ElyBy-Mirror/accounts
1
0
Fork 0
mirror of https://github.com/elyby/accounts.git synced 2024-12-24 06:09:52 +05:30
Code Issues Packages Projects Releases Wiki Activity

Fix redirect_uri validation for the AuthCodeGrant

Browse Source
This commit is contained in:
ErickSkrauch 2019-12-13 15:16:45 +03:00
parent a8e20a9775
commit 22d8971dc5
1 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
api/components/OAuth2/Grants/AuthCodeGrant.php
View File

@ -9,7 +9,11 @@ use api\components\OAuth2\Repositories\PublicScopeRepository;
use DateInterval; use DateInterval;
use League\OAuth2\Server\Entities\AccessTokenEntityInterface; use League\OAuth2\Server\Entities\AccessTokenEntityInterface;
use League\OAuth2\Server\Entities\ClientEntityInterface; use League\OAuth2\Server\Entities\ClientEntityInterface;
use League\OAuth2\Server\Exception\OAuthServerException;
use League\OAuth2\Server\Grant\AuthCodeGrant as BaseAuthCodeGrant; use League\OAuth2\Server\Grant\AuthCodeGrant as BaseAuthCodeGrant;
use League\OAuth2\Server\RequestEvent;
use Psr\Http\Message\ServerRequestInterface;
use yii\helpers\StringHelper;
class AuthCodeGrant extends BaseAuthCodeGrant { class AuthCodeGrant extends BaseAuthCodeGrant {
use CryptTrait; use CryptTrait;
@ -40,4 +44,20 @@ class AuthCodeGrant extends BaseAuthCodeGrant {
return parent::issueAccessToken($accessTokenTTL, $client, $userIdentifier, $scopes); return parent::issueAccessToken($accessTokenTTL, $client, $userIdentifier, $scopes);
} }
protected function validateRedirectUri(
string $redirectUri,
ClientEntityInterface $client,
ServerRequestInterface $request
): void {
$allowedRedirectUris = (array)$client->getRedirectUri();
foreach ($allowedRedirectUris as $allowedRedirectUri) {
if (StringHelper::startsWith($redirectUri, $allowedRedirectUri)) {
return;
}
}
$this->getEmitter()->emit(new RequestEvent(RequestEvent::CLIENT_AUTHENTICATION_FAILED, $request));
throw OAuthServerException::invalidClient($request);
}
} }