League\OAuth2\Server\Introspector

Complexity

Total Complexity

7

Size/Duplication

Total Lines	85
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	4

Test Coverage

Coverage

90%

Importance

Changes

0

4 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	9	1
A	validateIntrospectionRequest()	0	6	2
A	respondToIntrospectionRequest()	0	13	2
A	getIntrospectionValidator()	0	9	2

<?php

namespace League\OAuth2\Server;

use League\OAuth2\Server\Exception\OAuthServerException;
use League\OAuth2\Server\IntrospectionValidators\BearerTokenValidator;
use League\OAuth2\Server\IntrospectionValidators\IntrospectionValidatorInterface;
use League\OAuth2\Server\Repositories\AccessTokenRepositoryInterface;
use League\OAuth2\Server\ResponseTypes\IntrospectionResponse;
use Psr\Http\Message\ServerRequestInterface;

class Introspector
{
    /**
     * @var AccessTokenRepositoryInterface
     */
    private $accessTokenRepository;

    /**
     * @var CryptKey
     */
    private $privateKey;

    /**
     * @var null|IntrospectionValidatorInterface
     */
    private $introspectionValidator;

    /**
     * New Introspector instance.
     *
     * @param AccessTokenRepositoryInterface  $accessTokenRepository
     * @param CryptKey                        $privateKey
     * @param IntrospectionValidatorInterface $introspectionValidator
     */
    public function __construct(
        AccessTokenRepositoryInterface $accessTokenRepository,
        CryptKey $privateKey,
        IntrospectionValidatorInterface $introspectionValidator = null
    ) {
        $this->accessTokenRepository = $accessTokenRepository;
        $this->privateKey = $privateKey;
        $this->introspectionValidator = $introspectionValidator;
    }

    /**
     * Validate the introspection request.
     *
     * @param ServerRequestInterface $request
     *
     * @throws OAuthServerException
     */
    public function validateIntrospectionRequest(ServerRequestInterface $request)
    {
        if ($request->getMethod() !== 'POST') {
            throw OAuthServerException::accessDenied('Invalid request method');
        }
    }

    /**
     * Return an introspection response.
     *
     * @param ServerRequestInterface $request
     * @param IntrospectionResponse  $responseType
     *
     * @return IntrospectionResponse
     */
    public function respondToIntrospectionRequest(
        ServerRequestInterface $request,
        IntrospectionResponse $responseType
    ) {
        $validator = $this->getIntrospectionValidator();

        if ($validator->validateIntrospection($request)) {
            $responseType->setRequest($request);
            $responseType->setValidity(true);
        }

        return $responseType;
    }

    /**
     * Get the introspection validator, falling back to the bearer token validator if not set.
     *
     * @return IntrospectionValidatorInterface
     */
    protected function getIntrospectionValidator()
    {
        if ($this->introspectionValidator instanceof IntrospectionValidatorInterface === false) {
            $this->introspectionValidator = new BearerTokenValidator($this->accessTokenRepository);
            $this->introspectionValidator->setPrivateKey($this->privateKey);
        }

        return $this->introspectionValidator;
    }
}