ElyBy-Mirror/oauth2-server
1
0
Fork 0
mirror of https://github.com/elyby/oauth2-server.git synced 2025-05-31 14:12:07 +05:30
Code Issues Packages Projects Releases Wiki Activity

Added requireStateParam() method. Fixes #9

Browse Source
This commit is contained in:
Alex Bilbie
2013-03-04 13:15:12 +00:00
parent f5b6b43bef
commit 34a7d14557
2 changed files with 40 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
src/OAuth2/AuthServer.php
View File

@@ -61,7 +61,13 @@ class AuthServer
* Require the "scope" parameter to be in checkAuthoriseParams()
* @var boolean
*/
protected $requireScopes = true;
protected $requireScopeParam = true;
/**
* Require the "state" parameter to be in checkAuthoriseParams()
* @var boolean
*/
protected $requireStateParam = false;
/**
* The request object
@@ -175,9 +181,19 @@ class AuthServer
* @param boolean $require
* @return void
*/
public function requireScopes($require = true)
public function requireScopeParam($require = true)
{
$this->requireScopes = $require;
$this->requireScopeParam = $require;
}
/**
* Require the "state" paremter in checkAuthoriseParams()
* @param boolean $require
* @return void
*/
public function requireStateParam($require = false)
{
$this->requireStateParam = $require;
}
/**
@@ -275,6 +291,10 @@ class AuthServer
throw new Exception\ClientException(sprintf(self::$exceptionMessages['invalid_request'], 'redirect_uri'), 0);
}
if ($this->requireStateParam === true && is_null($authParams['redirect_uri'])) {
throw new Exception\ClientException(sprintf(self::$exceptionMessages['invalid_request'], 'redirect_uri'), 0);
}
// Validate client ID and redirect URI
$clientDetails = self::getStorage('client')->getClient($authParams['client_id'], null, $authParams['redirect_uri']);
@@ -301,7 +321,7 @@ class AuthServer
if ($scopes[$i] === '') unset($scopes[$i]); // Remove any junk scopes
}
if ($this->requireScopes === true && count($scopes) === 0) {
if ($this->requireScopeParam === true && count($scopes) === 0) {
throw new Exception\ClientException(sprintf(self::$exceptionMessages['invalid_request'], 'scope'), 0);
}