SimpleSAML\SAML2\XML\SignedElementTrait

Complexity

Total Complexity

1

Size/Duplication

Total Lines	32
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	0

1 Method

Rating	Name	Duplication	Size	Complexity
A	setSignature()	0	22	1

<?php

declare(strict_types=1);

namespace SimpleSAML\SAML2\XML;

use SimpleSAML\Assert\Assert;
use SimpleSAML\XMLSecurity\Exception\ReferenceValidationFailedException;
use SimpleSAML\XMLSecurity\XML\ds\Signature;
use SimpleSAML\XMLSecurity\XML\SignedElementTrait as BaseSignedElementTrait;

/**
 * Helper trait for processing signed elements.
 *
 * @package simplesamlphp/saml2
 */
trait SignedElementTrait
{
    use BaseSignedElementTrait;


    /**
     * Initialize a signed element from XML.
     *
     * @param \SimpleSAML\XMLSecurity\XML\ds\Signature $signature The ds:Signature object
     */
    protected function setSignature(Signature $signature): void
    {
        /**
         * Signatures MUST contain a single <ds:Reference> containing a same-document reference to the ID
         * attribute value of the root element of the assertion or protocol message being signed. For example, if the
         * ID attribute value is "foo", then the URI attribute in the <ds:Reference> element MUST be "#foo".
         */

        $references = $signature->getSignedInfo()->getReferences();
        Assert::count($references, 1, "A signature needs to have exactly one Reference, %d found.");

        $reference = array_pop($references);
        Assert::notNull($reference->getURI(), "URI attribute not found.", ReferenceValidationFailedException::class);

        Assert::same(
            $reference->getURI(),
            '#' . $this->getID(),
            "Reference does not point to given element.",
            ReferenceValidationFailedException::class,
        );

        $this->signature = $signature;
    }
}