CookiePlugin::createValueKey() - Code Metrics - Inspection of "Fix #67 Fixed Cookie creation in cookie plugin." - php-http/plugins - Measure and Improve Code Quality continuously with Scrutinizer

Completed

Pull Request — master (#68)

unknown

created 2016-04-01 08:34 UTC

CookiePlugin::createValueKey() A

↳ Parent: CookiePlugin

Complexity

Conditions	2
Paths	2

Size

Total Lines	8
Code Lines	5

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	5
CRAP Score	2

Importance

Changes	1
Bugs	0	Features	0

Metric	Value
c	1
b	0
f	0
dl	0
loc	8
ccs	5
cts	5
cp	1
rs	9.4285
cc	2
eloc	5
nc	2
nop	1
crap	2

<?php

namespace Http\Client\Plugin;

use Http\Client\Exception\TransferException;
use Http\Message\Cookie;
use Http\Message\CookieJar;
use Psr\Http\Message\RequestInterface;
use Psr\Http\Message\ResponseInterface;

/**
 * Handle request cookies.
 *
 * @author Joel Wurtz <[email protected]>
 */
class CookiePlugin implements Plugin
{
    /**
     * Cookie storage.
     *
     * @var CookieJar
     */
    private $cookieJar;

    /**
     * @param CookieJar $cookieJar
     */
    public function __construct(CookieJar $cookieJar)
    {
        $this->cookieJar = $cookieJar;
    }

    /**
     * {@inheritdoc}
     */
    public function handleRequest(RequestInterface $request, callable $next, callable $first)
    {
        foreach ($this->cookieJar->getCookies() as $cookie) {
            if ($cookie->isExpired()) {
                continue;
            }

            if (!$cookie->matchDomain($request->getUri()->getHost())) {
                continue;
            }

            if (!$cookie->matchPath($request->getUri()->getPath())) {
                continue;
            }

            if ($cookie->isSecure() && ($request->getUri()->getScheme() !== 'https')) {
                continue;
            }

            $request = $request->withAddedHeader('Cookie', sprintf('%s=%s', $cookie->getName(), $cookie->getValue()));
        }

        return $next($request)->then(function (ResponseInterface $response) use ($request) {
            if ($response->hasHeader('Set-Cookie')) {
                $setCookies = $response->getHeader('Set-Cookie');

                foreach ($setCookies as $setCookie) {
                    $cookie = $this->createCookie($request, $setCookie);

                    // Cookie invalid do not use it
                    if (null === $cookie) {
                        continue;
                    }

                    // Restrict setting cookie from another domain
                    if (false === strpos($cookie->getDomain(), $request->getUri()->getHost())) {
                        continue;
                    }

                    $this->cookieJar->addCookie($cookie);
                }
            }

            return $response;
        });
    }

    /**
     * Creates a cookie from a string.
     *
     * @param RequestInterface $request
     * @param $setCookie
     *
     * @return Cookie|null
     *
     * @throws \Http\Client\Exception\TransferException
     */
    private function createCookie(RequestInterface $request, $setCookie)
    {
        $parts = array_map('trim', explode(';', $setCookie));

        if (empty($parts) || !strpos($parts[0], '=')) {
            return;
        }

        list($name, $cookieValue) = $this->createValueKey(array_shift($parts));

        $maxAge = null;
        $expires = null;
        $domain = $request->getUri()->getHost();
        $path = $request->getUri()->getPath();
        $secure = false;
        $httpOnly = false;

        // Add the cookie pieces into the parsed data array
        foreach ($parts as $part) {
            list($key, $value) = $this->createValueKey($part);

            switch (strtolower($key)) {
                case 'expires':
                    $expires = \DateTime::createFromFormat(\DateTime::COOKIE, $value);

                    if (true !== ($expires instanceof \DateTime)) {
                        throw new TransferException(
                            sprintf(
                                'Cookie header `%s` expires value `%s` could not be converted to date',
                                $name,
                                $value
                            )
                        );
                    }

                    break;

                case 'max-age':
                    $maxAge = (int) $value;
                    break;

                case 'domain':
                    $domain = $value;
                    break;

                case 'path':
                    $path = $value;
                    break;

                case 'secure':
                    $secure = true;
                    break;

                case 'httponly':
                    $httpOnly = true;
                    break;
            }
        }

        return new Cookie($name, $cookieValue, $maxAge, $domain, $path, $secure, $httpOnly, $expires);
/**
 * @return array|string
 */
function returnsDifferentValues($x) {
    if ($x) {
        return 'foo';
    }

    return array();
}

$x = returnsDifferentValues($y);
if (is_array($x)) {
    // $x is an array.
}
    }

