immense/php-macaroons

View on GitHub
lib/Macaroons/Verifier.php

Summary

Maintainability
A
2 hrs
Test Coverage

Method verifyThirdPartyCaveat has 26 lines of code (exceeds 25 allowed). Consider refactoring.
Open

  private function verifyThirdPartyCaveat(Caveat $caveat, Macaroon $rootMacaroon, Array $dischargeMacaroons)
  {
    $caveatMet = false;

    $dischargesMatchingCaveat = array_filter($dischargeMacaroons, function($discharge) use ($rootMacaroon, $caveat) {
Severity: Minor
Found in lib/Macaroons/Verifier.php - About 1 hr to fix

    Function verifyCaveats has a Cognitive Complexity of 9 (exceeds 5 allowed). Consider refactoring.
    Open

      private function verifyCaveats(Macaroon $macaroon, Array $dischargeMacaroons = array())
      {
        foreach ($macaroon->getCaveats() as $caveat)
        {
          $caveatMet = false;
    Severity: Minor
    Found in lib/Macaroons/Verifier.php - About 55 mins to fix

    Cognitive Complexity

    Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

    A method's cognitive complexity is based on a few simple rules:

    • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
    • Code is considered more complex for each "break in the linear flow of the code"
    • Code is considered more complex when "flow breaking structures are nested"

    Further reading

    Function verifyFirstPartyCaveat has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.
    Open

      private function verifyFirstPartyCaveat(Caveat $caveat)
      {
        $caveatMet = false;
        if (in_array($caveat->getCaveatId(), $this->predicates))
          $caveatMet = true;
    Severity: Minor
    Found in lib/Macaroons/Verifier.php - About 45 mins to fix

    Cognitive Complexity

    Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

    A method's cognitive complexity is based on a few simple rules:

    • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
    • Code is considered more complex for each "break in the linear flow of the code"
    • Code is considered more complex when "flow breaking structures are nested"

    Further reading

    Missing class import via use statement (line '73', column '17').
    Open

          throw new \InvalidArgumentException('Callback must be a function');
    Severity: Minor
    Found in lib/Macaroons/Verifier.php by phpmd

    MissingImport

    Since: 2.7.0

    Importing all external classes in a file through use statements makes them clearly visible.

    Example

    function make() {
        return new \stdClass();
    }

    Source http://phpmd.org/rules/cleancode.html#MissingImport

    Missing class import via use statement (line '57', column '17').
    Open

          throw new \InvalidArgumentException('Must provide predicate');
    Severity: Minor
    Found in lib/Macaroons/Verifier.php by phpmd

    MissingImport

    Since: 2.7.0

    Importing all external classes in a file through use statements makes them clearly visible.

    Example

    function make() {
        return new \stdClass();
    }

    Source http://phpmd.org/rules/cleancode.html#MissingImport

    Missing class import via use statement (line '71', column '17').
    Open

          throw new \InvalidArgumentException('Must provide a callback function');
    Severity: Minor
    Found in lib/Macaroons/Verifier.php by phpmd

    MissingImport

    Since: 2.7.0

    Importing all external classes in a file through use statements makes them clearly visible.

    Example

    function make() {
        return new \stdClass();
    }

    Source http://phpmd.org/rules/cleancode.html#MissingImport

    Avoid using static access to class 'Macaroons\Utils' in method 'verifyDischarge'.
    Open

        $signature = Utils::unhexlify($macaroon->getSignature());
    Severity: Minor
    Found in lib/Macaroons/Verifier.php by phpmd

    StaticAccess

    Since: 1.4.0

    Static access causes unexchangeable dependencies to other classes and leads to hard to test code. Avoid using static access at all costs and instead inject dependencies through the constructor. The only case when static access is acceptable is when used for factory methods.

