Complex classes like Application often do a lot of different things. To break such a class down, we need to identify a cohesive component within that class. A common approach to find such a component is to look for fields/methods that share the same prefixes, or suffixes. You can also have a look at the cohesion graph to spot any un-connected, or weakly-connected components.
Once you have determined the fields that belong together, you can apply the Extract Class refactoring. If the component makes sense as a sub-class, Extract Subclass is also a candidate, and is often faster.
While breaking up the class, it is a good idea to analyze how other classes use Application, and based on these observations, apply Extract Interface, too.
| 1 | <?php |
||
| 246 | final class Application |
||
| 247 | { |
||
| 248 | /** |
||
| 249 | * @var string |
||
| 250 | */ |
||
| 251 | private $pairwiseKey = 'This is my secret Key !!!'; |
||
| 252 | /** |
||
| 253 | * @var string |
||
| 254 | */ |
||
| 255 | private $pairwiseAdditionalData = 'This is my salt or my IV !!!'; |
||
| 256 | |||
| 257 | public function __construct() |
||
| 258 | { |
||
| 259 | if (PHP_SESSION_ACTIVE !== session_status()) { |
||
| 260 | session_start(); |
||
| 261 | } |
||
| 262 | } |
||
| 263 | |||
| 264 | public function __destruct() |
||
| 265 | { |
||
| 266 | if (PHP_SESSION_ACTIVE === session_status()) { |
||
| 267 | session_destroy(); |
||
| 268 | } |
||
| 269 | |||
| 270 | foreach (['getPrivateECKeys', 'getPrivateRSAKeys', 'getPrivateNoneKeys'] as $method) { |
||
| 271 | $keyset = $this->$method(); |
||
| 272 | $keyset->delete(); |
||
| 273 | } |
||
| 274 | } |
||
| 275 | |||
| 276 | /** |
||
| 277 | * @return string |
||
| 278 | */ |
||
| 279 | protected function getPairwiseKey() |
||
| 280 | { |
||
| 281 | return $this->pairwiseKey; |
||
| 282 | } |
||
| 283 | |||
| 284 | /** |
||
| 285 | * @return string |
||
| 286 | */ |
||
| 287 | protected function getPairwiseAdditionalData() |
||
| 288 | { |
||
| 289 | return mb_substr($this->pairwiseAdditionalData, 0, 16, '8bit'); |
||
| 290 | } |
||
| 291 | |||
| 292 | /** |
||
| 293 | * @var null|OAuth2ResponseFactoryManager |
||
| 294 | */ |
||
| 295 | private $oauth2ResponseFactory = null; |
||
| 296 | |||
| 297 | /** |
||
| 298 | * @var null|OAuth2ResponseMiddleware |
||
| 299 | */ |
||
| 300 | private $oauth2ResponseMiddleware = null; |
||
| 301 | |||
| 302 | /** |
||
| 303 | * @return OAuth2ResponseFactoryManager |
||
| 304 | */ |
||
| 305 | public function getOAuth2ResponseFactory(): OAuth2ResponseFactoryManager |
||
| 306 | { |
||
| 307 | if (null === $this->oauth2ResponseFactory) { |
||
| 308 | $this->oauth2ResponseFactory = new OAuth2ResponseFactoryManager($this->getResponseFactory()); |
||
| 309 | $this->oauth2ResponseFactory->addExtension(new UriExtension()); |
||
| 310 | |||
| 311 | $this->oauth2ResponseFactory->addResponseFactory(new AuthenticateResponseFactory( |
||
| 312 | $this->getTokenEndpointAuthMethodManager() |
||
| 313 | )); |
||
| 314 | $this->oauth2ResponseFactory->addResponseFactory(new AccessDeniedResponseFactory()); |
||
| 315 | $this->oauth2ResponseFactory->addResponseFactory(new BadRequestResponseFactory()); |
||
| 316 | $this->oauth2ResponseFactory->addResponseFactory(new MethodNotAllowedResponseFactory()); |
||
| 317 | $this->oauth2ResponseFactory->addResponseFactory(new NotImplementedResponseFactory()); |
||
| 318 | $this->oauth2ResponseFactory->addResponseFactory(new RedirectResponseFactory()); |
||
| 319 | } |
||
| 320 | |||
| 321 | return $this->oauth2ResponseFactory; |
||
| 322 | } |
||
| 323 | |||
| 324 | /** |
||
| 325 | * @return OAuth2ResponseFactoryManager |
||
| 326 | */ |
||
| 327 | public function getOAuth2ResponseFactoryForTokenIntrospection(): OAuth2ResponseFactoryManager |
||
| 328 | { |
||
| 329 | if (null === $this->oauth2ResponseFactory) { |
||
| 330 | $this->oauth2ResponseFactory = new OAuth2ResponseFactoryManager($this->getResponseFactory()); |
||
| 331 | $this->oauth2ResponseFactory->addResponseFactory(new AuthenticateResponseFactoryForTokenIntrospection( |
||
| 332 | $this->getTokenIntrospectionEndpointAuthMethodManager() |
||
| 333 | )); |
||
| 334 | $this->oauth2ResponseFactory->addResponseFactory(new BadRequestResponseFactory()); |
||
| 335 | } |
||
| 336 | |||
| 337 | return $this->oauth2ResponseFactory; |
||
| 338 | } |
||
| 339 | |||
| 340 | /** |
||
| 341 | * @return OAuth2ResponseMiddleware |
||
| 342 | */ |
||
| 343 | public function getOAuth2ResponseMiddleware(): OAuth2ResponseMiddleware |
||
| 344 | { |
||
| 345 | if (null === $this->oauth2ResponseMiddleware) { |
||
| 346 | $this->oauth2ResponseMiddleware = new OAuth2ResponseMiddleware( |
||
| 347 | $this->getOAuth2ResponseFactory() |
||
| 348 | ); |
||
| 349 | } |
||
| 350 | |||
| 351 | return $this->oauth2ResponseMiddleware; |
||
| 352 | } |
||
| 353 | |||
| 354 | /** |
||
| 355 | * @var null|ClientRepository |
||
| 356 | */ |
||
| 357 | private $clientRepository = null; |
||
| 358 | |||
| 359 | /** |
||
| 360 | * @return ClientRepository |
||
| 361 | */ |
||
| 362 | public function getClientRepository(): ClientRepository |
||
| 363 | { |
||
| 364 | if (null === $this->clientRepository) { |
||
| 365 | $this->clientRepository = new ClientRepository( |
||
| 366 | $this->getClientEventStore(), |
||
| 367 | $this->getPublicMessageRecorder() |
||
| 368 | ); |
||
| 369 | } |
||
| 370 | |||
| 371 | return $this->clientRepository; |
||
| 372 | } |
||
| 373 | |||
| 374 | /** |
||
| 375 | * @var null|ResourceServerRepository |
||
| 376 | */ |
||
| 377 | private $resourceServerRepository = null; |
||
| 378 | |||
| 379 | /** |
||
| 380 | * @return ResourceServerRepository |
||
| 381 | */ |
||
| 382 | public function getResourceServerRepository(): ResourceServerRepository |
||
| 383 | { |
||
| 384 | if (null === $this->resourceServerRepository) { |
||
| 385 | $this->resourceServerRepository = new ResourceServerRepository( |
||
| 386 | $this->getResourceServerEventStore(), |
||
| 387 | $this->getPublicMessageRecorder() |
||
| 388 | ); |
||
| 389 | } |
||
| 390 | |||
| 391 | return $this->resourceServerRepository; |
||
| 392 | } |
||
| 393 | |||
| 394 | /** |
||
| 395 | * @var null|ClientRegistrationEndpoint |
||
| 396 | */ |
||
| 397 | private $clientRegistrationEndpoint = null; |
||
| 398 | |||
| 399 | /** |
||
| 400 | * @return ClientRegistrationEndpoint |
||
| 401 | */ |
||
| 402 | public function getClientRegistrationEndpoint(): ClientRegistrationEndpoint |
||
| 403 | { |
||
| 404 | if (null === $this->clientRegistrationEndpoint) { |
||
| 405 | $this->clientRegistrationEndpoint = new ClientRegistrationEndpoint( |
||
| 406 | $this->getResponseFactory(), |
||
| 407 | $this->getCommandBus() |
||
| 408 | ); |
||
| 409 | } |
||
| 410 | |||
| 411 | return $this->clientRegistrationEndpoint; |
||
| 412 | } |
||
| 413 | |||
| 414 | /** |
||
| 415 | * @var null|Pipe |
||
| 416 | */ |
||
| 417 | private $clientRegistrationPipe = null; |
||
| 418 | |||
| 419 | /** |
||
| 420 | * @return Pipe |
||
| 421 | */ |
||
| 422 | public function getClientRegistrationPipe(): Pipe |
||
| 423 | { |
||
| 424 | if (null === $this->clientRegistrationPipe) { |
||
| 425 | $this->clientRegistrationPipe = new Pipe(); |
||
| 426 | |||
| 427 | $this->clientRegistrationPipe->appendMiddleware($this->getOAuth2ResponseMiddleware()); |
||
| 428 | $this->clientRegistrationPipe->appendMiddleware($this->getInitialAccessTokenMiddleware()); |
||
| 429 | $this->clientRegistrationPipe->appendMiddleware($this->getClientRegistrationEndpoint()); |
||
| 430 | } |
||
| 431 | |||
| 432 | return $this->clientRegistrationPipe; |
||
| 433 | } |
||
| 434 | |||
| 435 | /** |
||
| 436 | * @var null|ClientAuthenticationMiddleware |
||
| 437 | */ |
||
| 438 | private $clientAuthenticationMiddleware = null; |
||
| 439 | |||
| 440 | /** |
||
| 441 | * @return ClientAuthenticationMiddleware |
||
| 442 | */ |
||
| 443 | public function getClientAuthenticationMiddleware(): ClientAuthenticationMiddleware |
||
| 444 | { |
||
| 445 | if (null === $this->clientAuthenticationMiddleware) { |
||
| 446 | $this->clientAuthenticationMiddleware = new ClientAuthenticationMiddleware( |
||
| 447 | $this->getClientRepository(), |
||
| 448 | $this->getTokenEndpointAuthMethodManager(), |
||
| 449 | false |
||
| 450 | ); |
||
| 451 | } |
||
| 452 | |||
| 453 | return $this->clientAuthenticationMiddleware; |
||
| 454 | } |
||
| 455 | |||
| 456 | /** |
||
| 457 | * @var null|ResourceServerAuthenticationMiddleware |
||
| 458 | */ |
||
| 459 | private $resourceServerAuthenticationMiddleware = null; |
||
| 460 | |||
| 461 | /** |
||
| 462 | * @return ResourceServerAuthenticationMiddleware |
||
| 463 | */ |
||
| 464 | public function getResourceServerAuthenticationMiddleware(): ResourceServerAuthenticationMiddleware |
||
| 465 | { |
||
| 466 | if (null === $this->resourceServerAuthenticationMiddleware) { |
||
| 467 | $this->resourceServerAuthenticationMiddleware = new ResourceServerAuthenticationMiddleware( |
||
| 468 | $this->getResourceServerRepository(), |
||
| 469 | $this->getTokenIntrospectionEndpointAuthMethodManager() |
||
| 470 | ); |
||
| 471 | } |
||
| 472 | |||
| 473 | return $this->resourceServerAuthenticationMiddleware; |
||
| 474 | } |
||
| 475 | |||
| 476 | /** |
||
| 477 | * @var null|ClientAuthenticationMiddleware |
||
| 478 | */ |
||
| 479 | private $clientAuthenticationMiddlewareWithRequirement = null; |
||
| 480 | |||
| 481 | /** |
||
| 482 | * @return ClientAuthenticationMiddleware |
||
| 483 | */ |
||
| 484 | public function getClientAuthenticationMiddlewareWithRequirement(): ClientAuthenticationMiddleware |
||
| 485 | { |
||
| 486 | if (null === $this->clientAuthenticationMiddlewareWithRequirement) { |
||
| 487 | $this->clientAuthenticationMiddlewareWithRequirement = new ClientAuthenticationMiddleware( |
||
| 488 | $this->getClientRepository(), |
||
| 489 | $this->getTokenEndpointAuthMethodManager(), |
||
| 490 | true |
||
| 491 | ); |
||
| 492 | } |
||
| 493 | |||
| 494 | return $this->clientAuthenticationMiddlewareWithRequirement; |
||
| 495 | } |
||
| 496 | |||
| 497 | /** |
||
| 498 | * @var null|TokenEndpointAuthMethodManager |
||
| 499 | */ |
||
| 500 | private $tokenEndpointAuthMethodManager = null; |
||
| 501 | |||
| 502 | /** |
||
| 503 | * @return TokenEndpointAuthMethodManager |
||
| 504 | */ |
||
| 505 | public function getTokenEndpointAuthMethodManager(): TokenEndpointAuthMethodManager |
||
| 506 | { |
||
| 507 | if (null === $this->tokenEndpointAuthMethodManager) { |
||
| 508 | $this->tokenEndpointAuthMethodManager = new TokenEndpointAuthMethodManager(); |
||
| 509 | $this->tokenEndpointAuthMethodManager->addTokenEndpointAuthMethod(new None()); |
||
| 510 | $this->tokenEndpointAuthMethodManager->addTokenEndpointAuthMethod(new ClientSecretBasic('My service')); |
