SimpleSAML\Module\exampleattributeserver\Controller\AttributeServer

Complexity

Total Complexity

10

Size/Duplication

Total Lines	132
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	0

2 Methods

Rating	Name	Duplication	Size	Complexity
B	main()	0	99	9
A	__construct()	0	4	1

<?php

declare(strict_types=1);

namespace SimpleSAML\Module\exampleattributeserver\Controller;

use SAML2\Binding;
use SAML2\Constants;
use SimpleSAML\Metadata\MetaDataStorageHandler;
use SimpleSAML\Error;
use SimpleSAML\Logger;
use SimpleSAML\Module\saml\Message;
use SimpleSAML\SAML2\Assertion;

The type SimpleSAML\SAML2\Assertion was not found. Maybe you did not declare it correctly or list all dependencies?

use SimpleSAML\SAML2\AttributeQuery;

The type SimpleSAML\SAML2\AttributeQuery was not found. Maybe you did not declare it correctly or list all dependencies?

use SimpleSAML\SAML2\HTTPPost;

The type SimpleSAML\SAML2\HTTPPost was not found. Maybe you did not declare it correctly or list all dependencies?

use SimpleSAML\SAML2\Response;

The type SimpleSAML\SAML2\Response was not found. Maybe you did not declare it correctly or list all dependencies?

use SimpleSAML\SAML2\XML\saml\Issuer;

The type SimpleSAML\SAML2\XML\saml\Issuer was not found. Maybe you did not declare it correctly or list all dependencies?

use SimpleSAML\SAML2\XML\saml\SubjectConfirmation;

The type SimpleSAML\SAML2\XML\saml\SubjectConfirmation was not found. Maybe you did not declare it correctly or list all dependencies?

use SimpleSAML\SAML2\XML\saml\SubjectConfirmationData;

The type SimpleSAML\SAML2\XML\saml\SubjectConfirmationData was not found. Maybe you did not declare it correctly or list all dependencies?

/**
 * Controller class for the exampleattributeserver module.
 *
 * This class serves the attribute server available in the module.
 *
 * @package SimpleSAML\Module\exampleattributeserver
 */
class AttributeServer
{
    /** @var \SimpleSAML\Configuration */
    protected $config;

    /**
     * @var \SimpleSAML\Utils\Auth|string
     * @psalm-var \SimpleSAML\Utils\Auth|class-string
     */
    protected $authUtils = Utils\Auth::class;

The type SimpleSAML\Module\exampleattributeserver\Controller\Utils\Auth was not found. Maybe you did not declare it correctly or list all dependencies?

    /** @var \SimpleSAML\Session */
    protected $session;


    /**
     * ConfigController constructor.
     *
     * @param \SimpleSAML\Configuration $config The configuration to use.
     * @param \SimpleSAML\Session $session The current user session.
     */
    public function __construct(Configuration $config, Session $session)

The type SimpleSAML\Module\exampleattributeserver\Controller\Configuration was not found. Maybe you did not declare it correctly or list all dependencies?

The type SimpleSAML\Module\exampleattributeserver\Controller\Session was not found. Maybe you did not declare it correctly or list all dependencies?

    {
        $this->config = $config;
        $this->session = $session;
    }


    /**
     * @param \Symfony\Component\HttpFoundation\Request $request The current request.
     *
     * @return \SimpleSAML\XHTML\Template
     */
    public function main(/** @scrutinizer ignore-unused */ Request $request): Template

The type SimpleSAML\Module\exampleattributeserver\Controller\Request was not found. Maybe you did not declare it correctly or list all dependencies?

The type SimpleSAML\Module\exampleattributeserver\Controller\Template was not found. Maybe you did not declare it correctly or list all dependencies?

    {
        $metadata = MetaDataStorageHandler::getMetadataHandler();

        $binding = Binding::getCurrentBinding();
        $query = $binding->receive();
        if (!($query instanceof AttributeQuery)) {
            throw new Error\BadRequest('Invalid message received to AttributeQuery endpoint.');
        }

        $idpEntityId = $metadata->getMetaDataCurrentEntityID('saml20-idp-hosted');

        $issuer = $query->getIssuer();
        if ($issuer === null) {
            throw new Error\BadRequest('Missing <saml:Issuer> in <samlp:AttributeQuery>.');
        } else {
            $spEntityId = $issuer->getValue();
            if ($spEntityId === '') {
                throw new Error\BadRequest('Empty <saml:Issuer> in <samlp:AttributeQuery>.');
            }
        }

