diff --git a/src/OAuth2/AuthServer.php b/src/OAuth2/AuthServer.php index f72ff446..6923c424 100644 --- a/src/OAuth2/AuthServer.php +++ b/src/OAuth2/AuthServer.php @@ -37,7 +37,7 @@ class AuthServer * The TTL (time to live) of an access token in seconds (default: 3600) * @var integer */ - static protected $expiresIn = 3600; + protected $expiresIn = 3600; /** * The registered grant response types @@ -49,13 +49,13 @@ class AuthServer * The client, scope and session storage classes * @var array */ - static protected $storages = array(); + protected $storages = array(); /** * The registered grant types * @var array */ - static protected $grantTypes = array(); + protected $grantTypes = array(); /** * Require the "scope" parameter to be in checkAuthoriseParams() @@ -73,7 +73,7 @@ class AuthServer * The request object * @var Util\RequestInterface */ - static protected $request = null; + protected $request = null; /** * Exception error codes @@ -96,7 +96,7 @@ class AuthServer * Exception error messages * @var array */ - static protected $exceptionMessages = array( + protected static $exceptionMessages = array( 'invalid_request' => 'The request is missing a required parameter, includes an invalid parameter value, includes a parameter more than once, or is otherwise malformed. Check the "%s" parameter.', 'unauthorized_client' => 'The client is not authorized to request an access token using this method.', 'access_denied' => 'The resource owner or authorization server denied the request.', @@ -142,7 +142,7 @@ class AuthServer */ public function __construct(ClientInterface $client, SessionInterface $session, ScopeInterface $scope) { - self::$storages = array( + $this->storages = array( 'client' => $client, 'session' => $session, 'scope' => $scope @@ -159,7 +159,7 @@ class AuthServer if (is_null($identifier)) { $identifier = $grantType->getIdentifier(); } - self::$grantTypes[$identifier] = $grantType; + $this->grantTypes[$identifier] = $grantType; if ( ! is_null($grantType->getResponseType())) { $this->responseTypes[] = $grantType->getResponseType(); @@ -171,9 +171,9 @@ class AuthServer * @param string $identifier The grant type identifier * @return boolean Returns "true" if enabled, "false" if not */ - public static function hasGrantType($identifier) + public function hasGrantType($identifier) { - return (array_key_exists($identifier, self::$grantTypes)); + return (array_key_exists($identifier, $this->grantTypes)); } /** @@ -220,9 +220,9 @@ class AuthServer * Get the TTL for an access token * @return int The TTL */ - public static function getExpiresIn() + public function getExpiresIn() { - return self::$expiresIn; + return $this->expiresIn; } /** @@ -231,7 +231,7 @@ class AuthServer */ public function setExpiresIn($expiresIn) { - self::$expiresIn = $expiresIn; + $this->expiresIn = $expiresIn; } /** @@ -241,7 +241,7 @@ class AuthServer */ public function setRequest(Util\RequestInterface $request) { - self::$request = $request; + $this->request = $request; } /** @@ -249,16 +249,16 @@ class AuthServer * * @return Util\RequestInterface */ - public static function getRequest() + public function getRequest() { - if (self::$request === null) { + if ($this->request === null) { // @codeCoverageIgnoreStart - self::$request = Request::buildFromGlobals(); + $this->request = Request::buildFromGlobals(); } // @codeCoverageIgnoreEnd - return self::$request; + return $this->request; } /** @@ -266,9 +266,9 @@ class AuthServer * @param string $obj The class required * @return Storage\ClientInterface|Storage\ScopeInterface|Storage\SessionInterface */ - public static function getStorage($obj) + public function getStorage($obj) { - return self::$storages[$obj]; + return $this->storages[$obj]; } /** @@ -281,7 +281,7 @@ class AuthServer public function checkAuthoriseParams($inputParams = array()) { // Auth params - $authParams = self::getParam(array('client_id', 'redirect_uri', 'response_type', 'scope', 'state'), 'get', $inputParams); + $authParams = $this->getParam(array('client_id', 'redirect_uri', 'response_type', 'scope', 'state'), 'get', $inputParams); if (is_null($authParams['client_id'])) { throw new Exception\ClientException(sprintf(self::$exceptionMessages['invalid_request'], 'client_id'), 0); @@ -383,7 +383,7 @@ class AuthServer } // Ensure grant type is one that is recognised and is enabled - if ( ! in_array($grantType, array_keys(self::$grantTypes))) { + if ( ! in_array($grantType, array_keys($this->grantTypes))) { throw new Exception\ClientException(sprintf(self::$exceptionMessages['unsupported_grant_type'], $grantType), 7); } @@ -398,7 +398,7 @@ class AuthServer */ protected function getGrantType($grantType) { - return self::$grantTypes[$grantType]; + return $this->grantTypes[$grantType]; } /** @@ -408,14 +408,14 @@ class AuthServer * @param array $inputParams Passed input parameters * @return mixed 'Null' if parameter is missing */ - public static function getParam($param = '', $method = 'get', $inputParams = array()) + public function getParam($param = '', $method = 'get', $inputParams = array()) { if (is_string($param)) { return (isset($inputParams[$param])) ? $inputParams[$param] : self::getRequest()->{$method}($param); } else { $response = array(); foreach ($param as $p) { - $response[$p] = self::getParam($p, $method, $inputParams); + $response[$p] = $this->getParam($p, $method, $inputParams); } return $response; } diff --git a/src/OAuth2/Grant/AuthCode.php b/src/OAuth2/Grant/AuthCode.php index 38c0316c..c0240cc5 100644 --- a/src/OAuth2/Grant/AuthCode.php +++ b/src/OAuth2/Grant/AuthCode.php @@ -36,6 +36,22 @@ class AuthCode implements GrantTypeInterface { */ protected $responseType = 'code'; + /** + * AuthServer instance + * @var AuthServer + */ + protected $authServer = null; + + /** + * Constructor + * @param AuthServer $authServer AuthServer instance + * @return void + */ + public function __construct(AuthServer $authServer) + { + $this->authServer = $authServer; + } + /** * Return the identifier * @return string @@ -62,51 +78,51 @@ class AuthCode implements GrantTypeInterface { public function completeFlow($inputParams = null) { // Get the required params - $authParams = AuthServer::getParam(array('client_id', 'client_secret', 'redirect_uri', 'code'), 'post', $inputParams); + $authParams = $this->authServer->getParam(array('client_id', 'client_secret', 'redirect_uri', 'code'), 'post', $inputParams); if (is_null($authParams['client_id'])) { - throw new Exception\ClientException(sprintf(AuthServer::getExceptionMessage('invalid_request'), 'client_id'), 0); + throw new Exception\ClientException(sprintf($this->authServer->getExceptionMessage('invalid_request'), 'client_id'), 0); } if (is_null($authParams['client_secret'])) { - throw new Exception\ClientException(sprintf(AuthServer::getExceptionMessage('invalid_request'), 'client_secret'), 0); + throw new Exception\ClientException(sprintf($this->authServer->getExceptionMessage('invalid_request'), 'client_secret'), 0); } if (is_null($authParams['redirect_uri'])) { - throw new Exception\ClientException(sprintf(AuthServer::getExceptionMessage('invalid_request'), 'redirect_uri'), 0); + throw new Exception\ClientException(sprintf($this->authServer->getExceptionMessage('invalid_request'), 'redirect_uri'), 0); } // Validate client ID and redirect URI - $clientDetails = AuthServer::getStorage('client')->getClient($authParams['client_id'], $authParams['client_secret'], $authParams['redirect_uri']); + $clientDetails = $this->authServer->getStorage('client')->getClient($authParams['client_id'], $authParams['client_secret'], $authParams['redirect_uri']); if ($clientDetails === false) { - throw new Exception\ClientException(AuthServer::getExceptionMessage('invalid_client'), 8); + throw new Exception\ClientException($this->authServer->getExceptionMessage('invalid_client'), 8); } $authParams['client_details'] = $clientDetails; // Validate the authorization code if (is_null($authParams['code'])) { - throw new Exception\ClientException(sprintf(AuthServer::getExceptionMessage('invalid_request'), 'code'), 0); + throw new Exception\ClientException(sprintf($this->authServer->getExceptionMessage('invalid_request'), 'code'), 0); } // Verify the authorization code matches the client_id and the request_uri - $session = AuthServer::getStorage('session')->validateAuthCode($authParams['client_id'], $authParams['redirect_uri'], $authParams['code']); + $session = $this->authServer->getStorage('session')->validateAuthCode($authParams['client_id'], $authParams['redirect_uri'], $authParams['code']); if ( ! $session) { - throw new Exception\ClientException(sprintf(AuthServer::getExceptionMessage('invalid_grant'), 'code'), 9); + throw new Exception\ClientException(sprintf($this->authServer->getExceptionMessage('invalid_grant'), 'code'), 9); } // A session ID was returned so update it with an access token, // remove the authorisation code, change the stage to 'granted' $accessToken = SecureKey::make(); - $refreshToken = (AuthServer::hasGrantType('refresh_token')) ? SecureKey::make() : null; + $refreshToken = ($this->authServer->hasGrantType('refresh_token')) ? SecureKey::make() : null; - $accessTokenExpires = time() + AuthServer::getExpiresIn(); - $accessTokenExpiresIn = AuthServer::getExpiresIn(); + $accessTokenExpires = time() + $this->authServer->getExpiresIn(); + $accessTokenExpiresIn = $this->authServer->getExpiresIn(); - AuthServer::getStorage('session')->updateSession( + $this->authServer->getStorage('session')->updateSession( $session['id'], null, $accessToken, @@ -122,7 +138,7 @@ class AuthCode implements GrantTypeInterface { 'expires_in' => $accessTokenExpiresIn ); - if (AuthServer::hasGrantType('refresh_token')) { + if ($this->authServer->hasGrantType('refresh_token')) { $response['refresh_token'] = $refreshToken; } diff --git a/src/OAuth2/Grant/ClientCredentials.php b/src/OAuth2/Grant/ClientCredentials.php index 3bb590bb..baed0aa9 100644 --- a/src/OAuth2/Grant/ClientCredentials.php +++ b/src/OAuth2/Grant/ClientCredentials.php @@ -36,6 +36,22 @@ class ClientCredentials implements GrantTypeInterface { */ protected $responseType = null; + /** + * AuthServer instance + * @var AuthServer + */ + protected $authServer = null; + + /** + * Constructor + * @param AuthServer $authServer AuthServer instance + * @return void + */ + public function __construct(AuthServer $authServer) + { + $this->authServer = $authServer; + } + /** * Return the identifier * @return string @@ -62,7 +78,7 @@ class ClientCredentials implements GrantTypeInterface { public function completeFlow($inputParams = null) { // Get the required params - $authParams = AuthServer::getParam(array('client_id', 'client_secret'), 'post', $inputParams); + $authParams = $this->authServer->getParam(array('client_id', 