||
| 511 | $this->tokenEndpointAuthMethodManager->addTokenEndpointAuthMethod(new ClientSecretPost()); |
||
| 512 | $this->tokenEndpointAuthMethodManager->addTokenEndpointAuthMethod(new ClientAssertionJwt( |
||
| 513 | $this->getJwtLoader() |
||
| 514 | )); |
||
| 515 | } |
||
| 516 | |||
| 517 | return $this->tokenEndpointAuthMethodManager; |
||
| 518 | } |
||
| 519 | |||
| 520 | /** |
||
| 521 | * @var null|TokenIntrospectionEndpointAuthMethodManager |
||
| 522 | */ |
||
| 523 | private $tokenIntrospectionEndpointAuthMethodManager = null; |
||
| 524 | |||
| 525 | /** |
||
| 526 | * @return TokenIntrospectionEndpointAuthMethodManager |
||
| 527 | */ |
||
| 528 | public function getTokenIntrospectionEndpointAuthMethodManager(): TokenIntrospectionEndpointAuthMethodManager |
||
| 529 | { |
||
| 530 | if (null === $this->tokenIntrospectionEndpointAuthMethodManager) { |
||
| 531 | $this->tokenIntrospectionEndpointAuthMethodManager = new TokenIntrospectionEndpointAuthMethodManager(); |
||
| 532 | $this->tokenIntrospectionEndpointAuthMethodManager->addTokenIntrospectionEndpointAuthMethod(new ResourceServerAuthMethodByIpAddress()); |
||
| 533 | } |
||
| 534 | |||
| 535 | return $this->tokenIntrospectionEndpointAuthMethodManager; |
||
| 536 | } |
||
| 537 | |||
| 538 | /** |
||
| 539 | * @var null|AuthCodeCreatedEventHandler |
||
| 540 | */ |
||
| 541 | private $authCodeCreatedEventHandler = null; |
||
| 542 | |||
| 543 | /** |
||
| 544 | * @return AuthCodeCreatedEventHandler |
||
| 545 | */ |
||
| 546 | public function getAuthCodeCreatedEventHandler(): AuthCodeCreatedEventHandler |
||
| 547 | { |
||
| 548 | if (null === $this->authCodeCreatedEventHandler) { |
||
| 549 | $this->authCodeCreatedEventHandler = new AuthCodeCreatedEventHandler(); |
||
| 550 | } |
||
| 551 | |||
| 552 | return $this->authCodeCreatedEventHandler; |
||
| 553 | } |
||
| 554 | |||
| 555 | /** |
||
| 556 | * @var null|AuthCodeMarkedAsUsedEventHandler |
||
| 557 | */ |
||
| 558 | private $authCodeMarkedAsUsedEventHandler = null; |
||
| 559 | |||
| 560 | /** |
||
| 561 | * @return AuthCodeMarkedAsUsedEventHandler |
||
| 562 | */ |
||
| 563 | public function getAuthCodeMarkedAsUsedEventHandler(): AuthCodeMarkedAsUsedEventHandler |
||
| 564 | { |
||
| 565 | if (null === $this->authCodeMarkedAsUsedEventHandler) { |
||
| 566 | $this->authCodeMarkedAsUsedEventHandler = new AuthCodeMarkedAsUsedEventHandler(); |
||
| 567 | } |
||
| 568 | |||
| 569 | return $this->authCodeMarkedAsUsedEventHandler; |
||
| 570 | } |
||
| 571 | |||
| 572 | /** |
||
| 573 | * @var null|AuthCodeRevokedEventHandler |
||
| 574 | */ |
||
| 575 | private $authCodeRevokedEventHandler = null; |
||
| 576 | |||
| 577 | /** |
||
| 578 | * @return AuthCodeRevokedEventHandler |
||
| 579 | */ |
||
| 580 | public function getAuthCodeRevokedEventHandler(): AuthCodeRevokedEventHandler |
||
| 581 | { |
||
| 582 | if (null === $this->authCodeRevokedEventHandler) { |
||
| 583 | $this->authCodeRevokedEventHandler = new AuthCodeRevokedEventHandler(); |
||
| 584 | } |
||
| 585 | |||
| 586 | return $this->authCodeRevokedEventHandler; |
||
| 587 | } |
||
| 588 | |||
| 589 | /** |
||
| 590 | * @var null|ClientCreatedEventHandler |
||
| 591 | */ |
||
| 592 | private $clientCreatedEventHandler = null; |
||
| 593 | |||
| 594 | /** |
||
| 595 | * @return ClientCreatedEventHandler |
||
| 596 | */ |
||
| 597 | public function getClientCreatedEventHandler(): ClientCreatedEventHandler |
||
| 598 | { |
||
| 599 | if (null === $this->clientCreatedEventHandler) { |
||
| 600 | $this->clientCreatedEventHandler = new ClientCreatedEventHandler( |
||
| 601 | $this->getClientRepository() |
||
| 602 | ); |
||
| 603 | } |
||
| 604 | |||
| 605 | return $this->clientCreatedEventHandler; |
||
| 606 | } |
||
| 607 | |||
| 608 | /** |
||
| 609 | * @var null|ClientDeletedEventHandler |
||
| 610 | */ |
||
| 611 | private $clientDeletedEventHandler = null; |
||
| 612 | |||
| 613 | /** |
||
| 614 | * @return ClientDeletedEventHandler |
||
| 615 | */ |
||
| 616 | public function getClientDeletedEventHandler(): ClientDeletedEventHandler |
||
| 617 | { |
||
| 618 | if (null === $this->clientDeletedEventHandler) { |
||
| 619 | $this->clientDeletedEventHandler = new ClientDeletedEventHandler(); |
||
| 620 | } |
||
| 621 | |||
| 622 | return $this->clientDeletedEventHandler; |
||
| 623 | } |
||
| 624 | |||
| 625 | /** |
||
| 626 | * @var null|ClientUpdatedEventHandler |
||
| 627 | */ |
||
| 628 | private $clientUpdatedEventHandler = null; |
||
| 629 | |||
| 630 | /** |
||
| 631 | * @return ClientUpdatedEventHandler |
||
| 632 | */ |
||
| 633 | public function getClientUpdatedEventHandler(): ClientUpdatedEventHandler |
||
| 634 | { |
||
| 635 | if (null === $this->clientUpdatedEventHandler) { |
||
| 636 | $this->clientUpdatedEventHandler = new ClientUpdatedEventHandler(); |
||
| 637 | } |
||
| 638 | |||
| 639 | return $this->clientUpdatedEventHandler; |
||
| 640 | } |
||
| 641 | |||
| 642 | /** |
||
| 643 | * @var null|MessageBusSupportingMiddleware |
||
| 644 | */ |
||
| 645 | private $commandBus = null; |
||
| 646 | |||
| 647 | /** |
||
| 648 | * @return MessageBusSupportingMiddleware |
||
| 649 | */ |
||
| 650 | public function getCommandBus(): MessageBusSupportingMiddleware |
||
| 651 | { |
||
| 652 | if (null === $this->commandBus) { |
||
| 653 | $this->commandBus = new MessageBusSupportingMiddleware(); |
||
| 654 | $this->commandBus->appendMiddleware(new HandlesRecordedMessagesMiddleware( |
||
| 655 | $this->getPublicMessageRecorder(), |
||
| 656 | $this->getEventBus() |
||
| 657 | )); |
||
| 658 | $this->commandBus->appendMiddleware(new FinishesHandlingMessageBeforeHandlingNext()); |
||
| 659 | $this->commandBus->appendMiddleware(new DelegatesToMessageHandlerMiddleware( |
||
| 660 | $this->getCommandHandlerResolver() |
||
| 661 | )); |
||
| 662 | } |
||
| 663 | |||
| 664 | return $this->commandBus; |
||
| 665 | } |
||
| 666 | |||
| 667 | /** |
||
| 668 | * @var null|CallableMap |
||
| 669 | */ |
||
| 670 | private $commandHandlerMap = null; |
||
| 671 | |||
| 672 | /** |
||
| 673 | * @return CallableMap |
||
| 674 | */ |
||
| 675 | public function getCommandHandlerMap(): CallableMap |
||
| 676 | { |
||
| 677 | if (null === $this->commandHandlerMap) { |
||
| 678 | $this->commandHandlerMap = new CallableMap( |
||
| 679 | [ |
||
| 680 | CreateClientCommand::class => CreateClientCommandHandler::class, |
||
| 681 | DeleteClientCommand::class => DeleteClientCommandHandler::class, |
||
| 682 | UpdateClientCommand::class => UpdateClientCommandHandler::class, |
||
| 683 | CreateResourceServerCommand::class => CreateResourceServerCommandHandler::class, |
||
| 684 | DeleteResourceServerCommand::class => DeleteResourceServerCommandHandler::class, |
||
| 685 | UpdateResourceServerCommand::class => UpdateResourceServerCommandHandler::class, |
||
| 686 | CreateAccessTokenCommand::class => CreateAccessTokenCommandHandler::class, |
||
| 687 | CreateAccessTokenWithRefreshTokenCommand::class => CreateAccessTokenWithRefreshTokenCommandHandler::class, |
||
| 688 | RevokeAccessTokenCommand::class => RevokeAccessTokenCommandHandler::class, |
||
| 689 | |||
| 690 | CreateRefreshTokenCommand::class => CreateRefreshTokenCommandHandler::class, |
||
| 691 | RevokeRefreshTokenCommand::class => RevokeRefreshTokenCommandHandler::class, |
||
| 692 | |||
| 693 | CreateAuthCodeCommand::class => CreateAuthCodeCommandHandler::class, |
||
| 694 | MarkAuthCodeAsUsedCommand::class => MarkAuthCodeAsUsedCommandHandler::class, |
||
| 695 | RevokeAuthCodeCommand::class => RevokeAuthCodeCommandHandler::class, |
||
| 696 | ], |
||
| 697 | $this->getServiceLocatorAwareCallableResolver() |
||
| 698 | ); |
||
| 699 | } |
||
| 700 | |||
| 701 | return $this->commandHandlerMap; |
||
| 702 | } |
||
| 703 | |||
| 704 | /** |
||
| 705 | * @var null|NameBasedMessageHandlerResolver |
||
| 706 | */ |
||
| 707 | private $commandHandlerResolver = null; |
||
| 708 | |||
| 709 | /** |
||
| 710 | * @return NameBasedMessageHandlerResolver |
||
| 711 | */ |
||
| 712 | public function getCommandHandlerResolver(): NameBasedMessageHandlerResolver |
||
| 713 | { |
||
| 714 | if (null === $this->commandHandlerResolver) { |
||
| 715 | $this->commandHandlerResolver = new NameBasedMessageHandlerResolver( |
||
| 716 | new ClassBasedNameResolver(), |
||
| 717 | $this->getCommandHandlerMap() |
||
| 718 | ); |
||
| 719 | } |
||
| 720 | |||
| 721 | return $this->commandHandlerResolver; |
||
| 722 | } |
||
| 723 | |||
| 724 | /** |
||
| 725 | * @var null|Container |
||
| 726 | */ |
||
| 727 | private $container = null; |
||
| 728 | |||
| 729 | /** |
||
| 730 | * @return Container |
||
| 731 | */ |
||
| 732 | public function getContainer(): Container |
||
| 733 | { |
||
| 734 | if (null === $this->container) { |
||
| 735 | $this->container = new Container(); |
||
| 736 | |||
| 737 | $this->container->add($this->getCreateClientCommandHandler()); |
||
| 738 | $this->container->add($this->getDeleteClientCommandHandler()); |
||
| 739 | $this->container->add($this->getUpdateClientCommandHandler()); |
||
| 740 | |||
| 741 | $this->container->add($this->getCreateResourceServerCommandHandler()); |
||
| 742 | $this->container->add($this->getDeleteResourceServerCommandHandler()); |
||
| 743 | $this->container->add($this->getUpdateResourceServerCommandHandler()); |
||
| 744 | |||
| 745 | $this->container->add($this->getCreateAccessTokenCommandHandler()); |
||
| 746 | $this->container->add($this->getCreateAccessTokenWithRefreshTokenCommandHandler()); |
||
| 747 | $this->container->add($this->getRevokeAccessTokenCommandHandler()); |
||
| 748 | |||
| 749 | $this->container->add($this->getCreateRefreshTokenCommandHandler()); |
||
| 750 | $this->container->add($this->getRevokeRefreshTokenCommandHandler()); |
||
| 751 | |||
| 752 | $this->container->add($this->getCreateAuthCodeCommandHandler()); |
||
| 753 | $this->container->add($this->getMarkAuthCodeAsUsedCommandHandler()); |
||
| 754 | $this->container->add($this->getRevokeAuthCodeCommandHandler()); |
||
| 755 | |||
| 756 | $this->container->add($this->getClientCreatedEventHandler()); |
||
| 757 | $this->container->add($this->getClientDeletedEventHandler()); |
||
| 758 | $this->container->add($this->getClientUpdatedEventHandler()); |
||
| 759 | |||
| 760 | $this->container->add($this->getAuthCodeCreatedEventHandler()); |
||
| 761 | $this->container->add($this->getAuthCodeMarkedAsUsedEventHandler()); |
||
| 762 | $this->container->add($this->getAuthCodeRevokedEventHandler()); |
||
| 763 | |||
| 764 | $this->container->add($this->getAccessTokenRevokedEventHandler()); |
||
| 765 | $this->container->add($this->getAccessTokenCreatedEventHandler()); |
||
| 766 | |||
| 767 | $this->container->add($this->getRefreshTokenCreatedEventHandler()); |
||
