Yiisoft\Yii\Web\Auth\QueryParamAuth

Complexity

Total Complexity

5

Size/Duplication

Total Lines	35
Duplicated Lines	0 %

Test Coverage

Coverage

0%

Importance

Changes	1
Bugs	0	Features	0

4 Methods

Rating	Name	Duplication	Size	Complexity
A	authenticate()	0	8	2
A	challenge()	0	3	1
A	__construct()	0	3	1
A	setTokenParam()	0	3	1

<?php
namespace Yiisoft\Yii\Web\Auth;

use Psr\Http\Message\ResponseInterface;
use Psr\Http\Message\ServerRequestInterface;
use Yiisoft\Yii\Web\User\IdentityInterface;
use Yiisoft\Yii\Web\User\IdentityRepositoryInterface;

/**
 * QueryParamAuth supports the authentication based on the access token passed through a query parameter.
 */
final class QueryParamAuth implements AuthInterface
{
    private const TOKEN_PARAM = 'access-token';
    /**
     * @var string the parameter name for passing the access token
     */
    private $tokenParam = self::TOKEN_PARAM;
    /**
     * @var IdentityRepositoryInterface
     */
    private $identityRepository;

    public function __construct(IdentityRepositoryInterface $identityRepository)
    {
        $this->identityRepository = $identityRepository;
    }

    public function authenticate(ServerRequestInterface $request): ?IdentityInterface
    {
        $accessToken = $request->getQueryParams()[$this->tokenParam] ?? null;
        if (is_string($accessToken)) {
            return $this->identityRepository->findIdentityByToken($accessToken, get_class($this));
        }

        return null;
    }

    public function challenge(ResponseInterface $response): ResponseInterface
    {
        return $response;
    }

    public function setTokenParam(string $param): void
    {
        $this->tokenParam = $param;
    }
}