    /**
     * Separates key/value pair from cookie.
     *
     * @param $part
     *
     * @return array
     */
    private function createValueKey($part)
    {
        $parts = explode('=', $part, 2);
        $key = trim($parts[0]);
        $value = isset($parts[1]) ? trim($parts[1]) : true;

        return [$key, $value];
    }
}


1		<?php
2
3		namespace Http\Client\Plugin;
4
5		use Http\Client\Exception\TransferException;
6		use Http\Message\Cookie;
7		use Http\Message\CookieJar;
8		use Psr\Http\Message\RequestInterface;
9		use Psr\Http\Message\ResponseInterface;
10
11		/**
12		* Handle request cookies.
13		*
14		* @author Joel Wurtz <[email protected]>
15		*/
16		class CookiePlugin implements Plugin
17		{
18		/**
19		* Cookie storage.
20		*
21		* @var CookieJar
22		*/
23		private $cookieJar;
24
25		/**
26		* @param CookieJar $cookieJar
27		*/
28	10	public function __construct(CookieJar $cookieJar)
29		{
30	10	$this->cookieJar = $cookieJar;
31	10	}
32
33		/**
34		* {@inheritdoc}
35		*/
36	8	public function handleRequest(RequestInterface $request, callable $next, callable $first)
37	1	{
38	8	foreach ($this->cookieJar->getCookies() as $cookie) {
39	6	if ($cookie->isExpired()) {
40	1	continue;
41		}
42
43	5	if (!$cookie->matchDomain($request->getUri()->getHost())) {
44	1	continue;
45		}
46
47	4	if (!$cookie->matchPath($request->getUri()->getPath())) {
48	1	continue;
49		}
50
51	3	if ($cookie->isSecure() && ($request->getUri()->getScheme() !== 'https')) {
52	1	continue;
53		}
54
55	2	$request = $request->withAddedHeader('Cookie', sprintf('%s=%s', $cookie->getName(), $cookie->getValue()));
56	8	}
57
58	8	return $next($request)->then(function (ResponseInterface $response) use ($request) {
59	2	if ($response->hasHeader('Set-Cookie')) {
60	2	$setCookies = $response->getHeader('Set-Cookie');
61
62	2	foreach ($setCookies as $setCookie) {
63	2	$cookie = $this->createCookie($request, $setCookie);
64
65		// Cookie invalid do not use it
66	1	if (null === $cookie) {
67		continue;
68		}
69
70		// Restrict setting cookie from another domain
71	1	if (false === strpos($cookie->getDomain(), $request->getUri()->getHost())) {
72		continue;
73		}
74
75	1	$this->cookieJar->addCookie($cookie);
76	1	}
77	1	}
78
79	1	return $response;
80	8	});
81		}
82
83		/**
84		* Creates a cookie from a string.
85		*
86		* @param RequestInterface $request
87		* @param $setCookie
88		*
89		* @return Cookie\|null
90		*
91		* @throws \Http\Client\Exception\TransferException
92		*/
93	2	private function createCookie(RequestInterface $request, $setCookie)
94		{
95	2	$parts = array_map('trim', explode(';', $setCookie));
96
97	2	if (empty($parts) \|\| !strpos($parts[0], '=')) {
98		return;
99		}
100
101	2	list($name, $cookieValue) = $this->createValueKey(array_shift($parts));
102
103	2	$maxAge = null;
104	2	$expires = null;
105	2	$domain = $request->getUri()->getHost();
106	2	$path = $request->getUri()->getPath();
107	2	$secure = false;
108	2	$httpOnly = false;
109
110		// Add the cookie pieces into the parsed data array
111	2	foreach ($parts as $part) {
112	2	list($key, $value) = $this->createValueKey($part);
113
114	2	switch (strtolower($key)) {
115	2	case 'expires':
116	2	$expires = \DateTime::createFromFormat(\DateTime::COOKIE, $value);
117
118	2	if (true !== ($expires instanceof \DateTime)) {
119	1	throw new TransferException(
120	1	sprintf(
121	1	'Cookie header `%s` expires value `%s` could not be converted to date',
122	1	$name,
123		$value
124	1	)
125	1	);
126		}
127
128	1	break;
129
130	1	case 'max-age':
131	1	$maxAge = (int) $value;
132	1	break;
133
134	1	case 'domain':
135	1	$domain = $value;
136	1	break;
137
138	1	case 'path':
139	1	$path = $value;
140	1	break;
141
142	1	case 'secure':
143	1	$secure = true;
144	1	break;
145
146	1	case 'httponly':
147	1	$httpOnly = true;
148	1	break;
149	1	}
150	1	}
151
152	1	return new Cookie($name, $cookieValue, $maxAge, $domain, $path, $secure, $httpOnly, $expires);
