63% cloud-sso-single-sign-on

Code Review | Cloud SAML SSO - Single Sign On Login

WordPress plugin Cloud SAML SSO - Single Sign On Login scored 63% from 54 tests.

About plugin

  • Plugin page: cloud-sso-single-...
  • Plugin version: 1.0.14
  • PHP compatiblity: 7.2+
  • PHP version: 7.4.16
  • WordPress compatibility: 5.7-6.2
  • WordPress version: 6.3.1
  • First release: Aug 20, 2022
  • Latest release: Jul 5, 2023
  • Number of updates: 13
  • Update frequency: every 24.5 days
  • Top authors: cloudinfrastructureservices (100%)

Code review

54 tests

User reviews

1 review

Install metrics

50+ active / 1,472 total downloads

Benchmarks

Plugin footprint 65% from 16 tests

Installer Passed 1 test

🔺 Critical test (weight: 50) | All plugins must install correctly, without throwing any errors, warnings, or notices
Install script ran successfully

Server metrics [RAM: ▲5.11MB] [CPU: ▲32.79ms] 75% from 4 tests

A check of server-side resources used by Cloud SAML SSO - Single Sign On Login
Please fix the following
  • Extra RAM: The extra memory usage must be under 5MB (currently 5.11MB on /wp-admin/admin.php?page=freemius)
PageMemory (MB)CPU Time (ms)
Home /8.88 ▲5.4374.76 ▲30.86
Dashboard /wp-admin8.90 ▲5.6090.52 ▲36.46
Posts /wp-admin/edit.php8.91 ▲5.5588.73 ▲39.12
Add New Post /wp-admin/post-new.php9.76 ▲3.87116.14 ▲24.72
Media Library /wp-admin/upload.php8.91 ▲5.6878.58 ▲41.94
Freemius Debug [v.2.5.10] /wp-admin/admin.php?page=freemius8.9162.43

Server storage [IO: ▲7.51MB] [DB: ▲0.01MB] Passed 3 tests

Analyzing filesystem and database footprints of this plugin
No storage issues were detected
Filesystem: 784 new files
Database: 2 new tables, 26 new options
New tables
wp_csso_environments
wp_csso_providers
New WordPress options
db_upgraded
csso_is_plugin_activated
can_compress_scripts
csso_login_button_styles
fs_debug_mode
fs_accounts
csso_sp_x509_private_key
csso_current_environment
csso_sp_acs_url
csso_sp_entity_id
...

Browser metrics Passed 4 tests

Checking browser requirements for Cloud SAML SSO - Single Sign On Login
Normal browser usage
PageNodesMemory (MB)Script (ms)Layout (ms)
Home /2,852 ▲11713.63 ▼0.661.68 ▼0.2432.25 ▼18.74
Dashboard /wp-admin2,229 ▲415.86 ▼0.0597.95 ▼16.3471.11 ▲27.65
Posts /wp-admin/edit.php2,130 ▲411.97 ▼0.0439.22 ▲3.2536.94 ▲3.46
Add New Post /wp-admin/post-new.php1,687 ▲15921.92 ▼1.37772.74 ▲51.2858.34 ▼2.13
Media Library /wp-admin/upload.php1,423 ▲384.17 ▼0.01114.62 ▲10.3851.20 ▲7.26
Freemius Debug [v.2.5.10] /wp-admin/admin.php?page=freemius1,0981.6823.5330.58

Uninstaller [IO: ▲0.00MB] [DB: ▲0.00MB] 50% from 4 tests

🔸 Tests weight: 35 | Verifying that this plugin uninstalls completely without leaving any traces
Please fix the following items
  • Uninstall procedure validation failed for this plugin
    • > Notice in wp-content/plugins/cloud-sso-single-sign-on/freemius/includes/class-freemius.php+8486
    Undefined property: stdClass::$plugins
  • Zombie WordPress options were found after uninstall: 9 options
    • widget_theysaidso_widget
    • fs_accounts
    • can_compress_scripts
    • fs_debug_mode
    • fs_active_plugins
    • theysaidso_admin_options
    • widget_recent-posts
    • db_upgraded
    • widget_recent-comments

Smoke tests 75% from 4 tests

Server-side errors Passed 1 test

🔹 Test weight: 20 | This is a shallow check for server-side errors
Everything seems fine, however this is by no means an exhaustive test

