updated plugin AuthLDAP version 2.5.9

wp-content/plugins/authldap/src/LdapUri.php

@@ -1,7 +1,5 @@
 <?php
 
-declare(strict_types=1);
-
 /**
  * Copyright (c) Andreas Heigl<andreas@heigl.org>
  * Permission is hereby granted, free of charge, to any person obtaining a copy
@@ -27,46 +25,155 @@ declare(strict_types=1);
  * @link      http://github.com/heiglandreas/authLDAP
  */
 
+declare(strict_types=1);
+
 namespace Org_Heigl\AuthLdap;
 
 use Org_Heigl\AuthLdap\Exception\InvalidLdapUri;
+
+use function array_map;
+use function error_get_last;
 use function getenv;
-use function preg_replace;
-use function urlencode;
+use function is_array;
+use function is_string;
+use function parse_url;
+use function preg_replace_callback;
+use function rawurlencode;
+use function strlen;
+use function strpos;
+use function substr;
+use function trim;
+use function urldecode;
 
 final class LdapUri
 {
-    private $uri;
+	private $server;
 
-    private function __construct(string $uri)
-    {
-        if (! preg_match('/^(ldap|ldaps|env)/', $uri)) {
-            throw InvalidLdapUri::fromLdapUriString($uri);
-        }
-        $this->uri = $uri;
-    }
+	private $scheme;
 
-    public static function fromString(string $uri): LdapUri
-    {
-        return new LdapUri($uri);
-    }
+	private $port = 389;
 
-    public function toString(): string
-    {
-        $uri = $this->uri;
-        if (0 === strpos($uri, 'env:')) {
-            $uri = getenv(substr($this->uri, 4));
-        }
+	private string $baseDn;
 
-        $uri = preg_replace_callback('/%env:([^%]+)%/', function (array $matches) {
-            return rawurlencode(getenv($matches[1]));
-        }, $uri);
+	private $username = '';
 
-        return $uri;
-    }
+	private $password = '';
 
-    public function __toString()
-    {
-        return $this->toString();
-    }
+	private function __construct(string $uri)
+	{
+		if (!preg_match('/^(ldap|ldaps|env)/', $uri)) {
+			throw InvalidLdapUri::wrongSchema($uri);
+		}
+
+		if (strpos($uri, 'env:') === 0) {
+			$newUri = getenv(substr($uri, 4));
+			if (false === $newUri) {
+				throw InvalidLdapUri::noEnvironmentVariableSet($uri);
+			}
+			$uri = (string) $newUri;
+		}
+
+		$uri = $this->injectEnvironmentVariables($uri);
+
+		$array = parse_url($uri);
+		if (!is_array($array)) {
+			throw InvalidLdapUri::cannotparse($uri);
+		}
+
+		$url = array_map(static function ($item) {
+			if (is_int($item)) {
+				return $item;
+			}
+			return urldecode($item);
+		}, $array);
+
+
+		if (!isset($url['scheme'])) {
+			throw InvalidLdapUri::noSchema($uri);
+		}
+		if (0 !== strpos($url['scheme'], 'ldap')) {
+			throw InvalidLdapUri::wrongSchema($uri);
+		}
+		if (!isset($url['host'])) {
+			throw InvalidLdapUri::noServerProvided($uri);
+		}
+		if (!isset($url['path'])) {
+			throw InvalidLdapUri::noSearchBaseProvided($uri);
+		}
+		if (1 === strlen($url['path'])) {
+			throw InvalidLdapUri::invalidSearchBaseProvided($uri);
+		}
+
+		$this->server = $url['host'];
+		$this->scheme = $url['scheme'];
+		$this->baseDn = substr($url['path'], 1);
+		if (isset($url['user'])) {
+			$this->username = $url['user'];
+		}
+		if ('' === trim($this->username)) {
+			$this->username = 'anonymous';
+		}
+		if (isset($url['pass'])) {
+			$this->password = $url['pass'];
+		}
+		if ($this->scheme === 'ldaps' && $this->port = 389) {
+			$this->port = 636;
+		}
+
+		// When someone sets the port in the URL we overwrite whatever is set.
+		// We have to assume they know what they are doing!
+		if (isset($url['port'])) {
+			$this->port = $url['port'];
+		}
+	}
+
+	public static function fromString(string $uri): LdapUri
+	{
+		return new LdapUri($uri);
+	}
+
+	private function injectEnvironmentVariables(string $base): string
+	{
+		return preg_replace_callback('/%env:([^%]+)%/', static function (array $matches) {
+			return rawurlencode(getenv($matches[1]));
+		}, $base);
+	}
+
+	public function toString(): string
+	{
+		return $this->scheme . '://' . $this->server . ':' . $this->port;
+	}
+
+	public function __toString()
+	{
+		return $this->toString();
+	}
+
+	public function getUsername(): string
+	{
+		return $this->username;
+	}
+
+	public function getPassword(): string
+	{
+		return $this->password;
+	}
+
+	public function getBaseDn(): string
+	{
+		return $this->baseDn;
+	}
+
+	public function isAnonymous(): bool
+	{
+		if ($this->password === '') {
+			return true;
+		}
+
+		if ($this->username === 'anonymous') {
+			return true;
+		}
+
+		return false;
+	}
 }