| 768 | $this->container->add($this->getRefreshTokenRevokedEventHandler()); |
||
| 769 | } |
||
| 770 | |||
| 771 | return $this->container; |
||
| 772 | } |
||
| 773 | |||
| 774 | /** |
||
| 775 | * @var null|CreateClientCommandHandler |
||
| 776 | */ |
||
| 777 | private $createClientCommandHandler = null; |
||
| 778 | |||
| 779 | /** |
||
| 780 | * @return CreateClientCommandHandler |
||
| 781 | */ |
||
| 782 | public function getCreateClientCommandHandler(): CreateClientCommandHandler |
||
| 783 | { |
||
| 784 | if (null === $this->createClientCommandHandler) { |
||
| 785 | $this->createClientCommandHandler = new CreateClientCommandHandler( |
||
| 786 | $this->getClientRepository(), |
||
| 787 | $this->getRuleManager() |
||
| 788 | ); |
||
| 789 | } |
||
| 790 | |||
| 791 | return $this->createClientCommandHandler; |
||
| 792 | } |
||
| 793 | |||
| 794 | /** |
||
| 795 | * @var null|DeleteClientCommandHandler |
||
| 796 | */ |
||
| 797 | private $deleteClientCommandHandler = null; |
||
| 798 | |||
| 799 | /** |
||
| 800 | * @return DeleteClientCommandHandler |
||
| 801 | */ |
||
| 802 | public function getDeleteClientCommandHandler(): DeleteClientCommandHandler |
||
| 803 | { |
||
| 804 | if (null === $this->deleteClientCommandHandler) { |
||
| 805 | $this->deleteClientCommandHandler = new DeleteClientCommandHandler( |
||
| 806 | $this->getClientRepository() |
||
| 807 | ); |
||
| 808 | } |
||
| 809 | |||
| 810 | return $this->deleteClientCommandHandler; |
||
| 811 | } |
||
| 812 | |||
| 813 | /** |
||
| 814 | * @var null|UpdateClientCommandHandler |
||
| 815 | */ |
||
| 816 | private $updateClientCommandHandler = null; |
||
| 817 | |||
| 818 | /** |
||
| 819 | * @return UpdateClientCommandHandler |
||
| 820 | */ |
||
| 821 | public function getUpdateClientCommandHandler(): UpdateClientCommandHandler |
||
| 822 | { |
||
| 823 | if (null === $this->updateClientCommandHandler) { |
||
| 824 | $this->updateClientCommandHandler = new UpdateClientCommandHandler( |
||
| 825 | $this->getClientRepository(), |
||
| 826 | $this->getRuleManager() |
||
| 827 | ); |
||
| 828 | } |
||
| 829 | |||
| 830 | return $this->updateClientCommandHandler; |
||
| 831 | } |
||
| 832 | |||
| 833 | /** |
||
| 834 | * @var null|CreateResourceServerCommandHandler |
||
| 835 | */ |
||
| 836 | private $createResourceServerCommandHandler = null; |
||
| 837 | |||
| 838 | /** |
||
| 839 | * @return CreateResourceServerCommandHandler |
||
| 840 | */ |
||
| 841 | public function getCreateResourceServerCommandHandler(): CreateResourceServerCommandHandler |
||
| 842 | { |
||
| 843 | if (null === $this->createResourceServerCommandHandler) { |
||
| 844 | $this->createResourceServerCommandHandler = new CreateResourceServerCommandHandler( |
||
| 845 | $this->getResourceServerRepository() |
||
| 846 | ); |
||
| 847 | } |
||
| 848 | |||
| 849 | return $this->createResourceServerCommandHandler; |
||
| 850 | } |
||
| 851 | |||
| 852 | /** |
||
| 853 | * @var null|DeleteResourceServerCommandHandler |
||
| 854 | */ |
||
| 855 | private $deleteResourceServerCommandHandler = null; |
||
| 856 | |||
| 857 | /** |
||
| 858 | * @return DeleteResourceServerCommandHandler |
||
| 859 | */ |
||
| 860 | public function getDeleteResourceServerCommandHandler(): DeleteResourceServerCommandHandler |
||
| 861 | { |
||
| 862 | if (null === $this->deleteResourceServerCommandHandler) { |
||
| 863 | $this->deleteResourceServerCommandHandler = new DeleteResourceServerCommandHandler( |
||
| 864 | $this->getResourceServerRepository() |
||
| 865 | ); |
||
| 866 | } |
||
| 867 | |||
| 868 | return $this->deleteResourceServerCommandHandler; |
||
| 869 | } |
||
| 870 | |||
| 871 | /** |
||
| 872 | * @var null|UpdateResourceServerCommandHandler |
||
| 873 | */ |
||
| 874 | private $updateResourceServerCommandHandler = null; |
||
| 875 | |||
| 876 | /** |
||
| 877 | * @return UpdateResourceServerCommandHandler |
||
| 878 | */ |
||
| 879 | public function getUpdateResourceServerCommandHandler(): UpdateResourceServerCommandHandler |
||
| 880 | { |
||
| 881 | if (null === $this->updateResourceServerCommandHandler) { |
||
| 882 | $this->updateResourceServerCommandHandler = new UpdateResourceServerCommandHandler( |
||
| 883 | $this->getResourceServerRepository() |
||
| 884 | ); |
||
| 885 | } |
||
| 886 | |||
| 887 | return $this->updateResourceServerCommandHandler; |
||
| 888 | } |
||
| 889 | |||
| 890 | /** |
||
| 891 | * @var null|MessageBusSupportingMiddleware |
||
| 892 | */ |
||
| 893 | private $eventBus = null; |
||
| 894 | |||
| 895 | /** |
||
| 896 | * @return MessageBusSupportingMiddleware |
||
| 897 | */ |
||
| 898 | public function getEventBus(): MessageBusSupportingMiddleware |
||
| 899 | { |
||
| 900 | if (null === $this->eventBus) { |
||
| 901 | $this->eventBus = new MessageBusSupportingMiddleware(); |
||
| 902 | $this->eventBus->appendMiddleware(new FinishesHandlingMessageBeforeHandlingNext()); |
||
| 903 | $this->eventBus->appendMiddleware(new NotifiesMessageSubscribersMiddleware( |
||
| 904 | $this->getEventHandlerResolver() |
||
| 905 | )); |
||
| 906 | } |
||
| 907 | |||
| 908 | return $this->eventBus; |
||
| 909 | } |
||
| 910 | |||
| 911 | /** |
||
| 912 | * @var null|NameBasedMessageSubscriberResolver |
||
| 913 | */ |
||
| 914 | private $eventHandlerResolver = null; |
||
| 915 | |||
| 916 | /** |
||
| 917 | * @return NameBasedMessageSubscriberResolver |
||
| 918 | */ |
||
| 919 | public function getEventHandlerResolver(): NameBasedMessageSubscriberResolver |
||
| 920 | { |
||
| 921 | if (null === $this->eventHandlerResolver) { |
||
| 922 | $this->eventHandlerResolver = new NameBasedMessageSubscriberResolver( |
||
| 923 | new ClassBasedNameResolver(), |
||
| 924 | $this->getEventHandlerCollection() |
||
| 925 | ); |
||
| 926 | } |
||
| 927 | |||
| 928 | return $this->eventHandlerResolver; |
||
| 929 | } |
||
| 930 | |||
| 931 | /** |
||
| 932 | * @var null|CallableCollection |
||
| 933 | */ |
||
| 934 | private $eventHandlerCollection = null; |
||
| 935 | |||
| 936 | /** |
||
| 937 | * @return CallableCollection |
||
| 938 | */ |
||
| 939 | public function getEventHandlerCollection(): CallableCollection |
||
| 940 | { |
||
| 941 | if (null === $this->eventHandlerCollection) { |
||
| 942 | $this->eventHandlerCollection = new CallableCollection( |
||
| 943 | [ |
||
| 944 | AccessTokenCreatedEvent::class => [AccessTokenCreatedEventHandler::class], |
||
| 945 | AccessTokenRevokedEvent::class => [AccessTokenRevokedEventHandler::class], |
||
| 946 | AuthCodeCreatedEvent::class => [AuthCodeCreatedEventHandler::class], |
||
| 947 | AuthCodeMarkedAsUsedEvent::class => [AuthCodeMarkedAsUsedEventHandler::class], |
||
| 948 | AuthCodeRevokedEvent::class => [AuthCodeRevokedEventHandler::class], |
||
| 949 | ClientCreatedEvent::class => [ClientCreatedEventHandler::class], |
||
| 950 | ClientDeletedEvent::class => [ClientDeletedEventHandler::class], |
||
| 951 | ClientParametersUpdatedEvent::class => [ClientUpdatedEventHandler::class], |
||
| 952 | InitialAccessTokenCreatedEvent::class => [], |
||
| 953 | InitialAccessTokenRevokedEvent::class => [], |
||
| 954 | RefreshTokenCreatedEvent::class => [RefreshTokenCreatedEventHandler::class], |
||
| 955 | RefreshTokenRevokedEvent::class => [RefreshTokenRevokedEventHandler::class], |
||
| 956 | ], |
||
| 957 | $this->getServiceLocatorAwareCallableResolver() |
||
| 958 | ); |
||
| 959 | } |
||
| 960 | |||
| 961 | return $this->eventHandlerCollection; |
||
| 962 | } |
||
| 963 | |||
| 964 | /** |
||
| 965 | * @var null|PublicMessageRecorder |
||
| 966 | */ |
||
| 967 | private $publicMessageRecorder = null; |
||
| 968 | |||
| 969 | /** |
||
| 970 | * @return PublicMessageRecorder |
||
| 971 | */ |
||
| 972 | public function getPublicMessageRecorder(): PublicMessageRecorder |
||
| 973 | { |
||
| 974 | if (null === $this->publicMessageRecorder) { |
||
| 975 | $this->publicMessageRecorder = new PublicMessageRecorder(); |
||
| 976 | } |
||
| 977 | |||
| 978 | return $this->publicMessageRecorder; |
||
| 979 | } |
||
| 980 | |||
| 981 | /** |
||
| 982 | * @var null|ResponseFactoryInterface |
||
| 983 | */ |
||
| 984 | private $responseFactory = null; |
||
| 985 | |||
| 986 | /** |
||
| 987 | * @return ResponseFactoryInterface |
||
| 988 | */ |
||
| 989 | public function getResponseFactory(): ResponseFactoryInterface |
||
| 990 | { |
||
| 991 | if (null === $this->responseFactory) { |
||
| 992 | $this->responseFactory = new ResponseFactory(); |
||
| 993 | } |
||
| 994 | |||
| 995 | return $this->responseFactory; |
||
| 996 | } |
||
| 997 | |||
| 998 | /** |
||
| 999 | * @var null|UriFactoryInterface |
||
| 1000 | */ |
||
| 1001 | private $uriFactory = null; |
||
| 1002 | |||
| 1003 | /** |
||
| 1004 | * @return UriFactoryInterface |
||
| 1005 | */ |
||
| 1006 | public function getUriFactory(): UriFactoryInterface |
||
| 1007 | { |
||
| 1008 | if (null === $this->uriFactory) { |
||
| 1009 | $this->uriFactory = new UriFactory(); |
||
| 1010 | } |
||
| 1011 | |||
| 1012 | return $this->uriFactory; |
||
| 1013 | } |
||
| 1014 | |||
| 1015 | /** |
||
| 1016 | * @var null|RuleManager |
||
| 1017 | */ |
||
| 1018 | private $ruleManager = null; |
||
| 1019 | |||
| 1020 | /** |
||
| 1021 | * @return RuleManager |
||
| 1022 | */ |
||
| 1023 | public function getRuleManager(): RuleManager |
||
| 1024 | { |
||
| 1025 | if (null === $this->ruleManager) { |
||
| 1026 | $this->ruleManager = new RuleManager( |
||
| 1027 | new ClientIdRule() |
||
| 1028 | ); |
||
| 1029 | $this->ruleManager |
||
| 1030 | ->add(new ClientRegistrationManagementRule()) |
||
| 1031 | ->add(new CommonParametersRule()) |
||
| 1032 | ->add($this->getGrantTypeFlowRule()) |
||
| 1033 | ->add(new RedirectionUriRule()) |
||
| 1034 | ->add(new ScopeRule($this->getScopeRepository())) |
||
| 1035 | ->add($this->getSoftwareRule()) |
||
| 1036 | ->add(new SubjectTypeRule($this->getUserInfo())) |
||
| 1037 | ->add(new TokenEndpointAuthMethodEndpointRule($this->getTokenEndpointAuthMethodManager())); |
||
| 1038 | } |
||
| 1039 | |||
| 1040 | return $this->ruleManager; |
||
| 1041 | } |
||
| 1042 | |||
| 1043 | /** |
||
| 1044 | * @var null|SoftwareRule |
||
| 1045 | */ |
||
| 1046 | private $softwareRule = null; |
||
| 1047 | |||
| 1048 | /** |
||
| 1049 | * @return SoftwareRule |
||
| 1050 | */ |
||
| 1051 | private function getSoftwareRule(): SoftwareRule |
||
| 1052 | { |
||
| 1053 | if (null === $this->softwareRule) { |
||
| 1054 | $this->softwareRule = new SoftwareRule( |
||
| 1055 | $this->getJwtLoader(), |
||
| 1056 | $this->getPublicKeys(), |
||
| 1057 | false, |
||
| 1058 | ['ES256'] |
||
| 1059 | ); |
||
| 1060 | } |
||
| 1061 | |||
| 1062 | return $this->softwareRule; |
||
| 1063 | } |
||
| 1064 | |||
| 1065 | /** |
||
| 1066 | * @return JWKSetInterface |
||
| 1067 | */ |
||
| 1068 | private function getPublicKeys(): JWKSetInterface |
