AtlassianConnectBundle\Security\JWTUserProvider

Complexity

Total Complexity

9

Size/Duplication

Total Lines	52
Duplicated Lines	0 %

Importance

Changes	3
Bugs	0	Features	0

7 Methods

Rating	Name	Duplication	Size	Complexity
A	findTenant()	0	3	1
A	__construct()	0	2	1
A	loadUserByIdentifier()	0	9	2
A	getDecodedToken()	0	11	2
A	refreshUser()	0	3	1
A	loadUserByUsername()	0	3	1
A	supportsClass()	0	3	1

<?php

declare(strict_types=1);

namespace AtlassianConnectBundle\Security;

use AtlassianConnectBundle\Entity\TenantInterface;
use AtlassianConnectBundle\Repository\TenantRepositoryInterface;
use Firebase\JWT\JWT;
use Firebase\JWT\Key;
use Symfony\Component\Security\Core\Exception\AuthenticationException;
use Symfony\Component\Security\Core\Exception\UnsupportedUserException;
use Symfony\Component\Security\Core\Exception\UserNotFoundException;
use Symfony\Component\Security\Core\User\UserInterface;

class JWTUserProvider implements JWTUserProviderInterface
{
    public function __construct(private TenantRepositoryInterface $repository)
    {
    }

    public function getDecodedToken(string $jwt): object
    {
        try {
            $bodyb64 = explode('.', $jwt)[1];
            $decodedToken = json_decode(JWT::urlsafeB64Decode($bodyb64));

            JWT::decode($jwt, new Key($this->findTenant($decodedToken->iss)->getSharedSecret(), 'HS256'));

            return $decodedToken;
        } catch (\Throwable $e) {
            throw new AuthenticationException('Failed to parse token');
        }
    }

    public function loadUserByUsername(string $username): UserInterface
    {
        return $this->loadUserByIdentifier($username);
    }

    public function refreshUser(UserInterface $user): void
    {
        throw new UnsupportedUserException('Refresh prohibited');
    }

    /**
     * @param string|mixed $class
     */
    public function supportsClass($class): bool
    {
        return is_subclass_of($class, TenantInterface::class);
    }

    public function loadUserByIdentifier(string $identifier): UserInterface
    {
        $tenant = $this->findTenant($identifier);

        if (!$tenant) {
            throw new UserNotFoundException('Can\t find tenant with such username');
        }

        return $tenant;
    }

    private function findTenant(string $clientKey): ?TenantInterface
    {
        return $this->repository->findByClientKey($clientKey);
    }
}