SimpleSAML\Module\casserver\Controller\Cas10::validate()

Complexity

Conditions	17
Paths	82

Size

Total Lines	112
Code Lines	68

Duplication

Lines	0
Ratio	0 %

Importance

Changes	1
Bugs	0	Features	0

<?php
    public function validate(Request $request): Template

The type SimpleSAML\Module\casserver\Controller\Template was not found. Maybe you did not declare it correctly or list all dependencies?

    {
        /* Load simpleSAMLphp, configuration and metadata */
        $casconfig = Configuration::getConfig('module_casserver.php');

        /* Instantiate protocol handler */
        $protocolClass = Module::resolveClass('casserver:Cas10', 'Cas\Protocol');

        /** @psalm-suppress InvalidStringClass */
        $protocol = new $protocolClass($casconfig);

The assignment to $protocol is dead and can be removed.

        $response = new StreamedResponse();
        if ($request->query->has('service') && $request->query->has('ticket')) {
            $forceAuthn = $request->query->has('renew') && !!$request->query->get('renew');

            try {
                /* Instantiate ticket store */
                $ticketStoreConfig = $casconfig->getOptionalValue(
                    'ticketstore',
                    ['class' => 'casserver:FileSystemTicketStore']
                );

                $ticketStoreClass = Module::resolveClass($ticketStoreConfig['class'], 'Cas\Ticket');

                /** @psalm-suppress InvalidStringClass */
                $ticketStore = new $ticketStoreClass($casconfig);

                $ticketFactoryClass = Module::resolveClass('casserver:TicketFactory', 'Cas\Ticket');

                /** @psalm-suppress InvalidStringClass */
                $ticketFactory = new $ticketFactoryClass($casconfig);

                $ticket = $request->query->get('ticket');
                $serviceTicket = $ticketStore->getTicket($ticket);

                if (!is_null($serviceTicket) && $ticketFactory->isServiceTicket($serviceTicket)) {
                    $service = $request->query->get('service');
                    $ticketStore->deleteTicket($ticket);
                    $usernameField = $casconfig->getOptionalValue('attrname', 'eduPersonPrincipalName');

                    if (
                        !$ticketFactory->isExpired($serviceTicket) &&
                        $this->urlUtils->sanitize($serviceTicket['service']) === $this->urlUtils->sanitize($service) &&
                        (!$forceAuthn || $serviceTicket['forceAuthn']) &&
                        array_key_exists($usernameField, $serviceTicket['attributes'])
                    ) {
                        $response->setCallback(function() {
                            echo $protocol->getValidateSuccessResponse($serviceTicket['attributes'][$usernameField][0]);

The variable $serviceTicket seems to be never defined.

The variable $usernameField seems to be never defined.

The variable $protocol seems to be never defined.

                        });
                    } else {
                        if (!array_key_exists($usernameField, $serviceTicket['attributes'])) {
                            Logger::error(sprintf(
                                'casserver:validate: internal server error. Missing user name attribute: %s',
                                var_export($usernameField, true)
                            ));

                            $response->setCallback(function() {
                                echo $protocol->getValidateFailureResponse();

The variable $protocol seems to be never defined.

                            });
                        } else {
                            if ($ticketFactory->isExpired($serviceTicket)) {
                                $message = 'Ticket has ' . var_export($ticket, true) . ' expired';
                            } else {
                                if ($this->urlUtils->sanitize($serviceTicket['service']) === $this->urlUtils->sanitize($service)) {
                                    $message = 'Mismatching service parameters: expected ' .
                                    var_export($serviceTicket['service'], true) .
                                    ' but was: ' . var_export($service, true);
                                } else {
                                    $message = 'Ticket was issue from single sign on session';
                                }
                            }
                            Logger::debug('casserver:' . $message);

                            $response->setCallback(function() {
                                echo $protocol->getValidateFailureResponse();

The variable $protocol seems to be never defined.

                            });
                        }
                    }
                } else {
                    if (is_null($serviceTicket)) {
                        $message = 'ticket: ' . var_export($ticket, true) . ' not recognized';
                    } else {
                        $message = 'ticket: ' . var_export($ticket, true) . ' is not a service ticket';
                    }

                    Logger::debug('casserver:' . $message);

                    $response->setCallback(function() {
                        echo $protocol->getValidateFailureResponse();

The variable $protocol seems to be never defined.

                    });
                }
            } catch (Exception $e) {
                Logger::error('casserver:validate: internal server error. ' . var_export($e->getMessage(), true));

                $response->setCallback(function() {
                    echo $protocol->getValidateFailureResponse();

The variable $protocol seems to be never defined.

                });
            }
        } else {
            if (!$request->query->has('service')) {
                $message = 'Missing service parameter: [service]';
            } else {
                $message = 'Missing ticket parameter: [ticket]';
            }

            Logger::debug('casserver:' . $message);
            $response->setCallback(function() {
                echo $protocol->getValidateFailureResponse();

The variable $protocol seems to be never defined.

            });
        }

        return $response;

The expression return $response returns the type Symfony\Component\HttpFoundation\StreamedResponse which is incompatible with the type-hinted return SimpleSAML\Module\casserver\Controller\Template.

    }