SimpleSAML\Module\cmdotcom\Utils\OTPClient::sendCode()

Complexity

Conditions	4
Paths	8

Size

Total Lines	102
Code Lines	64

Duplication

Lines	0
Ratio	0 %

Importance

Changes	1
Bugs	0	Features	0

<?php
    public function sendCode(array $state): ResponseInterface
    {
        Assert::keyExists($state, 'cmdotcom:productToken', 'Missing required REST API key for the cm.com service.');
        Assert::keyExists($state, 'cmdotcom:recipient');
        Assert::keyExists($state, 'cmdotcom:originator');
        Assert::keyExists($state, 'cmdotcom:codeLength');
        Assert::keyExists($state, 'cmdotcom:validFor');
        Assert::keyExists($state, 'cmdotcom:message');
        Assert::keyExists($state, 'cmdotcom:allowPush');

        // Validate product token
        $productToken = $state['cmdotcom:productToken'];
        Assert::notNull(
            $productToken,
            'Missing required REST API key for the cm.com service.',
        );
        Assert::uuid($productToken);

        // Validate appKey
        $allowPush = $state['cmdotcom:allowPush'];
        if ($allowPush === true) {
            $appKey = $state['cmdotcom:appKey'];
            Assert::notNull(
                $appKey,
                'Missing required appKey for use with push notification.',
            );
            Assert::uuid($appKey);
        }

        // Validate originator
        $originator = $state['cmdotcom:originator'];
        if (is_numeric($originator)) {
            Assert::maxLength(
                $originator,
                16,
                'A numeric originator must represent a phonenumber and can contain a maximum of 16 digits.',
            );
        } else {
            // TODO: figure out what characters are allowed and write a regex.
            // So far 'A-Z', 'a-z', '0-9', ' ' and '-' are known to be accepted
            //Assert::alnum(str_replace(' ', '', $originator));
            Assert::lengthBetween(
                $originator,
                3,
                11,
                'An alphanumeric originator can contain a minimum of 2 and a maximum of 11 characters.',
            );
        }

        // Validate OTP length
        $codeLength = $state['cmdotcom:codeLength'];
        Assert::range($codeLength, 4, 10);

        // Validate recipient
        $recipient = $state['cmdotcom:recipient'];
        Assert::numeric($recipient);
        Assert::maxLength(
            $recipient,
            16,
            'A recipient must represent a phonenumber and can contain a maximum of 16 digits.',
        );

        // Validate validFor
        $validFor = $state['cmdotcom:validFor'];
        Assert::positiveInteger(
            $validFor,
            'validFor must be a positive integer.',
        );

        // Validate message
        $message = $state['cmdotcom:message'];
        Assert::contains($message, '{code}');

        $options = [
            'base_uri' => self::API_BASE,
            //'debug' => true,
            'headers' => [
                'Content-Type' => 'application/json',
                self::HEADER => $productToken,
            ],
            'http_errors' => false,
            'timeout' => 3.0,
        ];

        $client = new GuzzleClient($options);
        $json = [
            'recipient' => $recipient,
            'sender' => $originator,
            'length' => $codeLength,
            'expiry' => $validFor,
            'message' => $message,
        ];

        if ($allowPush === true) {
            $json += ['allowPush' => $allowPush, 'appKey' => $appKey];

The variable $appKey does not seem to be defined for all execution paths leading up to this point.

        }

        return $client->request(
            'POST',
            '/v1.0/otp/generate',
            [
                'json' => $json,
            ],