ISSUE #356: added the refresh token to the mac token type response

This commit is contained in:
joao 2015-08-28 10:40:13 +00:00
parent f632fcc997
commit 56c73d2427

View File

@ -1,14 +1,14 @@
<?php <?php
/** /**
* OAuth 2.0 MAC Token Type. * OAuth 2.0 MAC Token Type
* *
* @package league/oauth2-server
* @author Alex Bilbie <hello@alexbilbie.com> * @author Alex Bilbie <hello@alexbilbie.com>
* @copyright Copyright (c) Alex Bilbie * @copyright Copyright (c) Alex Bilbie
* @license http://mit-license.org/ * @license http://mit-license.org/
*
* @link https://github.com/thephpleague/oauth2-server * @link https://github.com/thephpleague/oauth2-server
*/ */
namespace League\OAuth2\Server\TokenType; namespace League\OAuth2\Server\TokenType;
use League\OAuth2\Server\Util\SecureKey; use League\OAuth2\Server\Util\SecureKey;
@ -16,7 +16,7 @@ use Symfony\Component\HttpFoundation\ParameterBag;
use Symfony\Component\HttpFoundation\Request; use Symfony\Component\HttpFoundation\Request;
/** /**
* MAC Token Type. * MAC Token Type
*/ */
class MAC extends AbstractTokenType implements TokenTypeInterface class MAC extends AbstractTokenType implements TokenTypeInterface
{ {
@ -125,11 +125,9 @@ class MAC extends AbstractTokenType implements TokenTypeInterface
} }
/** /**
* Prevent timing attack. * Prevent timing attack
*
* @param string $knownString * @param string $knownString
* @param string $userString * @param string $userString
*
* @return bool * @return bool
*/ */
private function hash_equals($knownString, $userString) private function hash_equals($knownString, $userString)
@ -142,7 +140,7 @@ class MAC extends AbstractTokenType implements TokenTypeInterface
} }
$len = strlen($knownString); $len = strlen($knownString);
$result = 0; $result = 0;
for ($i = 0; $i < $len; ++$i) { for ($i = 0; $i < $len; $i++) {
$result |= (ord($knownString[$i]) ^ ord($userString[$i])); $result |= (ord($knownString[$i]) ^ ord($userString[$i]));
} }
// They are only identical strings if $result is exactly 0... // They are only identical strings if $result is exactly 0...