mirror of
https://github.com/elyby/oauth2-server.git
synced 2025-05-31 14:12:07 +05:30
110 lines
3.2 KiB
PHP
110 lines
3.2 KiB
PHP
<?php
|
|
/**
|
|
* OAuth 2.0 Client credentials grant
|
|
*
|
|
* @package league/oauth2-server
|
|
* @author Alex Bilbie <hello@alexbilbie.com>
|
|
* @copyright Copyright (c) Alex Bilbie
|
|
* @license http://mit-license.org/
|
|
* @link https://github.com/thephpleague/oauth2-server
|
|
*/
|
|
|
|
namespace League\OAuth2\Server\Grant;
|
|
|
|
use League\OAuth2\Server\Entity\AccessTokenEntity;
|
|
use League\OAuth2\Server\Entity\ClientEntity;
|
|
use League\OAuth2\Server\Entity\SessionEntity;
|
|
use League\OAuth2\Server\Exception;
|
|
use League\OAuth2\Server\Util\SecureKey;
|
|
|
|
/**
|
|
* Client credentials grant class
|
|
*/
|
|
class ClientCredentialsGrant extends AbstractGrant
|
|
{
|
|
/**
|
|
* Grant identifier
|
|
* @var string
|
|
*/
|
|
protected $identifier = 'client_credentials';
|
|
|
|
/**
|
|
* Response type
|
|
* @var string
|
|
*/
|
|
protected $responseType = null;
|
|
|
|
/**
|
|
* AuthServer instance
|
|
* @var AuthServer
|
|
*/
|
|
protected $server = null;
|
|
|
|
/**
|
|
* Access token expires in override
|
|
* @var int
|
|
*/
|
|
protected $accessTokenTTL = null;
|
|
|
|
/**
|
|
* Complete the client credentials grant
|
|
* @param null|array $inputParams
|
|
* @return array
|
|
*/
|
|
public function completeFlow()
|
|
{
|
|
// Get the required params
|
|
$clientId = $this->server->getRequest()->request->get('client_id', null);
|
|
if (is_null($clientId)) {
|
|
throw new Exception\InvalidRequestException('client_id');
|
|
}
|
|
|
|
$clientSecret = $this->server->getRequest()->request->get('client_secret', null);
|
|
if (is_null($clientSecret)) {
|
|
throw new Exception\InvalidRequestException('client_secret');
|
|
}
|
|
|
|
// Validate client ID and client secret
|
|
$client = $this->server->getStorage('client')->get(
|
|
$clientId,
|
|
$clientSecret,
|
|
null,
|
|
$this->getIdentifier()
|
|
);
|
|
|
|
if (($client instanceof ClientEntity) === false) {
|
|
throw new Exception\InvalidClientException();
|
|
}
|
|
|
|
// Validate any scopes that are in the request
|
|
$scopeParam = $this->server->getRequest()->request->get('scope', '');
|
|
$scopes = $this->validateScopes($scopeParam);
|
|
|
|
// Create a new session
|
|
$session = new SessionEntity($this->server);
|
|
$session->setOwner('client', $client->getId());
|
|
$session->associateClient($client);
|
|
|
|
// Generate an access token
|
|
$accessToken = new AccessTokenEntity($this->server);
|
|
$accessToken->setId(SecureKey::generate());
|
|
$accessToken->setExpireTime($this->server->getAccessTokenTTL() + time());
|
|
|
|
// Associate scopes with the session and access token
|
|
foreach ($scopes as $scope) {
|
|
$accessToken->associateScope($scope);
|
|
$session->associateScope($scope);
|
|
}
|
|
|
|
// Save everything
|
|
$session->save($this->server->getStorage('session'));
|
|
$accessToken->setSession($session);
|
|
$accessToken->save($this->server->getStorage('access_token'));
|
|
|
|
$this->server->getTokenType()->set('access_token', $accessToken->getId());
|
|
$this->server->getTokenType()->set('expires_in', $this->server->getAccessTokenTTL());
|
|
|
|
return $this->server->getTokenType()->generateResponse();
|
|
}
|
|
}
|