SRP 50% from 2 tests

🔹 Tests weight: 20 | A shallow check of the single-responsibility principle; PHP files should perform no action - including output of placeholder text - and trigger no errors when accessed directly
Please take a closer look at the following
  • 333× PHP files trigger errors when accessed directly with GET requests (only 10 are shown):
    • > PHP Fatal error
      Uncaught Error: Class 'Symfony\\Component\\HttpFoundation\\ParameterBag' not found in wp-content/plugins/cloud-sso-single-sign-on/vendor/symfony/http-foundation/InputBag.php:21
    • > PHP Parse error
      syntax error, unexpected '|', expecting variable (T_VARIABLE) in wp-content/plugins/cloud-sso-single-sign-on/vendor/symfony/polyfill-mbstring/bootstrap80.php on line 15
    • > PHP Fatal error
      Uncaught Error: Class 'LightSaml\\Action\\Assertion\\AbstractAssertionAction' not found in wp-content/plugins/cloud-sso-single-sign-on/vendor/lightsaml/lightsaml/src/LightSaml/Action/Assertion/Inbound/TimeValidatorAction.php:20
    • > PHP Fatal error
      Uncaught Error: Interface 'LightSaml\\Provider\\EntityDescriptor\\EntityDescriptorProviderInterface' not found in wp-content/plugins/cloud-sso-single-sign-on/vendor/lightsaml/lightsaml/src/LightSaml/Provider/EntityDescriptor/FileEntityDescriptorProvider.php:17
    • > PHP Fatal error
      Uncaught Error: Class 'LightSaml\\Model\\Protocol\\AbstractRequest' not found in wp-content/plugins/cloud-sso-single-sign-on/vendor/lightsaml/lightsaml/src/LightSaml/Model/Protocol/AuthnRequest.php:20
    • > PHP Fatal error
      Uncaught Error: Class 'LightSaml\\Action\\Profile\\AbstractProfileAction' not found in wp-content/plugins/cloud-sso-single-sign-on/vendor/lightsaml/lightsaml/src/LightSaml/Action/Profile/Inbound/Response/SpSsoStateAction.php:20
    • > PHP Fatal error
      Uncaught Error: Interface 'Symfony\\Component\\EventDispatcher\\EventDispatcherInterface' not found in wp-content/plugins/cloud-sso-single-sign-on/vendor/symfony/event-dispatcher/EventDispatcher.php:32
    • > PHP Warning
      require_once(wp-content/plugins/cloud-sso-single-sign-on/vendor/lightsaml/lightsaml/web/sp/../../vendor/autoload.php): failed to open stream: No such file or directory in wp-content/plugins/cloud-sso-single-sign-on/vendor/lightsaml/lightsaml/web/sp/_config.php on line 3
    • > PHP Fatal error
      Uncaught Error: Class 'LightSaml\\Action\\Profile\\AbstractProfileAction' not found in wp-content/plugins/cloud-sso-single-sign-on/vendor/lightsaml/lightsaml/src/LightSaml/Action/Profile/Outbound/Message/MessageVersionAction.php:23
    • > PHP Fatal error
      Uncaught Error: Interface 'Symfony\\Component\\HttpFoundation\\Exception\\RequestExceptionInterface' not found in wp-content/plugins/cloud-sso-single-sign-on/vendor/symfony/http-foundation/Exception/BadRequestException.php:17

User-side errors Passed 1 test

🔹 Test weight: 20 | A shallow check that no browser errors were triggered
No browser issues were found

Optimizations

Plugin configuration 93% from 29 tests

readme.txt Passed 16 tests

The readme.txt file describes your plugin functionality and requirements and it is parsed to prepare the your plugin's listing
9 plugin tags: azure ad, sso, login, login security, single sign on...

cloud-sso-single-sign-on/saml-sso-plugin.php 85% from 13 tests

"Cloud SAML SSO - Single Sign On Login" version 1.0.14's main PHP file describes plugin functionality and also serves as the entry point to any WordPress functionality
The following require your attention:
  • Description: Please don't use more than 140 characters for the plugin description (currently 272 characters long)
  • Main file name: Please rename the main PHP file in this plugin to the plugin slug ("cloud-sso-single-sign-on.php" instead of "saml-sso-plugin.php")

Code Analysis 3% from 3 tests

File types 0% from 1 test

🔸 Test weight: 35 | An overview of files in this plugin; executable files are not allowed
Please make sure to remedy the following
  • Do not include executable or dangerous files in your plugin
    • .crt - Security Certificate in Firefox, IE, Chrome, Safari
      • wp-content/plugins/cloud-sso-single-sign-on/vendor/lightsaml/lightsaml/web/sp/saml.crt
70,765 lines of code in 697 files:
LanguageFilesBlank linesComment linesLines of code
PHP60514,90331,82563,458
XSD37501634,658
JSON11001,035
Markdown141530534
CSS179323520
XML44096305
JavaScript53471196
YAML18026
Bourne Again Shell161122
Bourne Shell1327
SVG1004

PHP code 50% from 2 tests

Analyzing cyclomatic complexity and code structure
Please tend to the following items
  • Cyclomatic complexity of classes should be reduced to less than 1000 (currently 3,073)
Cyclomatic complexity
Average complexity per logical line of code0.51
Average class complexity15.59
▷ Minimum class complexity1.00
▷ Maximum class complexity3,073.00
Average method complexity3.11
▷ Minimum method complexity1.00
▷ Maximum method complexity94.00
Code structure
Namespaces96
Interfaces62
Traits0
Classes445
▷ Abstract classes4911.01%
▷ Concrete classes39688.99%
▷ Final classes235.81%
Methods3,682
▷ Static methods39910.84%
▷ Public methods2,90778.95%
▷ Protected methods2516.82%
▷ Private methods52414.23%
Functions314
▷ Named functions23675.16%
▷ Anonymous functions7824.84%
Constants485
▷ Global constants10521.65%
▷ Class constants38078.35%
▷ Public constants36997.11%

Plugin size Passed 2 tests

Image compression Passed 2 tests

PNG files should be compressed to save space and minimize bandwidth usage
18 PNG files occupy 0.29MB with 0.06MB in potential savings
Potential savings
Compression of 5 random PNG files using pngquant
FileSize - originalSize - compressedSavings
freemius/assets/img/theme-icon.png10.97KB5.78KB▼ 47.37%
assets/resources/images/wp-cloud-sso-icon20.png0.77KB0.71KB▼ 7.65%
assets/resources/images/providers/google-apps.png3.47KB3.47KB0.00%
freemius/assets/img/plugin-icon.png9.16KB5.26KB▼ 42.58%
assets/resources/images/providers/salesforce.png11.21KB11.19KB0.17%