||
| 1069 | { |
||
| 1070 | return JWKFactory::createPublicKeySet($this->getPrivateKeys()); |
||
| 1071 | } |
||
| 1072 | |||
| 1073 | /** |
||
| 1074 | * @var null|JWKSetInterface |
||
| 1075 | */ |
||
| 1076 | private $privateKeys = null; |
||
| 1077 | |||
| 1078 | /** |
||
| 1079 | * @return JWKSetInterface |
||
| 1080 | */ |
||
| 1081 | public function getPrivateKeys(): JWKSetInterface |
||
| 1082 | { |
||
| 1083 | if (null === $this->privateKeys) { |
||
| 1084 | $ecKeys = $this->getPrivateECKeys(); |
||
| 1085 | $rsaKeys = $this->getPrivateRSAKeys(); |
||
| 1086 | $noneKeys = $this->getPrivateNoneKeys(); |
||
| 1087 | |||
| 1088 | $this->privateKeys = new JWKSets([ |
||
| 1089 | $ecKeys, |
||
| 1090 | $rsaKeys, |
||
| 1091 | $noneKeys, |
||
| 1092 | ]); |
||
| 1093 | } |
||
| 1094 | |||
| 1095 | return $this->privateKeys; |
||
| 1096 | } |
||
| 1097 | |||
| 1098 | /** |
||
| 1099 | * @var null|StorableJWKSet |
||
| 1100 | */ |
||
| 1101 | private $privateECKeys = null; |
||
| 1102 | |||
| 1103 | /** |
||
| 1104 | * @return StorableJWKSet |
||
| 1105 | */ |
||
| 1106 | public function getPrivateECKeys(): StorableJWKSet |
||
| 1107 | { |
||
| 1108 | if (null === $this->privateECKeys) { |
||
| 1109 | $this->privateECKeys = JWKFactory::createStorableKeySet( |
||
| 1110 | tempnam(sys_get_temp_dir(), 'EC.keys'), |
||
| 1111 | [ |
||
| 1112 | 'kty' => 'EC', |
||
| 1113 | 'alg' => 'ES256', |
||
| 1114 | 'crv' => 'P-256', |
||
| 1115 | ], |
||
| 1116 | 2 |
||
| 1117 | ); |
||
| 1118 | } |
||
| 1119 | |||
| 1120 | return $this->privateECKeys; |
||
| 1121 | } |
||
| 1122 | |||
| 1123 | /** |
||
| 1124 | * @var null|StorableJWKSet |
||
| 1125 | */ |
||
| 1126 | private $privateNoneKeys = null; |
||
| 1127 | |||
| 1128 | /** |
||
| 1129 | * @return StorableJWKSet |
||
| 1130 | */ |
||
| 1131 | public function getPrivateNoneKeys(): StorableJWKSet |
||
| 1132 | { |
||
| 1133 | if (null === $this->privateNoneKeys) { |
||
| 1134 | $this->privateNoneKeys = JWKFactory::createStorableKeySet( |
||
| 1135 | tempnam(sys_get_temp_dir(), 'none.keys'), |
||
| 1136 | [ |
||
| 1137 | 'kty' => 'none', |
||
| 1138 | 'alg' => 'none', |
||
| 1139 | ], |
||
| 1140 | 1 |
||
| 1141 | ); |
||
| 1142 | } |
||
| 1143 | |||
| 1144 | return $this->privateNoneKeys; |
||
| 1145 | } |
||
| 1146 | |||
| 1147 | /** |
||
| 1148 | * @var null|StorableJWKSet |
||
| 1149 | */ |
||
| 1150 | private $privateRSAKeys = null; |
||
| 1151 | |||
| 1152 | /** |
||
| 1153 | * @return StorableJWKSet |
||
| 1154 | */ |
||
| 1155 | public function getPrivateRSAKeys(): StorableJWKSet |
||
| 1156 | { |
||
| 1157 | if (null === $this->privateRSAKeys) { |
||
| 1158 | $this->privateRSAKeys = JWKFactory::createStorableKeySet( |
||
| 1159 | tempnam(sys_get_temp_dir(), 'RSA.keys'), |
||
| 1160 | [ |
||
| 1161 | 'kty' => 'RSA', |
||
| 1162 | 'alg' => 'RS256', |
||
| 1163 | 'size' => '1024', |
||
| 1164 | ], |
||
| 1165 | 2 |
||
| 1166 | ); |
||
| 1167 | } |
||
| 1168 | |||
| 1169 | return $this->privateRSAKeys; |
||
| 1170 | } |
||
| 1171 | |||
| 1172 | /** |
||
| 1173 | * @var null|ServerRequestFactoryInterface |
||
| 1174 | */ |
||
| 1175 | private $serverRequestFactory = null; |
||
| 1176 | |||
| 1177 | /** |
||
| 1178 | * @return ServerRequestFactoryInterface |
||
| 1179 | */ |
||
| 1180 | public function getServerRequestFactory(): ServerRequestFactoryInterface |
||
| 1181 | { |
||
| 1182 | if (null === $this->serverRequestFactory) { |
||
| 1183 | $this->serverRequestFactory = new ServerRequestFactory(); |
||
| 1184 | } |
||
| 1185 | |||
| 1186 | return $this->serverRequestFactory; |
||
| 1187 | } |
||
| 1188 | |||
| 1189 | /** |
||
| 1190 | * @var null|ServiceLocatorAwareCallableResolver |
||
| 1191 | */ |
||
| 1192 | private $serviceLocatorAwareCallableResolver = null; |
||
| 1193 | |||
| 1194 | /** |
||
| 1195 | * @return ServiceLocatorAwareCallableResolver |
||
| 1196 | */ |
||
| 1197 | public function getServiceLocatorAwareCallableResolver(): ServiceLocatorAwareCallableResolver |
||
| 1198 | { |
||
| 1199 | if (null === $this->serviceLocatorAwareCallableResolver) { |
||
| 1200 | $this->serviceLocatorAwareCallableResolver = new ServiceLocatorAwareCallableResolver( |
||
| 1201 | $this->getServiceLocator() |
||
| 1202 | ); |
||
| 1203 | } |
||
| 1204 | |||
| 1205 | return $this->serviceLocatorAwareCallableResolver; |
||
| 1206 | } |
||
| 1207 | |||
| 1208 | /** |
||
| 1209 | * @var null|ServiceLocator |
||
| 1210 | */ |
||
| 1211 | private $serviceLocator = null; |
||
| 1212 | |||
| 1213 | /** |
||
| 1214 | * @return ServiceLocator |
||
| 1215 | */ |
||
| 1216 | public function getServiceLocator(): ServiceLocator |
||
| 1217 | { |
||
| 1218 | if (null === $this->serviceLocator) { |
||
| 1219 | $this->serviceLocator = new ServiceLocator( |
||
| 1220 | $this->getContainer() |
||
| 1221 | ); |
||
| 1222 | } |
||
| 1223 | |||
| 1224 | return $this->serviceLocator; |
||
| 1225 | } |
||
| 1226 | |||
| 1227 | /** |
||
| 1228 | * @var null|GrantTypeFlowRule |
||
| 1229 | */ |
||
| 1230 | private $grantTypeFlowRule = null; |
||
| 1231 | |||
| 1232 | /** |
||
| 1233 | * @return GrantTypeFlowRule |
||
| 1234 | */ |
||
| 1235 | public function getGrantTypeFlowRule(): GrantTypeFlowRule |
||
| 1236 | { |
||
| 1237 | if (null === $this->grantTypeFlowRule) { |
||
| 1238 | $this->grantTypeFlowRule = new GrantTypeFlowRule( |
||
| 1239 | $this->getGrantTypeManager(), |
||
| 1240 | $this->getResponseTypeManager() |
||
| 1241 | ); |
||
| 1242 | } |
||
| 1243 | |||
| 1244 | return $this->grantTypeFlowRule; |
||
| 1245 | } |
||
| 1246 | |||
| 1247 | /** |
||
| 1248 | * @var null|GrantTypeManager |
||
| 1249 | */ |
||
| 1250 | private $grantTypeManager = null; |
||
| 1251 | |||
| 1252 | /** |
||
| 1253 | * @return GrantTypeManager |
||
| 1254 | */ |
||
| 1255 | public function getGrantTypeManager(): GrantTypeManager |
||
| 1256 | { |
||
| 1257 | if (null === $this->grantTypeManager) { |
||
| 1258 | $this->grantTypeManager = new GrantTypeManager(); |
||
| 1259 | $this->grantTypeManager->add($this->getAuthorizationCodeGrantType()); |
||
| 1260 | $this->grantTypeManager->add($this->getClientCredentialsGrantType()); |
||
| 1261 | $this->grantTypeManager->add($this->getJWTBearerGrantType()); |
||
| 1262 | $this->grantTypeManager->add($this->getResourceOwnerPasswordCredentialsGrantType()); |
||
| 1263 | $this->grantTypeManager->add($this->getRefreshTokenGrantType()); |
||
| 1264 | } |
||
| 1265 | |||
| 1266 | return $this->grantTypeManager; |
||
| 1267 | } |
||
| 1268 | |||
| 1269 | /** |
||
| 1270 | * @var null|ResponseTypeManager |
||
| 1271 | */ |
||
| 1272 | private $responseTypeManager = null; |
||
| 1273 | |||
| 1274 | /** |
||
| 1275 | * @return ResponseTypeManager |
||
| 1276 | */ |
||
| 1277 | public function getResponseTypeManager(): ResponseTypeManager |
||
| 1278 | { |
||
| 1279 | if (null === $this->responseTypeManager) { |
||
| 1280 | $this->responseTypeManager = new ResponseTypeManager(); |
||
| 1281 | $this->responseTypeManager->add($this->getCodeResponseType()); |
||
| 1282 | $this->responseTypeManager->add($this->getTokenResponseType()); |
||
| 1283 | $this->responseTypeManager->add($this->getIdTokenResponseType()); |
||
| 1284 | $this->responseTypeManager->add($this->getNoneResponseType()); |
||
| 1285 | } |
||
| 1286 | |||
| 1287 | return $this->responseTypeManager; |
||
| 1288 | } |
||
| 1289 | |||
| 1290 | /** |
||
| 1291 | * @var null|ClientCredentialsGrantType |
||
| 1292 | */ |
||
| 1293 | private $clientCredentialsGrantType = null; |
||
| 1294 | |||
| 1295 | /** |
||
| 1296 | * @return ClientCredentialsGrantType |
||
| 1297 | */ |
||
| 1298 | public function getClientCredentialsGrantType(): ClientCredentialsGrantType |
||
| 1299 | { |
||
| 1300 | if (null === $this->clientCredentialsGrantType) { |
||
| 1301 | $this->clientCredentialsGrantType = new ClientCredentialsGrantType(false); |
||
| 1302 | } |
||
| 1303 | |||
| 1304 | return $this->clientCredentialsGrantType; |
||
| 1305 | } |
||
| 1306 | |||
| 1307 | /** |
||
| 1308 | * @var null|AuthorizationCodeGrantType |
||
| 1309 | */ |
||
| 1310 | private $authorizationCodeGrantType = null; |
||
| 1311 | |||
| 1312 | /** |
||
| 1313 | * @return AuthorizationCodeGrantType |
||
| 1314 | */ |
||
| 1315 | public function getAuthorizationCodeGrantType(): AuthorizationCodeGrantType |
||
| 1316 | { |
||
| 1317 | if (null === $this->authorizationCodeGrantType) { |
||
| 1318 | $this->authorizationCodeGrantType = new AuthorizationCodeGrantType( |
||
| 1319 | $this->getAuthorizationCodeRepository(), |
||
| 1320 | $this->getPKCEMethodManager(), |
||
| 1321 | $this->getCommandBus() |
||
| 1322 | ); |
||
| 1323 | } |
||
| 1324 | |||
| 1325 | return $this->authorizationCodeGrantType; |
||
| 1326 | } |
||
| 1327 | |||
| 1328 | /** |
||
| 1329 | * @var null|RefreshTokenGrantType |
||
| 1330 | */ |
||
| 1331 | private $refreshTokenGrantType = null; |
||
| 1332 | |||
| 1333 | /** |
||
| 1334 | * @return RefreshTokenGrantType |
||
| 1335 | */ |
||
| 1336 | public function getRefreshTokenGrantType(): RefreshTokenGrantType |
||
| 1337 | { |
||
| 1338 | if (null === $this->refreshTokenGrantType) { |
||
| 1339 | $this->refreshTokenGrantType = new RefreshTokenGrantType( |
||
| 1340 | $this->getRefreshTokenRepository() |
||
| 1341 | ); |
||
| 1342 | } |
||
| 1343 | |||
| 1344 | return $this->refreshTokenGrantType; |
||
| 1345 | } |
||
| 1346 | |||
| 1347 | /** |
||
| 1348 | * @var null|ResourceOwnerPasswordCredentialsGrantType |
||
| 1349 | */ |
||
| 1350 | private $resourceOwnerPasswordCredentialsGrantType = null; |
||
| 1351 | |||
| 1352 | /** |
||
| 1353 | * @return ResourceOwnerPasswordCredentialsGrantType |
||
| 1354 | */ |
||
| 1355 | public function getResourceOwnerPasswordCredentialsGrantType(): ResourceOwnerPasswordCredentialsGrantType |
||
| 1356 | { |
||
| 1357 | if (null === $this->resourceOwnerPasswordCredentialsGrantType) { |
||
| 1358 | $this->resourceOwnerPasswordCredentialsGrantType = new ResourceOwnerPasswordCredentialsGrantType( |
||
| 1359 | $this->getUserAccountManager(), |
||
| 1360 | $this->getUserAccountRepository(), |
||
| 1361 | true, |
||
| 1362 | false |
||
| 1363 | ); |
||
| 1364 | } |
||
| 1365 | |||
| 1366 | return $this->resourceOwnerPasswordCredentialsGrantType; |
||
| 1367 | } |
||
| 1368 | |||
| 1369 | /** |
||
| 1370 | * @var null|JWTBearerGrantType |
||
| 1371 | */ |
||
| 1372 | private $jwtBearerGrantType = null; |
||
| 1373 | |||
| 1374 | /** |
||
| 1375 | * @return JWTBearerGrantType |
||
| 1376 | */ |
||
| 1377 | public function getJWTBearerGrantType(): JWTBearerGrantType |
||
| 1378 | { |
||
| 1379 | if (null === $this->jwtBearerGrantType) { |
||
| 1380 | $this->jwtBearerGrantType = new JWTBearerGrantType($this->getJwtLoader(), $this->getClientRepository(), $this->getUserAccountRepository()); |
