SimpleSAML\Module\webauthn\Controller\PushbackUserPass::main()

Size

Total Lines	46
Code Lines	23

Duplication

Lines	0
Ratio	0 %

Importance

Changes	4
Bugs	0	Features	0

1 Method

Rating	Name	Duplication	Size	Complexity
A	PushbackUserPass.php$0 ➔ loginOverload()	0	3	1

<?php

declare(strict_types=1);

namespace SimpleSAML\Module\webauthn\Controller;

use Exception;
use SimpleSAML\Auth;
use SimpleSAML\Configuration;
use SimpleSAML\Error;
use SimpleSAML\HTTP\RunnableResponse;
use SimpleSAML\Logger;
use SimpleSAML\Module\webauthn\Auth\Source\AuthSourceOverloader;

The type SimpleSAML\Module\webauthn\Auth\Source\AuthSourceOverloader was not found. Maybe you did not declare it correctly or list all dependencies?

use SimpleSAML\Session;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\Response;

/**
 * Controller class for the webauthn module.
 *
 * This class serves the different views available in the module.
 *
 * @package SimpleSAML\Module\webauthn
 */
class PushbackUserPass
{
    /** @var \SimpleSAML\Auth\State|string */
    protected $authState = Auth\State::class;

    /** @var \SimpleSAML\Logger|string */
    protected $logger = Logger::class;


    /**
     * Controller constructor.
     *
     * It initializes the global configuration and session for the controllers implemented here.
     *
     * @param \SimpleSAML\Configuration              $config The configuration to use by the controllers.
     * @param \SimpleSAML\Session                    $session The session to use by the controllers.
     *
     * @throws \Exception
     */
    public function __construct(
        protected Configuration $config,
        protected Session $session,
    ) {
    }


    /**
     * Inject the \SimpleSAML\Auth\State dependency.
     *
     * @param \SimpleSAML\Auth\State $authState
     */
    public function setAuthState(Auth\State $authState): void
    {
        $this->authState = $authState;
    }


    /**
     * Inject the \SimpleSAML\Logger dependency.
     *
     * @param \SimpleSAML\Logger $logger
     */
    public function setLogger(Logger $logger): void
    {
        $this->logger = $logger;
    }


    /**
     * @param \Symfony\Component\HttpFoundation\Request $request
     * @return (

The doc comment ( at position 1 could not be parsed: the token is null at position 1.

     *   \Symfony\Component\HttpFoundation\RedirectResponse|
     *   \SimpleSAML\HTTP\RunnableResponse
     * ) A Symfony Response-object.
     */
    public function main(Request $request): Response
    {
        $this->logger::info('FIDO2 Supercharged - Redirecting to username/password validation');

        $stateId = $request->query->get('StateId');
        if ($stateId === null) {
            throw new Error\BadRequest('Missing required StateId query parameter.');
        }

        $state = $this->authState::loadState($stateId, 'webauthn:request');

        $authsources = Configuration::getConfig('authsources.php')->toArray();
        $authsourceString = $state['pushbackAuthsource'];
        $authsourceClass = Auth\Source::getById($authsourceString);
        if (is_null($authsourceClass)) {
            throw new Exception("password authsource not found");
        }
        $classname = get_class($authsourceClass);
        class_alias($classname, '\SimpleSAML\Module\webauthn\Auth\Source\AuthSourceOverloader');
        $overrideSource = new class (
            ['AuthId' => $authsourceString],
            $authsources[$authsourceString],
        ) extends AuthSourceOverloader
        {
            public function loginOverload(string $username, string $password): array
            {
                return $this->login($username, $password);
            }
        };

        $attribs = $overrideSource->loginOverload(
            $request->request->get("username"),
            $request->request->get("password"),
        );

        // this is the confirmed username, we store it just like the Passwordless
        // one would have been
        $state['Attributes'][$state['FIDO2AttributeStoringUsername']] = [ $request->request->get("username") ];

        // we deliberately do not store any additional attributes - these have
        // to be retrieved from the same authproc that would retrieve them
        // in Passwordless mode
        unset($attribs);

        // now properly return our final state to the framework
        return new RunnableResponse([Auth\Source::class, 'completeAuth'], [&$state]);
    }


    public function login(string $username, string $password): array
    {
        throw new Exception("Ugh ($username, $password).");
    }
}