Lines
9.09%
1 / 11
Methods
50.00%
1 / 2
Classes
0.00%
0 / 1
| Name | Lines | Methods | CRAP | ||||
|---|---|---|---|---|---|---|---|
| __construct | 100.00% | 1 / 1 | 100.00% | 1 / 1 | 1 | ||
| validateCaptchaToken | 0.00% | 0 / 10 | 0.00% | 0 / 1 | 42 | ||
| 12 | class TokenValidationService | |
| 13 | { | |
| 14 | public const string TOKEN_VALID = 'valid'; | |
| 15 | public const string TOKEN_MISSING = 'missing'; | |
| 16 | public const string TOKEN_INVALID = 'invalid'; | |
| 17 | public const string TOKEN_EXPIRED = 'expired'; | |
| 18 | private string $captchaTokenSecret; | |
| 19 | ||
| 20 | public function __construct() | |
| 21 | { | |
| 22 | $this->captchaTokenSecret = \App::$CAPTCHA_TOKEN_SECRET; | |
| 23 | } | |
| 24 | ||
| 25 | public function validateCaptchaToken(?string $token): string | |
| 26 | { | |
| 27 | if (empty($token)) { | |
| 28 | return self::TOKEN_MISSING; | |
| 29 | } | |
| 30 | ||
| 31 | try { | |
| 32 | $payload = (array) JWT::decode($token, new Key($this->captchaTokenSecret, 'HS256')); | |
| 33 | if (empty($payload['ip']) || $payload['ip'] !== ClientIpHelper::getClientIp()) { | |
| 34 | return self::TOKEN_INVALID; | |
| 35 | } | |
| 36 | ||
| 37 | return self::TOKEN_VALID; | |
| 38 | } catch (ExpiredException $e) { | |
| 39 | return self::TOKEN_EXPIRED; | |
| 40 | } catch (\Exception $e) { | |
| 41 | return self::TOKEN_INVALID; | |
| 42 | } | |
| 43 | } | |
| 44 | } |