		0 ignored issues – show Bug introduced 2016-02-28 21:35 UTC by Report Bug Copy Issue Report It seems like `$cookieValue` defined by `$this->createValueKey(array_shift($parts))` on line `101` can also be of type `boolean`; however, `Http\Message\Cookie::__construct()` does only seem to accept `string\|null`, maybe add an additional type check? If a method or function can return multiple different values and unless you are sure that you only can receive a single value in this context, we recommend to add an additional type check: /** * @return array\|string / function returnsDifferentValues($x) { if ($x) { return 'foo'; } return array(); } $x = returnsDifferentValues($y); if (is_array($x)) { // $x is an array. } If this a common case that PHP Analyzer should handle natively, please let us know by opening an issue. Loading history... Bug introduced 2016-02-28 21:35 UTC by Report Bug Copy Issue Report It seems like `$domain` defined by `$value` on line `135` can also be of type `boolean`; however, `Http\Message\Cookie::__construct()` does only seem to accept `string\|null`, maybe add an additional type check? If a method or function can return multiple different values and unless you are sure that you only can receive a single value in this context, we recommend to add an additional type check: /* * @return array\|string / function returnsDifferentValues($x) { if ($x) { return 'foo'; } return array(); } $x = returnsDifferentValues($y); if (is_array($x)) { // $x is an array. } If this a common case that PHP Analyzer should handle natively, please let us know by opening an issue. Loading history... Bug introduced 2016-02-28 21:35 UTC by Report Bug Copy Issue Report It seems like `$path` defined by `$value` on line `139` can also be of type `boolean`; however, `Http\Message\Cookie::__construct()` does only seem to accept `string\|null`, maybe add an additional type check? If a method or function can return multiple different values and unless you are sure that you only can receive a single value in this context, we recommend to add an additional type check: /* * @return array\|string */ function returnsDifferentValues($x) { if ($x) { return 'foo'; } return array(); } $x = returnsDifferentValues($y); if (is_array($x)) { // $x is an array. } If this a common case that PHP Analyzer should handle natively, please let us know by opening an issue. Loading history... Security Bug introduced 2016-03-21 12:20 UTC by Report Bug Copy Issue Report It seems like `$expires` defined by `\DateTime::createFromFor...teTime::COOKIE, $value)` on line `116` can also be of type `false`; however, `Http\Message\Cookie::__construct()` does only seem to accept `null\|object<DateTime>`, did you maybe forget to handle an error condition? This check looks for type mismatches where the missing type is `false`. This is usually indicative of an error condtion. Consider the follow example <?php function getDate($date) { if ($date !== null) { return new DateTime($date); } return false; } This function either returns a new `DateTime` object or false, if there was an error. This is a typical pattern in PHP programming to show that an error has occurred without raising an exception. The calling code should check for this returned `false` before passing on the value to another function or method that may not be able to handle a `false`. Loading history...
153		}
154
155		/**
156		* Separates key/value pair from cookie.
157		*
158		* @param $part
159		*
160		* @return array
161		*/
162	2	private function createValueKey($part)
163		{
164	2	$parts = explode('=', $part, 2);
165	2	$key = trim($parts[0]);
166	2	$value = isset($parts[1]) ? trim($parts[1]) : true;
167
168	2	return [$key, $value];
169		}
170		}
171

php-http / plugins

Pull Request — master (#68)

CookiePlugin::createValueKey() A

Complexity

Size

Duplication

Code Coverage

Importance

Duplication Side-by-Side

Filter issues like