'client_secret', 'scope'), 'post', $inputParams); if (is_null($authParams['client_id'])) { throw new Exception\ClientException(sprintf(AuthServer::getExceptionMessage('invalid_request'), 'client_id'), 0); @@ -73,7 +89,7 @@ class ClientCredentials implements GrantTypeInterface { } // Validate client ID and client secret - $clientDetails = AuthServer::getStorage('client')->getClient($authParams['client_id'], $authParams['client_secret']); + $clientDetails = $this->authServer->getStorage('client')->getClient($authParams['client_id'], $authParams['client_secret']); if ($clientDetails === false) { throw new Exception\ClientException(AuthServer::getExceptionMessage('invalid_client'), 8); @@ -83,16 +99,16 @@ class ClientCredentials implements GrantTypeInterface { // Generate an access token $accessToken = SecureKey::make(); - $refreshToken = (AuthServer::hasGrantType('refresh_token')) ? SecureKey::make() : null; + $refreshToken = ($this->authServer->hasGrantType('refresh_token')) ? SecureKey::make() : null; - $accessTokenExpires = time() + AuthServer::getExpiresIn(); - $accessTokenExpiresIn = AuthServer::getExpiresIn(); + $accessTokenExpires = time() + $this->authServer->getExpiresIn(); + $accessTokenExpiresIn = $this->authServer->getExpiresIn(); // Delete any existing sessions just to be sure - AuthServer::getStorage('session')->deleteSession($authParams['client_id'], 'client', $authParams['client_id']); + $this->authServer->getStorage('session')->deleteSession($authParams['client_id'], 'client', $authParams['client_id']); // Create a new session - AuthServer::getStorage('session')->createSession( + $this->authServer->getStorage('session')->createSession( $authParams['client_id'], null, 'client', @@ -111,7 +127,7 @@ class ClientCredentials implements GrantTypeInterface { 'expires_in' => $accessTokenExpiresIn ); - if (AuthServer::hasGrantType('refresh_token')) { + if ($this->authServer->hasGrantType('refresh_token')) { $response['refresh_token'] = $refreshToken; } diff --git a/src/OAuth2/Grant/GrantTypeInterface.php b/src/OAuth2/Grant/GrantTypeInterface.php index b05c959e..56e45cfd 100644 --- a/src/OAuth2/Grant/GrantTypeInterface.php +++ b/src/OAuth2/Grant/GrantTypeInterface.php @@ -21,10 +21,17 @@ use OAuth2\Storage\ScopeInterface; interface GrantTypeInterface { - /** - * Returns the grant identifier (used to validate grant_type in OAuth2\AuthServer\issueAccessToken()) - * @return string - */ + /** + * Constructor + * @param AuthServer $authServer AuthServer instance + * @return void + */ + public function __construct(AuthServer $authServer); + + /** + * Returns the grant identifier (used to validate grant_type in OAuth2\AuthServer\issueAccessToken()) + * @return string + */ public function getIdentifier(); /** diff --git a/src/OAuth2/Grant/Password.php b/src/OAuth2/Grant/Password.php index 1cf61c74..ccd8a6a1 100644 --- a/src/OAuth2/Grant/Password.php +++ b/src/OAuth2/Grant/Password.php @@ -42,6 +42,22 @@ class Password implements GrantTypeInterface { */ protected $callback = null; + /** + * AuthServer instance + * @var AuthServer + */ + protected $authServer = null; + + /** + * Constructor + * @param AuthServer $authServer AuthServer instance + * @return void + */ + public function __construct(AuthServer $authServer) + { + $this->authServer = $authServer; + } + /** * Return the identifier * @return string @@ -90,52 +106,52 @@ class Password implements GrantTypeInterface { public function completeFlow($inputParams = null) { // Get the required params - $authParams = AuthServer::getParam(array('client_id', 'client_secret', 'username', 'password'), 'post', $inputParams); + $authParams = $this->authServer->getParam(array('client_id', 'client_secret', 'username', 'password'), 'post', $inputParams); if (is_null($authParams['client_id'])) { - throw new Exception\ClientException(sprintf(AuthServer::getExceptionMessage('invalid_request'), 'client_id'), 0); + throw new Exception\ClientException(sprintf($this->authServer->getExceptionMessage('invalid_request'), 'client_id'), 0); } if (is_null($authParams['client_secret'])) { - throw new Exception\ClientException(sprintf(AuthServer::getExceptionMessage('invalid_request'), 'client_secret'), 0); + throw new Exception\ClientException(sprintf($this->authServer->getExceptionMessage('invalid_request'), 'client_secret'), 0); } // Validate client ID and redirect URI - $clientDetails = AuthServer::getStorage('client')->getClient($authParams['client_id'], $authParams['client_secret']); + $clientDetails = $this->authServer->getStorage('client')->getClient($authParams['client_id'], $authParams['client_secret']); if ($clientDetails === false) { - throw new Exception\ClientException(AuthServer::getExceptionMessage('invalid_client'), 8); + throw new Exception\ClientException($this->authServer->getExceptionMessage('invalid_client'), 8); } $authParams['client_details'] = $clientDetails; if (is_null($authParams['username'])) { - throw new Exception\ClientException(sprintf(AuthServer::getExceptionMessage('invalid_request'), 'username'), 0); + throw new Exception\ClientException(sprintf($this->authServer->getExceptionMessage('invalid_request'), 'username'), 0); } if (is_null($authParams['password'])) { - throw new Exception\ClientException(sprintf(AuthServer::getExceptionMessage('invalid_request'), 'password'), 0); + throw new Exception\ClientException(sprintf($this->authServer->getExceptionMessage('invalid_request'), 