Palladium\Service\Recovery

Complexity

Total Complexity

4

Size/Duplication

Total Lines	70
Duplicated Lines	0 %

Test Coverage

Coverage

100%

Importance

Changes

0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	resetIdentityPassword()	0	12	1
A	markForReset()	0	29	2
A	__construct()	0	5	1

<?php

namespace Palladium\Service;

/**
 * Application logic for password reset handling
 */

use Palladium\Entity as Entity;
use Palladium\Exception\IdentityNotVerified;
use Palladium\Repository\Identity as Repository;
use Psr\Log\LoggerInterface;

class Recovery
{

    const DEFAULT_TOKEN_LIFESPAN = 28800; // 8 hours
    const DEFAULT_HASH_COST = 12;

    private $repository;
    private $logger;
    private $hashCost;

    /**
     * @param Repository $repository Repository for abstracting persistence layer structures
     * @param LoggerInterface $logger PSR-3 compatible logger
     * @param int $hashCost Cost of the bcrypt hashing function (default: 12)
     */
    public function __construct(Repository $repository, LoggerInterface $logger, $hashCost = Recovery::DEFAULT_HASH_COST)
    {
        $this->repository = $repository;
        $this->logger = $logger;
        $this->hashCost = $hashCost;
    }


    /**
     * @throws IdentityNotVerified if attempting to reset password for unverified identity
     */
    public function markForReset(Entity\StandardIdentity $identity, int $tokenLifespan = Recovery::DEFAULT_TOKEN_LIFESPAN): string
    {
        if ($identity->getStatus() === Entity\Identity::STATUS_NEW) {
            $this->logger->notice('identity not verified', [
                'input' => [
                    'identifier' => $identity->getIdentifier(),
                ],
                'user' => [
                    'account' => $identity->getAccountId(),
                    'identity' => $identity->getId(),
                ],
            ]);

            throw new IdentityNotVerified;
        }

        $identity->generateToken();
        $identity->setTokenAction(Entity\Identity::ACTION_RESET);
        $identity->setTokenEndOfLife(time() + $tokenLifespan);

        $this->repository->save($identity);

        $this->logger->info('request password reset', [
            'input' => [
                'identifier' => $identity->getIdentifier(),
            ],
        ]);

        return $identity->getToken();
    }


    public function resetIdentityPassword(Entity\StandardIdentity $identity, string $password)
    {
        $token = $identity->getToken();

        $identity->clearToken();
        $identity->setPassword($password, $this->hashCost);

        $this->repository->save($identity);

        $this->logger->info('password reset successful', [
            'input' => [
                'token' => $token,
            ],
        ]);
    }
}