Bunq\Middleware\RefreshSessionMiddleware

Complexity

Total Complexity

4

Size/Duplication

Total Lines	55
Duplicated Lines	0 %

Coupling/Cohesion

Components	0
Dependencies	7

Importance

Changes	1
Bugs	0	Features	0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	7	1
A	__invoke()	0	23	3

<?php

namespace Bunq\Middleware;

use Bunq\Exception\SessionWasExpiredException;
use Bunq\Service\InstallationService;
use Bunq\Token\DefaultToken;
use Bunq\Token\Storage\TokenStorage;
use Bunq\Token\TokenType;
use Psr\Http\Message\ResponseInterface;

/**
 * bunq documentation:
 * A session expires after the same amount of time you have set for auto logout in your user account. If a request is
 * made 30 seconds before a session expires, it will automatically be extended.
 *
 * This middleware detects if the session has expired, if so, the middleware will renew the session and throws an
 * exception to let the client know it can be retried.
 */
final class RefreshSessionMiddleware
{
    /**
     * @var InstallationService
     */
    private $installationService;

    /**
     * @var TokenStorage
     */
    private $tokenStorage;

    /**
     * @param InstallationService $installationService
     * @param TokenStorage        $tokenStorage
     */
    public function __construct(
        InstallationService $installationService,
        TokenStorage $tokenStorage
    ) {
        $this->installationService = $installationService;
        $this->tokenStorage        = $tokenStorage;
    }

    /**
     * @param ResponseInterface $response
     *
     * @return ResponseInterface
     * @throws \Exception
     */
    public function __invoke(ResponseInterface $response)
    {
        if ($response->getStatusCode() !== 401) {
            return $response;
        }

        $responseBody = \json_decode($response->getBody()->__toString(), true);

        if ($responseBody['Error'][0]['error_description'] !== 'Insufficient authorisation.') {
            return $response;
        }

        // make new session

        $installationToken = $currentInstalltionToken = $this->tokenStorage->load(TokenType::INSTALLATION_TOKEN());

$currentInstalltionToken is not used, you could remove the assignment.

        $session           = $this->installationService->createSession($installationToken);

        $sessionToken = DefaultToken::fromString($session);

$session is of type array, but the function expects a string.

        $this->tokenStorage->save($sessionToken, TokenType::SESSION_TOKEN());

        throw new SessionWasExpiredException();
    }

}