ValidatorChain.php

Go to the documentation of this file.

<?php

namespace SAML2\Signature;

use Psr\Log\LoggerInterface;
use SAML2\Configuration\CertificateProvider;
use SAML2\SignedElement;

class ValidatorChain implements ValidatorInterface
{
    private $logger;

    private $validators = array();

    public function __construct(LoggerInterface $logger, array $validators)
    {
        $this->logger = $logger;

        // should be done through "adder" injection in the container.
        foreach ($validators as $validator) {
            $this->appendValidator($validator);
        }
    }

    public function appendValidator(ChainedValidator $validator)
    {
        $this->validators[] = $validator;
    }

    public function hasValidSignature(
        SignedElement $signedElement,
        CertificateProvider $configuration
    ) {
        foreach ($this->validators as $validator) {
            if ($validator->canValidate($signedElement, $configuration)) {
                $this->logger->debug(sprintf(
                    'Validating the signed element with validator of type "%s"',
                    get_class($validator)
                ));

                return $validator->hasValidSignature($signedElement, $configuration);
            }

            $this->logger->debug(sprintf(
                'Could not validate the signed element with validator of type "%s"',
                get_class($validator)
            ));
        }

        throw new MissingConfigurationException(sprintf(
            'No certificates or fingerprints have been configured%s',
            $configuration->has('entityid') ? ' for "' . $configuration->get('entityid') . '"' : ''
        ));
    }
}