||
| 1381 | $this->jwtBearerGrantType->enableEncryptedAssertions(false, $this->getPrivateKeys()); |
||
| 1382 | |||
| 1383 | $publicKeys = new JWKSet(); |
||
| 1384 | $publicKeys->addKey(new JWK([ |
||
| 1385 | 'kty' => 'RSA', |
||
| 1386 | 'kid' => '[email protected]', |
||
| 1387 | 'use' => 'sig', |
||
| 1388 | 'n' => 'n4EPtAOCc9AlkeQHPzHStgAbgs7bTZLwUBZdR8_KuKPEHLd4rHVTeT-O-XV2jRojdNhxJWTDvNd7nqQ0VEiZQHz_AJmSCpMaJMRBSFKrKb2wqVwGU_NsYOYL-QtiWN2lbzcEe6XC0dApr5ydQLrHqkHHig3RBordaZ6Aj-oBHqFEHYpPe7Tpe-OfVfHd1E6cS6M1FZcD1NNLYD5lFHpPI9bTwJlsde3uhGqC0ZCuEHg8lhzwOHrtIQbS0FVbb9k3-tVTU4fg_3L_vniUFAKwuCLqKnS2BYwdq_mzSnbLY7h_qixoR7jig3__kRhuaxwUkRz5iaiQkqgc5gHdrNP5zw', |
||
| 1389 | 'e' => 'AQAB', |
||
| 1390 | 'd' => 'bWUC9B-EFRIo8kpGfh0ZuyGPvMNKvYWNtB_ikiH9k20eT-O1q_I78eiZkpXxXQ0UTEs2LsNRS-8uJbvQ-A1irkwMSMkK1J3XTGgdrhCku9gRldY7sNA_AKZGh-Q661_42rINLRCe8W-nZ34ui_qOfkLnK9QWDDqpaIsA-bMwWWSDFu2MUBYwkHTMEzLYGqOe04noqeq1hExBTHBOBdkMXiuFhUq1BU6l-DqEiWxqg82sXt2h-LMnT3046AOYJoRioz75tSUQfGCshWTBnP5uDjd18kKhyv07lhfSJdrPdM5Plyl21hsFf4L_mHCuoFau7gdsPfHPxxjVOcOpBrQzwQ', |
||
| 1391 | 'p' => '3Slxg_DwTXJcb6095RoXygQCAZ5RnAvZlno1yhHtnUex_fp7AZ_9nRaO7HX_-SFfGQeutao2TDjDAWU4Vupk8rw9JR0AzZ0N2fvuIAmr_WCsmGpeNqQnev1T7IyEsnh8UMt-n5CafhkikzhEsrmndH6LxOrvRJlsPp6Zv8bUq0k', |
||
| 1392 | 'q' => 'uKE2dh-cTf6ERF4k4e_jy78GfPYUIaUyoSSJuBzp3Cubk3OCqs6grT8bR_cu0Dm1MZwWmtdqDyI95HrUeq3MP15vMMON8lHTeZu2lmKvwqW7anV5UzhM1iZ7z4yMkuUwFWoBvyY898EXvRD-hdqRxHlSqAZ192zB3pVFJ0s7pFc', |
||
| 1393 | 'dp' => 'B8PVvXkvJrj2L-GYQ7v3y9r6Kw5g9SahXBwsWUzp19TVlgI-YV85q1NIb1rxQtD-IsXXR3-TanevuRPRt5OBOdiMGQp8pbt26gljYfKU_E9xn-RULHz0-ed9E9gXLKD4VGngpz-PfQ_q29pk5xWHoJp009Qf1HvChixRX59ehik', |
||
| 1394 | 'dq' => 'CLDmDGduhylc9o7r84rEUVn7pzQ6PF83Y-iBZx5NT-TpnOZKF1pErAMVeKzFEl41DlHHqqBLSM0W1sOFbwTxYWZDm6sI6og5iTbwQGIC3gnJKbi_7k_vJgGHwHxgPaX2PnvP-zyEkDERuf-ry4c_Z11Cq9AqC2yeL6kdKT1cYF8', |
||
| 1395 | 'qi' => '3PiqvXQN0zwMeE-sBvZgi289XP9XCQF3VWqPzMKnIgQp7_Tugo6-NZBKCQsMf3HaEGBjTVJs_jcK8-TRXvaKe-7ZMaQj8VfBdYkssbu0NKDDhjJ-GtiseaDVWt7dcH0cfwxgFUHpQh7FoCrjFJ6h6ZEpMF6xmujs4qMpPz8aaI4', |
||
| 1396 | ])); |
||
| 1397 | $this->jwtBearerGrantType->addTrustedIssuer(new TrustedIssuer( |
||
| 1398 | 'https://my.trusted.issuer', |
||
| 1399 | ['RS256'], |
||
| 1400 | $publicKeys |
||
| 1401 | )); |
||
| 1402 | } |
||
| 1403 | |||
| 1404 | return $this->jwtBearerGrantType; |
||
| 1405 | } |
||
| 1406 | |||
| 1407 | /** |
||
| 1408 | * @var null|UserAccountRepositoryInterface |
||
| 1409 | */ |
||
| 1410 | private $userAccountRepository = null; |
||
| 1411 | |||
| 1412 | /** |
||
| 1413 | * @return UserAccountRepositoryInterface |
||
| 1414 | */ |
||
| 1415 | public function getUserAccountRepository(): UserAccountRepositoryInterface |
||
| 1416 | { |
||
| 1417 | if (null === $this->userAccountRepository) { |
||
| 1418 | $this->userAccountRepository = new UserAccountRepository(); |
||
| 1419 | } |
||
| 1420 | |||
| 1421 | return $this->userAccountRepository; |
||
| 1422 | } |
||
| 1423 | |||
| 1424 | /** |
||
| 1425 | * @var null|UserAccountManagerInterface |
||
| 1426 | */ |
||
| 1427 | private $userAccountManager = null; |
||
| 1428 | |||
| 1429 | /** |
||
| 1430 | * @return UserAccountManagerInterface |
||
| 1431 | */ |
||
| 1432 | public function getUserAccountManager(): UserAccountManagerInterface |
||
| 1433 | { |
||
| 1434 | if (null === $this->userAccountManager) { |
||
| 1435 | $this->userAccountManager = new UserAccountManager( |
||
| 1436 | $this->getUserAccountRepository() |
||
| 1437 | ); |
||
| 1438 | } |
||
| 1439 | |||
| 1440 | return $this->userAccountManager; |
||
| 1441 | } |
||
| 1442 | |||
| 1443 | /** |
||
| 1444 | * @var null|PKCEMethodManager |
||
| 1445 | */ |
||
| 1446 | private $pkceMethodManager = null; |
||
| 1447 | |||
| 1448 | /** |
||
| 1449 | * @var null|PKCEMethodInterface |
||
| 1450 | */ |
||
| 1451 | private $pkceMethodPlain = null; |
||
| 1452 | |||
| 1453 | /** |
||
| 1454 | * @var null|PKCEMethodInterface |
||
| 1455 | */ |
||
| 1456 | private $pkceMethodS256 = null; |
||
| 1457 | |||
| 1458 | /** |
||
| 1459 | * @return PKCEMethodManager |
||
| 1460 | */ |
||
| 1461 | public function getPKCEMethodManager(): PKCEMethodManager |
||
| 1462 | { |
||
| 1463 | if (null === $this->pkceMethodManager) { |
||
| 1464 | $this->pkceMethodManager = new PKCEMethodManager(); |
||
| 1465 | $this->pkceMethodManager |
||
| 1466 | ->add($this->getPKCEMethodPlain()) |
||
| 1467 | ->add($this->getPKCEMethodS256()); |
||
| 1468 | } |
||
| 1469 | |||
| 1470 | return $this->pkceMethodManager; |
||
| 1471 | } |
||
| 1472 | |||
| 1473 | /** |
||
| 1474 | * @return PKCEMethodInterface |
||
| 1475 | */ |
||
| 1476 | protected function getPKCEMethodPlain(): PKCEMethodInterface |
||
| 1477 | { |
||
| 1478 | if (null === $this->pkceMethodPlain) { |
||
| 1479 | $this->pkceMethodPlain = new Plain(); |
||
| 1480 | } |
||
| 1481 | |||
| 1482 | return $this->pkceMethodPlain; |
||
| 1483 | } |
||
| 1484 | |||
| 1485 | /** |
||
| 1486 | * @return PKCEMethodInterface |
||
| 1487 | */ |
||
| 1488 | protected function getPKCEMethodS256(): PKCEMethodInterface |
||
| 1489 | { |
||
| 1490 | if (null === $this->pkceMethodS256) { |
||
| 1491 | $this->pkceMethodS256 = new S256(); |
||
| 1492 | } |
||
| 1493 | |||
| 1494 | return $this->pkceMethodS256; |
||
| 1495 | } |
||
| 1496 | |||
| 1497 | /** |
||
| 1498 | * @var null|ScopeRepository |
||
| 1499 | */ |
||
| 1500 | private $scopeRepository = null; |
||
| 1501 | |||
| 1502 | /** |
||
| 1503 | * @var null|ScopePolicyInterface |
||
| 1504 | */ |
||
| 1505 | private $scopePolicyDefault = null; |
||
| 1506 | |||
| 1507 | /** |
||
| 1508 | * @var null|ScopePolicyInterface |
||
| 1509 | */ |
||
| 1510 | private $scopePolicyError = null; |
||
| 1511 | |||
| 1512 | /** |
||
| 1513 | * @return ScopeRepositoryInterface |
||
| 1514 | */ |
||
| 1515 | public function getScopeRepository(): ScopeRepositoryInterface |
||
| 1516 | { |
||
| 1517 | if (null === $this->scopeRepository) { |
||
| 1518 | $this->scopeRepository = new ScopeRepository( |
||
| 1519 | ['data_read', 'data_write', 'openid', 'profile', 'email', 'phone', 'address', 'offline_access'] |
||
| 1520 | ); |
||
| 1521 | $this->scopeRepository |
||
| 1522 | ->addScopePolicy($this->getScopePolicyDefault()) |
||
| 1523 | ->addScopePolicy($this->getScopePolicyError()); |
||
| 1524 | } |
||
| 1525 | |||
| 1526 | return $this->scopeRepository; |
||
| 1527 | } |
||
| 1528 | |||
| 1529 | /** |
||
| 1530 | * @return ScopePolicyInterface |
||
| 1531 | */ |
||
| 1532 | public function getScopePolicyDefault(): ScopePolicyInterface |
||
| 1533 | { |
||
| 1534 | if (null === $this->scopePolicyDefault) { |
||
| 1535 | $this->scopePolicyDefault = new DefaultScopePolicy([ |
||
| 1536 | 'data_read', |
||
| 1537 | ]); |
||
| 1538 | } |
||
| 1539 | |||
| 1540 | return $this->scopePolicyDefault; |
||
| 1541 | } |
||
| 1542 | |||
| 1543 | /** |
||
| 1544 | * @return ScopePolicyInterface |
||
| 1545 | */ |
||
| 1546 | public function getScopePolicyError(): ScopePolicyInterface |
||
| 1547 | { |
||
| 1548 | if (null === $this->scopePolicyError) { |
||
| 1549 | $this->scopePolicyError = new ErrorScopePolicy(); |
||
| 1550 | } |
||
| 1551 | |||
| 1552 | return $this->scopePolicyError; |
||
| 1553 | } |
||
| 1554 | |||
| 1555 | /** |
||
| 1556 | * @var null|InitialAccessTokenMiddleware |
||
| 1557 | */ |
||
| 1558 | private $initialAccessTokenMiddleware = null; |
||
| 1559 | |||
| 1560 | /** |
||
| 1561 | * @return InitialAccessTokenMiddleware |
||
| 1562 | */ |
||
| 1563 | public function getInitialAccessTokenMiddleware(): InitialAccessTokenMiddleware |
||
| 1564 | { |
||
| 1565 | if (null === $this->initialAccessTokenMiddleware) { |
||
| 1566 | $this->initialAccessTokenMiddleware = new InitialAccessTokenMiddleware( |
||
| 1567 | $this->getBearerTokenType(), |
||
| 1568 | $this->getInitialAccessTokenRepository() |
||
| 1569 | ); |
||
| 1570 | } |
||
| 1571 | |||
| 1572 | return $this->initialAccessTokenMiddleware; |
||
| 1573 | } |
||
| 1574 | |||
| 1575 | /** |
||
| 1576 | * @var null|BearerToken |
||
| 1577 | */ |
||
| 1578 | private $bearerTokenType = null; |
||
| 1579 | |||
| 1580 | /** |
||
| 1581 | * @return BearerToken |
||
| 1582 | */ |
||
| 1583 | public function getBearerTokenType(): BearerToken |
||
| 1584 | { |
||
| 1585 | if (null === $this->bearerTokenType) { |
||
| 1586 | $this->bearerTokenType = new BearerToken( |
||
| 1587 | '**My Service**', |
||
| 1588 | true, |
||
| 1589 | false, |
||
| 1590 | false |
||
| 1591 | ); |
||
| 1592 | } |
||
| 1593 | |||
| 1594 | return $this->bearerTokenType; |
||
| 1595 | } |
||
| 1596 | |||
| 1597 | /** |
||
| 1598 | * @var null|MacToken |
||
| 1599 | */ |
||
| 1600 | private $macTokenType = null; |
||
| 1601 | |||
| 1602 | /** |
||
| 1603 | * @return MacToken |
||
| 1604 | */ |
||
| 1605 | public function getMacTokenType(): MacToken |
||
| 1606 | { |
||
| 1607 | if (null === $this->macTokenType) { |
||
| 1608 | $this->macTokenType = new MacToken('hmac-sha-256', 30); |
||
| 1609 | } |
||
| 1610 | |||
| 1611 | return $this->macTokenType; |
||
| 1612 | } |
||
| 1613 | |||
| 1614 | /** |
||
| 1615 | * @var null|InitialAccessTokenRepositoryInterface |
||
| 1616 | */ |
||
| 1617 | private $initialAccessTokenRepository = null; |
||
| 1618 | |||
| 1619 | /** |
||
| 1620 | * @return InitialAccessTokenRepositoryInterface |
||
| 1621 | */ |
||
| 1622 | public function getInitialAccessTokenRepository(): InitialAccessTokenRepositoryInterface |
||
| 1623 | { |
||
| 1624 | if (null === $this->initialAccessTokenRepository) { |
||
| 1625 | $this->initialAccessTokenRepository = new InitialAccessTokenRepository( |
||
| 1626 | $this->getInitialAccessTokenEventStore(), |
||
| 1627 | $this->getPublicMessageRecorder() |
||
| 1628 | ); |
||
| 1629 | } |
||
| 1630 | |||
| 1631 | return $this->initialAccessTokenRepository; |
||
| 1632 | } |
||
| 1633 | |||
| 1634 | /** |
||
| 1635 | * @var null|JWTCreator |
||
| 1636 | */ |
||
| 1637 | private $jwtCreator = null; |
||
| 1638 | |||
| 1639 | /** |
||
| 1640 | * @var null|JWTLoader |
||
| 1641 | */ |
||
| 1642 | private $jwtLoader = null; |
||
| 1643 | |||
| 1644 | /** |
||
| 1645 | * @var null|Signer |
||
| 1646 | */ |
||
| 1647 | private $jwtSigner = null; |
||
| 1648 | |||
| 1649 | /** |
||
| 1650 | * @var null|Verifier |
||
| 1651 | */ |
||
| 1652 | private $jwtVerifier = null; |
||
| 1653 | |||
| 1654 | /** |
||
| 1655 | * @var null|Encrypter |
||
| 1656 | */ |
||
| 1657 | private $jwtEncrypter = null; |
||
| 1658 | |||
| 1659 | /** |
||
| 1660 | * @var null|Decrypter |
||
| 1661 | */ |
||
| 1662 | private $jwtDecrypter = null; |
||
| 1663 | |||
| 1664 | /** |
||
| 1665 | * @var null|CheckerManager |
||
| 1666 | */ |
||
| 1667 | private $jwtCheckerManager = null; |
||
| 1668 | |||
| 1669 | /** |
||
| 1670 | * @return JWTCreator |
||
| 1671 | */ |
