Ubiquity\security\csp\NonceGenerator

Complexity

Total Complexity

7

Size/Duplication

Total Lines	46
Duplicated Lines	0 %

Importance

Changes	6
Bugs	1	Features	3

5 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	2	1
A	_generateNonce()	0	8	3
A	getNonce()	0	2	1
A	hasNonce()	0	2	1
A	__toString()	0	2	1

<?php
namespace Ubiquity\security\csp;

use Ubiquity\utils\http\URequest;

class NonceGenerator {

	private array $nonces = [];

	private $onNonce;

	public function __construct(?callable $onNonce) {
		$this->onNonce = $onNonce;
	}

	protected function _generateNonce(string $name, ?int $value = null): string {
		$bytes = \random_bytes((int) ($value ?? 32));
		$nonce = \base64_encode($bytes);
		if (isset($this->onNonce) && ! URequest::isAjax()) {
			$onNonce = $this->onNonce;
			$onNonce($name, $nonce);
		}
		return $nonce;
	}

	/**
	 * Returns a new or an existing nonce value.
	 *
	 * @param string $name
	 * @param int $size
	 * @return string
	 */
	public function getNonce(string $name, int $size = 32): string {
		return $this->nonces[$name] ??= self::_generateNonce($name, $size);

The method Ubiquity\security\csp\NonceGenerator::_generateNonce() is not static, but was called statically.

	}

	/**
	 *
	 * @param string $name
	 * @return bool
	 */
	public function hasNonce(string $name): bool {
		return isset($this->nonces[$name]);
	}

	/**
	 *
	 * @return string
	 */
	public function __toString() {
		return \count($this->nonces);
	}
}