    Example

    class Foo
    {
        public function bar()
        {
            Bar::baz();
        }
    }

    Source https://phpmd.org/rules/cleancode.html#staticaccess

    Avoid using static access to class 'Macaroons\Utils' in method 'verifyFirstPartyCaveat'.
    Open

          $this->calculatedSignature = Utils::signFirstPartyCaveat($this->calculatedSignature, $caveat->getCaveatId());
    Severity: Minor
    Found in lib/Macaroons/Verifier.php by phpmd

    StaticAccess

    Since: 1.4.0

    Static access causes unexchangeable dependencies to other classes and leads to hard to test code. Avoid using static access at all costs and instead inject dependencies through the constructor. The only case when static access is acceptable is when used for factory methods.

    Example

    class Foo
    {
        public function bar()
        {
            Bar::baz();
        }
    }

    Source https://phpmd.org/rules/cleancode.html#staticaccess

    Avoid using static access to class 'Macaroons\Utils' in method 'verifyDischarge'.
    Open

          $this->calculatedSignature = $rootMacaroon->bindSignature(strtolower(Utils::hexlify($this->calculatedSignature)));
    Severity: Minor
    Found in lib/Macaroons/Verifier.php by phpmd

    StaticAccess

    Since: 1.4.0

    Static access causes unexchangeable dependencies to other classes and leads to hard to test code. Avoid using static access at all costs and instead inject dependencies through the constructor. The only case when static access is acceptable is when used for factory methods.

    Example

    class Foo
    {
        public function bar()
        {
            Bar::baz();
        }
    }

    Source https://phpmd.org/rules/cleancode.html#staticaccess

    The method verifyFirstPartyCaveat uses an else expression. Else clauses are basically not necessary and you can simplify the code by not using them.
    Open

        {
          foreach ($this->callbacks as $callback)
          {
            if ($callback($caveat->getCaveatId()))
              $caveatMet = true;
    Severity: Minor
    Found in lib/Macaroons/Verifier.php by phpmd

    ElseExpression

    Since: 1.4.0

    An if expression with an else branch is basically not necessary. You can rewrite the conditions in a way that the else clause is not necessary and the code becomes simpler to read. To achieve this, use early return statements, though you may need to split the code it several smaller methods. For very simple assignments you could also use the ternary operations.

    Example

    class Foo
    {
        public function bar($flag)
        {
            if ($flag) {
                // one branch
            } else {
                // another branch
            }
        }
    }

    Source https://phpmd.org/rules/cleancode.html#elseexpression

    Avoid using static access to class 'Macaroons\Utils' in method 'verifyThirdPartyCaveat'.
    Open

          $this->calculatedSignature = Utils::signThirdPartyCaveat(
                                                                    $this->calculatedSignature,
                                                                    $caveat->getVerificationId(),
                                                                    $caveat->getCaveatId()
                                                                  );
    Severity: Minor
    Found in lib/Macaroons/Verifier.php by phpmd

    StaticAccess

    Since: 1.4.0

    Static access causes unexchangeable dependencies to other classes and leads to hard to test code. Avoid using static access at all costs and instead inject dependencies through the constructor. The only case when static access is acceptable is when used for factory methods.

    Example

    class Foo
    {
        public function bar()
        {
            Bar::baz();
        }
    }

    Source https://phpmd.org/rules/cleancode.html#staticaccess

    Avoid using static access to class 'Macaroons\Utils' in method 'verify'.
    Open

        $key = Utils::generateDerivedKey($key);
    Severity: Minor
    Found in lib/Macaroons/Verifier.php by phpmd

    StaticAccess

    Since: 1.4.0

    Static access causes unexchangeable dependencies to other classes and leads to hard to test code. Avoid using static access at all costs and instead inject dependencies through the constructor. The only case when static access is acceptable is when used for factory methods.

    Example

    class Foo
    {
        public function bar()
        {
            Bar::baz();
        }
    }

    Source https://phpmd.org/rules/cleancode.html#staticaccess

    Avoid using static access to class 'Macaroons\Utils' in method 'verifyDischarge'.
    Open

        $this->calculatedSignature = Utils::hmac($key, $macaroon->getIdentifier());
    Severity: Minor
    Found in lib/Macaroons/Verifier.php by phpmd

    StaticAccess

    Since: 1.4.0

    Static access causes unexchangeable dependencies to other classes and leads to hard to test code. Avoid using static access at all costs and instead inject dependencies through the constructor. The only case when static access is acceptable is when used for factory methods.

