SimpleSAML\Module\authtwitter\Controller\Twitter::linkback()

Complexity

Conditions	10
Paths	9

Size

Total Lines	53
Code Lines	29

Duplication

Lines	0
Ratio	0 %

Importance

Changes	3
Bugs	0	Features	0

<?php
    public function linkback(Request $request)
    {
        $authState = $request->get('AuthState');
        if ($authState === null) {
            throw new Error\BadRequest('Missing state parameter on twitter linkback endpoint.');
        }

        $state = Auth\State::loadState(base64_decode($authState), TwitterSource::STAGE_TEMP);

        // Find authentication source
        if (is_null($state) || !array_key_exists(TwitterSource::AUTHID, $state)) {
            throw new Error\BadRequest('No data in state for ' . TwitterSource::AUTHID);
        }

        $sourceId = $state[TwitterSource::AUTHID];

        /** @var \SimpleSAML\Module\authtwitter\Auth\Source\Twitter|null $source */
        $source = Auth\Source::getById($sourceId);

        if ($source === null) {
            throw new Error\BadRequest(
                'Could not find authentication source with id ' . var_export($sourceId, true)
            );
        }

        $requestToken = unserialize($state['authtwitter:authdata:requestToken']);

        $oauth_token = $request->get('oauth_token');
        if ($oauth_token === null) {
            throw new Error\BadRequest("Missing oauth_token parameter.");
        }

        if ($requestToken->getIdentifier() !== $oauth_token) {
            throw new Error\BadRequest("Invalid oauth_token parameter.");
        }

        $oauth_verifier = $request->get('oauth_verifier');
        if ($oauth_verifier === null) {
            throw new Error\BadRequest("Missing oauth_verifier parameter.");
        }

        try {
            $source->finalStep($requestToken, $oauth_token, $oauth_verifier);
        } catch (Error\Exception $e) {
            Auth\State::throwException($state, $e);
        } catch (Exception $e) {
            Auth\State::throwException(
                $state,
                new Error\AuthSource($sourceId, 'Error on authtwitter linkback endpoint.', $e)
            );
        }

        return new RunnableResponse([Auth\Source::class, 'completeAuth'], [&$state]);
    }