Failed Conditions
Push — master ( 8befd5...3eda38 )
by Florent
03:20
created

HeaderCheckerManager::checkHeaders()   D

Complexity

Conditions 10
Paths 26

Size

Total Lines 34
Code Lines 24

Duplication

Lines 0
Ratio 0 %

Importance

Changes 0
Metric Value
dl 0
loc 34
rs 4.8196
c 0
b 0
f 0
cc 10
eloc 24
nc 26
nop 2

How to fix   Complexity   

Long Method

Small methods make your code easier to understand, in particular if combined with a good name. Besides, if your method is small, finding a good name is usually much easier.

For example, if you find yourself adding comments to a method's body, this is usually a good sign to extract the commented part to a new method, and use the comment as a starting point when coming up with a good name for this new method.

Commonly applied refactorings include:

1
<?php
2
3
declare(strict_types=1);
4
5
/*
6
 * The MIT License (MIT)
7
 *
8
 * Copyright (c) 2014-2017 Spomky-Labs
9
 *
10
 * This software may be modified and distributed under the terms
11
 * of the MIT license.  See the LICENSE file for details.
12
 */
13
14
namespace Jose\Component\Checker;
15
16
use Jose\Component\Core\JWTInterface;
17
18
/**
19
 * Class HeaderCheckerManager.
20
 */
21
final class HeaderCheckerManager
22
{
23
    /**
24
     * @var HeaderCheckerInterface[]
25
     */
26
    private $checkers = [];
27
28
    /**
29
     * @var TokenTypeHeaderCheckerInterface[]
30
     */
31
    private $tokenTypes = [];
32
33
    /**
34
     * HeaderCheckerManager constructor.
35
     *
36
     * @param HeaderCheckerInterface[]          $checkers
37
     * @param TokenTypeHeaderCheckerInterface[] $tokenTypes
38
     */
39
    private function __construct(array $checkers, array $tokenTypes)
40
    {
41
        foreach ($checkers as $checker) {
42
            $this->add($checker);
43
        }
44
        foreach ($tokenTypes as $tokenType) {
45
            $this->addTokenTypeSupport($tokenType);
46
        }
47
    }
48
49
    /**
50
     * @param HeaderCheckerInterface[]          $checkers
51
     * @param TokenTypeHeaderCheckerInterface[] $tokenTypes
52
     *
53
     * @return HeaderCheckerManager
54
     */
55
    public static function create(array $checkers, array $tokenTypes): HeaderCheckerManager
56
    {
57
        return new self($checkers, $tokenTypes);
58
    }
59
60
    /**
61
     * @param TokenTypeHeaderCheckerInterface $tokenType
62
     *
63
     * @return HeaderCheckerManager
64
     */
65
    private function addTokenTypeSupport(TokenTypeHeaderCheckerInterface $tokenType): HeaderCheckerManager
66
    {
67
        $this->tokenTypes[] = $tokenType;
68
69
        return $this;
70
    }
71
72
    /**
73
     * @param HeaderCheckerInterface $checker
74
     *
75
     * @return HeaderCheckerManager
76
     */
77
    private function add(HeaderCheckerInterface $checker): HeaderCheckerManager
78
    {
79
        $header = $checker->supportedHeader();
80
        if (array_key_exists($header, $this->checkers)) {
81
            throw new \InvalidArgumentException(sprintf('The header checker "%s" is already supported.', $header));
82
        }
83
84
        $this->checkers[$header] = $checker;
85
86
        return $this;
87
    }
88
89
    /**
90
     * @param JWTInterface $jwt
91
     * @param int          $component
92
     */
93
    public function check(JWTInterface $jwt, int $component)
94
    {
95
        foreach ($this->tokenTypes as $tokenType) {
96
            if ($tokenType->supports($jwt)) {
97
                $protected = [];
98
                $unprotected = [];
99
                $tokenType->retrieveTokenHeaders($jwt, $component, $protected, $unprotected);
100
                $this->checkDuplicatedHeaderParameters($protected, $unprotected);
101
                $this->checkHeaders($protected, $unprotected);
102
103
                return;
104
            }
105
        }
106
        throw new \InvalidArgumentException('Unsupported token type.');
107
    }
108
109
    /**
110
     * @param array $header1
111
     * @param array $header2
112
     */
113
    private function checkDuplicatedHeaderParameters(array $header1, array $header2)
114
    {
115
        $inter = array_intersect_key($header1, $header2);
116
        if (!empty($inter)) {
117
            throw new \InvalidArgumentException(sprintf('The header contains duplicated entries: %s.', implode(', ', array_keys($inter))));
118
        }
119
    }
120
121
    /**
122
     * @param array $protected
123
     * @param array $headers
124
     */
125
    private function checkHeaders(array $protected, array $headers)
126
    {
127
        $checkedHeaders = [];
128
        foreach ($this->checkers as $header => $checker) {
129
            if ($checker->protectedHeaderOnly()) {
130
                if (array_key_exists($header, $protected)) {
131
                    $checker->checkHeader($protected[$header]);
132
                    $checkedHeaders[] = $header;
133
                } else {
134
                    throw new \InvalidArgumentException(sprintf('The header "%s" must be protected.', $header));
135
                }
136
            } else {
137
                if (array_key_exists($header, $protected)) {
138
                    $checker->checkHeader($protected[$header]);
139
                    $checkedHeaders[] = $header;
140
                } elseif (array_key_exists($header, $headers)) {
141
                    $checker->checkHeader($headers[$header]);
142
                    $checkedHeaders[] = $header;
143
                }
144
            }
145
        }
146
147
        if (array_key_exists('crit', $protected)) {
148
            if (!is_array($protected['crit'])) {
149
                throw new \InvalidArgumentException('The header "crit" mus be a list of header parameters.');
150
            }
151
            $diff = array_diff($protected['crit'], $checkedHeaders);
152
            if (!empty($diff)) {
153
                throw new \InvalidArgumentException(sprintf('One or more headers are marked as critical, but they are missing or have not been checked: %s.', implode(', ', array_values($diff))));
154
            }
155
        } elseif (array_key_exists('crit', $headers)) {
156
            throw new \InvalidArgumentException('The header parameter "crit" must be protected.');
157
        }
158
    }
159
}
160