AtlassianConnectBundle\Security\JWTAuthenticator::getCredentials()

Complexity

Conditions	9
Paths	15

Size

Total Lines	33
Code Lines	19

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	JWTAuthenticator::onAuthenticationFailure()	0	3	1
A	JWTAuthenticator::onAuthenticationSuccess()	0	3	1

<?php declare(strict_types = 1);

namespace AtlassianConnectBundle\Security;

use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\Response;
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
use Symfony\Component\Security\Core\Exception\AuthenticationException;
use Symfony\Component\Security\Core\Exception\CustomUserMessageAuthenticationException;
use Symfony\Component\Security\Http\Authenticator\AbstractAuthenticator;
use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
use Symfony\Component\Security\Http\Authenticator\Passport\PassportInterface;
use Symfony\Component\Security\Http\Authenticator\Passport\SelfValidatingPassport;

/**
 * Class JWTAuthenticator
 */
class JWTAuthenticator extends AbstractAuthenticator
{
    /**
     * @var JWTUserProviderInterface
     */
    private $userProvider;

    /**
     * @var JWTSecurityHelperInterface
     */
    private $securityHelper;

    /**
     * JWTAuthenticator constructor.
     *
     * @param JWTUserProviderInterface   $userProvider
     * @param JWTSecurityHelperInterface $securityHelper
     */
    public function __construct(JWTUserProviderInterface $userProvider, JWTSecurityHelperInterface $securityHelper)
    {
        $this->userProvider = $userProvider;
        $this->securityHelper = $securityHelper;
    }

    /**
     * @param Request $request
     *
     * @return bool|null
     */
    public function supports(Request $request): ?bool
    {
        return $this->securityHelper->supportsRequest($request);
    }

    /**
     * @param Request $request
     *
     * @return PassportInterface
     */
    public function authenticate(Request $request): PassportInterface
    {
        $jwt = $this->securityHelper->getJWTToken($request);

        if (!$jwt) {
            throw new CustomUserMessageAuthenticationException('JWT Token not provided');
        }

        $token = $this->userProvider->getDecodedToken($jwt);
        $clientKey = $token->iss;

        if (!$clientKey) {
            throw new CustomUserMessageAuthenticationException(
                \sprintf('API Key %s does not exist', $jwt)
            );
        }

        $user = $this->userProvider->loadUserByIdentifier($clientKey);

The method loadUserByIdentifier() does not exist on AtlassianConnectBundle\Security\JWTUserProviderInterface. Did you maybe mean loadUserByUsername()?

        if (\property_exists($token, 'sub')) {
            // for some reasons, when webhooks are called - field sub is undefined
            $user->setUsername($token->sub);
        }

        return new SelfValidatingPassport(new UserBadge($user->getUserIdentifier()));
    }

    /**
     * @param Request        $request
     * @param TokenInterface $token
     * @param string         $firewallName
     *
     * @return Response|null
     */
    public function onAuthenticationSuccess(Request $request, TokenInterface $token, string $firewallName): ?Response
    {
        return null;
    }

    /**
     * @param Request                 $request
     * @param AuthenticationException $exception
     *
     * @return Response|null
     */
    public function onAuthenticationFailure(Request $request, AuthenticationException $exception): ?Response
    {
        return new Response('Authentication Failed: '.$exception->getMessage(), 403);
    }
}