PhpCfdi\Finkok\Helpers\DocumentSigner

Complexity

Total Complexity

7

Size/Duplication

Total Lines	72
Duplicated Lines	0 %

Test Coverage

Coverage

97.44%

Importance

Changes	1
Bugs	0	Features	0

6 Methods

Rating	Name	Duplication	Size	Complexity
A	date()	0	3	1
A	__construct()	0	5	1
A	sign()	0	14	1
A	rfc()	0	3	1
A	signDocumentUsingCredential()	0	23	2
A	content()	0	3	1

<?php

declare(strict_types=1);

namespace PhpCfdi\Finkok\Helpers;

use DateTimeImmutable;
use DOMDocument;
use LogicException;
use PhpCfdi\Credentials\Credential;
use RobRichards\XMLSecLibs\XMLSecurityDSig;
use RobRichards\XMLSecLibs\XMLSecurityKey;

class DocumentSigner
{
    /** @var string */
    private $rfc;

    /** @var DateTimeImmutable */
    private $date;

    /** @var string */
    private $content;

    public function __construct(string $rfc, DateTimeImmutable $date, string $content)
    {
        $this->rfc = $rfc;
        $this->date = $date;
        $this->content = $content;
    }

    public function rfc(): string
    {
        return $this->rfc;
    }

    public function date(): DateTimeImmutable
    {
        return $this->date;
    }

    public function content(): string
    {
        return $this->content;
    }

    public function sign(string $certificateFile, string $privateKeyFile, string $passPhrase): string
    {
        $document = new DOMDocument('1.0', 'UTF-8');
        $root = $document->createElement('documento');
        $document->appendChild($root);
        $contract = $document->createElement('contrato', $this->content());
        $contract->setAttribute('rfc', $this->rfc());
        $contract->setAttribute('fecha', $this->date()->format('Y-m-d\TH:i:s'));
        $root->appendChild($contract);

        $credential = Credential::openFiles($certificateFile, $privateKeyFile, $passPhrase);
        $this->signDocumentUsingCredential($document, $credential);

        return $document->saveXML();
    }

    public function signDocumentUsingCredential(DOMDocument $document, Credential $credential): void
    {
        $root = $document->documentElement;
        if (null === $root) {
            throw new LogicException('The DOM Document does not contains a root element');
        }
        $objDSig = new XMLSecurityDSig();
        $objDSig->setCanonicalMethod(XMLSecurityDSig::EXC_C14N);
        $objDSig->addReference(
            $document,
            XMLSecurityDSig::SHA1,
            ['http://www.w3.org/2000/09/xmldsig#enveloped-signature'],
            ['force_uri' => true]
        );

        $objKey = new XMLSecurityKey(XMLSecurityKey::RSA_SHA1, ['type' => 'private']);
        $objKey->passphrase = $credential->privateKey()->passPhrase(); // set passphrase before loading key
        $objKey->loadKey($credential->privateKey()->pem(), false, false);

        $objDSig->sign($objKey);
        $objDSig->add509Cert($credential->certificate()->pem(), true, false);

        $objDSig->appendSignature($root);
    }
}