tao-test/app/tao/models/classes/security/xsrf/TokenStoreKeyValue.php

148 lines
4.0 KiB
PHP

<?php
/**
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU General Public License
* as published by the Free Software Foundation; under version 2
* of the License (non-upgradable).
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
*
* Copyright (c) 2018 (original work) Open Assessment Technologies SA ;
*/
namespace oat\tao\model\security\xsrf;
use common_persistence_KeyValuePersistence;
use common_persistence_AdvKeyValuePersistence;
use oat\generis\persistence\PersistenceManager;
use oat\oatbox\service\ConfigurableService;
use oat\oatbox\session\SessionService;
/**
* Class to store tokens in a key value storage
*
* @author Martijn Swinkels <m.swinkels@taotesting.com>
*/
class TokenStoreKeyValue extends ConfigurableService implements TokenStore
{
const OPTION_PERSISTENCE = 'persistence';
const TOKENS_STORAGE_KEY = 'tao_tokens';
/**
* @var common_persistence_KeyValuePersistence
*/
private $persistence;
/**
* @var null|string
*/
private $keyPrefix = null;
/**
* @return common_persistence_AdvKeyValuePersistence
*/
protected function getPersistence(): common_persistence_AdvKeyValuePersistence
{
if ($this->persistence === null) {
$persistenceManager = $this->getServiceLocator()->get(PersistenceManager::SERVICE_ID);
$persistence = $persistenceManager->getPersistenceById($this->getOption(self::OPTION_PERSISTENCE));
if (!$persistence instanceof common_persistence_AdvKeyValuePersistence) {
throw new \common_exception_Error('TokenStoreKeyValue expects advanced key value persistence implementation.');
}
$this->persistence = $persistence;
}
return $this->persistence;
}
/**
* @return string
* @throws \common_exception_Error
*/
protected function getKey()
{
if ($this->keyPrefix === null) {
$user = $this->getServiceLocator()->get(SessionService::SERVICE_ID)->getCurrentUser();
$this->keyPrefix = $user->getIdentifier() . '_' . static::TOKENS_STORAGE_KEY;
}
return $this->keyPrefix;
}
/**
* {@inheritDoc}
*/
public function getToken(string $tokenId): ?Token
{
if (!$this->hasToken($tokenId)) {
return null;
}
$token = $this->getPersistence()->hGet($this->getKey(), $tokenId);
return new Token(json_decode($token, true));
}
/**
* {@inheritDoc}
*/
public function setToken(string $tokenId, Token $token): void
{
$this->getPersistence()->hSet($this->getKey(), $tokenId, json_encode($token));
}
/**
* {@inheritDoc}
*/
public function hasToken(string $tokenId): bool
{
return $this->getPersistence()->hExists($this->getKey(), $tokenId);
}
/**
* {@inheritDoc}
*/
public function removeToken(string $tokenId): bool
{
if (!$this->hasToken($tokenId)) {
return false;
}
return $this->getPersistence()->hDel($this->getKey(), $tokenId);
}
/**
* {@inheritDoc}
*/
public function clear(): void
{
$this->getPersistence()->del($this->getKey());
}
/**
* {@inheritDoc}
*/
public function getAll(): array
{
$tokens = [];
$tokensData = $this->getPersistence()->hGetAll($this->getKey());
if (!is_array($tokensData)) {
return $tokens;
}
foreach ($tokensData as $tokenData) {
$tokens[] = new Token(json_decode($tokenData, true));
}
return $tokens;
}
}