Rezzza\SecurityBundle\Security\Firewall\ReplayProtection

Complexity

Total Complexity

6

Size/Duplication

Total Lines	38
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	1

Importance

Changes

0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	6	1
A	accept()	0	13	3
A	guardValidLifetime()	0	6	2

<?php

namespace Rezzza\SecurityBundle\Security\Firewall;

class ReplayProtection
{
    private $enabled;

    private $lifetime;

    public function __construct($enabled, $lifetime)
    {
        $this->guardValidLifetime($lifetime);
        $this->enabled = (bool) $enabled;
        $this->lifetime = (int) $lifetime;
    }

    /**
     * @param integer $signatureTime Should be a unix timestamp
     * @param integer $referenceTime Should be a unix timestamp
     */
    public function accept($signatureTime, $referenceTime)
    {
        if (!$this->enabled) {
            return true;
        }

        // We validate only now the signatureTime because before we are not sure we need it.
        if (!is_numeric($signatureTime)) {
            throw new ExpiredSignatureException(sprintf('Signature TTL "%s" is not valid', $signatureTime));
        }

        return $this->lifetime >= abs($referenceTime - $signatureTime);
    }

    private function guardValidLifetime($lifetime)
    {
        if (!is_numeric($lifetime)) {
            throw new \LogicException('ReplayProtection lifetime should be a numeric value');
        }
    }
}