SimpleSAML\Module\sqlauth\Auth\Source\PasswordVerify1Compat

Complexity

Total Complexity

9

Size/Duplication

Total Lines	68
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	0

1 Method

Rating	Name	Duplication	Size	Complexity
B	__construct()	0	60	9

<?php

declare(strict_types=1);

namespace SimpleSAML\Module\sqlauth\Auth\Source;

use SimpleSAML\Logger;

/**
 * @deprecated Use the SQL2 class and the new SQL2 configuration format instead.
 *
 * @package SimpleSAMLphp
 */

class PasswordVerify1Compat extends SQL2
{
    /**
     * Constructor for this authentication source.
     *
     * @param array $info  Information about this authentication source.
     * @param array $config  Configuration.
     */
    public function __construct(array $info, array $config)
    {
         Logger::warning(
             'The sqlauth:PasswordVerify and sqlauth:PasswordVerify1Compat authentication sources are deprecated. ' .
             'Please migrate to sqlauth:SQL2 with the new configuration format.',
         );

       /* Transform PasswordVerify (version 1) config to SQL2 config
         * Version 1 supported only one database, but multiple queries. The first query was defined
         * to be the "authentication query", all subsequent queries were "attribute queries".
         */
        $v2config = [
            'sqlauth:SQL2',
            'databases' => [
                'default' => [
                    'dsn' => $config['dsn'],
                    'username' => $config['username'],
                    'password' => $config['password'],
                ],
            ],

            'auth_queries' => [
                'default' => [
                    'database' => 'default',
                    'query' => is_array($config['query']) ? $config['query'][0] : $config['query'],
                    'password_verify_hash_column' => 'passwordhash',
                ],
            ],
        ];

        if (array_key_exists('username_regex', $config)) {
            $v2config['auth_queries']['default']['username_regex'] = $config['username_regex'];
        }

        // Override the default passwordhash column if configured
        if (array_key_exists('passwordhash_column', $config)) {
            $v2config['auth_queries']['default']['password_verify_hash_column'] = $config['passwordhash_column'];
        }

        $numQueries = is_array($config['query']) ? count($config['query']) : 0;
        if ($numQueries > 1) {
            $v2config['attr_queries'] = [];
            for ($i = 1; $i < $numQueries; $i++) {
                $v2config['attr_queries']['query' . $i] = [
                    'database' => 'default',
                    'query' => $config['query'][$i],
                ];
            }
        }

        // Copy other config keys that are not specific to SQL1 (eg. core:login_links)
        foreach (array_keys($config) as $key) {
            if (in_array($key, ['dsn', 'username', 'password', 'query', 'username_regex', 'passwordhashcolumn'])) {
                continue;
            }

            $v2config[$key] = $config[$key];
        }

        parent::__construct($info, $v2config);
    }
}