Stu\Lib\Session\SessionDestruction

Complexity

Total Complexity

7

Size/Duplication

Total Lines	30
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	3	1
A	destroySession()	0	18	5
A	destroyLoginCookies()	0	3	1

<?php

namespace Stu\Lib\Session;

use RuntimeException;
use Stu\Orm\Entity\UserInterface;
use Stu\Orm\Repository\SessionStringRepositoryInterface;

final class SessionDestruction implements SessionDestructionInterface
{
    public function __construct(
        private SessionStringRepositoryInterface $sessionStringRepository
    ) {}

    public function destroySession(SessionInterface $session, ?UserInterface $user = null): void
    {
        $userToTruncate = $user ?? $session->getUser();
        if ($userToTruncate !== null) {
            $this->sessionStringRepository->truncate($userToTruncate);
        }

        if ($user === null) {
            $this->destroyLoginCookies();
            $sessionName = session_name();
            if ($sessionName) {
                setcookie($sessionName, '', ['expires' => time() - 42000]);
            }
            if (@session_destroy() === false) {
                throw new RuntimeException('The session could not be destroyed');
            }

            $session->setUser(null);
        }
    }

    private function destroyLoginCookies(): void
    {
        setcookie('sstr');
    }
}