private function reloadCredentialsProvider()

in src/Providers/ProfileCredentialsProvider.php [83:144]
59 lines of code
16 McCabe index (conditional complexity)

    private function reloadCredentialsProvider($profileFile, $profileName)
    {
        if (!Helper::inOpenBasedir($profileFile)) {
            throw new RuntimeException('Unable to open credentials file: ' . $profileFile);
        }

        if (!\is_readable($profileFile) || !\is_file($profileFile)) {
            throw new RuntimeException('Credentials file is not readable: ' . $profileFile);
        }

        $fileArray = \parse_ini_file($profileFile, true);

        if (\is_array($fileArray) && !empty($fileArray)) {
            $credentialsConfigures = [];
            foreach (\array_change_key_case($fileArray) as $name => $configures) {
                if ($name === $profileName) {
                    $credentialsConfigures = $configures;
                    break;
                }
            }
            if (\is_array($credentialsConfigures) && !empty($credentialsConfigures)) {
                switch (Helper::unsetReturnNull($credentialsConfigures, 'type')) {
                    case 'access_key':
                        return new StaticAKCredentialsProvider([
                            'accessKeyId' => Helper::unsetReturnNull($credentialsConfigures, 'access_key_id'),
                            'accessKeySecret' => Helper::unsetReturnNull($credentialsConfigures, 'access_key_secret'),
                        ]);
                    case 'ram_role_arn':
                        $innerProvider = new StaticAKCredentialsProvider([
                            'accessKeyId' => Helper::unsetReturnNull($credentialsConfigures, 'access_key_id'),
                            'accessKeySecret' => Helper::unsetReturnNull($credentialsConfigures, 'access_key_secret'),
                        ]);
                        return new RamRoleArnCredentialsProvider([
                            'credentialsProvider' => $innerProvider,
                            'roleArn' => Helper::unsetReturnNull($credentialsConfigures, 'role_arn'),
                            'roleSessionName' => Helper::unsetReturnNull($credentialsConfigures, 'role_session_name'),
                            'policy' => Helper::unsetReturnNull($credentialsConfigures, 'policy'),
                        ]);
                    case 'ecs_ram_role':
                        return new EcsRamRoleCredentialsProvider([
                            'roleName' => Helper::unsetReturnNull($credentialsConfigures, 'role_name'),
                        ]);
                    case 'oidc_role_arn':
                        return new OIDCRoleArnCredentialsProvider([
                            'roleArn' => Helper::unsetReturnNull($credentialsConfigures, 'role_arn'),
                            'oidcProviderArn' => Helper::unsetReturnNull($credentialsConfigures, 'oidc_provider_arn'),
                            'oidcTokenFilePath' => Helper::unsetReturnNull($credentialsConfigures, 'oidc_token_file_path'),
                            'roleSessionName' => Helper::unsetReturnNull($credentialsConfigures, 'role_session_name'),
                            'policy' => Helper::unsetReturnNull($credentialsConfigures, 'policy'),
                        ]);
                    case 'rsa_key_pair':
                        return new RsaKeyPairCredentialsProvider([
                            'publicKeyId' => Helper::unsetReturnNull($credentialsConfigures, 'public_key_id'),
                            'privateKeyFile' => Helper::unsetReturnNull($credentialsConfigures, 'private_key_file'),
                        ]);
                    default:
                        throw new RuntimeException('Unsupported credential type from credentials file: ' . Helper::unsetReturnNull($credentialsConfigures, 'type'));
                }
            }
        }
        throw new RuntimeException('Failed to get credential from credentials file: ' . $profileFile);
    }