Startwind\Inventorio\Collector\System\Security\AuthorizedKeysCollector

Complexity

Total Complexity

11

Size/Duplication

Total Lines	79
Duplicated Lines	0 %

Importance

Changes

0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	getIdentifier()	0	3	1
A	parseAuthorizedKeysFile()	0	26	5
A	collect()	0	37	5

<?php

namespace Startwind\Inventorio\Collector\System\Security;

use Startwind\Inventorio\Collector\Collector;
use Startwind\Inventorio\Exec\File;

class AuthorizedKeysCollector implements Collector
{
    public function getIdentifier(): string
    {
        return 'SystemSecurityAuthorizedKeys';
    }

    public function collect(): array
    {
        $file = File::getInstance();

        $results = [];

        // Read all user accounts from /etc/passwd
        $passwdLines = $file->getContents('/etc/passwd', true);

        foreach ($passwdLines as $line) {
            $parts = explode(':', $line);
            if (count($parts) < 6) {
                continue;
            }

            // Extract username, UID, and home directory
            [$username, , $uid, , , $homeDirectory] = array_slice($parts, 0, 6);

            // Only consider regular users (UID >= 1000) with a valid home directory
            if (!$file->isDir($homeDirectory)) {
                continue;
            }

            $authorizedKeysPath = $homeDirectory . '/.ssh/authorized_keys';

            // If authorized_keys exists, parse it
            if (!$file->fileExists($authorizedKeysPath)) {
                continue;
            }
    
            $entries = $this->parseAuthorizedKeysFile($authorizedKeysPath, $username);

            // Merge entries into the final result list
            $results = array_merge($results, $entries);
        }

        return $results;
    }

    /**
     * Parse an authorized_keys file and return structured entries including username.
     *
     * @param string $filePath Path to the authorized_keys file
     * @param string $username The user who owns the file
     * @return array List of structured authorized key entries
     */
    private function parseAuthorizedKeysFile(string $filePath, string $username): array
    {
        $entries = [];

        $lines = File::getInstance()->getContents($filePath, true);

        foreach ($lines as $line) {
            $line = trim($line);

            // Skip comments and empty lines
            if ($line === '' || str_starts_with($line, '#')) {
                continue;
            }

            // Some lines may include options before the key, like: command="..." ssh-rsa AAAA...
            if (preg_match('/^(ssh-(rsa|ed25519|dss)|ecdsa-[^\s]+)\s+([A-Za-z0-9+\/=]+)(\s+(.*))?$/', $line, $matches)) {
                $entries[] = [
                    'user' => $username,
                    'key_type' => $matches[1],
                    'key' => $matches[3],
                    'comment' => $matches[5] ?? null
                ];
            }
        }

        return $entries;
    }
}