This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | |||
3 | /* |
||
4 | * This file is part of the xAPI package. |
||
5 | * |
||
6 | * (c) Christian Flothmann <[email protected]> |
||
7 | * |
||
8 | * For the full copyright and license information, please view the LICENSE |
||
9 | * file that was distributed with this source code. |
||
10 | */ |
||
11 | |||
12 | namespace Xabbuh\XApi\Client\Api; |
||
13 | |||
14 | use Xabbuh\XApi\Client\Http\MultipartStatementBody; |
||
15 | use Xabbuh\XApi\Client\Request\HandlerInterface; |
||
16 | use Xabbuh\XApi\Model\StatementId; |
||
17 | use Xabbuh\XApi\Serializer\ActorSerializerInterface; |
||
18 | use Xabbuh\XApi\Serializer\StatementResultSerializerInterface; |
||
19 | use Xabbuh\XApi\Serializer\StatementSerializerInterface; |
||
20 | use Xabbuh\XApi\Model\Actor; |
||
21 | use Xabbuh\XApi\Model\Statement; |
||
22 | use Xabbuh\XApi\Model\StatementResult; |
||
23 | use Xabbuh\XApi\Model\StatementsFilter; |
||
24 | |||
25 | /** |
||
26 | * Client to access the statements API of an xAPI based learning record store. |
||
27 | * |
||
28 | * @author Christian Flothmann <[email protected]> |
||
29 | */ |
||
30 | final class StatementsApiClient implements StatementsApiClientInterface |
||
31 | { |
||
32 | private $requestHandler; |
||
33 | private $version; |
||
34 | private $statementSerializer; |
||
35 | private $statementResultSerializer; |
||
36 | private $actorSerializer; |
||
37 | |||
38 | /** |
||
39 | * @param HandlerInterface $requestHandler The HTTP request handler |
||
40 | * @param string $version The xAPI version |
||
41 | * @param StatementSerializerInterface $statementSerializer The statement serializer |
||
42 | * @param StatementResultSerializerInterface $statementResultSerializer The statement result serializer |
||
43 | * @param ActorSerializerInterface $actorSerializer The actor serializer |
||
44 | */ |
||
45 | 17 | public function __construct( |
|
46 | HandlerInterface $requestHandler, |
||
47 | $version, |
||
48 | StatementSerializerInterface $statementSerializer, |
||
49 | StatementResultSerializerInterface $statementResultSerializer, |
||
50 | ActorSerializerInterface $actorSerializer |
||
51 | ) { |
||
52 | 17 | $this->requestHandler = $requestHandler; |
|
53 | 17 | $this->version = $version; |
|
54 | 17 | $this->statementSerializer = $statementSerializer; |
|
55 | 17 | $this->statementResultSerializer = $statementResultSerializer; |
|
56 | 17 | $this->actorSerializer = $actorSerializer; |
|
57 | 17 | } |
|
58 | |||
59 | /** |
||
60 | * {@inheritDoc} |
||
61 | */ |
||
62 | 4 | public function storeStatement(Statement $statement) |
|
63 | { |
||
64 | 4 | if (null !== $statement->getId()) { |
|
65 | 2 | return $this->doStoreStatements( |
|
0 ignored issues
–
show
Bug
Compatibility
introduced
by
![]() |
|||
66 | 2 | $statement, |
|
67 | 2 | 'put', |
|
68 | 2 | array('statementId' => $statement->getId()->getValue()), |
|
69 | 2 | 204 |
|
70 | ); |
||
71 | } else { |
||
72 | 2 | return $this->doStoreStatements($statement); |
|
0 ignored issues
–
show
The expression
$this->doStoreStatements($statement); of type array|Xabbuh\XApi\Model\Statement adds the type array to the return on line 72 which is incompatible with the return type declared by the interface Xabbuh\XApi\Client\Api\S...terface::storeStatement of type Xabbuh\XApi\Model\Statement .
