Zemit\Identity::getKeyToken()

Complexity

Conditions	9
Paths	14

Size

Total Lines	57
Code Lines	31

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	18
CRAP Score	16.6047

Importance

Changes	4
Bugs	1	Features	0

<?php
    public function getKeyToken(string $jwt = null, string $key = null, string $token = null): array
    {
        try {
            $json = $this->request->getJsonRawBody();
        } catch (\InvalidArgumentException $e) {
            $json = new \stdClass();
        }
        
        $refreshToken = $this->request->get('refreshToken', 'string', $json->refreshToken ?? null);
        $jwt ??= $this->request->get('jwt', 'string', $json->jwt ?? null);
        $key ??= $this->request->get('key', 'string', $this->store['key'] ?? $json->key ?? null);
        $token ??= $this->request->get('token', 'string', $this->store['token'] ?? $json->token ?? null);
        
        // Using provided key & token
        if (isset($key, $token)) {
            return [$key, $token];
        }
        
        // Using refresh token
        if (!empty($refreshToken)) {
            return $this->getKeyTokenFromClaimToken($refreshToken, $this->sessionKey . '-refresh');
        }
        
        // Using JWT
        if (!empty($jwt)) {
            return $this->getKeyTokenFromClaimToken($jwt, $this->sessionKey);
        }
        
        // Using X-Authorization Header
        $authorizationHeaderKey = $this->config->path('identity.authorizationHeader', 'Authorization');
        $authorizationHeaderValue = $this->request->getHeader($authorizationHeaderKey);
        $authorization = array_filter(explode(' ', $authorizationHeaderValue));
        if (!empty($authorization)) {
            return $this->getKeyTokenFromAuthorization($authorization);
        }
        
        // Using Basic Auth from HTTP request
        $basicAuth = $this->request->getBasicAuth();
        if (!empty($basicAuth)) {
            return [
                $basicAuth['username'] ?? null,
                $basicAuth['password'] ?? null,
            ];
        }
        
        // Using Session Fallback
        $sessionFallback = $this->config->path('identity.sessionFallback', false);
        if ($sessionFallback && $this->session->has($this->sessionKey)) {
            $sessionStore = $this->session->get($this->sessionKey);
            return [
                $sessionStore['key'] ?? null,
                $sessionStore['token'] ?? null,
            ];
        }
        
        // Unsupported authorization method
        return [null, null];
    }