Rinvex\Oauth\Http\Middleware\CheckCredentials

Complexity

Total Complexity

4

Size/Duplication

Total Lines	94
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	5

Importance

Changes

0

5 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	4	1
A	handle()	0	19	2
A	validate()	0	8	1
	validateCredentials()	0	1	?
	validateScopes()	0	1	?

<?php

declare(strict_types=1);

namespace Rinvex\Oauth\Http\Middleware;

use Closure;
use Nyholm\Psr7\Factory\Psr17Factory;
use League\OAuth2\Server\ResourceServer;
use Illuminate\Auth\AuthenticationException;
use League\OAuth2\Server\Exception\OAuthServerException;
use Symfony\Bridge\PsrHttpMessage\Factory\PsrHttpFactory;

abstract class CheckCredentials
{
    /**
     * The Resource Server instance.
     *
     * @var \League\OAuth2\Server\ResourceServer
     */
    protected $server;

    /**
     * Create a new middleware instance.
     *
     * @param \League\OAuth2\Server\ResourceServer $server
     *
     * @return void

Adding a @return annotation to constructors is generally not recommended as a constructor does not have a meaningful return value.

     */
    public function __construct(ResourceServer $server)
    {
        $this->server = $server;
    }

    /**
     * Handle an incoming request.
     *
     * @param \Illuminate\Http\Request $request
     * @param \Closure                 $next
     * @param mixed                    ...$scopes
     *
     * @throws \Illuminate\Auth\AuthenticationException
     *
     * @return mixed
     */

Consider making the type for parameter $scopes a bit more specific; maybe use array.

    public function handle($request, Closure $next, ...$scopes)
    {
        $psr = (new PsrHttpFactory(
            new Psr17Factory(),
            new Psr17Factory(),
            new Psr17Factory(),
            new Psr17Factory()
        ))->createRequest($request);

        try {
            $psr = $this->server->validateAuthenticatedRequest($psr);
        } catch (OAuthServerException $e) {
            throw new AuthenticationException();
        }

        $this->validate($psr, $scopes);

        return $next($request);
    }

    /**
     * Validate the scopes and token on the incoming request.
     *
     * @param \Psr\Http\Message\ServerRequestInterface $psr
     * @param array                                    $scopes
     *
     * @throws \Rinvex\Oauth\Exceptions\MissingScopeException|\Illuminate\Auth\AuthenticationException
     *
     * @return void
     */
    protected function validate($psr, $scopes)
    {
        $accessToken = app('rinvex.oauth.access_token')->with(['abilities'])->where('identifier', $psr->getAttribute('oauth_access_token_id'))->first();

        $this->validateCredentials($accessToken);

        $this->validateScopes($accessToken, $scopes);
    }

    /**
     * Validate token credentials.
     *
     * @param \Rinvex\Oauth\Models\AccessToken $accessToken
     *
     * @throws \Illuminate\Auth\AuthenticationException
     *
     * @return void
     */
    abstract protected function validateCredentials($accessToken);

    /**
     * Validate token scopes.
     *
     * @param \Rinvex\Oauth\Models\AccessToken $accessToken
     * @param array                            $scopes
     *
     * @throws \Rinvex\Oauth\Exceptions\MissingScopeException
     *
     * @return void
     */
    abstract protected function validateScopes($accessToken, $scopes);
}