Stevenmaguire\OAuth2\Client\Provider\KeycloakRoles

Complexity

Total Complexity

12

Size/Duplication

Total Lines	64
Duplicated Lines	0 %

Coupling/Cohesion

Components	2
Dependencies	1

Test Coverage

Coverage

84%

Importance

Changes

0

6 Methods

Rating	Name	Duplication	Size	Complexity
B	__construct()	0	16	5
A	hasResourceNamed()	0	4	2
A	getResourceNamesFound()	0	4	1
A	hasRealmRoleNamed()	0	4	2
A	getRealmRoles()	0	4	1
A	getRolesOfResourceNamed()	0	4	1

<?php
/**
 * Created by IntelliJ IDEA.
 * User: jgreen
 * Date: 10/08/2017
 * Time: 11:43 AM
 */

namespace Stevenmaguire\OAuth2\Client\Provider;

use Firebase\JWT\JWT;
use League\OAuth2\Client\Token\AccessToken;

/**
 * Class KeycloakRoles
 *
 * Container for the two known sets of roles that can be detected inside an access token.
 *
 * There are roles, which are within the realm, then roles specific within individual named resources.
 *
 * @package Stevenmaguire\OAuth2\Client\Provider
 */
class KeycloakRoles
{

    /**
     * @var array a list of roles associated with the realm
     */
    protected $realmAccess = [];
    /**
     * @var array An associative array of KeycloakResourceRoles keyed by resource name
     */
    protected $resourcesAndRoles = [];

    /**
     * KeycloakRoles constructor.
     *
     * @param $obj Object from JWT::decode
     *
     */
    public function __construct($obj)
    {
        if (isset($obj->realm_access->roles)) {
            $this->realmAccess = $obj->realm_access->roles;
        }
        if (isset($obj->resource_access)) {
            foreach ($obj->resource_access as $resource => $roles) {
                $list = [];
                foreach ($roles->roles as $role) {
                    $list[] = $role;
                }
                $resourceRoles = new KeycloakResourceRoles($resource, $list);
                $this->resourcesAndRoles[$resource] = $resourceRoles;
            }
        }
    }

    public function hasResourceNamed($name)
    {
        return $this->resourcesAndRoles != null && array_key_exists($name, $this->resourcesAndRoles);
    }

    public function getResourceNamesFound()
    {
        return array_keys($this->resourcesAndRoles);
    }

    public function hasRealmRoleNamed($name)
    {
        return $this->realmAccess != null && in_array($name, $this->realmAccess->roles);
    }

    public function getRealmRoles()
    {
        return $this->realmAccess;
    }

    /**
     * @param $name
     * @return KeyCloakResourceRoles
     */
    public function getRolesOfResourceNamed($name)
    {
        return $this->resourcesAndRoles[$name];
    }
}