Usox\HyperSonic\Authentication\AuthenticationManager

Complexity

Total Complexity

7

Size/Duplication

Total Lines	56
Duplicated Lines	0 %

Test Coverage

Coverage

100%

Importance

Changes	2
Bugs	0	Features	0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	3	1
B	auth()	0	44	6

<?php

declare(strict_types=1);

namespace Usox\HyperSonic\Authentication;

use Psr\Http\Message\ServerRequestInterface;
use Usox\HyperSonic\Authentication\Exception\AbstractAuthenticationException;
use Usox\HyperSonic\Authentication\Exception\AuthenticationParamsMissingException;
use Usox\HyperSonic\Authentication\Exception\UsernameMissingException;

/**
 * Manages the authentication of subsonic api requests
 */
final class AuthenticationManager implements AuthenticationManagerInterface
{
    public function __construct(
        private readonly AuthenticationProviderInterface $authenticationProvider,
    ) {
    }

    /**
     * Will throw an exception on auth fault, otherwise nothing will happen
     *
     * @throws AbstractAuthenticationException
     */
    public function auth(
        ServerRequestInterface $request,
    ): void {
        $queryParams = $request->getQueryParams();

        $userName = $queryParams['u'] ?? null;

        if ($userName === null) {
            throw new UsernameMissingException();
        }

        $token = $queryParams['t'] ?? null;
        $salt = $queryParams['s'] ?? null;

        // token auth? phew, thank god
        if ($token !== null && $salt !== null) {
            $this->authenticationProvider->authByToken(
                (string) $userName,
                (string) $token,
                (string) $salt,
            );

            return;
        }

        /** @var null|string $password */
        $password = $queryParams['p'] ?? null;

        // meh, plaintext or hex-encoded password
        if ($password !== null) {
            if (str_starts_with($password, 'enc:')) {
                $password = hex2bin(str_replace('enc:', '', $password));
            }

            $this->authenticationProvider->authByPassword(
                (string) $userName,
                (string) $password,
            );

            return;
        }

        // no auth method applies? throw exception
        throw new AuthenticationParamsMissingException();
    }
}