Пример #1
0
 /**
  * Check authorise parameters
  *
  * @param  array $inputParams Optional array of parsed $_GET keys
  * @throws \OAuth2\Exception\ClientException
  * @return array             Authorise request parameters
  */
 public function checkAuthoriseParams($inputParams = array())
 {
     // Auth params
     $authParams = $this->authServer->getParam(array('client_id', 'redirect_uri', 'response_type', 'scope', 'state', 'nonce'), 'get', $inputParams);
     if (is_null($authParams['client_id'])) {
         throw new Exception\ClientException(sprintf($this->authServer->getExceptionMessage('invalid_request'), 'client_id'), 0);
     }
     if (is_null($authParams['redirect_uri'])) {
         throw new Exception\ClientException(sprintf($this->authServer->getExceptionMessage('invalid_request'), 'redirect_uri'), 0);
     }
     if ($this->authServer->stateParamRequired() === true && is_null($authParams['state'])) {
         throw new Exception\ClientException(sprintf($this->authServer->getExceptionMessage('invalid_request'), 'state'), 0);
     }
     if ($this->authServer->nonceParamRequired() === true && is_null($authParams['nonce'])) {
         throw new Exception\ClientException(sprintf($this->authServer->getExceptionMessage('invalid_request'), 'nonce'), 0);
     }
     // Validate client ID and redirect URI
     $clientDetails = $this->authServer->getStorage('client')->getClient($authParams['client_id'], null, $authParams['redirect_uri'], $this->identifier);
     if ($clientDetails === false) {
         throw new Exception\ClientException($this->authServer->getExceptionMessage('invalid_client'), 8);
     }
     $authParams['client_details'] = $clientDetails;
     if (is_null($authParams['response_type'])) {
         throw new Exception\ClientException(sprintf($this->authServer->getExceptionMessage('invalid_request'), 'response_type'), 0);
     }
     // Ensure response type is one that is recognised
     if (!in_array($authParams['response_type'], $this->authServer->getResponseTypes())) {
         throw new Exception\ClientException($this->authServer->getExceptionMessage('unsupported_response_type'), 3);
     }
     // Validate scopes
     $scopes = explode($this->authServer->getScopeDelimeter(), $authParams['scope']);
     //dd($scopes);
     for ($i = 0; $i < count($scopes); $i++) {
         $scopes[$i] = trim($scopes[$i]);
         if ($scopes[$i] === '') {
             unset($scopes[$i]);
         }
         // Remove any junk scopes
     }
     if ($this->authServer->scopeParamRequired() === true && $this->authServer->getDefaultScope() === null && count($scopes) === 0) {
         throw new Exception\ClientException(sprintf($this->authServer->getExceptionMessage('invalid_request'), 'scope'), 0);
     } elseif (count($scopes) === 0 && $this->authServer->getDefaultScope() !== null) {
         if (is_array($this->authServer->getDefaultScope())) {
             $scopes = $this->authServer->getDefaultScope();
         } else {
             $scopes = array($this->authServer->getDefaultScope());
         }
     }
     $authParams['scopes'] = array();
     foreach ($scopes as $scope) {
         $scopeDetails = $this->authServer->getStorage('scope')->getScope($scope, $authParams['client_id'], $this->identifier);
         if ($scopeDetails === false) {
             throw new Exception\ClientException(sprintf($this->authServer->getExceptionMessage('invalid_scope'), $scope), 4);
         }
         $authParams['scopes'][] = $scopeDetails;
     }
     return $authParams;
 }
Пример #2
0
 /**
  * Complete the client credentials grant
  * @param  null|array $inputParams
  * @return array
  */
 public function completeFlow($inputParams = null)
 {
     // Get the required params
     $authParams = $this->authServer->getParam(array('client_id', 'client_secret'), 'post', $inputParams);
     if (is_null($authParams['client_id'])) {
         throw new Exception\ClientException(sprintf(Authorization::getExceptionMessage('invalid_request'), 'client_id'), 0);
     }
     if (is_null($authParams['client_secret'])) {
         throw new Exception\ClientException(sprintf(Authorization::getExceptionMessage('invalid_request'), 'client_secret'), 0);
     }
     // Validate client ID and client secret
     $clientDetails = $this->authServer->getStorage('client')->getClient($authParams['client_id'], $authParams['client_secret'], null, $this->identifier);
     if ($clientDetails === false) {
         throw new Exception\ClientException(Authorization::getExceptionMessage('invalid_client'), 8);
     }
     $authParams['client_details'] = $clientDetails;
     // Validate any scopes that are in the request
     $scope = $this->authServer->getParam('scope', 'post', $inputParams, '');
     $scopes = explode($this->authServer->getScopeDelimeter(), $scope);
     for ($i = 0; $i < count($scopes); $i++) {
         $scopes[$i] = trim($scopes[$i]);
         if ($scopes[$i] === '') {
             unset($scopes[$i]);
         }
         // Remove any junk scopes
     }
     if ($this->authServer->scopeParamRequired() === true && $this->authServer->getDefaultScope() === null && count($scopes) === 0) {
         throw new Exception\ClientException(sprintf($this->authServer->getExceptionMessage('invalid_request'), 'scope'), 0);
     } elseif (count($scopes) === 0 && $this->authServer->getDefaultScope() !== null) {
         if (is_array($this->authServer->getDefaultScope())) {
             $scopes = $this->authServer->getDefaultScope();
         } else {
             $scopes = array($this->authServer->getDefaultScope());
         }
     }
     $authParams['scopes'] = array();
     foreach ($scopes as $scope) {
         $scopeDetails = $this->authServer->getStorage('scope')->getScope($scope, $authParams['client_id'], $this->identifier);
