1	<?php
2
3	namespace App\Security\Service;
4
5	use AltchaOrg\Altcha\Altcha;
6	use AltchaOrg\Altcha\Challenge;
7	use AltchaOrg\Altcha\ChallengeOptions;
8	use Symfony\Component\DependencyInjection\Attribute\Autowire;
9
10	/**
11	* ALTCHA is fully disabled when ALTCHA_ENABLED=false
12	* This happens typically in e2e testing in CI/Staging
13	* In that case, backend verification is bypassed and frontend does not request challenges.
14	*
15	* @author Wilhelm Zwertvaegher
16	*/
17	class AltchaService implements AltchaServiceInterface
18	{
19	public function __construct(
20	private readonly Altcha $altcha,
21	#[Autowire('%altcha.token_expiry_seconds%')]
22	private readonly int $altchaTokenExpirySeconds,
23	#[Autowire('%altcha.enabled%')]
24	private readonly bool $altchaEnabled,
25	) {
26	}
27
28	public function createChallenge(): Challenge
29	{
30	// Create a new challenge
31	$options = new ChallengeOptions(
32	maxNumber: 50000, // the maximum random number
33	expires: new \DateTimeImmutable()->add(new \DateInterval(sprintf('PT%sS', $this->altchaTokenExpirySeconds))),
34	);
35
36	return $this->altcha->createChallenge($options);
37	}
38
39	public function verifySolution(string $data): bool
40	{
41	if (!$this->altchaEnabled) {
42	return true;
43	}
44
45	return $this->altcha->verifySolution($data);
46	}
47	}

---

Paths

Below are the source code lines that represent each code path as identified by Xdebug. Please note a path is not necessarily coterminous with a line, a line may contain multiple paths and therefore show up more than once. Please also be aware that some paths may include implicit rather than explicit branches, e.g. an if statement always has an else as part of its logical flow even if you didn't write one.

AltchaService->__construct

19	public function __construct(
20	private readonly Altcha $altcha,
21	#[Autowire('%altcha.token_expiry_seconds%')]
22	private readonly int $altchaTokenExpirySeconds,
23	#[Autowire('%altcha.enabled%')]
24	private readonly bool $altchaEnabled,
25	) {
26	}

AltchaService->createChallenge

31	$options = new ChallengeOptions(
32	maxNumber: 50000, // the maximum random number
33	expires: new \DateTimeImmutable()->add(new \DateInterval(sprintf('PT%sS', $this->altchaTokenExpirySeconds))),
34	);
35
36	return $this->altcha->createChallenge($options);
37	}

AltchaService->verifySolution

39	public function verifySolution(string $data): bool
40	{
41	if (!$this->altchaEnabled) {
42	return true;

39	public function verifySolution(string $data): bool
40	{
41	if (!$this->altchaEnabled) {
45	return $this->altcha->verifySolution($data);
46	}

{main}

3	namespace App\Security\Service;
4
5	use AltchaOrg\Altcha\Altcha;
6	use AltchaOrg\Altcha\Challenge;
7	use AltchaOrg\Altcha\ChallengeOptions;
8	use Symfony\Component\DependencyInjection\Attribute\Autowire;
9
10	/**
11	* ALTCHA is fully disabled when ALTCHA_ENABLED=false
12	* This happens typically in e2e testing in CI/Staging
13	* In that case, backend verification is bypassed and frontend does not request challenges.
14	*
15	* @author Wilhelm Zwertvaegher
16	*/
17	class AltchaService implements AltchaServiceInterface
18	{
19	public function __construct(
20	private readonly Altcha $altcha,
21	#[Autowire('%altcha.token_expiry_seconds%')]
22	private readonly int $altchaTokenExpirySeconds,
23	#[Autowire('%altcha.enabled%')]
24	private readonly bool $altchaEnabled,
25	) {
26	}
27
28	public function createChallenge(): Challenge
29	{
30	// Create a new challenge
31	$options = new ChallengeOptions(
32	maxNumber: 50000, // the maximum random number
33	expires: new \DateTimeImmutable()->add(new \DateInterval(sprintf('PT%sS', $this->altchaTokenExpirySeconds))),
34	);
35
36	return $this->altcha->createChallenge($options);
37	}
38
39	public function verifySolution(string $data): bool
40	{
41	if (!$this->altchaEnabled) {
42	return true;
43	}
44
45	return $this->altcha->verifySolution($data);
46	}