Ynlo\GraphQLBundle\GraphiQL\LexikJWTGraphiQLAuthenticator

Complexity

Total Complexity

13

Size/Duplication

Total Lines	136
Duplicated Lines	0 %

Test Coverage

Coverage

0%

Importance

Changes

0

8 Methods

Rating	Name	Duplication	Size	Complexity
A	isAuthenticated()	0	3	2
A	logout()	0	3	1
A	buildUserForm()	0	15	1
A	__construct()	0	9	1
A	prepareRequest()	0	8	2
A	requireUserData()	0	3	1
A	setConfig()	0	3	1
A	login()	0	17	4

<?php
/*******************************************************************************
 *  This file is part of the GraphQL Bundle package.
 *
 *  (c) YnloUltratech <support@ynloultratech.com>
 *
 *  For the full copyright and license information, please view the LICENSE
 *  file that was distributed with this source code.
 ******************************************************************************/

namespace Ynlo\GraphQLBundle\GraphiQL;

use Lexik\Bundle\JWTAuthenticationBundle\Services\JWTTokenManagerInterface;
use Symfony\Component\Form\Extension\Core\Type\PasswordType;
use Symfony\Component\Form\FormBuilderInterface;
use Symfony\Component\Form\FormInterface;
use Symfony\Component\HttpFoundation\Session\Session;
use Symfony\Component\Security\Core\Encoder\EncoderFactoryInterface;
use Symfony\Component\Security\Core\Encoder\UserPasswordEncoderInterface;
use Symfony\Component\Security\Core\User\UserProviderInterface;

class LexikJWTGraphiQLAuthenticator implements GraphiQLAuthenticationProviderInterface
{
    private const SESSION_PATH = 'graphiql_jwt_api_token';

    /**
     * @var EncoderFactoryInterface
     */
    private $encoder;

    /**
     * @var UserProviderInterface
     */
    private $userProvider;

    /**
     * @var JWTTokenManagerInterface
     */
    private $jwtTokenManager;

    /**
     * @var Session
     */
    private $session;

    /**
     * @var array
     */
    private $config = [];

    /**
     * LexikJWTGraphiQLAuthenticator constructor.
     *
     * @param UserPasswordEncoderInterface $encoder
     * @param UserProviderInterface        $userProvider
     * @param JWTTokenManagerInterface     $jwtTokenManager
     * @param Session                      $session
     */
    public function __construct(UserPasswordEncoderInterface $encoder, UserProviderInterface $userProvider, JWTTokenManagerInterface $jwtTokenManager, Session $session)
    {
        $this->encoder = $encoder;

It seems like $encoder of type Symfony\Component\Security\Core\Encoder\UserPasswordEncoderInterface is incompatible with the declared type Symfony\Component\Security\Core\Encoder\EncoderFactoryInterface of property $encoder.

        $this->userProvider = $userProvider;
        $this->jwtTokenManager = $jwtTokenManager;
        $this->session = $session;
        $this->config = [
            'username_label' => 'Username',
            'password_label' => 'Password',
        ];
    }

    /**
     * @param array $config
     */
    public function setConfig(array $config): void
    {
        $this->config = array_merge($this->config, $config);
    }

    /**
     * @inheritDoc
     */
    public function requireUserData(): bool
    {
        return true;
    }

    /**
     * @inheritDoc
     */
    public function buildUserForm(FormBuilderInterface $builder)
    {
        $builder
            ->add(
                'username',
                null,
                [
                    'label' => $this->config['username_label'],
                ]
            )
            ->add(
                'password',
                PasswordType::class,
                [
                    'label' => $this->config['password_label'],
                ]
            );
    }

    /**
     * @inheritDoc
     */
    public function login(?FormInterface $form = null)
    {
        if (!$form) {
            throw new \RuntimeException('This provider require a form');
        }

        $username = $form->get('username')->getData();
        $password = $form->get('password')->getData();

        $user = $this->userProvider->loadUserByUsername($username);
        if (!$user || !$this->encoder->isPasswordValid($user, $password)) {

The method isPasswordValid() does not exist on Symfony\Component\Security\Core\Encoder\EncoderFactoryInterface.

$user is of type Symfony\Component\Security\Core\User\UserInterface, thus it always evaluated to true.

            throw new AuthenticationFailedException();
        }

        $token = $this->jwtTokenManager->create($user);

        $this->session->set(self::SESSION_PATH, $token);
    }

    /**
     * @inheritDoc
     */
    public function logout()
    {
        $this->session->remove(self::SESSION_PATH);
    }

    /**
     * @inheritDoc
     */
    public function isAuthenticated(): bool
    {
        return $this->session->has(self::SESSION_PATH) && $this->session->get(self::SESSION_PATH);
    }

    /**
     * @inheritDoc
     */
    public function prepareRequest(GraphiQLRequest $request)
    {
        $token = null;
        if ($this->isAuthenticated()) {
            $token = $this->session->get(self::SESSION_PATH);
        }

        $request->addHeader('Authorization', sprintf('Bearer %s', $token));
    }
}