Preserva base local aceite de identidade e acessos

2026-10-25 21:29:22 +02:00
commit 26b80df545
112 changed files with 13259 additions and 0 deletions
@@ -0,0 +1,25 @@
+<?php
+
+namespace App\Modules\Identity\Services;
+
+use RuntimeException;
+
+final class ProtectedProvisioningInput
+{
+    public static function read($stream, string $email): array
+    {
+        try {
+            $raw = stream_get_contents($stream, 16385);
+            if (! is_string($raw) || strlen($raw) > 16384) { throw new RuntimeException(); }
+            $data = json_decode($raw, true, 16, JSON_THROW_ON_ERROR);
+            if (! is_array($data) || ($data['confirmed'] ?? null) !== true || ($data['email'] ?? null) !== $email
+                || ! is_string($data['password'] ?? null) || ! is_string($data['confirmation'] ?? null)) {
+                throw new RuntimeException();
+            }
+            return [$data['password'], $data['confirmation']];
+        } catch (\Throwable) {
+            // Never include payload, parser errors, credentials or tokens in diagnostics.
+            throw new RuntimeException('Entrada protegida inválida ou não confirmada. Nada alterado.');
+        }
+    }
+}