Zemit\Modules\Oauth2\Controllers\FacebookController

Complexity

Total Complexity

11

Size/Duplication

Total Lines	101
Duplicated Lines	0 %

Test Coverage

Coverage

0%

Importance

Changes	2
Bugs	0	Features	0

7 Methods

Rating	Name	Duplication	Size	Complexity
A	getAccessToken()	0	4	1
A	getResourceOwner()	0	4	1
A	authorizationUrlAction()	0	7	2
A	callbackAction()	0	6	2
A	validateState()	0	9	3
A	getLongLivedAccessToken()	0	3	1
A	refreshToken()	0	4	1

<?php
/**
 * This file is part of the Zemit Framework.
 *
 * (c) Zemit Team <contact@zemit.com>
 *
 * For the full copyright and license information, please view the LICENSE.txt
 * file that was distributed with this source code.
 */

namespace Zemit\Modules\Oauth2\Controllers;

use League\OAuth2\Client\Grant\RefreshToken;
use League\OAuth2\Client\Provider\Facebook;
use League\OAuth2\Client\Provider\ResourceOwnerInterface;

/**
 * Class FacebookController
 *
 * @property Facebook $oauth2Facebook
 * @package Zemit\Modules\Oauth2\Controllers
 */
class FacebookController extends AbstractController
{
    const DEFAULT_SCOPE = 'email';
    
    public string $sessionKey = 'oauth2-facebook-state';
    
    /**
     * Redirect to Authorization Url
     *
     * @param null $scope

Are you sure the doc-type for parameter $scope is correct as it would always require null to be passed?

     *
     * @return \Phalcon\Http\ResponseInterface
     */
    public function authorizationUrlAction($scope = null)
    {
        $redirectUrl = $this->oauth2Facebook->getAuthorizationUrl([
            'scope' => explode(',', $scope ?: $this->request->get('scope', 'string', self::DEFAULT_SCOPE))

$scope is of type null, thus it always evaluated to false.

        ]);
        $this->session->set($this->sessionKey, $this->oauth2Facebook->getState());
        return $this->response->redirect($redirectUrl);
    }
    
    /**
     *
     */
    public function callbackAction() {
        
        if ($this->validateState()) {
            $accessToken = $this->getAccessToken();
            $longLivedAccessToken = $this->getLongLivedAccessToken($accessToken);

The assignment to $longLivedAccessToken is dead and can be removed.

            $resourceOwner = $this->getResourceOwner($accessToken);

The assignment to $resourceOwner is dead and can be removed.

            
//            $resourceOwner->toArray();
//            $session = $this->identity->getSession();
//            $session->setUserId();
        }
    }
    
    /**
     * Validate State
     *
     * @param null $state

Are you sure the doc-type for parameter $state is correct as it would always require null to be passed?

     *
     * @return bool
     */
    public function validateState($state = null)
    {
        $state ??= $this->request->get('state', 'string');
        
        if (empty($state) || !$this->session->has($this->sessionKey)) {
            return false;
        }
        
        return $state === $this->session->get($this->sessionKey);
    }
    
    /**
     * Get Access Token
     *
     * @param null $code

Are you sure the doc-type for parameter $code is correct as it would always require null to be passed?

     *
     * @return mixed
     */
    public function getAccessToken($code = null)
    {
        $code ??= $this->request->get('code', 'string');
        return $this->oauth2Facebook->getAccessToken('authorization_code', ['code' => $code]);
    }
    
    /**
     * @param null $shortLivedAccessToken

Are you sure the doc-type for parameter $shortLivedAccessToken is correct as it would always require null to be passed?

     *
     * @return mixed
     */
    public function getLongLivedAccessToken($shortLivedAccessToken = null)
    {
        return $this->oauth2Facebook->getLongLivedAccessToken($shortLivedAccessToken);
    }
    
    /**
     * Refresh Token
     *
     * @param null $code

Are you sure the doc-type for parameter $code is correct as it would always require null to be passed?

     *
     * @return mixed
     */
    public function refreshToken($refreshToken = null)
    {
        $refreshToken ??= $this->request->get('refreshToken', 'string');
        return $this->oauth2Facebook->getAccessToken(new RefreshToken(), ['code' => $refreshToken]);
    }
    
    /**
     * @param null $token

Are you sure the doc-type for parameter $token is correct as it would always require null to be passed?

     *
     * @return ResourceOwnerInterface
     */
    public function getResourceOwner($token = null)
    {
        $token ??= $this->getAccessToken();
        return $this->oauth2Facebook->getResourceOwner($token);
    }
}