||
| 1672 | public function getJwtCreator(): JWTCreator |
||
| 1673 | { |
||
| 1674 | if (null === $this->jwtCreator) { |
||
| 1675 | $this->jwtCreator = new JWTCreator( |
||
| 1676 | $this->getJwtSigner() |
||
| 1677 | ); |
||
| 1678 | $this->jwtCreator->enableEncryptionSupport( |
||
| 1679 | $this->getJwtEncrypter() |
||
| 1680 | ); |
||
| 1681 | } |
||
| 1682 | |||
| 1683 | return $this->jwtCreator; |
||
| 1684 | } |
||
| 1685 | |||
| 1686 | /** |
||
| 1687 | * @return JWTLoader |
||
| 1688 | */ |
||
| 1689 | public function getJwtLoader(): JWTLoader |
||
| 1690 | { |
||
| 1691 | if (null === $this->jwtLoader) { |
||
| 1692 | $this->jwtLoader = new JWTLoader( |
||
| 1693 | $this->getJwtChecker(), |
||
| 1694 | $this->getJwtVerifier() |
||
| 1695 | ); |
||
| 1696 | |||
| 1697 | $this->jwtLoader->enableDecryptionSupport( |
||
| 1698 | $this->getJwtDecrypter() |
||
| 1699 | ); |
||
| 1700 | } |
||
| 1701 | |||
| 1702 | return $this->jwtLoader; |
||
| 1703 | } |
||
| 1704 | |||
| 1705 | private function getJwtChecker(): CheckerManager |
||
| 1706 | { |
||
| 1707 | if (null === $this->jwtCheckerManager) { |
||
| 1708 | $this->jwtCheckerManager = new CheckerManager(); |
||
| 1709 | //$this->jwtCheckerManager->addHeaderChecker(new CriticalHeaderChecker()); |
||
| 1710 | //$this->jwtCheckerManager->addClaimChecker(new IssuedAtChecker()); |
||
| 1711 | //$this->jwtCheckerManager->addClaimChecker(new NotBeforeChecker()); |
||
| 1712 | //$this->jwtCheckerManager->addClaimChecker(new ExpirationTimeChecker()); |
||
| 1713 | //$this->jwtCheckerManager->addClaimChecker(new SubjectChecker()); |
||
| 1714 | } |
||
| 1715 | |||
| 1716 | return $this->jwtCheckerManager; |
||
| 1717 | } |
||
| 1718 | |||
| 1719 | private function getJwtSigner(): Signer |
||
| 1720 | { |
||
| 1721 | if (null === $this->jwtSigner) { |
||
| 1722 | $this->jwtSigner = new Signer([ |
||
| 1723 | 'HS256', |
||
| 1724 | 'RS256', |
||
| 1725 | 'ES256', |
||
| 1726 | 'none', |
||
| 1727 | ]); |
||
| 1728 | } |
||
| 1729 | |||
| 1730 | return $this->jwtSigner; |
||
| 1731 | } |
||
| 1732 | |||
| 1733 | private function getJwtVerifier(): Verifier |
||
| 1734 | { |
||
| 1735 | if (null === $this->jwtVerifier) { |
||
| 1736 | $this->jwtVerifier = new Verifier([ |
||
| 1737 | 'HS256', |
||
| 1738 | 'RS256', |
||
| 1739 | 'ES256', |
||
| 1740 | 'none', |
||
| 1741 | ]); |
||
| 1742 | } |
||
| 1743 | |||
| 1744 | return $this->jwtVerifier; |
||
| 1745 | } |
||
| 1746 | |||
| 1747 | private function getJwtEncrypter(): Encrypter |
||
| 1748 | { |
||
| 1749 | if (null === $this->jwtEncrypter) { |
||
| 1750 | $this->jwtEncrypter = new Encrypter( |
||
| 1751 | ['RSA-OAEP', 'RSA-OAEP-256'], |
||
| 1752 | ['A256GCM', 'A256CBC-HS512'], |
||
| 1753 | ['DEF'] |
||
| 1754 | ); |
||
| 1755 | } |
||
| 1756 | |||
| 1757 | return $this->jwtEncrypter; |
||
| 1758 | } |
||
| 1759 | |||
| 1760 | private function getJwtDecrypter(): Decrypter |
||
| 1761 | { |
||
| 1762 | if (null === $this->jwtDecrypter) { |
||
| 1763 | $this->jwtDecrypter = new Decrypter( |
||
| 1764 | ['RSA-OAEP', 'RSA-OAEP-256'], |
||
| 1765 | ['A256GCM', 'A256CBC-HS512'], |
||
| 1766 | ['DEF'] |
||
| 1767 | ); |
||
| 1768 | } |
||
| 1769 | |||
| 1770 | return $this->jwtDecrypter; |
||
| 1771 | } |
||
| 1772 | |||
| 1773 | /** |
||
| 1774 | * @var null|ClientConfigurationEndpoint |
||
| 1775 | */ |
||
| 1776 | private $clientConfigurationEndpoint = null; |
||
| 1777 | |||
| 1778 | /** |
||
| 1779 | * @return ClientConfigurationEndpoint |
||
| 1780 | */ |
||
| 1781 | public function getClientConfigurationEndpoint(): ClientConfigurationEndpoint |
||
| 1782 | { |
||
| 1783 | if (null === $this->clientConfigurationEndpoint) { |
||
| 1784 | $this->clientConfigurationEndpoint = new ClientConfigurationEndpoint( |
||
| 1785 | $this->getBearerTokenType(), |
||
| 1786 | $this->getCommandBus(), |
||
| 1787 | $this->getResponseFactory() |
||
| 1788 | ); |
||
| 1789 | } |
||
| 1790 | |||
| 1791 | return $this->clientConfigurationEndpoint; |
||
| 1792 | } |
||
| 1793 | |||
| 1794 | /** |
||
| 1795 | * @var null|Pipe |
||
| 1796 | */ |
||
| 1797 | private $clientConfigurationPipe = null; |
||
| 1798 | |||
| 1799 | /** |
||
| 1800 | * @return Pipe |
||
| 1801 | */ |
||
| 1802 | public function getClientConfigurationPipe(): Pipe |
||
| 1803 | { |
||
| 1804 | if (null === $this->clientConfigurationPipe) { |
||
| 1805 | $this->clientConfigurationPipe = new Pipe(); |
||
| 1806 | |||
| 1807 | $this->clientConfigurationPipe->appendMiddleware($this->getOAuth2ResponseMiddleware()); |
||
| 1808 | $this->clientConfigurationPipe->appendMiddleware($this->getClientConfigurationEndpoint()); |
||
| 1809 | } |
||
| 1810 | |||
| 1811 | return $this->clientConfigurationPipe; |
||
| 1812 | } |
||
| 1813 | |||
| 1814 | /** |
||
| 1815 | * @var null|TokenTypeHintManager |
||
| 1816 | */ |
||
| 1817 | private $tokenTypeHintManager = null; |
||
| 1818 | |||
| 1819 | /** |
||
| 1820 | * @return TokenTypeHintManager |
||
| 1821 | */ |
||
| 1822 | public function getTokenTypeHintManager(): TokenTypeHintManager |
||
| 1823 | { |
||
| 1824 | if (null === $this->tokenTypeHintManager) { |
||
| 1825 | $this->tokenTypeHintManager = new TokenTypeHintManager(); |
||
| 1826 | $this->tokenTypeHintManager->add($this->getAccessTokenTypeHint()); // Access Token |
||
| 1827 | $this->tokenTypeHintManager->add($this->getRefreshTokenTypeHint()); // Refresh Token |
||
| 1828 | $this->tokenTypeHintManager->add($this->getAuthCodeTypeHint()); // Auth Code |
||
| 1829 | } |
||
| 1830 | |||
| 1831 | return $this->tokenTypeHintManager; |
||
| 1832 | } |
||
| 1833 | |||
| 1834 | /** |
||
| 1835 | * @var null|TokenRevocationGetEndpoint |
||
| 1836 | */ |
||
| 1837 | private $tokenRevocationGetEndpoint = null; |
||
| 1838 | |||
| 1839 | /** |
||
| 1840 | * @return TokenRevocationGetEndpoint |
||
| 1841 | */ |
||
| 1842 | public function getTokenRevocationGetEndpoint(): TokenRevocationGetEndpoint |
||
| 1843 | { |
||
| 1844 | if (null === $this->tokenRevocationGetEndpoint) { |
||
| 1845 | $this->tokenRevocationGetEndpoint = new TokenRevocationGetEndpoint( |
||
| 1846 | $this->getTokenTypeHintManager(), |
||
| 1847 | $this->getResponseFactory(), |
||
| 1848 | true |
||
| 1849 | ); |
||
| 1850 | } |
||
| 1851 | |||
| 1852 | return $this->tokenRevocationGetEndpoint; |
||
| 1853 | } |
||
| 1854 | |||
| 1855 | /** |
||
| 1856 | * @var null|TokenRevocationPostEndpoint |
||
| 1857 | */ |
||
| 1858 | private $tokenRevocationPostEndpoint = null; |
||
| 1859 | |||
| 1860 | /** |
||
| 1861 | * @return TokenRevocationPostEndpoint |
||
| 1862 | */ |
||
| 1863 | public function getTokenRevocationPostEndpoint(): TokenRevocationPostEndpoint |
||
| 1864 | { |
||
| 1865 | if (null === $this->tokenRevocationPostEndpoint) { |
||
| 1866 | $this->tokenRevocationPostEndpoint = new TokenRevocationPostEndpoint( |
||
| 1867 | $this->getTokenTypeHintManager(), |
||
| 1868 | $this->getResponseFactory() |
||
| 1869 | ); |
||
| 1870 | } |
||
| 1871 | |||
| 1872 | return $this->tokenRevocationPostEndpoint; |
||
| 1873 | } |
||
| 1874 | |||
| 1875 | /** |
||
| 1876 | * @var null|Pipe |
||
| 1877 | */ |
||
| 1878 | private $tokenRevocationPipe = null; |
||
| 1879 | |||
| 1880 | /** |
||
| 1881 | * @return Pipe |
||
| 1882 | */ |
||
| 1883 | public function getTokenRevocationPipe(): Pipe |
||
| 1884 | { |
||
| 1885 | if (null === $this->tokenRevocationPipe) { |
||
| 1886 | $this->tokenRevocationPipe = new Pipe(); |
||
| 1887 | |||
| 1888 | $this->tokenRevocationPipe->appendMiddleware($this->getOAuth2ResponseMiddleware()); |
||
| 1889 | $this->tokenRevocationPipe->appendMiddleware($this->getClientAuthenticationMiddlewareWithRequirement()); |
||
| 1890 | $this->tokenRevocationPipe->appendMiddleware($this->getTokenRevocationHttpMethod()); |
||
| 1891 | } |
||
| 1892 | |||
| 1893 | return $this->tokenRevocationPipe; |
||
| 1894 | } |
||
| 1895 | |||
| 1896 | /** |
||
| 1897 | * @var null|HttpMethod |
||
| 1898 | */ |
||
| 1899 | private $tokenRevocationHttpMethod = null; |
||
| 1900 | |||
| 1901 | /** |
||
| 1902 | * @return HttpMethod |
||
| 1903 | */ |
||
| 1904 | public function getTokenRevocationHttpMethod(): HttpMethod |
||
| 1905 | { |
||
| 1906 | if (null === $this->tokenRevocationHttpMethod) { |
||
| 1907 | $this->tokenRevocationHttpMethod = new HttpMethod(); |
||
| 1908 | $this->tokenRevocationHttpMethod->addMiddleware('POST', $this->getTokenRevocationPostEndpoint()); |
||
| 1909 | $this->tokenRevocationHttpMethod->addMiddleware('GET', $this->getTokenRevocationGetEndpoint()); |
||
| 1910 | } |
||
| 1911 | |||
| 1912 | return $this->tokenRevocationHttpMethod; |
||
| 1913 | } |
||
| 1914 | |||
| 1915 | /** |
||
| 1916 | * @var null|TokenIntrospectionEndpoint |
||
| 1917 | */ |
||
| 1918 | private $tokenIntrospectionEndpoint = null; |
||
| 1919 | |||
| 1920 | /** |
||
| 1921 | * @return TokenIntrospectionEndpoint |
||
| 1922 | */ |
||
| 1923 | public function getTokenIntrospectionEndpoint(): TokenIntrospectionEndpoint |
||
| 1924 | { |
||
| 1925 | if (null === $this->tokenIntrospectionEndpoint) { |
||
| 1926 | $this->tokenIntrospectionEndpoint = new TokenIntrospectionEndpoint( |
||
| 1927 | $this->getTokenTypeHintManager(), |
||
| 1928 | $this->getResponseFactory() |
||
| 1929 | ); |
||
| 1930 | } |
||
| 1931 | |||
| 1932 | return $this->tokenIntrospectionEndpoint; |
||
| 1933 | } |
||
| 1934 | |||
| 1935 | /** |
||
| 1936 | * @var null|Pipe |
||
| 1937 | */ |
||
| 1938 | private $tokenIntrospectionPipe = null; |
||
| 1939 | |||
| 1940 | /** |
||
| 1941 | * @return Pipe |
||
| 1942 | */ |
||
| 1943 | public function getTokenIntrospectionPipe(): Pipe |
||
| 1944 | { |
||
| 1945 | if (null === $this->tokenIntrospectionPipe) { |
||
| 1946 | $this->tokenIntrospectionPipe = new Pipe(); |
||
| 1947 | |||
| 1948 | $this->tokenIntrospectionPipe->appendMiddleware(new IpAddressMiddleware()); |
||
| 1949 | $this->tokenIntrospectionPipe->appendMiddleware($this->getOAuth2ResponseMiddleware()); |
||
| 1950 | $this->tokenIntrospectionPipe->appendMiddleware($this->getResourceServerAuthenticationMiddleware()); |
||
| 1951 | $this->tokenIntrospectionPipe->appendMiddleware($this->getTokenIntrospectionHttpMethod()); |
||
| 1952 | } |
||
| 1953 | |||
| 1954 | return $this->tokenIntrospectionPipe; |
||
| 1955 | } |
||
| 1956 | |||
| 1957 | /** |
||
| 1958 | * @var null|HttpMethod |
||
| 1959 | */ |
||
| 1960 | private $tokenIntrospectionHttpMethod = null; |
||
| 1961 | |||
| 1962 | /** |
||
| 1963 | * @return HttpMethod |
||
| 1964 | */ |
||
| 1965 | public function getTokenIntrospectionHttpMethod(): HttpMethod |
||
| 1966 | { |
||
| 1967 | if (null === $this->tokenIntrospectionHttpMethod) { |
||
| 1968 | $this->tokenIntrospectionHttpMethod = new HttpMethod(); |
||
| 1969 | $this->tokenIntrospectionHttpMethod->addMiddleware('POST', $this->getTokenIntrospectionEndpoint()); |