'password'), 0); } // Check if user's username and password are correct $userId = call_user_func($this->getVerifyCredentialsCallback(), $authParams['username'], $authParams['password']); if ($userId === false) { - throw new Exception\ClientException(AuthServer::getExceptionMessage('invalid_credentials'), 0); + throw new Exception\ClientException($this->authServer->getExceptionMessage('invalid_credentials'), 0); } // Generate an access token $accessToken = SecureKey::make(); - $refreshToken = (AuthServer::hasGrantType('refresh_token')) ? SecureKey::make() : null; + $refreshToken = ($this->authServer->hasGrantType('refresh_token')) ? SecureKey::make() : null; - $accessTokenExpires = time() + AuthServer::getExpiresIn(); - $accessTokenExpiresIn = AuthServer::getExpiresIn(); + $accessTokenExpires = time() + $this->authServer->getExpiresIn(); + $accessTokenExpiresIn = $this->authServer->getExpiresIn(); // Delete any existing sessions just to be sure - AuthServer::getStorage('session')->deleteSession($authParams['client_id'], 'user', $userId); + $this->authServer->getStorage('session')->deleteSession($authParams['client_id'], 'user', $userId); // Create a new session - AuthServer::getStorage('session')->createSession( + $this->authServer->getStorage('session')->createSession( $authParams['client_id'], null, 'user', @@ -154,7 +170,7 @@ class Password implements GrantTypeInterface { 'expires_in' => $accessTokenExpiresIn ); - if (AuthServer::hasGrantType('refresh_token')) { + if ($this->authServer->hasGrantType('refresh_token')) { $response['refresh_token'] = $refreshToken; } diff --git a/src/OAuth2/Grant/RefreshToken.php b/src/OAuth2/Grant/RefreshToken.php index bd7839ca..46d9103a 100644 --- a/src/OAuth2/Grant/RefreshToken.php +++ b/src/OAuth2/Grant/RefreshToken.php @@ -36,6 +36,22 @@ class RefreshToken implements GrantTypeInterface { */ protected $responseType = null; + /** + * AuthServer instance + * @var AuthServer + */ + protected $authServer = null; + + /** + * Constructor + * @param AuthServer $authServer AuthServer instance + * @return void + */ + public function __construct(AuthServer $authServer) + { + $this->authServer = $authServer; + } + /** * Return the identifier * @return string @@ -62,47 +78,47 @@ class RefreshToken implements GrantTypeInterface { public function completeFlow($inputParams = null) { // Get the required params - $authParams = AuthServer::getParam(array('client_id', 'client_secret', 'refresh_token'), 'post', $inputParams); + $authParams = $this->authServer->getParam(array('client_id', 'client_secret', 'refresh_token'), 'post', $inputParams); if (is_null($authParams['client_id'])) { - throw new Exception\ClientException(sprintf(AuthServer::getExceptionMessage('invalid_request'), 'client_id'), 0); + throw new Exception\ClientException(sprintf($this->authServer->getExceptionMessage('invalid_request'), 'client_id'), 0); } if (is_null($authParams['client_secret'])) { - throw new Exception\ClientException(sprintf(AuthServer::getExceptionMessage('invalid_request'), 'client_secret'), 0); + throw new Exception\ClientException(sprintf($this->authServer->getExceptionMessage('invalid_request'), 'client_secret'), 0); } // Validate client ID and client secret - $clientDetails = AuthServer::getStorage('client')->getClient($authParams['client_id'], $authParams['client_secret']); + $clientDetails = $this->authServer->getStorage('client')->getClient($authParams['client_id'], $authParams['client_secret']); if ($clientDetails === false) { - throw new Exception\ClientException(AuthServer::getExceptionMessage('invalid_client'), 8); + throw new Exception\ClientException($this->authServer->getExceptionMessage('invalid_client'), 8); } $authParams['client_details'] = $clientDetails; if (is_null($authParams['refresh_token'])) { - throw new Exception\ClientException(sprintf(AuthServer::getExceptionMessage('invalid_request'), 'refresh_token'), 0); + throw new Exception\ClientException(sprintf($this->authServer->getExceptionMessage('invalid_request'), 'refresh_token'), 0); } // Validate refresh token - $sessionId = AuthServer::getStorage('client')->validateRefreshToken( + $sessionId = $this->authServer->getStorage('client')->validateRefreshToken( $authParams['refresh_token'], $authParams['client_id'] ); if ($sessionId === false) { - throw new Exception\ClientException(AuthServer::getExceptionMessage('invalid_refresh'), 0); + throw new Exception\ClientException($this->authServer->getExceptionMessage('invalid_refresh'), 0); } // Generate new tokens $accessToken = SecureKey::make(); - $refreshToken = (AuthServer::hasGrantType('refresh_token')) ? SecureKey::make() : null; + $refreshToken = ($this->authServer->hasGrantType('refresh_token')) ? SecureKey::make() : null; - $accessTokenExpires = time() + AuthServer::getExpiresIn(); - $accessTokenExpiresIn = AuthServer::getExpiresIn(); + $accessTokenExpires = time() + $this->authServer->getExpiresIn(); + $accessTokenExpiresIn = $this->authServer->getExpiresIn(); - AuthServer::getStorage('session')->updateRefreshToken($sessionId, $accessToken, $refreshToken, $accessTokenExpires); + $this->authServer->getStorage('session')->updateRefreshToken($sessionId, $accessToken, $refreshToken, $accessTokenExpires); return array( 'access_token' => $accessToken, diff --git a/tests/authorization/AuthServerTest.php