webauthn/src/Modules/Application/Component/d3_webauthn_UserComponent.php

<?php

/**
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 *
 * https://www.d3data.de
 *
 * @copyright (C) D3 Data Development (Inh. Thomas Dartsch)
 * @author    D3 Data Development - Daniel Seifert <info@shopmodule.com>
 * @link      https://www.oxidmodule.com
 */

declare(strict_types=1);

namespace D3\Webauthn\Modules\Application\Component;

use D3\TestingTools\Production\IsMockable;
use D3\Webauthn\Application\Model\Exceptions\WebauthnGetException;
use D3\Webauthn\Application\Model\Exceptions\WebauthnLoginErrorException;
use D3\Webauthn\Application\Model\Webauthn;
use D3\Webauthn\Application\Model\WebauthnConf;
use D3\Webauthn\Application\Model\WebauthnLogin;
use D3\Webauthn\Modules\Application\Model\d3_User_Webauthn;
use Doctrine\DBAL\Driver\Exception as DoctrineDriverException;
use Doctrine\DBAL\Exception;
use OxidEsales\Eshop\Application\Model\User;
use OxidEsales\Eshop\Core\Config;
use OxidEsales\Eshop\Core\Request;
use OxidEsales\Eshop\Core\Session;
use OxidEsales\Eshop\Core\Utils;
use OxidEsales\Eshop\Core\UtilsView;
use Psr\Container\ContainerExceptionInterface;
use Psr\Container\NotFoundExceptionInterface;

class d3_webauthn_UserComponent extends d3_webauthn_UserComponent_parent
{
    use IsMockable;

    /**
     * @return string
     * @throws ContainerExceptionInterface
     * @throws Exception
     * @throws NotFoundExceptionInterface
     * @throws DoctrineDriverException
     */
    public function login()
    {
        $this->d3WebauthnLogin();

        return $this->d3CallMockableFunction([d3_webauthn_UserComponent_parent::class, 'login']);
    }

    /**
     * @return void
     * @throws DoctrineDriverException
     * @throws Exception
     */
    public function d3WebauthnLogin(): void
    {
        $lgn_user = d3GetOxidDIC()->get('d3ox.webauthn.'.Request::class)->getRequestParameter('lgn_usr');
        /** @var d3_User_Webauthn $user */
        $user = d3GetOxidDIC()->get('d3ox.webauthn.'.User::class);
        $userId = $user->d3GetLoginUserId($lgn_user);

        if ($this->d3CanUseWebauthn($lgn_user, $userId)) {
            if ($this->d3HasWebauthnButNotLoggedin($userId)) {
                $session = d3GetOxidDIC()->get('d3ox.webauthn.'.Session::class);
                $session->setVariable(
                    WebauthnConf::WEBAUTHN_SESSION_CURRENTCLASS,
                    $this->getClassKey() != 'd3webauthnlogin' ? $this->getClassKey() : 'start'
                );
                $session->setVariable(
                    WebauthnConf::WEBAUTHN_SESSION_CURRENTUSER,
                    $userId
                );
                $session->setVariable(
                    WebauthnConf::WEBAUTHN_SESSION_NAVPARAMS,
                    $this->getParent()->getNavigationParams()
                );
                $session->setVariable(
                    WebauthnConf::WEBAUTHN_SESSION_NAVFORMPARAMS,
                    $this->getParent()->getViewConfig()->getNavFormParams()
                );

                $sUrl = d3GetOxidDIC()->get('d3ox.webauthn.'.Config::class)->getShopHomeUrl() . 'cl=d3webauthnlogin';
                d3GetOxidDIC()->get('d3ox.webauthn.'.Utils::class)->redirect($sUrl);
            }
        }
    }

    /**
     * @param             $lgn_user
     * @param string|null $userId
     *
     * @return bool
     */
    protected function d3CanUseWebauthn($lgn_user, ?string $userId): bool
    {
        $password = d3GetOxidDIC()->get('d3ox.webauthn.'.Request::class)->getRequestParameter('lgn_pwd');

        return $lgn_user &&
            $userId &&
            false === d3GetOxidDIC()->get('d3ox.webauthn.'.Session::class)
                ->hasVariable(WebauthnConf::WEBAUTHN_SESSION_AUTH) &&
            (! strlen(trim((string) $password)));
    }

    /**
     * @param $userId
     * @return bool
     * @throws DoctrineDriverException
     * @throws Exception
     */
    protected function d3HasWebauthnButNotLoggedin($userId): bool
    {
        $webauthn = d3GetOxidDIC()->get(Webauthn::class);

        return $webauthn->isActive($userId)
            && !d3GetOxidDIC()->get('d3ox.webauthn.'.Session::class)
                ->getVariable(WebauthnConf::WEBAUTHN_SESSION_AUTH);
    }

    /**
     * @return void
     */
    public function d3CancelWebauthnLogin(): void
    {
        $this->d3WebauthnClearSessionVariables();
    }

    /**
     * @return void
     */
    public function d3WebauthnClearSessionVariables(): void
    {
        $session = d3GetOxidDIC()->get('d3ox.webauthn.'.Session::class);
        $session->deleteVariable(WebauthnConf::WEBAUTHN_SESSION_CURRENTCLASS);
        $session->deleteVariable(WebauthnConf::WEBAUTHN_SESSION_CURRENTUSER);
        $session->deleteVariable(WebauthnConf::WEBAUTHN_SESSION_NAVFORMPARAMS);
        $session->deleteVariable(WebauthnConf::WEBAUTHN_LOGIN_OBJECT);
    }

    /**
     * @return void
     */
    public function d3AssertAuthn(): void
    {
        try {
            $login = $this->d3GetWebauthnLogin();
            $login->frontendLogin(
                $this,
                (bool)d3GetOxidDIC()->get('d3ox.webauthn.'.Request::class)->getRequestParameter('lgn_cook')
            );
            $this->_afterLogin($this->getUser());
        } catch (WebauthnGetException $e) {
            d3GetOxidDIC()->get('d3ox.webauthn.'.UtilsView::class)->addErrorToDisplay($e);
        } catch (WebauthnLoginErrorException $e) {
        }
    }

    /**
     * @return WebauthnLogin
     */
    protected function d3GetWebauthnLogin(): WebauthnLogin
    {
        /** @var Request $request */
        $request = d3GetOxidDIC()->get('d3ox.webauthn.'.Request::class);

        return oxNew(
            WebauthnLogin::class,
            $request->getRequestEscapedParameter('credential'),
            $request->getRequestEscapedParameter('error')
        );
    }
}