||
| 1970 | } |
||
| 1971 | |||
| 1972 | return $this->tokenIntrospectionHttpMethod; |
||
| 1973 | } |
||
| 1974 | |||
| 1975 | /** |
||
| 1976 | * @var null|AccessTokenTypeHint |
||
| 1977 | */ |
||
| 1978 | private $accessTokenTypeHint = null; |
||
| 1979 | |||
| 1980 | /** |
||
| 1981 | * @return AccessTokenTypeHint |
||
| 1982 | */ |
||
| 1983 | public function getAccessTokenTypeHint(): AccessTokenTypeHint |
||
| 1984 | { |
||
| 1985 | if (null === $this->accessTokenTypeHint) { |
||
| 1986 | $this->accessTokenTypeHint = new AccessTokenTypeHint( |
||
| 1987 | $this->getAccessTokenRepository(), |
||
| 1988 | $this->getCommandBus() |
||
| 1989 | ); |
||
| 1990 | } |
||
| 1991 | |||
| 1992 | return $this->accessTokenTypeHint; |
||
| 1993 | } |
||
| 1994 | |||
| 1995 | /** |
||
| 1996 | * @var null|RefreshTokenTypeHint |
||
| 1997 | */ |
||
| 1998 | private $refreshTokenTypeHint = null; |
||
| 1999 | |||
| 2000 | /** |
||
| 2001 | * @return RefreshTokenTypeHint |
||
| 2002 | */ |
||
| 2003 | public function getRefreshTokenTypeHint(): RefreshTokenTypeHint |
||
| 2004 | { |
||
| 2005 | if (null === $this->refreshTokenTypeHint) { |
||
| 2006 | $this->refreshTokenTypeHint = new RefreshTokenTypeHint( |
||
| 2007 | $this->getRefreshTokenRepository(), |
||
| 2008 | $this->getCommandBus() |
||
| 2009 | ); |
||
| 2010 | } |
||
| 2011 | |||
| 2012 | return $this->refreshTokenTypeHint; |
||
| 2013 | } |
||
| 2014 | |||
| 2015 | /** |
||
| 2016 | * @var null|AuthCodeTypeHint |
||
| 2017 | */ |
||
| 2018 | private $authCodeTypeHint = null; |
||
| 2019 | |||
| 2020 | /** |
||
| 2021 | * @return AuthCodeTypeHint |
||
| 2022 | */ |
||
| 2023 | public function getAuthCodeTypeHint(): AuthCodeTypeHint |
||
| 2024 | { |
||
| 2025 | if (null === $this->authCodeTypeHint) { |
||
| 2026 | $this->authCodeTypeHint = new AuthCodeTypeHint( |
||
| 2027 | $this->getAuthorizationCodeRepository(), |
||
| 2028 | $this->getCommandBus() |
||
| 2029 | ); |
||
| 2030 | } |
||
| 2031 | |||
| 2032 | return $this->authCodeTypeHint; |
||
| 2033 | } |
||
| 2034 | |||
| 2035 | /** |
||
| 2036 | * @var null|AccessTokenRepositoryInterface |
||
| 2037 | */ |
||
| 2038 | private $accessTokenRepository = null; |
||
| 2039 | |||
| 2040 | /** |
||
| 2041 | * @return AccessTokenRepositoryInterface |
||
| 2042 | */ |
||
| 2043 | public function getAccessTokenRepository(): AccessTokenRepositoryInterface |
||
| 2044 | { |
||
| 2045 | if (null === $this->accessTokenRepository) { |
||
| 2046 | $this->accessTokenRepository = new AccessTokenRepository( |
||
| 2047 | $this->getAccessTokenEventStore(), |
||
| 2048 | $this->getPublicMessageRecorder(), |
||
| 2049 | 'now +10 minutes' |
||
| 2050 | ); |
||
| 2051 | } |
||
| 2052 | |||
| 2053 | return $this->accessTokenRepository; |
||
| 2054 | } |
||
| 2055 | |||
| 2056 | /** |
||
| 2057 | * @var null|RefreshTokenRepositoryInterface |
||
| 2058 | */ |
||
| 2059 | private $refreshTokenRepository = null; |
||
| 2060 | |||
| 2061 | /** |
||
| 2062 | * @return RefreshTokenRepositoryInterface |
||
| 2063 | */ |
||
| 2064 | public function getRefreshTokenRepository(): RefreshTokenRepositoryInterface |
||
| 2065 | { |
||
| 2066 | if (null === $this->refreshTokenRepository) { |
||
| 2067 | $this->refreshTokenRepository = new RefreshTokenRepository( |
||
| 2068 | $this->getRefreshTokenEventStore(), |
||
| 2069 | $this->getPublicMessageRecorder(), |
||
| 2070 | 'now +7 day' |
||
| 2071 | ); |
||
| 2072 | } |
||
| 2073 | |||
| 2074 | return $this->refreshTokenRepository; |
||
| 2075 | } |
||
| 2076 | |||
| 2077 | /** |
||
| 2078 | * @var null|EventStoreInterface |
||
| 2079 | */ |
||
| 2080 | private $accessTokenEventStore = null; |
||
| 2081 | |||
| 2082 | /** |
||
| 2083 | * @return EventStoreInterface |
||
| 2084 | */ |
||
| 2085 | public function getAccessTokenEventStore(): EventStoreInterface |
||
| 2086 | { |
||
| 2087 | if (null === $this->accessTokenEventStore) { |
||
| 2088 | $this->accessTokenEventStore = new EventStore( |
||
| 2089 | $this->getDomainConverter() |
||
| 2090 | ); |
||
| 2091 | } |
||
| 2092 | |||
| 2093 | return $this->accessTokenEventStore; |
||
| 2094 | } |
||
| 2095 | |||
| 2096 | /** |
||
| 2097 | * @var null|EventStoreInterface |
||
| 2098 | */ |
||
| 2099 | private $initialAccessTokenEventStore = null; |
||
| 2100 | |||
| 2101 | /** |
||
| 2102 | * @return EventStoreInterface |
||
| 2103 | */ |
||
| 2104 | public function getInitialAccessTokenEventStore(): EventStoreInterface |
||
| 2105 | { |
||
| 2106 | if (null === $this->initialAccessTokenEventStore) { |
||
| 2107 | $this->initialAccessTokenEventStore = new EventStore( |
||
| 2108 | $this->getDomainConverter() |
||
| 2109 | ); |
||
| 2110 | } |
||
| 2111 | |||
| 2112 | return $this->initialAccessTokenEventStore; |
||
| 2113 | } |
||
| 2114 | |||
| 2115 | /** |
||
| 2116 | * @var null|EventStoreInterface |
||
| 2117 | */ |
||
| 2118 | private $preConfiguredAuthorizationEventStore = null; |
||
| 2119 | |||
| 2120 | /** |
||
| 2121 | * @return EventStoreInterface |
||
| 2122 | */ |
||
| 2123 | public function getPreConfiguredAuthorizationEventStore(): EventStoreInterface |
||
| 2124 | { |
||
| 2125 | if (null === $this->preConfiguredAuthorizationEventStore) { |
||
| 2126 | $this->preConfiguredAuthorizationEventStore = new EventStore( |
||
| 2127 | $this->getDomainConverter() |
||
| 2128 | ); |
||
| 2129 | } |
||
| 2130 | |||
| 2131 | return $this->preConfiguredAuthorizationEventStore; |
||
| 2132 | } |
||
| 2133 | |||
| 2134 | /** |
||
| 2135 | * @var null|EventStoreInterface |
||
| 2136 | */ |
||
| 2137 | private $refreshTokenEventStore = null; |
||
| 2138 | |||
| 2139 | /** |
||
| 2140 | * @return EventStoreInterface |
||
| 2141 | */ |
||
| 2142 | public function getRefreshTokenEventStore(): EventStoreInterface |
||
| 2143 | { |
||
| 2144 | if (null === $this->refreshTokenEventStore) { |
||
| 2145 | $this->refreshTokenEventStore = new EventStore( |
||
| 2146 | $this->getDomainConverter() |
||
| 2147 | ); |
||
| 2148 | } |
||
| 2149 | |||
| 2150 | return $this->refreshTokenEventStore; |
||
| 2151 | } |
||
| 2152 | |||
| 2153 | /** |
||
| 2154 | * @var null|EventStoreInterface |
||
| 2155 | */ |
||
| 2156 | private $authCodeEventStore = null; |
||
| 2157 | |||
| 2158 | /** |
||
| 2159 | * @return EventStoreInterface |
||
| 2160 | */ |
||
| 2161 | public function getAuthCodeEventStore(): EventStoreInterface |
||
| 2162 | { |
||
| 2163 | if (null === $this->authCodeEventStore) { |
||
| 2164 | $this->authCodeEventStore = new EventStore( |
||
| 2165 | $this->getDomainConverter() |
||
| 2166 | ); |
||
| 2167 | } |
||
| 2168 | |||
| 2169 | return $this->authCodeEventStore; |
||
| 2170 | } |
||
| 2171 | |||
| 2172 | /** |
||
| 2173 | * @var null|EventStoreInterface |
||
| 2174 | */ |
||
| 2175 | private $clientEventStore = null; |
||
| 2176 | |||
| 2177 | /** |
||
| 2178 | * @return EventStoreInterface |
||
| 2179 | */ |
||
| 2180 | public function getClientEventStore(): EventStoreInterface |
||
| 2181 | { |
||
| 2182 | if (null === $this->clientEventStore) { |
||
| 2183 | $this->clientEventStore = new EventStore( |
||
| 2184 | $this->getDomainConverter() |
||
| 2185 | ); |
||
| 2186 | } |
||
| 2187 | |||
| 2188 | return $this->clientEventStore; |
||
| 2189 | } |
||
| 2190 | |||
| 2191 | /** |
||
| 2192 | * @var null|EventStoreInterface |
||
| 2193 | */ |
||
| 2194 | private $resourceServerEventStore = null; |
||
| 2195 | |||
| 2196 | /** |
||
| 2197 | * @return EventStoreInterface |
||
| 2198 | */ |
||
| 2199 | public function getResourceServerEventStore(): EventStoreInterface |
||
| 2200 | { |
||
| 2201 | if (null === $this->resourceServerEventStore) { |
||
| 2202 | $this->resourceServerEventStore = new EventStore( |
||
| 2203 | $this->getDomainConverter() |
||
| 2204 | ); |
||
| 2205 | } |
||
| 2206 | |||
| 2207 | return $this->resourceServerEventStore; |
||
| 2208 | } |
||
| 2209 | |||
| 2210 | /** |
||
| 2211 | * @var null|AuthCodeRepositoryInterface |
||
| 2212 | */ |
||
| 2213 | private $authCodeRepository = null; |
||
| 2214 | |||
| 2215 | /** |
||
| 2216 | * @return AuthCodeRepositoryInterface |
||
| 2217 | */ |
||
| 2218 | public function getAuthorizationCodeRepository(): AuthCodeRepositoryInterface |
||
| 2219 | { |
||
| 2220 | if (null === $this->authCodeRepository) { |
||
| 2221 | $this->authCodeRepository = new AuthCodeRepository( |
||
| 2222 | $this->getAuthCodeEventStore(), |
||
| 2223 | $this->getPublicMessageRecorder(), |
||
| 2224 | 'now +30 seconds' |
||
| 2225 | ); |
||
| 2226 | } |
||
| 2227 | |||
| 2228 | return $this->authCodeRepository; |
||
| 2229 | } |
||
| 2230 | |||
| 2231 | /** |
||
| 2232 | * @var null|RevokeAccessTokenCommandHandler |
||
| 2233 | */ |
||
| 2234 | private $revokeAccessTokenCommandHandler = null; |
||
| 2235 | |||
| 2236 | /** |
||
| 2237 | * @return RevokeAccessTokenCommandHandler |
||
| 2238 | */ |
||
| 2239 | public function getRevokeAccessTokenCommandHandler(): RevokeAccessTokenCommandHandler |
||
| 2240 | { |
||
| 2241 | if (null === $this->revokeAccessTokenCommandHandler) { |
||
| 2242 | $this->revokeAccessTokenCommandHandler = new RevokeAccessTokenCommandHandler( |
||
| 2243 | $this->getAccessTokenRepository() |
||
| 2244 | ); |
||
| 2245 | } |
||
| 2246 | |||
| 2247 | return $this->revokeAccessTokenCommandHandler; |
||
| 2248 | } |
||
| 2249 | |||
| 2250 | /** |
||
| 2251 | * @var null|AccessTokenRevokedEventHandler |
||
| 2252 | */ |
||
| 2253 | private $accessTokenRevokedEventHandler = null; |
||
| 2254 | |||
| 2255 | /** |
||
| 2256 | * @return AccessTokenRevokedEventHandler |
||
| 2257 | */ |
||
| 2258 | public function getAccessTokenRevokedEventHandler(): AccessTokenRevokedEventHandler |
||
| 2259 | { |
||
| 2260 | if (null === $this->accessTokenRevokedEventHandler) { |
||
| 2261 | $this->accessTokenRevokedEventHandler = new AccessTokenRevokedEventHandler(); |
||
| 2262 | } |
||
| 2263 | |||
| 2264 | return $this->accessTokenRevokedEventHandler; |
||
| 2265 | } |
||
| 2266 | |||
| 2267 | /** |
||
| 2268 | * @var null|AccessTokenCreatedEventHandler |
||
| 2269 | */ |
||
| 2270 | private $accessTokenCreatedEventHandler = null; |
||
| 2271 | |||
| 2272 | /** |
||
| 2273 | * @return AccessTokenCreatedEventHandler |
||
| 2274 | */ |
||
| 2275 | public function getAccessTokenCreatedEventHandler(): AccessTokenCreatedEventHandler |
||
| 2276 | { |
||
| 2277 | if (null === $this->accessTokenCreatedEventHandler) { |
||
| 2278 | $this->accessTokenCreatedEventHandler = new AccessTokenCreatedEventHandler(); |
||
| 2279 | } |
||
| 2280 | |||
| 2281 | return $this->accessTokenCreatedEventHandler; |
||
| 2282 | } |
||
| 2283 | |||
| 2284 | /** |
||
| 2285 | * @var null|RefreshTokenCreatedEventHandler |
||
| 2286 | */ |
||
| 2287 | private $refreshTokenCreatedEventHandler = null; |
