avalanche-development/swagger-validation-middleware

<?php

namespace AvalancheDevelopment\SwaggerValidationMiddleware;

use AvalancheDevelopment\Peel\HttpError;
use Psr\Http\Message\RequestInterface;

class SecurityCheck
{

    /**
     * @param RequestInterface $request
     * @param array $securitySchemes
     */
    public function checkSecurity(RequestInterface $request, array $securitySchemes)
    {
        $self = $this;
        $metSecurity = array_filter(
            $securitySchemes,
            function ($scheme) use ($self, $request) {
                return $self->checkScheme($request, $scheme);
            }
        );

        if (count($metSecurity) < 1) {
            throw new HttpError\Unauthorized('Unacceptable security passed in request');
        }
    }

    /**
     * @param RequestInterface $request
     * @param array $scheme
     * @return boolean
     */
    protected function checkScheme(RequestInterface $request, array $scheme)
    {
        if ($scheme['type'] === 'basic') {
            return $this->checkBasicScheme($request);
        } elseif ($scheme['type'] === 'oauth') {
            return $this->checkOAuthScheme($request, $scheme);
        }
        return false;
    }

    /**
     * @param RequestInterface $request
     * @return boolean
     */
    protected function checkBasicScheme(RequestInterface $request)
    {
        $authHeader = $request->getHeader('Authorization');
        $authHeader = current($authHeader);
        $authHeader = explode(' ', $authHeader);
        return ($authHeader[0] === 'Basic' && preg_match('/^[a-z0-9]+$/i', $authHeader[1]) === 1);
    }

    /**
     * @param RequestInterface $request
     * @param array $scheme
     * @return boolean
     */
    protected function checkOauthScheme(RequestInterface $request, array $scheme)
    {
        throw new \Exception('OAuth is not yet implemented');
    }
}