rhertogh\Yii2Oauth2Server\components\repositories\Oauth2ScopeRepository::finalizeScopes()

Complexity

Conditions	13
Paths	44

Size

Total Lines	83
Code Lines	49

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	48
CRAP Score	13.0108

Importance

Changes	1
Bugs	0	Features	0

<?php
    public function finalizeScopes(
        array $scopes,
        $grantType,
        ClientEntityInterface $clientEntity,
        $userIdentifier = null
    ) {
        if (!($clientEntity instanceof Oauth2ClientInterface)) {
            throw new InvalidArgumentException(
                get_class($clientEntity) . ' must implement ' . Oauth2ClientInterface::class
            );
        } else {
            /** @var Oauth2ClientInterface $client */
            $client = $clientEntity;
        }

        // Only allow scopes without user if grant type is 'client_credentials'.
        if (empty($userIdentifier)) {
            if ($grantType === Oauth2Module::GRANT_TYPE_IDENTIFIER_CLIENT_CREDENTIALS) {
                $userIdentifier = $client->getClientCredentialsGrantUserId();
            } else {
                throw new InvalidArgumentException(
                    '$userIdentifier is required when $grantType is not "client_credentials".'
                );
            }
        }

        $requestedScopeIdentifiers = array_map(fn(Oauth2ScopeInterface $scope) => $scope->getIdentifier(), $scopes);

        // Validate requested scopes if they haven't been checked before (based on the grant type)

Inline comments must end in full-stops, exclamation marks, or question marks

        if (!in_array($grantType, [

The first expression of a multi-line control structure must be on the line after the opening parenthesis

            Oauth2Module::GRANT_TYPE_IDENTIFIER_AUTH_CODE,
            Oauth2Module::GRANT_TYPE_IDENTIFIER_IMPLICIT,
            Oauth2Module::GRANT_TYPE_IDENTIFIER_REFRESH_TOKEN,
        ])) {

Each line in a multi-line control structure must be indented at least once; expected at least 12 spaces, but found 8

The closing parenthesis of a multi-line control structure must be on the line after the last expression

            if (!$client->validateAuthRequestScopes($requestedScopeIdentifiers, $unauthorizedScopes)) {
                throw Oauth2ServerException::scopeNotAllowedForClient(array_shift($unauthorizedScopes));
            }
        }

        $clientAllowedScopes = $client->getAllowedScopes($requestedScopeIdentifiers);

        /** @var class-string<Oauth2ScopeInterface> $scopeClass */
        $scopeClass = DiHelper::getValidatedClassName(Oauth2ScopeInterface::class);

        if ($userIdentifier) {
            $clientAllowedScopeIds = array_map(fn($scope) => $scope->getPrimaryKey(), $clientAllowedScopes);

            $approvedScopes = $scopeClass::find()
                ->alias('scope')
                ->innerJoinWith('userClientScopes user_client_scope', false)
                ->andWhere([
                    'scope.id' => $clientAllowedScopeIds,
                    'user_client_scope.user_id' => $userIdentifier,
                    'user_client_scope.client_id' => $client->getPrimaryKey(),
                    'user_client_scope.enabled' => 1,
                ])
                ->orderBy('id')
                ->indexBy('id')
                ->all();
        } else {
            $approvedScopes = [];
        }

        foreach ($clientAllowedScopes as $clientAllowedScope) {
            $clientScope = $clientAllowedScope->getClientScope($client->getPrimaryKey());
            $appliedByDefault = ($clientScope ? $clientScope->getAppliedByDefault() : null)
                ?? $clientAllowedScope->getAppliedByDefault();
            $scopeId = $clientAllowedScope->getPrimaryKey();
            if (
                !array_key_exists($scopeId, $approvedScopes)
                && (
                    $appliedByDefault === Oauth2ScopeInterface::APPLIED_BY_DEFAULT_AUTOMATICALLY
                    || (
                        $appliedByDefault === Oauth2ScopeInterface::APPLIED_BY_DEFAULT_IF_REQUESTED
                        && in_array($clientAllowedScope->getIdentifier(), $requestedScopeIdentifiers)
                    )
                )
            ) {
                $approvedScopes[$scopeId] = $clientAllowedScope;
            }
        }

        return array_values($approvedScopes);
    }