T4web\Authentication\Service\Checker

Complexity

Total Complexity

9

Size/Duplication

Total Lines	68
Duplicated Lines	0 %

Coupling/Cohesion

Components	0
Dependencies	6

Importance

Changes	5
Bugs	1	Features	2

3 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	4	1
A	redirectTo()	0	14	1
C	__invoke()	0	40	7

<?php

namespace T4web\Authentication\Service;

use Zend\Authentication\AuthenticationService;
use Zend\Mvc\MvcEvent;
use Zend\Mvc\Router\RouteMatch;
use Zend\Console\Request as ConsoleRequest;
use Zend\Mvc\Application;

class Checker
{
    /**
     * @var AuthenticationService
     */
    protected $authService;

    public function __construct(AuthenticationService $authService)
    {
        $this->authService = $authService;
    }

    public function __invoke(MvcEvent $event)
    {
        if ($event->getRequest() instanceof ConsoleRequest) {
            return;
        }

        $match = $event->getRouteMatch();

        // No route match, this is a 404
        if (!$match instanceof RouteMatch) {
            return;
        }

        /** @var Application $app */
        $app = $event->getParam('application');
        $config = $app->getConfig();

        $disableForAuthorizedCallback = $config['authorized-redirect-to-route'];
        $redirectTo = $disableForAuthorizedCallback($match, $this->authService);
        if ($this->authService->hasIdentity() && !empty($redirectTo)) {
            $response = $this->redirectTo($event, $redirectTo);
            return $response;
        }

        $checkCallback = $config['need-authorization-callback'];

        // if true = authorization needed
        if (!$checkCallback($match, $this->authService)) {
            return;
        }

        // User is authenticated
        if ($this->authService->hasIdentity()) {
            return;
        }

        $response = $this->redirectTo($event, $config['not-authorized-redirect-to-route']);

        return $response;
    }

    private function redirectTo(MvcEvent $event, $routeName, $reasonPhrase = 'Unauthorized')
    {
        // Redirect to the user login page, as an example
        $router   = $event->getRouter();
        $url      = $router->assemble([], ['name' => $routeName]);

        /** @var \Zend\Http\Response $response */
        $response = $event->getResponse();
        $response->getHeaders()->addHeaderLine('Location', $url);
        $response->setStatusCode(302);
        $response->setReasonPhrase($reasonPhrase);

        return $response;
    }
}