refactor(password): normalize CRL status to enum at boundary

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>

Author: vitormattos

lib/Service/IdentifyMethod/SignatureMethod/Password.php

@@ -48,7 +48,8 @@ private function validateCertificateRevocation(array $certificateData): void {
 		if (!array_key_exists('crl_validation', $certificateData)) {
 			return;
 		}
-		$status = $certificateData['crl_validation'];
+		$rawStatus = $certificateData['crl_validation'];
+		$status = $this->normalizeRevocationStatus($rawStatus);
 		if ($status === CrlValidationStatus::VALID) {
 			return;
 		}
@@ -59,10 +60,20 @@ private function validateCertificateRevocation(array $certificateData): void {
 		if ($status === CrlValidationStatus::DISABLED) {
 			return;
 		}
-		$this->logRevocationBlockedSigning($status);
+		$this->logRevocationBlockedSigning($rawStatus);
 		throw new LibresignException($this->getRevocationErrorMessage($status), 422);
 	}
 
+	private function normalizeRevocationStatus(mixed $status): ?CrlValidationStatus {
+		if ($status instanceof CrlValidationStatus) {
+			return $status;
+		}
+		if (is_string($status)) {
+			return CrlValidationStatus::tryFrom($status);
+		}
+		return null;
+	}
+
 	private function logRevocationBlockedSigning(mixed $status): void {
 		$statusValue = $status instanceof CrlValidationStatus ? $status->value : (is_scalar($status) ? (string)$status : get_debug_type($status));
 		$this->identifyService->getLogger()->warning('Signing blocked due to CRL validation status', [
@@ -71,7 +82,7 @@ private function logRevocationBlockedSigning(mixed $status): void {
 		]);
 	}
 
-	private function getRevocationErrorMessage(mixed $status): string {
+	private function getRevocationErrorMessage(?CrlValidationStatus $status): string {
 		return match ($status) {
 			CrlValidationStatus::URLS_INACCESSIBLE => $this->identifyService->getL10n()->t('Cannot reach the certificate revocation service. Signing is not allowed.'),
 			CrlValidationStatus::VALIDATION_ERROR => $this->identifyService->getL10n()->t('An error occurred during certificate validation. Signing is not allowed.'),