TenantAtlas/app/Services/Intune/TenantConfigService.php

81 lines
2.5 KiB
PHP

<?php
namespace App\Services\Intune;
use App\Models\Tenant;
use App\Services\Graph\GraphClientInterface;
use App\Services\Graph\GraphErrorMapper;
use App\Services\Providers\MicrosoftGraphOptionsResolver;
use App\Services\Providers\ProviderConfigurationRequiredException;
use App\Support\Providers\ProviderReasonCodes;
use Throwable;
class TenantConfigService
{
public function __construct(
private readonly GraphClientInterface $graphClient,
private readonly MicrosoftGraphOptionsResolver $graphOptionsResolver,
) {}
/**
* @return array{success:bool,error_message:?string,requires_consent:bool}
*/
public function testConnectivity(Tenant $tenant): array
{
try {
$options = $this->graphOptions($tenant);
} catch (ProviderConfigurationRequiredException $exception) {
return [
'success' => false,
'error_message' => $exception->getMessage(),
'requires_consent' => $exception->reasonCode === ProviderReasonCodes::ProviderConsentMissing,
];
}
if ($options['tenant'] === null) {
return [
'success' => false,
'error_message' => 'Tenant ID is missing',
'requires_consent' => false,
];
}
try {
$response = $this->graphClient->getOrganization($options);
} catch (Throwable $throwable) {
$mapped = GraphErrorMapper::fromThrowable($throwable, ['tenant' => $options['tenant']]);
return [
'success' => false,
'error_message' => $mapped->getMessage(),
'requires_consent' => $this->requiresConsent($mapped->getMessage()),
];
}
if ($response->failed()) {
$message = $response->errors[0]['message'] ?? $response->errors[0] ?? 'Graph connectivity failed';
return [
'success' => false,
'error_message' => is_string($message) ? $message : json_encode($message),
'requires_consent' => $this->requiresConsent((string) $message),
];
}
return ['success' => true, 'error_message' => null, 'requires_consent' => false];
}
/**
* @return array<string, mixed>
*/
public function graphOptions(Tenant $tenant): array
{
return $this->graphOptionsResolver->resolveForTenant($tenant);
}
private function requiresConsent(string $message): bool
{
return str_contains(strtolower($message), 'consent');
}
}