Page MenuHomeWickedGov Phorge
Files F4099041

AccessToken.php
No OneTemporary
Actions

Size
3 KB
Referenced Files
None
Subscribers
None

AccessToken.php
View Options

<?php
namespace MediaWiki\Extension\OAuth\Rest\Handler;
use GuzzleHttp\Psr7\ServerRequest;
use League\OAuth2\Server\Exception\OAuthServerException;
use MediaWiki\Extension\OAuth\AuthorizationProvider\Grant\AuthorizationCodeAccessTokens;
use MediaWiki\Extension\OAuth\AuthorizationProvider\Grant\ClientCredentials;
use MediaWiki\Extension\OAuth\AuthorizationProvider\Grant\RefreshToken;
use MediaWiki\Extension\OAuth\Response;
use MWExceptionHandler;
use Throwable;
use Wikimedia\ParamValidator\ParamValidator;
/**
* Handles the oauth2/access_token endpoint, which can be used after the user has returned from
* the authorization dialog to trade the off the received authorization code for an access token.
*/
class AccessToken extends AuthenticationHandler {
private const GRANT_TYPE_CLIENT_CREDENTIALS = 'client_credentials';
private const GRANT_TYPE_AUTHORIZATION_CODE = 'authorization_code';
private const GRANT_TYPE_REFRESH_TOKEN = 'refresh_token';
/**
* Support x-www-form-urlencoded (and nothing else), as required by RFC 6749.
* @return string[]
*/
public function getSupportedRequestTypes(): array {
return [
'application/x-www-form-urlencoded',
];
}
/**
* @inheritDoc
*/
public function execute() {
$response = new Response();
try {
if ( $this->queuedError ) {
throw $this->queuedError;
}
$request = ServerRequest::fromGlobals()->withParsedBody(
$this->getValidatedBody()
);
$authProvider = $this->getAuthorizationProvider();
return $authProvider->getAccessTokens( $request, $response );
} catch ( OAuthServerException $exception ) {
return $this->errorResponse( $exception, $response );
} catch ( Throwable $exception ) {
MWExceptionHandler::logException( $exception );
return $this->errorResponse(
OAuthServerException::serverError( $exception->getMessage(), $exception ),
$response
);
}
}
/**
* @inheritDoc
*/
public function getBodyParamSettings(): array {
return [
'grant_type' => [
self::PARAM_SOURCE => 'body',
ParamValidator::PARAM_TYPE => [
self::GRANT_TYPE_CLIENT_CREDENTIALS,
self::GRANT_TYPE_AUTHORIZATION_CODE,
self::GRANT_TYPE_REFRESH_TOKEN,
],
ParamValidator::PARAM_REQUIRED => true,
],
'client_id' => [
self::PARAM_SOURCE => 'body',
ParamValidator::PARAM_TYPE => 'string',
ParamValidator::PARAM_REQUIRED => false,
],
'client_secret' => [
self::PARAM_SOURCE => 'body',
ParamValidator::PARAM_TYPE => 'string',
ParamValidator::PARAM_REQUIRED => false,
],
'redirect_uri' => [
self::PARAM_SOURCE => 'body',
ParamValidator::PARAM_TYPE => 'string',
ParamValidator::PARAM_REQUIRED => false,
],
'scope' => [
self::PARAM_SOURCE => 'body',
ParamValidator::PARAM_TYPE => 'string',
ParamValidator::PARAM_REQUIRED => false,
],
'code' => [
self::PARAM_SOURCE => 'body',
ParamValidator::PARAM_TYPE => 'string',
ParamValidator::PARAM_REQUIRED => false,
],
'refresh_token' => [
self::PARAM_SOURCE => 'body',
ParamValidator::PARAM_TYPE => 'string',
ParamValidator::PARAM_REQUIRED => false,
],
'code_verifier' => [
self::PARAM_SOURCE => 'body',
ParamValidator::PARAM_TYPE => 'string',
ParamValidator::PARAM_REQUIRED => false,
]
];
}
/**
* @return string
*/
protected function getGrantType() {
$body = $this->getValidatedBody();
'@phan-var array $body';
return $body['grant_type'];
}
/**
* @param string $grantType
* @return string|false
*/
protected function getGrantClass( $grantType ) {
switch ( $grantType ) {
case static::GRANT_TYPE_AUTHORIZATION_CODE:
return AuthorizationCodeAccessTokens::class;
case static::GRANT_TYPE_CLIENT_CREDENTIALS:
return ClientCredentials::class;
case static::GRANT_TYPE_REFRESH_TOKEN:
return RefreshToken::class;
default:
return false;
}
}
}

File Metadata

Mime Type
text/x-php
Expires
Tue, Aug 18, 15:39 (3 w, 5 d ago)
Storage Engine
local-disk
Storage Format
Raw Data
Storage Handle
fa/b9/c67cd848b25d43aee2002fa1d91b
Default Alt Text
AccessToken.php (3 KB)

Event Timeline