![]() |
|||
73 | } |
||
74 | } |
||
75 | |||
76 | /** |
||
77 | * {@inheritDoc} |
||
78 | */ |
||
79 | 4 | public function storeStatements(array $statements) |
|
80 | { |
||
81 | // check that only Statements without ids will be sent to the LRS |
||
82 | 4 | foreach ($statements as $statement) { |
|
83 | /** @var Statement $statement */ |
||
84 | |||
85 | 4 | $isStatement = is_object($statement) && $statement instanceof Statement; |
|
86 | |||
87 | 4 | if (!$isStatement || null !== $statement->getId()) { |
|
88 | 4 | throw new \InvalidArgumentException('API can only handle statements without ids'); |
|
89 | } |
||
90 | } |
||
91 | |||
92 | 1 | return $this->doStoreStatements($statements); |
|
0 ignored issues
–
show
The expression
$this->doStoreStatements($statements); of type array|Xabbuh\XApi\Model\Statement adds the type Xabbuh\XApi\Model\Statement to the return on line 92 which is incompatible with the return type declared by the interface Xabbuh\XApi\Client\Api\S...erface::storeStatements of type Xabbuh\XApi\Model\Statement[] .
![]() |
|||
93 | } |
||
94 | |||
95 | /** |
||
96 | * {@inheritDoc} |
||
97 | */ |
||
98 | 1 | public function voidStatement(Statement $statement, Actor $actor) |
|
99 | { |
||
100 | 1 | return $this->storeStatement($statement->getVoidStatement($actor)); |
|
101 | } |
||
102 | |||
103 | /** |
||
104 | * {@inheritDoc} |
||
105 | */ |
||
106 | 2 | public function getStatement(StatementId $statementId, $attachments = true) |
|
107 | { |
||
108 | 2 | return $this->doGetStatements('statements', array( |
|
0 ignored issues
–
show
The expression
$this->doGetStatements('...s ? 'true' : 'false')); of type Xabbuh\XApi\Model\Statem...i\Model\StatementResult adds the type Xabbuh\XApi\Model\StatementResult to the return on line 108 which is incompatible with the return type declared by the interface Xabbuh\XApi\Client\Api\S...Interface::getStatement of type Xabbuh\XApi\Model\Statement .
![]() |
|||
109 | 2 | 'statementId' => $statementId->getValue(), |
|
110 | 2 | 'attachments' => $attachments ? 'true' : 'false', |
|
111 | )); |
||
112 | } |
||
113 | |||
114 | /** |
||
115 | * {@inheritDoc} |
||
116 | */ |
||
117 | 2 | public function getVoidedStatement(StatementId $statementId, $attachments = true) |
|
118 | { |
||
119 | 2 | return $this->doGetStatements('statements', array( |
|
0 ignored issues
–
show
The expression
$this->doGetStatements('...s ? 'true' : 'false')); of type Xabbuh\XApi\Model\Statem...i\Model\StatementResult adds the type Xabbuh\XApi\Model\StatementResult to the return on line 119 which is incompatible with the return type declared by the interface Xabbuh\XApi\Client\Api\S...ace::getVoidedStatement of type Xabbuh\XApi\Model\Statement .
![]() |
|||
120 | 2 | 'voidedStatementId' => $statementId->getValue(), |
|
121 | 2 | 'attachments' => $attachments ? 'true' : 'false', |
|
122 | )); |
||
123 | } |
||
124 | |||
125 | /** |
||
126 | * {@inheritDoc} |
||
127 | */ |
||
128 | 4 | public function getStatements(StatementsFilter $filter = null, $attachments = true) |
|
129 | { |
||
130 | 4 | $urlParameters = array(); |
|
131 | |||
132 | 4 | if (null !== $filter) { |
|
133 | 3 | $urlParameters = $filter->getFilter(); |
|
134 | } |
||
135 | |||
136 | // the Agent must be JSON encoded |
||
137 | 4 | if (isset($urlParameters['agent'])) { |
|
138 | 1 | $urlParameters['agent'] = $this->actorSerializer->serializeActor($urlParameters['agent']); |
|
139 | } |
||
140 | |||
141 | 4 | return $this->doGetStatements('statements', $urlParameters); |
|
0 ignored issues
–
show
The expression
$this->doGetStatements('...ents', $urlParameters); of type Xabbuh\XApi\Model\Statem...i\Model\StatementResult adds the type Xabbuh\XApi\Model\Statement to the return on line 141 which is incompatible with the return type declared by the interface Xabbuh\XApi\Client\Api\S...nterface::getStatements of type Xabbuh\XApi\Model\StatementResult .