b/tests/authorization/AuthServerTest.php index 6ab843f3..2e31999c 100644 --- a/tests/authorization/AuthServerTest.php +++ b/tests/authorization/AuthServerTest.php @@ -52,7 +52,8 @@ class Authorization_Server_test extends PHPUnit_Framework_TestCase public function test_hasGrantType() { - $this->assertFalse(OAuth2\AuthServer::hasGrantType('test')); + $a = $this->returnDefault(); + $this->assertFalse($a->hasGrantType('test')); } public function test_addGrantType() @@ -62,7 +63,7 @@ class Authorization_Server_test extends PHPUnit_Framework_TestCase $grant->shouldReceive('getResponseType')->andReturn('test'); $a->addGrantType($grant, 'test'); - $this->assertTrue(OAuth2\AuthServer::hasGrantType('test')); + $this->assertTrue($a->hasGrantType('test')); } public function test_addGrantType_noIdentifier() @@ -73,7 +74,7 @@ class Authorization_Server_test extends PHPUnit_Framework_TestCase $grant->shouldReceive('getResponseType')->andReturn('test'); $a->addGrantType($grant); - $this->assertTrue(OAuth2\AuthServer::hasGrantType('test')); + $this->assertTrue($a->hasGrantType('test')); } public function test_getScopeDelimeter() @@ -119,7 +120,7 @@ class Authorization_Server_test extends PHPUnit_Framework_TestCase { $a = $this->returnDefault(); $a->setExpiresIn(7200); - $this->assertEquals(7200, $a::getExpiresIn()); + $this->assertEquals(7200, $a->getExpiresIn()); } public function test_setExpiresIn() @@ -138,7 +139,7 @@ class Authorization_Server_test extends PHPUnit_Framework_TestCase $reflector = new ReflectionClass($a); $requestProperty = $reflector->getProperty('request'); $requestProperty->setAccessible(true); - $v = $requestProperty->getValue(); + $v = $requestProperty->getValue($a); $this->assertTrue($v instanceof OAuth2\Util\RequestInterface); } @@ -148,7 +149,7 @@ class Authorization_Server_test extends PHPUnit_Framework_TestCase $a = $this->returnDefault(); $request = new OAuth2\Util\Request(); $a->setRequest($request); - $v = $a::getRequest(); + $v = $a->getRequest(); $this->assertTrue($v instanceof OAuth2\Util\RequestInterface); } @@ -251,7 +252,7 @@ class Authorization_Server_test extends PHPUnit_Framework_TestCase )); $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\AuthCode()); + $a->addGrantType(new OAuth2\Grant\AuthCode($a)); $a->checkAuthoriseParams(array( 'client_id' => 1234, @@ -277,7 +278,7 @@ class Authorization_Server_test extends PHPUnit_Framework_TestCase $this->scope->shouldReceive('getScope')->andReturn(false); $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\AuthCode()); + $a->addGrantType(new OAuth2\Grant\AuthCode($a)); $a->checkAuthoriseParams(array( 'client_id' => 1234, @@ -290,7 +291,7 @@ class Authorization_Server_test extends PHPUnit_Framework_TestCase public function test_checkAuthoriseParams_passedInput() { $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\AuthCode()); + $a->addGrantType(new OAuth2\Grant\AuthCode($a)); $this->client->shouldReceive('getClient')->andReturn(array( 'client_id' => 1234, @@ -354,7 +355,7 @@ class Authorization_Server_test extends PHPUnit_Framework_TestCase )); $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\AuthCode()); + $a->addGrantType(new OAuth2\Grant\AuthCode($a)); $_GET['client_id'] = 1234; $_GET['redirect_uri'] = 'http://foo/redirect'; @@ -426,7 +427,7 @@ class Authorization_Server_test extends PHPUnit_Framework_TestCase public function test_getGrantType() { $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\AuthCode()); + $a->addGrantType(new OAuth2\Grant\AuthCode($a)); $reflector = new ReflectionClass($a); $method = $reflector->getMethod('getGrantType'); @@ -444,7 +445,7 @@ class Authorization_Server_test extends PHPUnit_Framework_TestCase public function test_issueAccessToken_missingGrantType() { $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\AuthCode()); + $a->addGrantType(new OAuth2\Grant\AuthCode($a)); $v = $a->issueAccessToken(); } @@ -456,7 +457,7 @@ class Authorization_Server_test extends PHPUnit_Framework_TestCase public function test_issueAccessToken_badGrantType() { $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\AuthCode()); + $a->addGrantType(new OAuth2\Grant\AuthCode($a)); $v = $a->issueAccessToken(array('grant_type' => 'foo')); } @@ -468,7 +469,7 @@ class Authorization_Server_test extends PHPUnit_Framework_TestCase public function test_issueAccessToken_missingClientId() { $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\AuthCode()); + $a->addGrantType(new OAuth2\Grant\AuthCode($a)); $v = $a->issueAccessToken(array( 'grant_type' => 'authorization_code' @@ -482,7 +483,7 @@ class Authorization_Server_test extends PHPUnit_Framework_TestCase public function test_issueAccessToken_missingClientSecret() { $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\AuthCode()); + $a->addGrantType(new OAuth2\Grant\AuthCode($a)); $v = $a->issueAccessToken(array( 'grant_type' => 'authorization_code', @@ -497,7 +498,7 @@ class Authorization_Server_test extends PHPUnit_Framework_TestCase public function test_issueAccessToken_missingRedirectUri() { $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\AuthCode()); + $a->addGrantType(new OAuth2\Grant\AuthCode($a)); $v = $a->issueAccessToken(array( 'grant_type' => 'authorization_code', @@ -515,7 +516,7 @@ class Authorization_Server_test extends PHPUnit_Framework_TestCase $this->client->shouldReceive('getClient')->andReturn(false); $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\AuthCode()); + $a->addGrantType(new