SimpleSAML\Modules\Monitor\TestSuite\AuthSource\Ldap

Complexity

Total Complexity

14

Size/Duplication

Total Lines	150
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	0

2 Methods

Rating	Name	Duplication	Size	Complexity
B	invokeTest()	0	72	7
A	__construct()	0	17	2

<?php

namespace SimpleSAML\Module\monitor\TestSuite\AuthSource;

use SimpleSAML\Assert\Assert;

The type SimpleSAML\Assert\Assert was not found. Maybe you did not declare it correctly or list all dependencies?

use SimpleSAML\Configuration;
use SimpleSAML\Module\monitor\State;

The type SimpleSAML\Module\monitor\State was not found. Maybe you did not declare it correctly or list all dependencies?

use SimpleSAML\Module\monitor\TestConfiguration;

The type SimpleSAML\Module\monitor\TestConfiguration was not found. Maybe you did not declare it correctly or list all dependencies?

use SimpleSAML\Module\monitor\TestCase;

The type SimpleSAML\Module\monitor\TestCase was not found. Maybe you did not declare it correctly or list all dependencies?

use SimpleSAML\Module\monitor\TestData;

The type SimpleSAML\Module\monitor\TestData was not found. Maybe you did not declare it correctly or list all dependencies?

use SimpleSAML\Module\monitor\TestResult;

The type SimpleSAML\Module\monitor\TestResult was not found. Maybe you did not declare it correctly or list all dependencies?

use function array_key_exists;
use function array_replace;
use function explode;
use function is_null;
use function parse_url;
use function preg_match;
use function preg_split;
use function stream_context_create;

final class Ldap extends \SimpleSAML\Module\monitor\TestSuiteFactory

The type SimpleSAML\Module\monitor\TestSuiteFactory was not found. Maybe you did not declare it correctly or list all dependencies?

{
    /** @var ApplicationConfiguration */

The type SimpleSAML\Module\monitor\TestSuite\AuthSource\ApplicationConfiguration was not found. Maybe you did not declare it correctly or list all dependencies?

    private $authSourceData;

    /** @var array|null */
    private $authSourceSpecifics;

    /** @var string[] */
    private $hosts;

    /** @var integer|null */
    private $certExpirationWarning = null;


    /**
     * @param TestConfiguration $configuration
     * @param TestData $testData
     */
    public function __construct(TestConfiguration $configuration, TestData $testData)
    {
        $moduleConfig = $configuration->getModuleConfig();
        $authSourceData = $testData->getInputItem('authSourceData');
        $authSourceSpecifics = $testData->getInputItem('authSourceSpecifics');

        assert(is_array($authSourceData));
        assert(is_array($authSourceSpecifics) || is_null($authSourceSpecifics));

        $authSourceData = Configuration::loadFromArray($authSourceData);
        $this->hosts = preg_split('/\s+/', $authSourceData->getString('hostname'), -1, PREG_SPLIT_NO_EMPTY);
        $this->authSourceData = $authSourceData;

It seems like $authSourceData of type SimpleSAML\Configuration is incompatible with the declared type SimpleSAML\Module\monitor\TestSuite\AuthSource\ApplicationConfiguration of property $authSourceData.

        $this->authSourceSpecifics = $authSourceSpecifics;
        $this->certExpirationWarning = $moduleConfig->getValue('certExpirationWarning', 28);
        $this->setCategory('LDAP authentication source');

        parent::__construct($configuration);
    }


    /**
     * @return void
     */
    public function invokeTest()
    {
        // Test LDAP configuration
        $confTest = new TestCase\AuthSource\Ldap\Configuration(

The type SimpleSAML\Module\monitor\TestCase\AuthSource\Ldap\Configuration was not found. Maybe you did not declare it correctly or list all dependencies?

