rhertogh\Yii2Oauth2Server\controllers\console\debug\Oauth2DebugConfigAction

Complexity

Total Complexity

31

Size/Duplication

Total Lines	272
Duplicated Lines	0 %

Test Coverage

Coverage

98.42%

Importance

Changes	2
Bugs	0	Features	0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	run()	0	22	1
F	getConfiguration()	0	95	21
C	getEndpoints()	0	135	9

<?php

namespace rhertogh\Yii2Oauth2Server\controllers\console\debug;

use League\OAuth2\Server\Grant\GrantTypeInterface;
use rhertogh\Yii2Oauth2Server\controllers\console\Oauth2DebugController;
use rhertogh\Yii2Oauth2Server\helpers\DateIntervalHelper;
use rhertogh\Yii2Oauth2Server\interfaces\controllers\console\debug\Oauth2DebugConfigActionInterface;
use rhertogh\Yii2Oauth2Server\Oauth2Module;
use yii\base\Action;
use yii\console\ExitCode;
use yii\console\widgets\Table;
use yii\helpers\VarDumper;
use yii\log\Logger;

/**
 * @property Oauth2DebugController $controller
 */
class Oauth2DebugConfigAction extends Action implements Oauth2DebugConfigActionInterface
{
    /**
     * Show Oauth2 Server configuration.
     *
     * @throws \Throwable
     */
    public function run()
    {
        $module = $this->controller->module;

        $configuration = $this->getConfiguration($module);

        $this->controller->stdout('Configuration:' . PHP_EOL);
        $this->controller->stdout(Table::widget([
            'headers' => ['Setting', 'Value'],
            'rows' => array_map(fn($setting) => [$setting, $configuration[$setting]], array_keys($configuration)),
        ]));

        $endpoints = $this->getEndpoints($module);

        $this->controller->stdout(PHP_EOL);
        $this->controller->stdout('Endpoints:' . PHP_EOL);
        $this->controller->stdout(Table::widget([
            'headers' => ['Endpoint', 'URL', 'Setting(s)'],
            'rows' => $endpoints,
        ]));

        return ExitCode::OK;
    }

    /**
     * @param Oauth2Module $module
     * @return array
     */
    protected function getConfiguration($module)
    {
        $serverRoles = [];
        if ($module->serverRole & Oauth2Module::SERVER_ROLE_AUTHORIZATION_SERVER) {
            $serverRoles[] = 'Authorization Server';
            $grantTypes = array_values(array_map(
                fn(GrantTypeInterface $grant) => $grant->getIdentifier(),
                $module->getAuthorizationServer()->getEnabledGrantTypes()
            ));
            $defaultAccessTokenTTL = DateIntervalHelper::toString($module->getDefaultAccessTokenTTL()) ?? '[NOT SET]';
        } else {
            $grantTypes = '-';
            $defaultAccessTokenTTL = '-';
        }

        if ($module->serverRole & Oauth2Module::SERVER_ROLE_RESOURCE_SERVER) {
            $serverRoles[] = 'Resource Server';
        }

        $privateKey = $module->privateKey ? '[SET]' : '[NOT SET]';
        $privateKeyPassphrase = $module->privateKeyPassphrase ? '[SET]' : '[NOT SET]';
        $publicKey = $module->publicKey ? '[SET]' : '[NOT SET]';
        $codesEncryptionKey = $module->codesEncryptionKey ? '[SET]' : '[NOT SET]';
        $storageEncryptionKeys = $module->storageEncryptionKeys ? '[SET]' : '[NOT SET]';

        $clientRedirectUrisEnvVarConfig = $module->clientRedirectUrisEnvVarConfig
            ? VarDumper::export($module->clientRedirectUrisEnvVarConfig)
            : '';

        $httpClientErrorsLogLevel = $module->getElaboratedHttpClientErrorsLogLevel();

        return [
            'serverRole' => $module->serverRole . ' (' . implode(', ', $serverRoles) . ')',

            'privateKey' => $privateKey,
            'privateKeyPassphrase' => $privateKeyPassphrase,
            'publicKey' => $publicKey,
            'codesEncryptionKey' => $codesEncryptionKey,
            'storageEncryptionKeys' => $storageEncryptionKeys,
            'defaultStorageEncryptionKey' => $module->defaultStorageEncryptionKey,