    Example

    class Foo
    {
        public function bar()
        {
            Bar::baz();
        }
    }

    Source https://phpmd.org/rules/cleancode.html#staticaccess

    Avoid using static access to class 'Macaroons\Utils' in method 'extractCaveatKey'.
    Open

        $key              = Utils::truncateOrPad($signature);
    Severity: Minor
    Found in lib/Macaroons/Verifier.php by phpmd

    StaticAccess

    Since: 1.4.0

    Static access causes unexchangeable dependencies to other classes and leads to hard to test code. Avoid using static access at all costs and instead inject dependencies through the constructor. The only case when static access is acceptable is when used for factory methods.

    Example

    class Foo
    {
        public function bar()
        {
            Bar::baz();
        }
    }

    Source https://phpmd.org/rules/cleancode.html#staticaccess

    Avoid excessively long variable names like $caveatMacaroonVerifier. Keep variable name length under 20.
    Open

        $caveatMacaroonVerifier = new Verifier();
    Severity: Minor
    Found in lib/Macaroons/Verifier.php by phpmd

    LongVariable

    Since: 0.2

    Detects when a field, formal or local variable is declared with a long name.

    Example

    class Something {
        protected $reallyLongIntName = -3; // VIOLATION - Field
        public static function main( array $interestingArgumentsList[] ) { // VIOLATION - Formal
            $otherReallyLongName = -5; // VIOLATION - Local
            for ($interestingIntIndex = 0; // VIOLATION - For
                 $interestingIntIndex < 10;
                 $interestingIntIndex++ ) {
            }
        }
    }

    Source https://phpmd.org/rules/naming.html#longvariable

    Avoid excessively long variable names like $dischargesMatchingCaveat. Keep variable name length under 20.
    Open

        $dischargesMatchingCaveat = array_filter($dischargeMacaroons, function($discharge) use ($rootMacaroon, $caveat) {
    Severity: Minor
    Found in lib/Macaroons/Verifier.php by phpmd

    LongVariable

    Since: 0.2

    Detects when a field, formal or local variable is declared with a long name.

    Example

    class Something {
        protected $reallyLongIntName = -3; // VIOLATION - Field
        public static function main( array $interestingArgumentsList[] ) { // VIOLATION - Formal
            $otherReallyLongName = -5; // VIOLATION - Local
            for ($interestingIntIndex = 0; // VIOLATION - For
                 $interestingIntIndex < 10;
                 $interestingIntIndex++ ) {
            }
        }
    }

    Source https://phpmd.org/rules/naming.html#longvariable

    Avoid variables with short names like $a. Configured minimum length is 3.
    Open

      private function signaturesMatch($a, $b)
    Severity: Minor
    Found in lib/Macaroons/Verifier.php by phpmd

    ShortVariable

    Since: 0.2

    Detects when a field, local, or parameter has a very short name.

    Example

    class Something {
        private $q = 15; // VIOLATION - Field
        public static function main( array $as ) { // VIOLATION - Formal
            $r = 20 + $this->q; // VIOLATION - Local
            for (int $i = 0; $i < 10; $i++) { // Not a Violation (inside FOR)
                $r += $this->q;
            }
        }
    }

    Source https://phpmd.org/rules/naming.html#shortvariable

    Avoid variables with short names like $b. Configured minimum length is 3.
    Open

      private function signaturesMatch($a, $b)
    Severity: Minor
    Found in lib/Macaroons/Verifier.php by phpmd

    ShortVariable

    Since: 0.2

    Detects when a field, local, or parameter has a very short name.

    Example

    class Something {
        private $q = 15; // VIOLATION - Field
        public static function main( array $as ) { // VIOLATION - Formal
            $r = 20 + $this->q; // VIOLATION - Local
            for (int $i = 0; $i < 10; $i++) { // Not a Violation (inside FOR)
                $r += $this->q;
            }
        }
    }

    Source https://phpmd.org/rules/naming.html#shortvariable

    There are no issues that match your filters.

    Category
    Status