Remove refresh_token from OAuth2 result. Return the same access_token as a refresh_token in case when it's requested. Make access_tokens to live forever.

This commit is contained in:
ErickSkrauch
2019-12-09 19:31:54 +03:00
parent efb97a2006
commit ba7fad84a0
23 changed files with 231 additions and 297 deletions

View File

@@ -6,6 +6,8 @@ namespace api\modules\oauth\controllers;
use api\controllers\Controller;
use api\modules\oauth\models\OauthProcess;
use api\rbac\Permissions as P;
use GuzzleHttp\Psr7\ServerRequest;
use Psr\Http\Message\ServerRequestInterface;
use Yii;
use yii\filters\AccessControl;
use yii\helpers\ArrayHelper;
@@ -45,19 +47,23 @@ class AuthorizationController extends Controller {
}
public function actionValidate(): array {
return $this->createOauthProcess()->validate();
return $this->createOauthProcess()->validate($this->getServerRequest());
}
public function actionComplete(): array {
return $this->createOauthProcess()->complete();
return $this->createOauthProcess()->complete($this->getServerRequest());
}
public function actionToken(): array {
return $this->createOauthProcess()->getToken();
return $this->createOauthProcess()->getToken($this->getServerRequest());
}
private function createOauthProcess(): OauthProcess {
return new OauthProcess(Yii::$app->oauth->getAuthServer());
}
private function getServerRequest(): ServerRequestInterface {
return ServerRequest::fromGlobals();
}
}