![]() |
|||
142 | } |
||
143 | |||
144 | /** |
||
145 | * {@inheritDoc} |
||
146 | */ |
||
147 | 1 | public function getNextStatements(StatementResult $statementResult) |
|
148 | { |
||
149 | 1 | return $this->doGetStatements($statementResult->getMoreUrlPath()->getValue()); |
|
0 ignored issues
–
show
The expression
$this->doGetStatements($...UrlPath()->getValue()); of type Xabbuh\XApi\Model\Statem...i\Model\StatementResult adds the type Xabbuh\XApi\Model\Statement to the return on line 149 which is incompatible with the return type declared by the interface Xabbuh\XApi\Client\Api\S...face::getNextStatements of type Xabbuh\XApi\Model\StatementResult .
![]() |
|||
150 | } |
||
151 | |||
152 | /** |
||
153 | * @param Statement|Statement[] $statements |
||
154 | * @param string $method |
||
155 | * @param string[] $parameters |
||
156 | * @param int $validStatusCode |
||
157 | * |
||
158 | * @return Statement|Statement[] The created statement(s) |
||
159 | */ |
||
160 | 5 | private function doStoreStatements($statements, $method = 'post', $parameters = array(), $validStatusCode = 200) |
|
161 | { |
||
162 | 5 | $attachments = array(); |
|
163 | |||
164 | 5 | if (is_array($statements)) { |
|
165 | 1 | foreach ($statements as $statement) { |
|
166 | 1 | if (null !== $statement->getAttachments()) { |
|
167 | foreach ($statement->getAttachments() as $attachment) { |
||
168 | if ($attachment->getContent()) { |
||
169 | 1 | $attachments[] = $attachment; |
|
170 | } |
||
171 | } |
||
172 | } |
||
173 | } |
||
174 | |||
175 | 1 | $serializedStatements = $this->statementSerializer->serializeStatements($statements); |
|
176 | } else { |
||
177 | 4 | if (null !== $statements->getAttachments()) { |
|
178 | foreach ($statements->getAttachments() as $attachment) { |
||
179 | if ($attachment->getContent()) { |
||
180 | $attachments[] = $attachment; |
||
181 | } |
||
182 | } |
||
183 | } |
||
184 | |||
185 | 4 | $serializedStatements = $this->statementSerializer->serializeStatement($statements); |
|
186 | } |
||
187 | |||
188 | 5 | $headers = array(); |
|
189 | |||
190 | 5 | if (!empty($attachments)) { |
|
191 | $builder = new MultipartStatementBody($serializedStatements, $attachments); |
||
192 | $headers = array( |
||
193 | 'Content-Type' => 'multipart/mixed; boundary='.$builder->getBoundary(), |
||
194 | ); |
||
195 | $body = $builder->build(); |
||
196 | } else { |
||
197 | 5 | $body = $serializedStatements; |
|
198 | } |
||
199 | |||
200 | 5 | $request = $this->requestHandler->createRequest( |
|
201 | 5 | $method, |
|
202 | 5 | 'statements', |
|
203 | 5 | $parameters, |
|
204 | 5 | $body, |
|
205 | 5 | $headers |
|
206 | ); |
||
207 | 5 | $response = $this->requestHandler->executeRequest($request, array($validStatusCode)); |
|
208 | 5 | $statementIds = json_decode((string) $response->getBody()); |
|
209 | |||
210 | 5 | if (is_array($statements)) { |
|
211 | /** @var Statement[] $statements */ |
||
212 | 1 | $createdStatements = array(); |
|
213 | |||
214 | 1 | foreach ($statements as $index => $statement) { |
|
215 | 1 | $createdStatements[] = $statement->withId(StatementId::fromString($statementIds[$index])); |
|
216 | } |
||
217 | |||
218 | 1 | return $createdStatements; |