        $idpMetadata = $metadata->getMetaDataConfig($idpEntityId, 'saml20-idp-hosted');
        $spMetadata = $metadata->getMetaDataConfig($spEntityId, 'saml20-sp-remote');

        // The endpoint we should deliver the message to
        $endpoint = $spMetadata->getString('testAttributeEndpoint');

        // The attributes we will return
        $attributes = [
            'name' => ['value1', 'value2', 'value3'],
            'test' => ['test'],
        ];

        // The name format of the attributes
        $attributeNameFormat = Constants::NAMEFORMAT_UNSPECIFIED;

        // Determine which attributes we will return
        $returnAttributes = array_keys($query->getAttributes());

The method getAttributes() does not exist on SAML2\Response.

The method getAttributes() does not exist on SAML2\LogoutRequest.

The method getAttributes() does not exist on SAML2\LogoutResponse.

The method getAttributes() does not exist on SAML2\AuthnRequest.

The method getAttributes() does not exist on SAML2\ArtifactResponse.

The method getAttributes() does not exist on SAML2\ArtifactResolve.

        if (count($returnAttributes) === 0) {
            Logger::debug('No attributes requested - return all attributes.');
            $returnAttributes = $attributes;
        } elseif ($query->getAttributeNameFormat() !== $attributeNameFormat) {

The method getAttributeNameFormat() does not exist on SAML2\Response.

The method getAttributeNameFormat() does not exist on SAML2\LogoutRequest.

The method getAttributeNameFormat() does not exist on SAML2\ArtifactResolve.

The method getAttributeNameFormat() does not exist on SAML2\AuthnRequest.

The method getAttributeNameFormat() does not exist on SAML2\LogoutResponse.

The method getAttributeNameFormat() does not exist on SAML2\ArtifactResponse.

            Logger::debug('Requested attributes with wrong NameFormat - no attributes returned.');
            $returnAttributes = [];
        } else {
            /** @var array $values */
            foreach ($returnAttributes as $name => $values) {
                if (!array_key_exists($name, $attributes)) {
                    // We don't have this attribute
                    unset($returnAttributes[$name]);
                    continue;
                }
                if (count($values) === 0) {
                    // Return all attributes
                    $returnAttributes[$name] = $attributes[$name];
                    continue;
                }

                // Filter which attribute values we should return
                $returnAttributes[$name] = array_intersect($values, $attributes[$name]);
            }
        }

        // $returnAttributes contains the attributes we should return. Send them
        $issuer = new Issuer();
        $issuer->setValue($idpEntityId);

        $assertion = new Assertion();
        $assertion->setIssuer($issuer);
        $assertion->setNameId($query->getNameId());

The method getNameId() does not exist on SAML2\Response.

The method getNameId() does not exist on SAML2\ArtifactResponse.

The method getNameId() does not exist on SAML2\ArtifactResolve.

The method getNameId() does not exist on SAML2\LogoutResponse.

        $assertion->setNotBefore(time());
        $assertion->setNotOnOrAfter(time() + 300); // 60*5 = 5min
        $assertion->setValidAudiences([$spEntityId]);
        $assertion->setAttributes($returnAttributes);
        $assertion->setAttributeNameFormat($attributeNameFormat);

        $sc = new SubjectConfirmation();
        $sc->setMethod(Constants::CM_BEARER);

        $scd = new SubjectConfirmationData();
        $scd->setNotOnOrAfter(time() + 300); // 60*5 = 5min
        $scd->setRecipient($endpoint);
        $scd->setInResponseTo($query->getId());
        $sc->setSubjectConfirmationData($scd);
        $assertion->setSubjectConfirmation([$sc]);

        Message::addSign($idpMetadata, $spMetadata, $assertion);

        $response = new Response();
        $response->setRelayState($query->getRelayState());
        $response->setDestination($endpoint);
        $response->setIssuer($issuer);
        $response->setInResponseTo($query->getId());
        $response->setAssertions([$assertion]);
        Message::addSign($idpMetadata, $spMetadata, $response);

        $binding = new HTTPPost();
        $binding->send($response);

In this branch, the function will implicitly return null which is incompatible with the type-hinted return SimpleSAML\Module\exampleattributeserver\Controller\Template. Consider adding a return statement or allowing null as return value.

    }
}