mirror of
https://github.com/elyby/accounts.git
synced 2024-12-05 04:58:56 +05:30
64 lines
1.7 KiB
PHP
64 lines
1.7 KiB
PHP
<?php
|
|
declare(strict_types=1);
|
|
|
|
namespace api\modules\oauth\controllers;
|
|
|
|
use api\controllers\Controller;
|
|
use api\modules\oauth\models\OauthProcess;
|
|
use api\rbac\Permissions as P;
|
|
use Yii;
|
|
use yii\filters\AccessControl;
|
|
use yii\helpers\ArrayHelper;
|
|
|
|
class AuthorizationController extends Controller {
|
|
|
|
public function behaviors(): array {
|
|
return ArrayHelper::merge(Controller::behaviors(), [
|
|
'authenticator' => [
|
|
'only' => ['complete'],
|
|
],
|
|
'access' => [
|
|
'class' => AccessControl::class,
|
|
'only' => ['complete'],
|
|
'rules' => [
|
|
[
|
|
'allow' => true,
|
|
'actions' => ['complete'],
|
|
'roles' => [P::COMPLETE_OAUTH_FLOW],
|
|
'roleParams' => function() {
|
|
return [
|
|
'accountId' => Yii::$app->user->identity->getAccount()->id,
|
|
];
|
|
},
|
|
],
|
|
],
|
|
],
|
|
]);
|
|
}
|
|
|
|
public function verbs(): array {
|
|
return [
|
|
'validate' => ['GET'],
|
|
'complete' => ['POST'],
|
|
'token' => ['POST'],
|
|
];
|
|
}
|
|
|
|
public function actionValidate(): array {
|
|
return $this->createOauthProcess()->validate();
|
|
}
|
|
|
|
public function actionComplete(): array {
|
|
return $this->createOauthProcess()->complete();
|
|
}
|
|
|
|
public function actionToken(): array {
|
|
return $this->createOauthProcess()->getToken();
|
|
}
|
|
|
|
private function createOauthProcess(): OauthProcess {
|
|
return new OauthProcess(Yii::$app->oauth->authServer);
|
|
}
|
|
|
|
}
|