         if ($scopeDetails === false) {
             throw new Exception\ClientException(sprintf($this->authServer->getExceptionMessage('invalid_scope'), $scope), 4);
         }
         $authParams['scopes'][] = $scopeDetails;
     }
     // Generate an access token
     $accessToken = SecureKey::make();
     $accessTokenExpiresIn = $this->accessTokenTTL !== null ? $this->accessTokenTTL : $this->authServer->getAccessTokenTTL();
     $accessTokenExpires = time() + $accessTokenExpiresIn;
     // Create a new session
     $sessionId = $this->authServer->getStorage('session')->createSession($authParams['client_id'], 'client', $authParams['client_id']);
     // Add the access token
     $accessTokenId = $this->authServer->getStorage('session')->associateAccessToken($sessionId, $accessToken, $accessTokenExpires);
     // Associate scopes with the new session
     foreach ($authParams['scopes'] as $scope) {
         $this->authServer->getStorage('session')->associateScope($accessTokenId, $scope['id']);
     }
     $response = array('access_token' => $accessToken, 'token_type' => 'Bearer', 'expires' => $accessTokenExpires, 'expires_in' => $accessTokenExpiresIn);
     return $response;
 }
Пример #3
0
 /**
  * Complete the password grant
  * @param  null|array $inputParams
  * @return array
  */
 public function completeFlow($inputParams = null)
 {
     // Get the required params
     $authParams = $this->authServer->getParam(array('client_id', 'client_secret', 'username', 'password'), 'post', $inputParams);
     if (is_null($authParams['client_id'])) {
         throw new Exception\ClientException(sprintf($this->authServer->getExceptionMessage('invalid_request'), 'client_id'), 0);
     }
     if (is_null($authParams['client_secret'])) {
         throw new Exception\ClientException(sprintf($this->authServer->getExceptionMessage('invalid_request'), 'client_secret'), 0);
     }
     // Validate client credentials
     $clientDetails = $this->authServer->getStorage('client')->getClient($authParams['client_id'], $authParams['client_secret'], null, $this->identifier);
     if ($clientDetails === false) {
         throw new Exception\ClientException($this->authServer->getExceptionMessage('invalid_client'), 8);
     }
     $authParams['client_details'] = $clientDetails;
     if (is_null($authParams['username'])) {
         throw new Exception\ClientException(sprintf($this->authServer->getExceptionMessage('invalid_request'), 'username'), 0);
     }
     if (is_null($authParams['password'])) {
         throw new Exception\ClientException(sprintf($this->authServer->getExceptionMessage('invalid_request'), 'password'), 0);
     }
     // Check if user's username and password are correct
     $userId = call_user_func($this->getVerifyCredentialsCallback(), $authParams['username'], $authParams['password']);
     if ($userId === false) {
         throw new Exception\ClientException($this->authServer->getExceptionMessage('invalid_credentials'), 0);
     }
     // Validate any scopes that are in the request
     $scope = $this->authServer->getParam('scope', 'post', $inputParams, '');
     $scopes = explode($this->authServer->getScopeDelimeter(), $scope);
     for ($i = 0; $i < count($scopes); $i++) {
         $scopes[$i] = trim($scopes[$i]);
         if ($scopes[$i] === '') {
             unset($scopes[$i]);
         }
         // Remove any junk scopes
     }
     if ($this->authServer->scopeParamRequired() === true && $this->authServer->getDefaultScope() === null && count($scopes) === 0) {
         throw new Exception\ClientException(sprintf($this->authServer->getExceptionMessage('invalid_request'), 'scope'), 0);
     } elseif (count($scopes) === 0 && $this->authServer->getDefaultScope() !== null) {
         if (is_array($this->authServer->getDefaultScope())) {
             $scopes = $this->authServer->getDefaultScope();
         } else {
             $scopes = array($this->authServer->getDefaultScope());
         }
     }
     $authParams['scopes'] = array();
     foreach ($scopes as $scope) {
         $scopeDetails = $this->authServer->getStorage('scope')->getScope($scope, $authParams['client_id'], $this->identifier);
         if ($scopeDetails === false) {
             throw new Exception\ClientException(sprintf($this->authServer->getExceptionMessage('invalid_scope'), $scope), 4);
         }
         $authParams['scopes'][] = $scopeDetails;
     }
     // Generate an access token
     $accessToken = SecureKey::make();
     $accessTokenExpiresIn = $this->accessTokenTTL !== null ? $this->accessTokenTTL : $this->authServer->getAccessTokenTTL();
     $accessTokenExpires = time() + $accessTokenExpiresIn;
     // Create a new session
     $sessionId = $this->authServer->getStorage('session')->createSession($authParams['client_id'], 'user', $userId);
     // Associate an access token with the session
     $accessTokenId = $this->authServer->getStorage('session')->associateAccessToken($sessionId, $accessToken, $accessTokenExpires);
     // Associate scopes with the access token
     foreach ($authParams['scopes'] as $scope) {
         $this->authServer->getStorage('session')->associateScope($accessTokenId, $scope['id']);
     }
     $response = array('access_token' => $accessToken, 'token_type' => 'Bearer', 'expires' => $accessTokenExpires, 'expires_in' => $accessTokenExpiresIn);
     // Associate a refresh token if set
     if ($this->authServer->hasGrantType('refresh_token')) {
         $refreshToken = SecureKey::make();
         $refreshTokenTTL = time() + $this->authServer->getGrantType('refresh_token')->getRefreshTokenTTL();
         $this->authServer->getStorage('session')->associateRefreshToken($accessTokenId, $refreshToken, $refreshTokenTTL, $authParams['client_id']);
         $response['refresh_token'] = $refreshToken;
     }
     return $response;
 }