OAuth2\Grant\AuthCode($a)); $v = $a->issueAccessToken(array( 'grant_type' => 'authorization_code', @@ -534,7 +535,7 @@ class Authorization_Server_test extends PHPUnit_Framework_TestCase $this->client->shouldReceive('getClient')->andReturn(array()); $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\AuthCode()); + $a->addGrantType(new OAuth2\Grant\AuthCode($a)); $v = $a->issueAccessToken(array( 'grant_type' => 'authorization_code', @@ -554,7 +555,7 @@ class Authorization_Server_test extends PHPUnit_Framework_TestCase $this->session->shouldReceive('validateAuthCode')->andReturn(false); $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\AuthCode()); + $a->addGrantType(new OAuth2\Grant\AuthCode($a)); $v = $a->issueAccessToken(array( 'grant_type' => 'authorization_code', @@ -578,7 +579,7 @@ class Authorization_Server_test extends PHPUnit_Framework_TestCase $this->session->shouldReceive('updateSession')->andReturn(null); $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\AuthCode()); + $a->addGrantType(new OAuth2\Grant\AuthCode($a)); $v = $a->issueAccessToken(array( 'grant_type' => 'authorization_code', @@ -593,8 +594,8 @@ class Authorization_Server_test extends PHPUnit_Framework_TestCase $this->assertArrayHasKey('expires', $v); $this->assertArrayHasKey('expires_in', $v); - $this->assertEquals($a::getExpiresIn(), $v['expires_in']); - $this->assertEquals(time()+$a::getExpiresIn(), $v['expires']); + $this->assertEquals($a->getExpiresIn(), $v['expires_in']); + $this->assertEquals(time()+$a->getExpiresIn(), $v['expires']); } public function test_issueAccessToken() @@ -610,7 +611,7 @@ class Authorization_Server_test extends PHPUnit_Framework_TestCase $this->session->shouldReceive('updateSession')->andReturn(null); $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\AuthCode()); + $a->addGrantType(new OAuth2\Grant\AuthCode($a)); $_POST['grant_type'] = 'authorization_code'; $_POST['client_id'] = 1234; @@ -628,8 +629,8 @@ class Authorization_Server_test extends PHPUnit_Framework_TestCase $this->assertArrayHasKey('expires', $v); $this->assertArrayHasKey('expires_in', $v); - $this->assertEquals($a::getExpiresIn(), $v['expires_in']); - $this->assertEquals(time()+$a::getExpiresIn(), $v['expires']); + $this->assertEquals($a->getExpiresIn(), $v['expires_in']); + $this->assertEquals(time()+$a->getExpiresIn(), $v['expires']); } public function tearDown() { diff --git a/tests/authorization/ClientCredentialsGrantTest.php b/tests/authorization/ClientCredentialsGrantTest.php index 72e68919..794294fb 100644 --- a/tests/authorization/ClientCredentialsGrantTest.php +++ b/tests/authorization/ClientCredentialsGrantTest.php @@ -27,7 +27,7 @@ class Client_Credentials_Grant_Test extends PHPUnit_Framework_TestCase public function test_issueAccessToken_clientCredentialsGrant_missingClientId() { $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\ClientCredentials()); + $a->addGrantType(new OAuth2\Grant\ClientCredentials($a)); $request = new OAuth2\Util\Request(array(), $_POST); $a->setRequest($request); @@ -44,7 +44,7 @@ class Client_Credentials_Grant_Test extends PHPUnit_Framework_TestCase public function test_issueAccessToken_clientCredentialsGrant_missingClientPassword() { $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\ClientCredentials()); + $a->addGrantType(new OAuth2\Grant\ClientCredentials($a)); $request = new OAuth2\Util\Request(array(), $_POST); $a->setRequest($request); @@ -64,7 +64,7 @@ class Client_Credentials_Grant_Test extends PHPUnit_Framework_TestCase $this->client->shouldReceive('getClient')->andReturn(false); $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\ClientCredentials()); + $a->addGrantType(new OAuth2\Grant\ClientCredentials($a)); $request = new OAuth2\Util\Request(array(), $_POST); $a->setRequest($request); @@ -93,7 +93,7 @@ class Client_Credentials_Grant_Test extends PHPUnit_Framework_TestCase $this->session->shouldReceive('updateRefreshToken')->andReturn(null); $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\ClientCredentials()); + $a->addGrantType(new OAuth2\Grant\ClientCredentials($a)); $v = $a->issueAccessToken(array( 'grant_type' => 'client_credentials', @@ -106,8 +106,8 @@ class Client_Credentials_Grant_Test extends PHPUnit_Framework_TestCase $this->assertArrayHasKey('expires', $v); $this->assertArrayHasKey('expires_in', $v); - $this->assertEquals($a::getExpiresIn(), $v['expires_in']); - $this->assertEquals(time()+$a::getExpiresIn(), $v['expires']); + $this->assertEquals($a->getExpiresIn(), $v['expires_in']); + $this->assertEquals(time()+$a->getExpiresIn(), $v['expires']); } function test_issueAccessToken_clientCredentialsGrant() @@ -127,7 +127,7 @@ class Client_Credentials_Grant_Test extends PHPUnit_Framework_TestCase $this->session->shouldReceive('updateRefreshToken')->andReturn(null); $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\ClientCredentials()); + $a->addGrantType(new OAuth2\Grant\ClientCredentials($a)); $_POST['grant_type'] = 'client_credentials'; $_POST['client_id'] = 1234; @@ -143,8 +143,8 @@ class Client_Credentials_Grant_Test extends PHPUnit_Framework_TestCase $this->assertArrayHasKey('expires', $v); $this->assertArrayHasKey('expires_in', $v); - $this->assertEquals($a::getExpiresIn(), $v['expires_in']); - $this->assertEquals(time()+$a::getExpiresIn(), $v['expires']); + $this->assertEquals($a->getExpiresIn(), $v['expires_in']); + $this->assertEquals(time()+$a->getExpiresIn(), $v['expires']); } function