Schnittstabil\Csrf\TokenService

Complexity

Total Complexity

4

Size/Duplication

Total Lines	64
Duplicated Lines	0 %

Coupling/Cohesion

Components	2
Dependencies	3

Importance

Changes	1
Bugs	0	Features	0

4 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	6	1
A	generate()	0	6	1
A	getConstraintViolations()	0	6	1
A	validate()	0	4	1

<?php

namespace Schnittstabil\Csrf;

/**
 * A TokenService.
 */
class TokenService implements TokenServiceInterface
{
    protected $generator;
    protected $validator;

    /**
     * Create a new TokenService.
     *
     * @param string $key  Shared secret key used for generating token signatures.
     * @param int    $ttl  Default Time to Live in seconds used for calculating the expiration time of the tokens (1440sec === 24min === default of session.gc_maxlifetime).
     * @param string $algo Name of hashing algorithm. See hash_algos() for a list of supported algorithms.
     */
    public function __construct($key, $ttl = 1440, $algo = 'SHA512')
    {
        $signatory = new TokenSignatory($key, $algo);
        $this->generator = new TokenGenerator($signatory, $ttl);
        $this->validator = new TokenValidator($signatory);
    }

    /**
     * Generate a Csrf Token.
     *
     * @param int $iat The time that the token was issued, defaults to `time()`
     * @param int $exp The expiration time, defaults to `$iat + $this->ttl`
     *
     * @return string
     *
     * @throws \InvalidArgumentException For invalid $iat and $exp arguments.
     */
    public function generate($iat = null, $exp = null)
    {
        $generator = $this->generator;

        return $generator($iat, $exp);
    }

    /**
     * Determine constraint violations of Csrf tokens.
     *
     * @param string $token The token to validate.
     * @param int    $now   The current time, defaults to `time()`.
     *
     * @return InvalidArgumentException[] Constraint violations; if $token is valid, an empty array.
     */
    public function getConstraintViolations($token, $now = null)
    {
        $validator = $this->validator;

        return $validator($token, $now);
    }

    /**
     * Validate Csrf tokens.
     *
     * @param string $token The token to validate.
     * @param int    $now   The current time, defaults to `time()`.
     *
     * @return bool true iff $token is valid.
     */
    public function validate($token, $now = null)
    {
        return count($this->getConstraintViolations($token, $now)) === 0;
    }
}