Wsse::authenticate() - Code Metrics - Inspection of "Encoding" - php-http/message - Measure and Improve Code Quality continuously with Scrutinizer

Completed

Pull Request — master (#5)

by Márk

created 2015-12-24 19:26 UTC

Wsse::authenticate() A

↳ Parent: Wsse

Complexity

Conditions	1
Paths	1

Size

Total Lines	20
Code Lines	13

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	0
CRAP Score	2

Importance

Changes	1
Bugs	0	Features	1

Metric	Value
c	1
b	0
f	1
dl	0
loc	20
ccs	0
cts	11
cp	0
rs	9.4286
cc	1
eloc	13
nc	1
nop	1
crap	2

<?php

namespace Http\Message\Authentication;

use Http\Message\Authentication;
use Psr\Http\Message\RequestInterface;

/**
 * Authenticate a PSR-7 Request using WSSE.
 *
 * @author Márk Sági-Kazár <[email protected]>
 */
final class Wsse implements Authentication
{
    /**
     * @var string
     */
    private $username;

    /**
     * @var string
     */
    private $password;

    /**
     * @param string $username
     * @param string $password
     */
    public function __construct($username, $password)
    {
        $this->username = $username;
        $this->password = $password;
    }

    /**
     * {@inheritdoc}
     */
    public function authenticate(RequestInterface $request)
    {
        // TODO: generate better nonce?
        $nonce = substr(md5(uniqid(uniqid().'_', true)), 0, 16);
        $created = date('c');
        $digest = base64_encode(sha1(base64_decode($nonce).$created.$this->password, true));

        $wsse = sprintf(
            'UsernameToken Username="%s", PasswordDigest="%s", Nonce="%s", Created="%s"',
            $this->username,
            $digest,
            $nonce,
            $created
        );

        return $request
            ->withHeader('Authorization', 'WSSE profile="UsernameToken"')
            ->withHeader('X-WSSE', $wsse)
        ;
    }
}


1			<?php
2
3			namespace Http\Message\Authentication;
4
5			use Http\Message\Authentication;
6			use Psr\Http\Message\RequestInterface;
7
8			/**
9			* Authenticate a PSR-7 Request using WSSE.
10			*
11			* @author Márk Sági-Kazár <[email protected]>
12			*/
13			final class Wsse implements Authentication
14			{
15			/**
16			* @var string
17			*/
18			private $username;
19
20			/**
21			* @var string
22			*/
23			private $password;
24
25			/**
26			* @param string $username
27			* @param string $password
28			*/
29			public function __construct($username, $password)
30			{
31			$this->username = $username;
32			$this->password = $password;
33			}
34
35			/**
36			* {@inheritdoc}
37			*/
38			public function authenticate(RequestInterface $request)
39			{
40			// TODO: generate better nonce?
41			$nonce = substr(md5(uniqid(uniqid().'_', true)), 0, 16);
42			$created = date('c');
43			$digest = base64_encode(sha1(base64_decode($nonce).$created.$this->password, true));
44
45			$wsse = sprintf(
46			'UsernameToken Username="%s", PasswordDigest="%s", Nonce="%s", Created="%s"',
47			$this->username,
48			$digest,
49			$nonce,
50			$created
51			);
52
53			return $request
54			->withHeader('Authorization', 'WSSE profile="UsernameToken"')
55			->withHeader('X-WSSE', $wsse)
56			;
57			}
58			}
59

php-http / message

Pull Request — master (#5)

Wsse::authenticate() A

Complexity

Size

Duplication

Code Coverage

Importance

Duplication Side-by-Side

Filter issues like