test_issueAccessToken_clientCredentialsGrant_withRefreshToken() @@ -164,8 +164,8 @@ class Client_Credentials_Grant_Test extends PHPUnit_Framework_TestCase $this->session->shouldReceive('updateRefreshToken')->andReturn(null); $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\ClientCredentials()); - $a->addGrantType(new OAuth2\Grant\RefreshToken()); + $a->addGrantType(new OAuth2\Grant\ClientCredentials($a)); + $a->addGrantType(new OAuth2\Grant\RefreshToken($a)); $_POST['grant_type'] = 'client_credentials'; $_POST['client_id'] = 1234; @@ -182,8 +182,8 @@ class Client_Credentials_Grant_Test extends PHPUnit_Framework_TestCase $this->assertArrayHasKey('expires_in', $v); $this->assertArrayHasKey('refresh_token', $v); - $this->assertEquals($a::getExpiresIn(), $v['expires_in']); - $this->assertEquals(time()+$a::getExpiresIn(), $v['expires']); + $this->assertEquals($a->getExpiresIn(), $v['expires_in']); + $this->assertEquals(time()+$a->getExpiresIn(), $v['expires']); } } \ No newline at end of file diff --git a/tests/authorization/PasswordGrantTest.php b/tests/authorization/PasswordGrantTest.php index ac6a7c83..e458db6e 100644 --- a/tests/authorization/PasswordGrantTest.php +++ b/tests/authorization/PasswordGrantTest.php @@ -27,7 +27,7 @@ class Password_Grant_Test extends PHPUnit_Framework_TestCase public function test_issueAccessToken_passwordGrant_missingClientId() { $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\Password()); + $a->addGrantType(new OAuth2\Grant\Password($a)); $request = new OAuth2\Util\Request(array(), $_POST); $a->setRequest($request); @@ -44,7 +44,7 @@ class Password_Grant_Test extends PHPUnit_Framework_TestCase public function test_issueAccessToken_passwordGrant_missingClientPassword() { $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\Password()); + $a->addGrantType(new OAuth2\Grant\Password($a)); $request = new OAuth2\Util\Request(array(), $_POST); $a->setRequest($request); @@ -64,7 +64,7 @@ class Password_Grant_Test extends PHPUnit_Framework_TestCase $this->client->shouldReceive('getClient')->andReturn(false); $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\Password()); + $a->addGrantType(new OAuth2\Grant\Password($a)); $request = new OAuth2\Util\Request(array(), $_POST); $a->setRequest($request); @@ -98,7 +98,7 @@ class Password_Grant_Test extends PHPUnit_Framework_TestCase $testCredentials = null; $a = $this->returnDefault(); - $pgrant = new OAuth2\Grant\Password(); + $pgrant = new OAuth2\Grant\Password($a); $pgrant->setVerifyCredentialsCallback($testCredentials); $a->addGrantType($pgrant); @@ -134,7 +134,7 @@ class Password_Grant_Test extends PHPUnit_Framework_TestCase $testCredentials = function($u, $p) { return false; }; $a = $this->returnDefault(); - $pgrant = new OAuth2\Grant\Password(); + $pgrant = new OAuth2\Grant\Password($a); $pgrant->setVerifyCredentialsCallback($testCredentials); $a->addGrantType($pgrant); @@ -168,7 +168,7 @@ class Password_Grant_Test extends PHPUnit_Framework_TestCase $testCredentials = function($u, $p) { return false; }; $a = $this->returnDefault(); - $pgrant = new OAuth2\Grant\Password(); + $pgrant = new OAuth2\Grant\Password($a); $pgrant->setVerifyCredentialsCallback($testCredentials); $a->addGrantType($pgrant); @@ -203,7 +203,7 @@ class Password_Grant_Test extends PHPUnit_Framework_TestCase $testCredentials = function($u, $p) { return false; }; $a = $this->returnDefault(); - $pgrant = new OAuth2\Grant\Password(); + $pgrant = new OAuth2\Grant\Password($a); $pgrant->setVerifyCredentialsCallback($testCredentials); $a->addGrantType($pgrant); @@ -235,7 +235,7 @@ class Password_Grant_Test extends PHPUnit_Framework_TestCase $testCredentials = function($u, $p) { return 1; }; $a = $this->returnDefault(); - $pgrant = new OAuth2\Grant\Password(); + $pgrant = new OAuth2\Grant\Password($a); $pgrant->setVerifyCredentialsCallback($testCredentials); $a->addGrantType($pgrant); @@ -252,8 +252,8 @@ class Password_Grant_Test extends PHPUnit_Framework_TestCase $this->assertArrayHasKey('expires', $v); $this->assertArrayHasKey('expires_in', $v); - $this->assertEquals($a::getExpiresIn(), $v['expires_in']); - $this->assertEquals(time()+$a::getExpiresIn(), $v['expires']); + $this->assertEquals($a->getExpiresIn(), $v['expires_in']); + $this->assertEquals(time()+$a->getExpiresIn(), $v['expires']); } function test_issueAccessToken_passwordGrant() @@ -275,7 +275,7 @@ class Password_Grant_Test extends PHPUnit_Framework_TestCase $testCredentials = function($u, $p) { return 1; }; $a = $this->returnDefault(); - $pgrant = new OAuth2\Grant\Password(); + $pgrant = new OAuth2\Grant\Password($a); $pgrant->setVerifyCredentialsCallback($testCredentials); $a->addGrantType($pgrant); @@ -295,8 +295,8 @@ class Password_Grant_Test extends PHPUnit_Framework_TestCase $this->assertArrayHasKey('expires', $v); $this->assertArrayHasKey('expires_in', $v); - $this->assertEquals($a::getExpiresIn(), $v['expires_in']); - $this->assertEquals(time()+$a::getExpiresIn(), $v['expires']); + $this->assertEquals($a->getExpiresIn(), $v['expires_in']); + $this->assertEquals(time()+$a->getExpiresIn(), $v['expires']); } function test_issueAccessToken_passwordGrant_withRefreshToken() @@ -318,10 +318,10 @@ class Password_Grant_Test extends PHPUnit_Framework_TestCase $testCredentials = function($u, $p) { return 1; }; $a = $this->returnDefault(); - $pgrant = new OAuth2\Grant\Password(); + $pgrant = new OAuth2\Grant\Password($a); $pgrant->setVerifyCredentialsCallback($testCredentials); $a->addGrantType($pgrant); - $a->addGrantType(new OAuth2\Grant\RefreshToken()); + $a->addGrantType(new OAuth2\Grant\RefreshToken($a)); $_POST['grant_type'] = 'password'; $_POST['client_id'] = 1234; @@ -340,8 +340,8 @@ class Password_Grant_Test extends PHPUnit_Framework_TestCase $this->assertArrayHasKey('expires_in', $v); $this->assertArrayHasKey('refresh_token', $v); - $this->assertEquals($a::getExpiresIn(), $v['expires_in']); - $this->assertEquals(time()+$a::getExpiresIn(), $v['expires']); + $this->assertEquals($a->getExpiresIn(), $v['expires_in']); + $this->assertEquals(time()+$a->getExpiresIn(), $v['expires']); } } \ No newline at end of file diff --git a/tests/authorization/RefreshTokenTest.php b/tests/authorization/RefreshTokenTest.php index 556477b3..6ea99f2b 100644 --- a/tests/authorization/RefreshTokenTest.php +++ b/tests/authorization/RefreshTokenTest.php @@ -33,8 +33,8 @@ class Refresh_Token_test extends PHPUnit_Framework_TestCase $this->session->shouldReceive('updateSession')->andReturn(null); $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\AuthCode()); - $a->addGrantType(new OAuth2\Grant\RefreshToken()); + $a->addGrantType(new OAuth2\Grant\AuthCode($a)); + $a->addGrantType(new OAuth2\Grant\RefreshToken($a)); $_POST['grant_type'] = 'authorization_code'; $_POST['client_id'] = 1234; @@ -53,8 +53,8 @@ class Refresh_Token_test extends PHPUnit_Framework_TestCase $this->assertArrayHasKey('expires_in', $v); $this->assertArrayHasKey('refresh_token', $v); - $this->assertEquals($a::getExpiresIn(), $v['expires_in']); - $this->assertEquals(time()+$a::getExpiresIn(), $v['expires']); + $this->assertEquals($a->getExpiresIn(), $v['expires_in']); + $this->assertEquals(time()+$a->getExpiresIn(), $v['expires']); } /** @@ -64,7 +64,7 @@ class Refresh_Token_test extends PHPUnit_Framework_TestCase public function test_issueAccessToken_refreshTokenGrant_missingClientId() { $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\RefreshToken()); + $a->addGrantType(new OAuth2\Grant\RefreshToken($a)); $request = new OAuth2\Util\Request(array(), $_POST); $a->setRequest($request); @@ -81,7 +81,7 @@ class Refresh_Token_test extends PHPUnit_Framework_TestCase public function test_issueAccessToken_refreshTokenGrant_missingClientSecret() { $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\RefreshToken()); + $a->addGrantType(new OAuth2\Grant\RefreshToken($a)); $request = new OAuth2\Util\Request(array(), $_POST); $a->setRequest($request); @@ -101,7 +101,7 @@ class Refresh_Token_test extends PHPUnit_Framework_TestCase $this->client->shouldReceive('getClient')->andReturn(false); $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\RefreshToken()); + $a->addGrantType(new OAuth2\Grant\RefreshToken($a)); $request = new OAuth2\Util\Request(array(), $_POST); $a->setRequest($request); @@ -122,7 +122,7 @@ class Refresh_Token_test extends PHPUnit_Framework_TestCase $this->client->shouldReceive('getClient')->andReturn(array()); $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\RefreshToken()); + $a->addGrantType(new OAuth2\Grant\RefreshToken($a)); $request = new OAuth2\Util\Request(array(), $_POST); $a->setRequest($request); @@ -145,7 +145,7 @@ class Refresh_Token_test extends PHPUnit_Framework_TestCase $this->client->shouldReceive('validateRefreshToken')->andReturn(false); $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\RefreshToken()); + $a->addGrantType(new OAuth2\Grant\RefreshToken($a)); $request = new OAuth2\Util\Request(array(), $_POST); $a->setRequest($request); @@ -174,7 +174,7 @@ class Refresh_Token_test extends PHPUnit_Framework_TestCase $this->session->shouldReceive('updateRefreshToken')->andReturn(null); $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\RefreshToken()); + $a->addGrantType(new OAuth2\Grant\RefreshToken($a)); $_POST['grant_type'] = 'refresh_token'; $_POST['client_id'] = 1234; @@ -192,8 +192,8 @@ class Refresh_Token_test extends PHPUnit_Framework_TestCase $this->assertArrayHasKey('expires_in', $v); $this->assertArrayHasKey('refresh_token', $v); - $this->assertEquals($a::getExpiresIn(), $v['expires_in']); - $this->assertEquals(time()+$a::getExpiresIn(), $v['expires']); + $this->assertEquals($a->getExpiresIn(), $v['expires_in']); + $this->assertEquals(time()+$a->getExpiresIn(), $v['expires']); } public function test_issueAccessToken_refreshTokenGrant() @@ -212,7 +212,7 @@ class Refresh_Token_test extends PHPUnit_Framework_TestCase $this->session->shouldReceive('updateRefreshToken')->andReturn(null); $a = $this->returnDefault(); - $a->addGrantType(new OAuth2\Grant\RefreshToken()); + $a->addGrantType(new OAuth2\Grant\RefreshToken($a)); $v = $a->issueAccessToken(array( 'grant_type' => 'refresh_token', @@ -227,7 +227,7 @@ class Refresh_Token_test extends PHPUnit_Framework_TestCase $this->assertArrayHasKey('expires_in', $v); $this->assertArrayHasKey('refresh_token', $v); - $this->assertEquals($a::getExpiresIn(), $v['expires_in']); - $this->assertEquals(time()+$a::getExpiresIn(), $v['expires']); + $this->assertEquals($a->getExpiresIn(), $v['expires_in']); + $this->assertEquals(time()+$a->getExpiresIn(), $v['expires']); } } \ No newline at end of file