AuthController.php

Go to the documentation of this file.

<?php
/***************************************************************
 Copyright (C) 2018 Siemens AG
 Author: Gaurav Mishra <mishra.gaurav@siemens.com>

 This program is free software; you can redistribute it and/or
 modify it under the terms of the GNU General Public License
 version 2 as published by the Free Software Foundation.

 This program is distributed in the hope that it will be useful,
 but WITHOUT ANY WARRANTY; without even the implied warranty of
 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 GNU General Public License for more details.

 You should have received a copy of the GNU General Public License along
 with this program; if not, write to the Free Software Foundation, Inc.,
 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
 ***************************************************************/
namespace Fossology\UI\Api\Controllers;

use Psr\Http\Message\ServerRequestInterface;
use Psr\Http\Message\ResponseInterface;
use Fossology\UI\Api\Helper\RestHelper;
use Fossology\UI\Api\Models\Info;
use Fossology\UI\Api\Models\InfoType;
use Fossology\Lib\Exceptions\DuplicateTokenKeyException;
use Fossology\Lib\Exceptions\DuplicateTokenNameException;

class AuthController extends RestController
{

  public function getAuthHeaders($request, $response, $args)
  {
    $warningMessage = "The resource is deprecated. Use /tokens";
    $returnVal = new Info(406, $warningMessage, InfoType::ERROR);

    return $response->withHeader('Warning', $warningMessage)->withJson(
      $returnVal->getArray(), $returnVal->getCode());
  }

  public function createNewJwtToken($request, $response, $args)
  {
    $tokenRequestBody = $request->getParsedBody();
    $paramsRequired = [
      "username",
      "password",
      "token_name",
      "token_scope",
      "token_expire"
    ];
    $returnVal = null;

    if (! $this->arrayKeysExists($tokenRequestBody, $paramsRequired)) {
      $error = new Info(400,
        "Following parameters are required in the request body: " .
        join(",", $paramsRequired), InfoType::ERROR);
      $returnVal = $response->withJson($error->getArray(), $error->getCode());
    } else {
      $tokenValid = $this->restHelper->validateTokenRequest(
        $tokenRequestBody["token_expire"], $tokenRequestBody["token_name"],
        $tokenRequestBody["token_scope"]);
      if ($tokenValid !== true) {
        $returnVal = $response->withJson($tokenValid->getArray(),
          $tokenValid->getCode());
      } else {
        // Request is in correct format.
        $authHelper = $this->restHelper->getAuthHelper();
        if ($authHelper->checkUsernameAndPassword($tokenRequestBody["username"],
          $tokenRequestBody["password"])) {
          $userId = $this->restHelper->getUserId();
          $expire = $tokenRequestBody["token_expire"];
          $scope  = $tokenRequestBody["token_scope"];
          $name   = $tokenRequestBody["token_name"];
          $key    = bin2hex(
            openssl_random_pseudo_bytes(RestHelper::TOKEN_KEY_LENGTH / 2));
          try {
            $jti = $this->dbHelper->insertNewTokenKey($userId, $expire,
              RestHelper::SCOPE_DB_MAP[$scope], $name, $key);
          } catch (DuplicateTokenKeyException $e) {
            // Key already exists, try again.
            $key = bin2hex(
              openssl_random_pseudo_bytes(RestHelper::TOKEN_KEY_LENGTH / 2));
            try {
              $jti = $this->dbHelper->insertNewTokenKey($userId, $expire,
                RestHelper::SCOPE_DB_MAP[$scope], $name, $key);
            } catch (DuplicateTokenKeyException $e) {
              // New key also failed, give up!
              $error = new Info(429, "Please try again later.", InfoType::ERROR);
              $returnVal = $response->withHeader('Retry-After', 2)->withJson(
                $error->getArray(), $error->getCode());
            }
          } catch (DuplicateTokenNameException $e) {
            $error = new Info($e->getCode(), $e->getMessage(), InfoType::ERROR);
            $returnVal = $response->withJson($error->getArray(),
              $error->getCode());
          }
          if (isset($jti['jti']) && ! empty($jti['jti'])) {
            $theJwtToken = $this->restHelper->getAuthHelper()->generateJwtToken(
              $expire, $jti['created_on'], $jti['jti'], $scope, $key);
            $returnVal = $response->withJson([
              "Authorization" => "Bearer " . $theJwtToken
            ], 201);
          }
        } else {
          $error = new Info(404, "Username or password incorrect.",
            InfoType::ERROR);
          $returnVal = $response->withJson($error->getArray(), $error->getCode());
        }
      }
    }
    return $returnVal;
  }

  private function arrayKeysExists($array, $keys)
  {
    return !array_diff_key(array_flip($keys), $array);
  }
}