Ynlo\GraphQLBundle\GraphiQL\JWTGraphiQLAuthentication::login()

Complexity

Conditions	16
Paths	73

Size

Total Lines	82
Code Lines	50

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php
    public function login(?FormInterface $form = null)
    {
        if (!$form) {
            throw new \RuntimeException('This provider require a form');
        }

        $url = $this->config['login']['url'] ?? null;
        if ($this->router->getRouteCollection()->get($url)) {
            $url = $this->router->generate($url, [], Router::ABSOLUTE_URL);
        }

        $opts = [
            CURLOPT_CONNECTTIMEOUT => 10,
            CURLOPT_RETURNTRANSFER => true,
            CURLOPT_HEADER => true,
            CURLOPT_TIMEOUT => 60,
            CURLOPT_HTTPHEADER => [],
        ];

        $paramsIn = $this->config['login']['parameters_in'] ?? 'form';
        if ('header' === $paramsIn) {
            $opts[CURLOPT_HEADER] = true;
            $headers = [];
            foreach ($form->getData() as $key => $value) {
                $headers[] = sprintf('%s: %s', $key, $value);
            }
            $opts[CURLOPT_HTTPHEADER] = array_merge(["Accept: application/json"], $headers);
        } elseif ('query' === $paramsIn) {
            $url .= '?'.http_build_query($form->getData(), null, '&');
        } else {
            $opts[CURLOPT_POSTFIELDS] = http_build_query($form->getData(), null, '&');
            $opts[CURLOPT_POST] = true;
        }

        $opts[CURLOPT_URL] = $url;

        $ch = curl_init();
        curl_setopt_array($ch, $opts);
        $result = curl_exec($ch);

        // Split the HTTP response into header and body.
        try {
            list($headers, $body) = explode("\r\n\r\n", $result);
            $headers = explode("\r\n", $headers);

$headers of type array|string[] is incompatible with the type string expected by parameter $string of explode().

        } catch (\ErrorException $exception) {
            throw new AuthenticationFailedException('Authentication Failed');
        }

        // We catch HTTP/1.1 4xx or HTTP/1.1 5xx error response.
        if (strpos($headers[0], 'HTTP/1.1 4') !== false || strpos($headers[0], 'HTTP/1.1 5') !== false) {
            $result = [
                'code' => 0,
                'message' => '',
            ];

            if (preg_match('/^HTTP\/1.1 ([0-9]{3,3}) (.*)$/', $headers[0], $matches)) {
                $result['code'] = $matches[1];
                $result['message'] = $matches[2];
            }

            // In case retrun with WWW-Authenticate replace the description.
            foreach ($headers as $header) {
                if (preg_match("/^WWW-Authenticate:.*error='(.*)'/", $header, $matches)) {
                    $result['message'] = $matches[1];
                }
            }

            throw new AuthenticationFailedException($result['message'] ?: 'Authentication Failed', $result['code'] ?: 401);
        }

        $tokenPath = $this->config['login']['response_token_path'] ?? 'token';
        $token = $body;

        if ($tokenPath) {
            $token = search($tokenPath, @json_decode($body));
        }

        if (!$token) {
            throw new AuthenticationFailedException('Authentication Failed');
        }

        $this->session->set(self::SESSION_PATH, $token);
    }