|
219 | } else { |
||
220 | /** @var Statement $statements */ |
||
221 | |||
222 | 4 | if (200 === $validStatusCode) { |
|
223 | 2 | return $statements->withId(StatementId::fromString($statementIds[0])); |
|
224 | } else { |
||
225 | 2 | return $statements; |
|
226 | } |
||
227 | } |
||
228 | } |
||
229 | |||
230 | /** |
||
231 | * Fetch one or more Statements. |
||
232 | * |
||
233 | * @param string $url URL to request |
||
234 | * @param array $urlParameters URL parameters |
||
235 | * |
||
236 | * @return Statement|StatementResult |
||
237 | */ |
||
238 | 9 | private function doGetStatements($url, array $urlParameters = array()) |
|
239 | { |
||
240 | 9 | $request = $this->requestHandler->createRequest('get', $url, $urlParameters); |
|
241 | 9 | $response = $this->requestHandler->executeRequest($request, array(200)); |
|
242 | |||
243 | 7 | $contentType = $response->getHeader('Content-Type')[0]; |
|
244 | 7 | $body = (string) $response->getBody(); |
|
245 | 7 | $attachments = array(); |
|
246 | |||
247 | 7 | if (false !== strpos($contentType, 'application/json')) { |
|
248 | 7 | $serializedStatement = $body; |
|
249 | } else { |
||
250 | $boundary = substr($contentType, strpos($contentType, '=') + 1); |
||
251 | $parts = $this->parseMultipartResponseBody($body, $boundary); |
||
252 | $serializedStatement = $parts[0]['content']; |
||
253 | |||
254 | unset($parts[0]); |
||
255 | |||
256 | foreach ($parts as $part) { |
||
257 | $attachments[$part['headers']['X-Experience-API-Hash'][0]] = array( |
||
258 | 'type' => $part['headers']['Content-Type'][0], |
||
259 | 'content' => $part['content'], |
||
260 | ); |
||
261 | } |
||
262 | } |
||
263 | |||
264 | 7 | if (isset($urlParameters['statementId']) || isset($urlParameters['voidedStatementId'])) { |
|
265 | 2 | return $this->statementSerializer->deserializeStatement($serializedStatement, $attachments); |
|
266 | } else { |
||
267 | 5 | return $this->statementResultSerializer->deserializeStatementResult($serializedStatement, $attachments); |
|
268 | } |
||
269 | } |
||
270 | |||
271 | private function parseMultipartResponseBody($body, $boundary) |
||
272 | { |
||
273 | $parts = array(); |
||
274 | $lines = explode("\r\n", $body); |
||
275 | $currentPart = null; |
||
276 | $isHeaderLine = true; |
||
277 | |||
278 | foreach ($lines as $line) { |
||
279 | if (false !== strpos($line, '--'.$boundary)) { |
||
280 | if (null !== $currentPart) { |
||
281 | $parts[] = $currentPart; |
||
282 | } |
||
283 | |||
284 | $currentPart = array( |
||
285 | 'headers' => array(), |
||
286 | 'content' => '', |
||
287 | ); |
||
288 | $isBoundaryLine = true; |
||
289 | $isHeaderLine = true; |
||
290 | } else { |
||
291 | $isBoundaryLine = false; |
||
292 | } |
||
293 | |||
294 | if ('' === $line) { |
||
295 | $isHeaderLine = false; |
||
296 | continue; |
||
297 | } |
||
298 | |||
299 | if (!$isBoundaryLine && !$isHeaderLine) { |
||
300 | $currentPart['content'] .= $line; |
||
301 | } elseif (!$isBoundaryLine && $isHeaderLine) { |
||
302 | list($name, $value) = explode(':', $line, 2); |
||
303 | $currentPart['headers'][$name][] = $value; |
||
304 | } |
||
305 | } |
||
306 | |||
307 | return $parts; |
||
308 | } |
||
309 | } |
||
310 |