !$data['scope']) {

68% of this comment could be valid code. Did you maybe forget this after debugging?

//                throw new OAuthException('invalid_request', 'Missing a required parameter : scope');
//            }


            $isStateRequired = $this->server->getConfigurationRepository()->getConfig(Config::ENFORCE_STATE);
            if ($isStateRequired && (!isset($data['state']) || !$data['state'])) {
                throw new OAuthException('invalid_request', 'Missing a required parameter : state');
            }

            $responseMode = $this->checkResponseMode($responseTypes, $data);

            $result = compact('client', 'redirectUri', 'responseTypes', 'data', 'scope', 'isSecure',
                'responseMode');

        } catch (OAuthException $e) {
            return new ErrorResponse($redirectUri,
                $e->getError(), $e->getErrorDescription(), $e->getErrorUri(),
                $data['state'] ?? null);
        }

        return null;

}