adding Request MLE Validation for JWT

Author: aastgoel

lib/Authentication/Core/MerchantConfiguration.php

@@ -1413,22 +1413,22 @@ public function validateMerchantData()
     }
 
     private function validateMLEConfiguration(){
-        // $mleConfigured = $this->enableRequestMLEForOptionalApisGlobally;
-        // if ($this->mapToControlMLEonAPI !== null && !empty($this->mapToControlMLEonAPI)) {
-        //     foreach ($this->mapToControlMLEonAPI as $value) {
-        //         if ($value) {
-        //             $mleConfigured = true;
-        //             break;
-        //         }
-        //     }
-        // }
+        $requestMleConfigured = $this->enableRequestMLEForOptionalApisGlobally;
+        if ($this->mapToControlMLEonAPI !== null && !empty($this->mapToControlMLEonAPI)) {
+            foreach ($this->mapToControlMLEonAPI as $value) {
+                if ($value) {
+                    $requestMleConfigured = true;
+                    break;
+                }
+            }
+        }
         // if MLE=true then check for auth Type
-        // if ($mleConfigured && strcasecmp($this->authenticationType, GlobalParameter::JWT) !== 0) {
-        //     $error_message = GlobalParameter::MLE_AUTH_ERROR;
-        //     $exception = new AuthException($error_message, 0);
-        //     self::$logger->error($error_message);
-        //     throw $exception;
-        // }
+        if ($requestMleConfigured && strcasecmp($this->authenticationType, GlobalParameter::JWT) !== 0) {
+            $error_message = GlobalParameter::REQUEST_MLE_AUTH_ERROR;
+            $exception = new AuthException($error_message, 0);
+            self::$logger->error($error_message);
+            throw $exception;
+        }
 
         if (isset($this->mleForRequestPublicCertPath)) {
             $certPath = $this->mleForRequestPublicCertPath;

lib/Authentication/Util/GlobalParameter.php

@@ -107,7 +107,7 @@ class GlobalParameter
     const KEYFILEFIELDDIR = "keysDirectory ";
     const DEFAULT_MLE_ALIAS_FOR_CERT = "CyberSource_SJC_US";
     const CERTIFICATE_EXPIRY_DATE_WARNING_DAYS = 90;
-    const MLE_AUTH_ERROR = "MLE is only supported in JWT auth type";
+    const REQUEST_MLE_AUTH_ERROR = "Request MLE is only supported in JWT auth type";
     const EMPTY_PRIVATE_OR_PUBLIC_KEY_ERROR = "Private key or public key is empty";
 }
 ?>