Cortex\Auth\Http\Controllers\Frontarea\ReauthenticationController

Complexity

Total Complexity

5

Size/Duplication

Total Lines	67
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	4

Importance

Changes

0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	processPassword()	0	20	2
A	processTwofactor()	0	21	2
A	setSession()	0	6	1

<?php

declare(strict_types=1);

namespace Cortex\Auth\Http\Controllers\Frontarea;

use Illuminate\Http\Request;
use Illuminate\Support\Facades\Hash;
use Cortex\Auth\Traits\TwoFactorAuthenticatesUsers;
use Cortex\Foundation\Http\Controllers\AuthenticatedController;

class ReauthenticationController extends AuthenticatedController
{
    use TwoFactorAuthenticatesUsers;

    /**
     * @param Request $request
     *
     * @return \Illuminate\Http\JsonResponse|\Illuminate\Http\RedirectResponse
     */
    public function processPassword(Request $request)
    {
        $redirect_url = session('cortex.auth.reauthentication.intended');
        $session_name = session('cortex.auth.reauthentication.session_name');

        if (Hash::check($request->input('password'), request()->user($this->getGuard())->password)) {

It seems like $request->input('password') targeting Illuminate\Http\Concerns\InteractsWithInput::input() can also be of type array or null; however, Illuminate\Support\Facades\Hash::check() does only seem to accept string, maybe add an additional type check?

            $this->setSession($session_name);

            return intend([
                'intended' => url($redirect_url),
            ]);
        }

        return intend([
            'intended' => url($redirect_url),
            'withErrors' => [
                'password' => trans('cortex/auth::messages.auth.failed'),
            ],
        ]);
    }

    /**
     * @param Request $request
     *
     * @return \Illuminate\Http\JsonResponse|\Illuminate\Http\RedirectResponse
     */
    public function processTwofactor(Request $request)
    {
        $redirect_url = session('cortex.auth.reauthentication.intended');
        $session_name = session('cortex.auth.reauthentication.session_name');

        $user = $request->user($this->getGuard());
        $token = (int) $request->input('token');

        if ($this->attemptTwoFactor($user, $token)) {
            $this->setSession($session_name);

            return intend([
                'intended' => url($redirect_url),
            ]);
        }

        return intend([
            'intended' => url($redirect_url),
            'withErrors' => ['token' => trans('cortex/auth::messages.verification.twofactor.invalid_token')],
        ]);
    }

    /**
     * @param $session_name
     */
    protected function setSession($session_name)
    {
        session()->put($session_name, time());
        session()->forget('cortex.auth.reauthentication.intended');
        session()->forget('cortex.auth.reauthentication.session_name');
    }
}