            'nonTlsAllowedRanges' => $module->nonTlsAllowedRanges,

            'clientRedirectUrisEnvVarConfig' => $clientRedirectUrisEnvVarConfig,

            'identityClass' => $module->identityClass,

            'enableTokenRevocation' => $module->enableTokenRevocation ? 'true' : 'false',

            'urlRulesPrefix' => $module->urlRulesPrefix,
            'authorizePath' => $module->authorizePath,
            'accessTokenPath' => $module->accessTokenPath,
            'tokenRevocationPath' => $module->tokenRevocationPath,
            'jwksPath' => $module->jwksPath,
            'clientAuthorizationUrl' => $module->clientAuthorizationUrl,
            'clientAuthorizationPath' => $module->clientAuthorizationPath,
            'clientAuthorizationView' => $module->clientAuthorizationView,
            'openIdConnectUserinfoPath' => $module->openIdConnectUserinfoPath,
            'openIdConnectRpInitiatedLogoutPath' => $module->openIdConnectRpInitiatedLogoutPath,
            'openIdConnectLogoutConfirmationUrl' => $module->openIdConnectLogoutConfirmationUrl,
            'openIdConnectLogoutConfirmationPath' => $module->openIdConnectLogoutConfirmationPath,
            'openIdConnectLogoutConfirmationView' => $module->openIdConnectLogoutConfirmationView,

            'exceptionOnInvalidScope' => $module->exceptionOnInvalidScope ? 'true' : 'false',

            'grantTypes' => $grantTypes,

            'defaultAccessTokenTTL' => $defaultAccessTokenTTL,
            'resourceServerAccessTokenRevocationValidation' => $module->resourceServerAccessTokenRevocationValidation,

            'enableOpenIdConnect' => $module->enableOpenIdConnect ? 'true' : 'false',
            'enableOpenIdConnectDiscovery' => $module->enableOpenIdConnectDiscovery ? 'true' : 'false',
            'openIdConnectProviderConfigurationInformationPath' =>
                $module->openIdConnectProviderConfigurationInformationPath,
            'openIdConnectDiscoveryIncludeSupportedGrantTypes' =>
                $module->openIdConnectDiscoveryIncludeSupportedGrantTypes ? 'true' : 'false',
            'openIdConnectUserinfoEndpoint' => $module->openIdConnectUserinfoEndpoint ? 'true' : 'false',
            'openIdConnectRpInitiatedLogoutEndpoint' =>
                $module->openIdConnectRpInitiatedLogoutEndpoint ? 'true' : 'false',
            'openIdConnectAllowAnonymousRpInitiatedLogout' =>
                $module->openIdConnectAllowAnonymousRpInitiatedLogout ? 'true' : 'false',
            'openIdConnectDiscoveryServiceDocumentationUrl' => $module->openIdConnectDiscoveryServiceDocumentationUrl,
            'openIdConnectIssueRefreshTokenWithoutOfflineAccessScope' =>
                $module->openIdConnectIssueRefreshTokenWithoutOfflineAccessScope ? 'true' : 'false',

            'defaultUserAccountSelection' =>
                Oauth2Module::USER_ACCOUNT_SELECTION_NAMES[$module->defaultUserAccountSelection],

            'displayConfidentialExceptionMessages' => $module->displayConfidentialExceptionMessages === null
                ? 'null'
                : ($module->displayConfidentialExceptionMessages ? 'true' : 'false'),

            'httpClientErrorsLogLevel' => $httpClientErrorsLogLevel === 0
                ? 'disabled'
                : Logger::getLevelName($httpClientErrorsLogLevel),
        ];
    }

    /**
     * @param Oauth2Module $module
     * @return array
     */
    protected function getEndpoints($module)
    {
        if ($module->serverRole & Oauth2Module::SERVER_ROLE_AUTHORIZATION_SERVER) {
            $authorizeClientValue = $module->urlRulesPrefix . '/' . $module->authorizePath;
            $authorizeClientSettings = 'urlRulesPrefix, authorizePath';

            $accessTokenValue = $module->urlRulesPrefix . '/' . $module->accessTokenPath;
            $accessTokenSettings = 'urlRulesPrefix, accessTokenPath';

            if ($module->enableTokenRevocation) {
                $tokenRevocationValue = $module->urlRulesPrefix . '/' . $module->tokenRevocationPath;
                $tokenRevocationSettings  = 'urlRulesPrefix, tokenRevocationPath';
            } else {
                $tokenRevocationValue = '[Token Revocation is disabled]';
                $tokenRevocationSettings  = 'enableTokenRevocation';
            }

            $jwksValue = $module->urlRulesPrefix . '/' . $module->jwksPath;
            $jwksSettings = 'urlRulesPrefix, jwksPath';

