mirror of
				https://github.com/elyby/oauth2-server.git
				synced 2025-05-31 14:12:07 +05:30 
			
		
		
		
	Added protected API example
This commit is contained in:
		
							
								
								
									
										66
									
								
								examples/public/protected_api.php
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										66
									
								
								examples/public/protected_api.php
									
									
									
									
									
										Normal file
									
								
							@@ -0,0 +1,66 @@
 | 
			
		||||
<?php
 | 
			
		||||
 | 
			
		||||
use League\OAuth2\Server\Middleware\ResourceServerMiddleware;
 | 
			
		||||
use League\OAuth2\Server\Server;
 | 
			
		||||
 | 
			
		||||
use OAuth2ServerExamples\Repositories\AccessTokenRepository;
 | 
			
		||||
use OAuth2ServerExamples\Repositories\ClientRepository;
 | 
			
		||||
use OAuth2ServerExamples\Repositories\ScopeRepository;
 | 
			
		||||
 | 
			
		||||
use Slim\App;
 | 
			
		||||
use Slim\Http\Request;
 | 
			
		||||
use Slim\Http\Response;
 | 
			
		||||
 | 
			
		||||
include(__DIR__ . '/../vendor/autoload.php');
 | 
			
		||||
 | 
			
		||||
// App
 | 
			
		||||
$app = new App([
 | 
			
		||||
    'settings'    => [
 | 
			
		||||
        'displayErrorDetails' => true,
 | 
			
		||||
    ],
 | 
			
		||||
    Server::class => function () {
 | 
			
		||||
 | 
			
		||||
        // Init our repositories
 | 
			
		||||
        $clientRepository = new ClientRepository();
 | 
			
		||||
        $scopeRepository = new ScopeRepository();
 | 
			
		||||
        $accessTokenRepository = new AccessTokenRepository();
 | 
			
		||||
 | 
			
		||||
        $privateKeyPath = 'file://' . __DIR__ . '/../private.key';
 | 
			
		||||
        $publicKeyPath = 'file://' . __DIR__ . '/../public.key';
 | 
			
		||||
 | 
			
		||||
        // Setup the authorization server
 | 
			
		||||
        $server = new Server(
 | 
			
		||||
            $clientRepository,
 | 
			
		||||
            $accessTokenRepository,
 | 
			
		||||
            $scopeRepository,
 | 
			
		||||
            $privateKeyPath,
 | 
			
		||||
            $publicKeyPath
 | 
			
		||||
        );
 | 
			
		||||
 | 
			
		||||
        return $server;
 | 
			
		||||
    }
 | 
			
		||||
]);
 | 
			
		||||
 | 
			
		||||
$app->add(new ResourceServerMiddleware($app->getContainer()->get(Server::class)));
 | 
			
		||||
$app->post('/api/example', function (Request $request, Response $response) {
 | 
			
		||||
 | 
			
		||||
    $params = [];
 | 
			
		||||
 | 
			
		||||
    if (in_array('basic', $request->getAttribute('oauth_scopes', []))) {
 | 
			
		||||
        $params = [
 | 
			
		||||
            'id'   => 1,
 | 
			
		||||
            'name' => 'Alex',
 | 
			
		||||
            'city' => 'London'
 | 
			
		||||
        ];
 | 
			
		||||
    }
 | 
			
		||||
 | 
			
		||||
    if (in_array('email', $request->getAttribute('oauth_scopes', []))) {
 | 
			
		||||
        $params['email'] = 'alex@example.com';
 | 
			
		||||
    }
 | 
			
		||||
 | 
			
		||||
    $response->getBody()->write(json_encode($params));
 | 
			
		||||
 | 
			
		||||
    return $response;
 | 
			
		||||
});
 | 
			
		||||
 | 
			
		||||
$app->run();
 | 
			
		||||
		Reference in New Issue
	
	Block a user