Stevenmaguire\Laravel\Http\Middleware\EnforceContentSecurity

Complexity

Total Complexity

14

Size/Duplication

Total Lines	163
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	5

Test Coverage

Coverage

97.96%

Importance

Changes

0

9 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	12	2
A	handle()	0	25	3
A	createLaravelResponse()	0	8	1
A	createPsr7Response()	0	9	1
A	getProfileConfig()	0	11	2
A	getProfileConfigKey()	0	4	1
A	getProfilesFromArguments()	0	10	2
A	setConfigClosure()	0	6	1
A	setProfilesWithParameters()	0	5	1

<?php namespace Stevenmaguire\Laravel\Http\Middleware;

use Closure;
use Exception;
use Illuminate\Http\Response;
use GuzzleHttp\Psr7\Response as PsrResponse;
use Psr\Http\Message\ResponseInterface;
use Stevenmaguire\Http\Middleware\EnforceContentSecurity as BaseMiddleware;

class EnforceContentSecurity extends BaseMiddleware
{
    /**
     * Config closure;
     *
     * @var Closure
     */
    protected $config;

    /**
     * Creates new middleware instance.
     */
    public function __construct()
    {
        $this->setConfigClosure(function ($key = null, $default = null) {
            // @codeCoverageIgnoreStart
            if (function_exists('config')) {
                return config($key, $default);
            }

            return null;
            // @codeCoverageIgnoreEnd
        });
    }

    /**
     * Handles an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @return mixed
     */
    public function handle($request, Closure $next)
    {
        $response = $next($request);

        if ($response instanceof Response) {
            $this->setProfiles($this->getProfileConfig());

            $this->setProfilesWithParameters(func_get_args());

            $exception = $response->exception;

            $psr7Response = $this->createPsr7Response($response);

            $psr7Response = $this->addPolicyHeader($psr7Response);

            $response = $this->createLaravelResponse($psr7Response);

            if ($exception instanceof Exception) {
                $response->withException($exception);
            }

        }

        return $response;
    }

    /**
     * Creates Laravel response object from PSR 7 response.
     *
     * @param  ResponseInterface  $response
     *
     * @return Response
     */
    protected function createLaravelResponse(ResponseInterface $response)
    {
        return new Response(
            (string) $response->getBody(),
            $response->getStatusCode(),
            $response->getHeaders()
        );
    }

    /**
     * Creates PSR 7 response object from Laravel response.
     *
     * @param  Response  $response
     *
     * @return ResponseInterface
     */
    protected function createPsr7Response(Response $response)
    {
        return new PsrResponse(
            $response->getStatusCode(),
            $response->headers->all(),
            $response->getContent(),
            $response->getProtocolVersion()
        );
    }

    /**
     * Retrives profile configuration from Laravel config object.
     *
     * @return array
     */
    protected function getProfileConfig()
    {
        $configCallable = $this->config;
        $config = $configCallable($this->getProfileConfigKey());

        if (!is_array($config)) {
            $config = [$config];
        }

        return array_filter($config);
    }

    /**
     * Retrieves configuration key associated with content security profiles.
     *
     * @return string
     */
    protected function getProfileConfigKey()
    {
        return 'security.content';
    }

    /**
     * Gets profiles from handle method arguments.
     *
     * @param  array $arguments
     *
     * @return array
     */
    protected function getProfilesFromArguments(array $arguments)
    {
        $profiles = [];
        if (count($arguments) > 2) {
            unset($arguments[0]);
            unset($arguments[1]);
            $profiles = $arguments;
        }
        return $profiles;
    }

    /**
     * Updates config callable used to access application configuration data.
     *
     * @param Closure  $config
     *
     * @return EnforceContentSecurity
     */
    public function setConfigClosure(Closure $config)
    {
        $this->config = $config;

        return $this;
    }

    /**
     * Updates policy configuration with rules from each profile in given parameters.
     *
     * @param array  $parameters
     *
     * @return void
     */
    protected function setProfilesWithParameters(array $parameters)
    {
        $profiles = $this->getProfilesFromArguments($parameters);
        array_map([$this, 'loadProfileByKey'], $profiles);
    }
}