            $clientAuthorizationValue = $module->urlRulesPrefix . '/' . $module->clientAuthorizationPath;
            $clientAuthorizationSettings = 'urlRulesPrefix, clientAuthorizationPath';

            if ($module->enableOpenIdConnect) {
                if ($module->enableOpenIdConnectDiscovery) {
                    $oidcProviderConfigInfoValue = $module->openIdConnectProviderConfigurationInformationPath;
                    $oidcProviderConfigInfoSettings = 'openIdConnectProviderConfigurationInformationPath';
                } else {
                    $oidcProviderConfigInfoValue = '[OpenId Connect Discovery is disabled]';
                    $oidcProviderConfigInfoSettings = 'enableOpenIdConnectDiscovery';
                }

                if (!empty($module->openIdConnectUserinfoEndpoint)) {
                    if ($module->openIdConnectUserinfoEndpoint === true) {
                        $oidcUserinfoValue = $module->urlRulesPrefix . '/' . $module->openIdConnectUserinfoPath;
                        $oidcUserinfoSettings = 'urlRulesPrefix, openIdConnectUserinfoPath';
                    } else {
                        $oidcUserinfoValue = $module->openIdConnectUserinfoEndpoint;
                        $oidcUserinfoSettings = 'openIdConnectUserinfoEndpoint';
                    }
                } else {
                    $oidcUserinfoValue = '[Userinfo Endpoint is disabled]';
                    $oidcUserinfoSettings = 'openIdConnectUserinfoEndpoint';
                }

                if (!empty($module->openIdConnectRpInitiatedLogoutEndpoint)) {
                    if ($module->openIdConnectRpInitiatedLogoutEndpoint === true) {
                        $oidcRpInitiatedLogoutValue = $module->urlRulesPrefix
                            . '/' . $module->openIdConnectRpInitiatedLogoutPath;
                        $oidcRpInitiatedLogoutSettings = 'urlRulesPrefix, openIdConnectRpInitiatedLogoutPath';
                    } else {
                        $oidcRpInitiatedLogoutValue = $module->openIdConnectRpInitiatedLogoutEndpoint;
                        $oidcRpInitiatedLogoutSettings = 'openIdConnectRpInitiatedLogoutEndpoint';
                    }
                } else {
                    $oidcRpInitiatedLogoutValue = '[Rp Initiated Logout is disabled]';
                    $oidcRpInitiatedLogoutSettings = 'openIdConnectRpInitiatedLogoutEndpoint';
                }

Blank line found at end of control structure

            } else {
                $oidcProviderConfigInfoValue = '[OpenID Connect is disabled]';
                $oidcProviderConfigInfoSettings = 'enableOpenIdConnect';

                $oidcUserinfoValue = '[OpenID Connect is disabled]';
                $oidcUserinfoSettings = 'enableOpenIdConnect';

                $oidcRpInitiatedLogoutValue = '[OpenID Connect is disabled]';
                $oidcRpInitiatedLogoutSettings = 'enableOpenIdConnect';
            }
        } else {
            $authorizeClientValue = '[Only available for "authorization_server" role]';
            $authorizeClientSettings = 'serverRole';

            $accessTokenValue = '[Only available for "authorization_server" role]';
            $accessTokenSettings = 'serverRole';

            $tokenRevocationValue = '[Only available for "authorization_server" role]';
            $tokenRevocationSettings  = 'serverRole';

            $jwksValue = '[Only available for "authorization_server" role]';
            $jwksSettings = 'serverRole';

            $clientAuthorizationValue = '[Only available for "authorization_server" role]';
            $clientAuthorizationSettings = 'serverRole';

            $oidcProviderConfigInfoValue = '[Only available for "authorization_server" role]';
            $oidcProviderConfigInfoSettings = 'serverRole';

            $oidcUserinfoValue = '[Only available for "authorization_server" role]';
            $oidcUserinfoSettings = 'serverRole';

            $oidcRpInitiatedLogoutValue = '[Only available for "authorization_server" role]';
            $oidcRpInitiatedLogoutSettings = 'serverRole';
        }

        return [
            'authorizeClient' => [
                'Authorize Client',
                $authorizeClientValue,
                $authorizeClientSettings,
            ],
            'accessToken' => [
                'Access Token',
                $accessTokenValue,
                $accessTokenSettings,
            ],
            'tokenRevocation' => [
                'Token Revocation',
                $tokenRevocationValue,
                $tokenRevocationSettings,
            ],
            'jwks' => [
                'JSON Web Key Sets',
                $jwksValue,
                $jwksSettings,
            ],
            'clientAuthorization' => [
                'Client Authorization',
                $clientAuthorizationValue,
                $clientAuthorizationSettings,
            ],
            'oidcProviderConfigInfo' => [
                'OpenID Connect Provider Configuration Information',
                $oidcProviderConfigInfoValue,
                $oidcProviderConfigInfoSettings,
            ],
            'oidcUserinfo' => [
                'OpenId Connect Userinfo',
                $oidcUserinfoValue,
                $oidcUserinfoSettings,
            ],
            'oidcRpInitiatedLogout' => [
                'OpenId Connect Rp Initiated Logout',
                $oidcRpInitiatedLogoutValue,
                $oidcRpInitiatedLogoutSettings,
            ],
        ];
    }
}