            new TestData(['authSourceData' => $this->authSourceData])
        );
        $confTestResult = $confTest->getTestResult();
        $this->addTestResult($confTestResult);

        if ($confTestResult->getState() === State::OK) {
            $connection = $confTestResult->getOutput('connection');

            // Test connection for each configured LDAP-server
            $failure = count($this->hosts);
            foreach ($this->hosts as $hostname) {
                $preparedTestData = $this->prepareConnection($hostname);
                $connTest = new TestCase\Network\ConnectUri(

The type SimpleSAML\Module\monitor\TestCase\Network\ConnectUri was not found. Maybe you did not declare it correctly or list all dependencies?

                    new TestData($preparedTestData)
                );
                $connTestResult = $connTest->getTestResult();
                $this->addTestResult($connTestResult);

                if ($connTestResult->getState() === State::OK) {
                    $certData = $connTestResult->getOutput('certData');

                    // Test certificate when available
                    if ($certData !== null) {
                        $certTest = new TestCase\Cert(

The type SimpleSAML\Module\monitor\TestCase\Cert was not found. Maybe you did not declare it correctly or list all dependencies?

                            new TestData([
                                'certData' => $certData,
                                'category' => 'LDAP Server Certificate',
                                'certExpirationWarning' => $this->certExpirationWarning,
                            ])
                        );
                        $certTestResult = $certTest->getTestResult();
                        $this->addTestResult($certTestResult);
                    }
                    $failure--;
                }
            }

            if ($failure === 0) {
                // Test bind
                $bindTest = new TestCase\AuthSource\Ldap\Bind(

The type SimpleSAML\Module\monitor\TestCase\AuthSource\Ldap\Bind was not found. Maybe you did not declare it correctly or list all dependencies?

                    new TestData([
                        'authSourceData' => $this->authSourceData,
                        'connection' => $connection
                    ])
                );
                $bindTestResult = $bindTest->getTestResult();
                $this->addTestResult($bindTestResult);

                if ($bindTestResult->getState() === State::OK) {
                    // Test search
                    $searchTest = new TestCase\AuthSource\Ldap\Search(

The type SimpleSAML\Module\monitor\TestCase\AuthSource\Ldap\Search was not found. Maybe you did not declare it correctly or list all dependencies?

                        new TestData([
                            'authSourceData' => $this->authSourceData,
                            'connection' => $connection
                        ])
                    );
                    $searchTestResult = $searchTest->getTestResult();
                    $this->addTestResult($searchTestResult);
                }
            }
            unset($connection);
        }

        $state = $this->calculateState();

        $testResult = new TestResult('LDAP Authentication');
        $testResult->setState($state);
        $this->setTestResult($testResult);
    }


    /**
     * @param string $connectString
     *
     * @return array
     */
    private function prepareConnection($connectString)
    {
        $hostname = parse_url($connectString, PHP_URL_HOST);
        $authSourceData = $this->authSourceData;
        $authSourceSpecifics = $this->authSourceSpecifics;

        if (preg_match('/^(ldaps:\/\/(.*))$/', $connectString, $matches)) {
            // The default context
            $sslContext = ['capture_peer_cert' => true, 'verify_peer' => true];

            // The non-default context, if configured ...
            if (!is_null($authSourceSpecifics) && array_key_exists('ssl', $authSourceSpecifics)) {
                $sslContext = array_replace($sslContext, $authSourceSpecifics['ssl']);
            }

            $port = parse_url($connectString, PHP_URL_PORT);
            $port = $port ?: $authSourceData->getInteger('port', 636);

            $uri = 'ssl://' .  $hostname . ':' . $port;
            $context = stream_context_create(['ssl' => $sslContext]);
        } else {
            $port = $authSourceData->getInteger('port', 389);
            $uri = 'tcp://' . $hostname . ':' . $port;
            $context = stream_context_create();
        }

        $timeout = $authSourceData->getInteger('timeout', null);
        return ['uri' => $uri, 'context' => $context, 'timeout' => $timeout];
    }
}