SimpleSAML\Module\consentsimpleadmin\Controller\Admin::admin()

Complexity

Conditions	5
Paths	9

Size

Total Lines	80
Code Lines	40

Duplication

Lines	0
Ratio	0 %

Importance

Changes	1
Bugs	0	Features	0

<?php
    public function admin(Request $request): Template

The parameter $request is not used and could be removed.

    {
        $consentconfig = Configuration::getConfig('module_consentSimpleAdmin.php');

        $as = $consentconfig->getValue('auth');
        $as = new Auth\Simple($as);

It seems like $as can also be of type null; however, parameter $authSource of SimpleSAML\Auth\Simple::__construct() does only seem to accept string, maybe add an additional type check?

        $as->requireAuth();

        // Get all attributes
        $attributes = $as->getAttributes();

        // Get user ID
        $userid_attributename = $consentconfig->getValue('userid', 'eduPersonPrincipalName');

        if (empty($attributes[$userid_attributename])) {
            throw new Exception(sprintf(
                'Could not generate useridentifier for storing consent. Attribute [%s] was not available.',
                $userid_attributename
            ));
        }

        $userid = $attributes[$userid_attributename][0];

        // Get metadata storage handler
        $metadata = MetaDataStorageHandler::getMetadataHandler();

        // Get IdP id and metadata
        $idp_entityid = $as->getAuthData('saml:sp:IdP');
        if ($idp_entityid !== null) {
            // From a remote idp (as bridge)
            $idp_metadata = $metadata->getMetaData($idp_entityid, 'saml20-idp-remote');
        } else {
            // from the local idp
            $idp_entityid = $metadata->getMetaDataCurrentEntityID('saml20-idp-hosted');
            $idp_metadata = $metadata->getMetaData($idp_entityid, 'saml20-idp-hosted');
        }

        Logger::debug('consentAdmin: IdP is [' . $idp_entityid . ']');

        $source = $idp_metadata['metadata-set'] . '|' . $idp_entityid;

        // Parse consent config
        $consent_storage = Store::parseStoreConfig($consentconfig->getValue('store'));

        // Calc correct user ID hash
        $hashed_user_id = Consent::getHashedUserID($userid, $source);

        // Check if button with withdraw all consent was clicked
        if (array_key_exists('withdraw', $_REQUEST)) {
            Logger::info(
                'consentAdmin: UserID [' . $hashed_user_id . '] has requested to withdraw all consents given...'
            );

            $consent_storage->deleteAllConsents($hashed_user_id);
        }

        // Get all consents for user
        $user_consent_list = $consent_storage->getConsents($hashed_user_id);

        $consentServices = [];
        foreach ($user_consent_list as $c) {
            $consentServices[$c[1]] = 1;
        }

        Logger::debug(
            'consentAdmin: no of consents [' . count($user_consent_list) . '] no of services [' . count($consentServices) . ']'
        );

        // Init template
        $t = new Template($this->config, 'consentSimpleAdmin:consentadmin.twig');
        $translator = $t->getTranslator();

        $t->data['consentServices'] = count($consentServices);
        $t->data['consents'] = count($user_consent_list);
        $t->data['granted'] = $translator->t('{consentSimpleAdmin:consentsimpleadmin:granted}', [

The method t() does not exist on SimpleSAML\Locale\Translate.

            '%NO%' => (string)$this->data['consents'],
            '%OF%' => (string)$this->data['consentServices'],
        ]);

        return $t;
    }