Waca\Security\SecurityConfigurationFactory

Complexity

Total Complexity

6

Size/Duplication

Total Lines	113
Duplicated Lines	23.01 %

Coupling/Cohesion

Components	1
Dependencies	1

Importance

Changes	1
Bugs	0	Features	0

6 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	4	1
A	asInternalPage()	0	10	1
A	asAdminPage()	0	9	1
A	asPublicPage()	0	17	1
A	asAllLoggedInUsersPage()	13	13	1
A	asCheckUserData()	13	13	1

<?php
/**
 * Created by PhpStorm.
 * User: stwalkerster
 * Date: 24/03/2016
 * Time: 23:52
 */

namespace Waca\Security;


final class SecurityConfigurationFactory
{
	/**
	 * @var bool
	 */
	private $forceIdentified;

	/**
	 * Security constructor.
	 *
	 * @param bool $forceIdentified
	 */
	public function __construct($forceIdentified)
	{
		$this->forceIdentified = $forceIdentified;
	}

	/**
	 * Returns a pre-built security configuration for an internal page.
	 *
	 * @category Security-Critical
	 * @return SecurityConfiguration
	 */
	public function asInternalPage()
	{
		$config = new SecurityConfiguration();
		$config->setAdmin(SecurityConfiguration::ALLOW)
			->setUser(SecurityConfiguration::ALLOW);

		$config->setRequireIdentified($this->forceIdentified);

		return $config;
	}

	/**
	 * Returns a pre-built security configuration for a tool admin only page.
	 *
	 * @category Security-Critical
	 * @return SecurityConfiguration
	 */
	public function asAdminPage()
	{
		$config = new SecurityConfiguration();
		$config->setAdmin(SecurityConfiguration::ALLOW);

		$config->setRequireIdentified($this->forceIdentified);

		return $config;
	}

	/**
	 * Returns a pre-built security configuration for a page accessible to *ALL* logged in users, including suspended
	 * and new users. This probably isn't the setting you want.
	 *
	 * @category Security-Critical
	 * @return SecurityConfiguration
	 */
	public function asAllLoggedInUsersPage()

This method seems to be duplicated in your project.

	{
		$config = new SecurityConfiguration();
		$config->setAdmin(SecurityConfiguration::ALLOW)
			->setUser(SecurityConfiguration::ALLOW)
			->setDeclined(SecurityConfiguration::ALLOW)
			->setNew(SecurityConfiguration::ALLOW)
			->setSuspended(SecurityConfiguration::ALLOW);

		$config->setRequireIdentified($this->forceIdentified);

		return $config;
	}

	/**
	 * @return SecurityConfiguration
	 * @category Security-Critical
	 */
	public function asCheckUserData()

This method seems to be duplicated in your project.

	{
		$config = new SecurityConfiguration();
		$config->setCheckuser(SecurityConfiguration::ALLOW)
			->setCommunity(SecurityConfiguration::DENY)
			->setSuspended(SecurityConfiguration::DENY)
			->setDeclined(SecurityConfiguration::DENY)
			->setNew(SecurityConfiguration::DENY);

		$config->setRequireIdentified($this->forceIdentified);

		return $config;
	}

	/**
	 * Returns a pre-built security configuration for a public page.
	 *
	 * @category Security-Critical
	 * @return SecurityConfiguration
	 */
	public function asPublicPage()
	{
		$config = new SecurityConfiguration();
		$config->setAdmin(SecurityConfiguration::ALLOW)
			->setUser(SecurityConfiguration::ALLOW)
			->setCheckuser(SecurityConfiguration::ALLOW)
			->setCommunity(SecurityConfiguration::ALLOW)
			->setSuspended(SecurityConfiguration::ALLOW)
			->setDeclined(SecurityConfiguration::ALLOW)
			->setNew(SecurityConfiguration::ALLOW);

		// Public pages shouldn't be inaccessible to logged-in, unidentified users.
		// Otherwise, logged in but unidentified users can't even log out.
		$config->setRequireIdentified(false);

		return $config;
	}
}