||
| 2288 | |||
| 2289 | /** |
||
| 2290 | * @return RefreshTokenCreatedEventHandler |
||
| 2291 | */ |
||
| 2292 | public function getRefreshTokenCreatedEventHandler(): RefreshTokenCreatedEventHandler |
||
| 2293 | { |
||
| 2294 | if (null === $this->refreshTokenCreatedEventHandler) { |
||
| 2295 | $this->refreshTokenCreatedEventHandler = new RefreshTokenCreatedEventHandler(); |
||
| 2296 | } |
||
| 2297 | |||
| 2298 | return $this->refreshTokenCreatedEventHandler; |
||
| 2299 | } |
||
| 2300 | |||
| 2301 | /** |
||
| 2302 | * @var null|RefreshTokenCreatedEventHandler |
||
| 2303 | */ |
||
| 2304 | private $refreshTokenRevokedEventHandler = null; |
||
| 2305 | |||
| 2306 | /** |
||
| 2307 | * @return RefreshTokenRevokedEventHandler |
||
| 2308 | */ |
||
| 2309 | public function getRefreshTokenRevokedEventHandler(): RefreshTokenRevokedEventHandler |
||
| 2310 | { |
||
| 2311 | if (null === $this->refreshTokenRevokedEventHandler) { |
||
| 2312 | $this->refreshTokenRevokedEventHandler = new RefreshTokenRevokedEventHandler(); |
||
| 2313 | } |
||
| 2314 | |||
| 2315 | return $this->refreshTokenRevokedEventHandler; |
||
| 2316 | } |
||
| 2317 | |||
| 2318 | /** |
||
| 2319 | * @var null|CreateRefreshTokenCommandHandler |
||
| 2320 | */ |
||
| 2321 | private $createRefreshTokenCommandHandler = null; |
||
| 2322 | |||
| 2323 | /** |
||
| 2324 | * @return CreateRefreshTokenCommandHandler |
||
| 2325 | */ |
||
| 2326 | public function getCreateRefreshTokenCommandHandler(): CreateRefreshTokenCommandHandler |
||
| 2327 | { |
||
| 2328 | if (null === $this->createRefreshTokenCommandHandler) { |
||
| 2329 | $this->createRefreshTokenCommandHandler = new CreateRefreshTokenCommandHandler( |
||
| 2330 | $this->getRefreshTokenRepository() |
||
| 2331 | ); |
||
| 2332 | } |
||
| 2333 | |||
| 2334 | return $this->createRefreshTokenCommandHandler; |
||
| 2335 | } |
||
| 2336 | |||
| 2337 | /** |
||
| 2338 | * @var null|RevokeRefreshTokenCommandHandler |
||
| 2339 | */ |
||
| 2340 | private $revokeRefreshTokenCommandHandler = null; |
||
| 2341 | |||
| 2342 | /** |
||
| 2343 | * @return RevokeRefreshTokenCommandHandler |
||
| 2344 | */ |
||
| 2345 | public function getRevokeRefreshTokenCommandHandler(): RevokeRefreshTokenCommandHandler |
||
| 2346 | { |
||
| 2347 | if (null === $this->revokeRefreshTokenCommandHandler) { |
||
| 2348 | $this->revokeRefreshTokenCommandHandler = new RevokeRefreshTokenCommandHandler( |
||
| 2349 | $this->getRefreshTokenRepository() |
||
| 2350 | ); |
||
| 2351 | } |
||
| 2352 | |||
| 2353 | return $this->revokeRefreshTokenCommandHandler; |
||
| 2354 | } |
||
| 2355 | |||
| 2356 | /** |
||
| 2357 | * @var null|CreateAuthCodeCommandHandler |
||
| 2358 | */ |
||
| 2359 | private $createAuthCodeCommandHandler = null; |
||
| 2360 | |||
| 2361 | /** |
||
| 2362 | * @return CreateAuthCodeCommandHandler |
||
| 2363 | */ |
||
| 2364 | public function getCreateAuthCodeCommandHandler(): CreateAuthCodeCommandHandler |
||
| 2365 | { |
||
| 2366 | if (null === $this->createAuthCodeCommandHandler) { |
||
| 2367 | $this->createAuthCodeCommandHandler = new CreateAuthCodeCommandHandler( |
||
| 2368 | $this->getAuthorizationCodeRepository() |
||
| 2369 | ); |
||
| 2370 | } |
||
| 2371 | |||
| 2372 | return $this->createAuthCodeCommandHandler; |
||
| 2373 | } |
||
| 2374 | |||
| 2375 | /** |
||
| 2376 | * @var null|MarkAuthCodeAsUsedCommandHandler |
||
| 2377 | */ |
||
| 2378 | private $markAuthCodeAsUsedCommandHandler = null; |
||
| 2379 | |||
| 2380 | /** |
||
| 2381 | * @return MarkAuthCodeAsUsedCommandHandler |
||
| 2382 | */ |
||
| 2383 | public function getMarkAuthCodeAsUsedCommandHandler(): MarkAuthCodeAsUsedCommandHandler |
||
| 2384 | { |
||
| 2385 | if (null === $this->markAuthCodeAsUsedCommandHandler) { |
||
| 2386 | $this->markAuthCodeAsUsedCommandHandler = new MarkAuthCodeAsUsedCommandHandler( |
||
| 2387 | $this->getAuthorizationCodeRepository() |
||
| 2388 | ); |
||
| 2389 | } |
||
| 2390 | |||
| 2391 | return $this->markAuthCodeAsUsedCommandHandler; |
||
| 2392 | } |
||
| 2393 | |||
| 2394 | /** |
||
| 2395 | * @var null|RevokeAuthCodeCommandHandler |
||
| 2396 | */ |
||
| 2397 | private $revokeAuthCodeCommandHandler = null; |
||
| 2398 | |||
| 2399 | /** |
||
| 2400 | * @return RevokeAuthCodeCommandHandler |
||
| 2401 | */ |
||
| 2402 | public function getRevokeAuthCodeCommandHandler(): RevokeAuthCodeCommandHandler |
||
| 2403 | { |
||
| 2404 | if (null === $this->revokeAuthCodeCommandHandler) { |
||
| 2405 | $this->revokeAuthCodeCommandHandler = new RevokeAuthCodeCommandHandler( |
||
| 2406 | $this->getAuthorizationCodeRepository() |
||
| 2407 | ); |
||
| 2408 | } |
||
| 2409 | |||
| 2410 | return $this->revokeAuthCodeCommandHandler; |
||
| 2411 | } |
||
| 2412 | |||
| 2413 | /** |
||
| 2414 | * @var null|CodeResponseType |
||
| 2415 | */ |
||
| 2416 | private $grantCodeResponseType = null; |
||
| 2417 | |||
| 2418 | /** |
||
| 2419 | * @return CodeResponseType |
||
| 2420 | */ |
||
| 2421 | public function getCodeResponseType(): CodeResponseType |
||
| 2422 | { |
||
| 2423 | if (null === $this->grantCodeResponseType) { |
||
| 2424 | $this->grantCodeResponseType = new CodeResponseType( |
||
| 2425 | $this->getCommandBus(), |
||
| 2426 | $this->getPKCEMethodManager(), |
||
| 2427 | true |
||
| 2428 | ); |
||
| 2429 | } |
||
| 2430 | |||
| 2431 | return $this->grantCodeResponseType; |
||
| 2432 | } |
||
| 2433 | |||
| 2434 | /** |
||
| 2435 | * @var null|TokenResponseType |
||
| 2436 | */ |
||
| 2437 | private $tokenResponseType = null; |
||
| 2438 | |||
| 2439 | /** |
||
| 2440 | * @return TokenResponseType |
||
| 2441 | */ |
||
| 2442 | public function getTokenResponseType(): TokenResponseType |
||
| 2443 | { |
||
| 2444 | if (null === $this->tokenResponseType) { |
||
| 2445 | $this->tokenResponseType = new TokenResponseType( |
||
| 2446 | $this->getCommandBus() |
||
| 2447 | ); |
||
| 2448 | } |
||
| 2449 | |||
| 2450 | return $this->tokenResponseType; |
||
| 2451 | } |
||
| 2452 | |||
| 2453 | /** |
||
| 2454 | * @var null|IdTokenResponseType |
||
| 2455 | */ |
||
| 2456 | private $idTokenResponseType = null; |
||
| 2457 | |||
| 2458 | /** |
||
| 2459 | * @return IdTokenResponseType |
||
| 2460 | */ |
||
| 2461 | public function getIdTokenResponseType(): IdTokenResponseType |
||
| 2462 | { |
||
| 2463 | if (null === $this->idTokenResponseType) { |
||
| 2464 | $this->idTokenResponseType = new IdTokenResponseType( |
||
| 2465 | $this->getIdTokenBuilderFactory(), |
||
| 2466 | 'RS256' |
||
| 2467 | ); |
||
| 2468 | } |
||
| 2469 | |||
| 2470 | return $this->idTokenResponseType; |
||
| 2471 | } |
||
| 2472 | |||
| 2473 | /** |
||
| 2474 | * @var null|NoneResponseType |
||
| 2475 | */ |
||
| 2476 | private $noneResponseType = null; |
||
| 2477 | |||
| 2478 | /** |
||
| 2479 | * @return NoneResponseType |
||
| 2480 | */ |
||
| 2481 | public function getNoneResponseType(): NoneResponseType |
||
| 2482 | { |
||
| 2483 | if (null === $this->noneResponseType) { |
||
| 2484 | $this->noneResponseType = new NoneResponseType( |
||
| 2485 | $this->getCommandBus() |
||
| 2486 | ); |
||
| 2487 | } |
||
| 2488 | |||
| 2489 | return $this->noneResponseType; |
||
| 2490 | } |
||
| 2491 | |||
| 2492 | /** |
||
| 2493 | * @var null|TokenEndpoint |
||
| 2494 | */ |
||
| 2495 | private $tokenEndpoint = null; |
||
| 2496 | |||
| 2497 | /** |
||
| 2498 | * @return TokenEndpoint |
||
| 2499 | */ |
||
| 2500 | public function getTokenEndpoint(): TokenEndpoint |
||
| 2501 | { |
||
| 2502 | if (null === $this->tokenEndpoint) { |
||
| 2503 | $this->tokenEndpoint = new TokenEndpoint( |
||
| 2504 | $this->getProcessorManager(), |
||
| 2505 | $this->getClientRepository(), |
||
| 2506 | $this->getUserAccountRepository(), |
||
| 2507 | $this->getTokenEndpointExtensionManager(), |
||
| 2508 | $this->getResponseFactory(), |
||
| 2509 | $this->getCommandBus() |
||
| 2510 | ); |
||
| 2511 | } |
||
| 2512 | |||
| 2513 | return $this->tokenEndpoint; |
||
| 2514 | } |
||
| 2515 | |||
| 2516 | /** |
||
| 2517 | * @var null|ProcessorManager |
||
| 2518 | */ |
||
| 2519 | private $processorManager = null; |
||
| 2520 | |||
| 2521 | /** |
||
| 2522 | * @return ProcessorManager |
||
| 2523 | */ |
||
| 2524 | public function getProcessorManager(): ProcessorManager |
||
| 2525 | { |
||
| 2526 | if (null === $this->processorManager) { |
||
| 2527 | $this->processorManager = new ProcessorManager( |
||
| 2528 | $this->getScopeRepository() |
||
| 2529 | ); |
||
| 2530 | } |
||
| 2531 | |||
| 2532 | return $this->processorManager; |
||
| 2533 | } |
||
| 2534 | |||
| 2535 | /** |
||
| 2536 | * @var null|TokenTypeManager |
||
| 2537 | */ |
||
| 2538 | private $tokenTypeManager = null; |
||
| 2539 | |||
| 2540 | /** |
||
| 2541 | * @return TokenTypeManager |
||
| 2542 | */ |
||
| 2543 | public function getTokenTypeManager(): TokenTypeManager |
||
| 2544 | { |
||
| 2545 | if (null === $this->tokenTypeManager) { |
||
| 2546 | $this->tokenTypeManager = new TokenTypeManager(); |
||
| 2547 | $this->tokenTypeManager->add($this->getBearerTokenType()); |
||
| 2548 | $this->tokenTypeManager->add($this->getMacTokenType()); |
||
| 2549 | } |
||
| 2550 | |||
| 2551 | return $this->tokenTypeManager; |
||
| 2552 | } |
||
| 2553 | |||
| 2554 | /** |
||
| 2555 | * @var null|GrantTypeMiddleware |
||
| 2556 | */ |
||
| 2557 | private $grantTypeMiddleware = null; |
||
| 2558 | |||
| 2559 | /** |
||
| 2560 | * @return GrantTypeMiddleware |
||
| 2561 | */ |
||
| 2562 | public function getGrantTypeMiddleware(): GrantTypeMiddleware |
||
| 2563 | { |
||
| 2564 | if (null === $this->grantTypeMiddleware) { |
||
| 2565 | $this->grantTypeMiddleware = new GrantTypeMiddleware( |
||
| 2566 | $this->getGrantTypeManager() |
||
| 2567 | ); |
||
| 2568 | } |
||
| 2569 | |||
| 2570 | return $this->grantTypeMiddleware; |
||
| 2571 | } |
||
| 2572 | |||
| 2573 | /** |
||
| 2574 | * @var null|Pipe |
||
| 2575 | */ |
||
| 2576 | private $tokenEndpointPipe = null; |
||
| 2577 | |||
| 2578 | /** |
||
| 2579 | * @return Pipe |
||
| 2580 | */ |
||
| 2581 | public function getTokenEndpointPipe(): Pipe |
||
| 2582 | { |
||
| 2583 | if (null === $this->tokenEndpointPipe) { |
||
| 2584 | $this->tokenEndpointPipe = new Pipe(); |
||
| 2585 | $this->tokenEndpointPipe->appendMiddleware($this->getOAuth2ResponseMiddleware()); |
||
| 2586 | $this->tokenEndpointPipe->appendMiddleware($this->getClientAuthenticationMiddleware()); |
||
| 2587 | $this->tokenEndpointPipe->appendMiddleware($this->getGrantTypeMiddleware()); |
||
| 2588 | $this->tokenEndpointPipe->appendMiddleware($this->getTokenTypeMiddleware()); |
||
| 2589 | $this->tokenEndpointPipe->appendMiddleware($this->getTokenEndpoint()); |
||
| 2590 | } |
||
| 2591 | |||
| 2592 | return $this->tokenEndpointPipe; |
||
| 2593 | } |
||
| 2594 | |||
| 2595 | /** |
||
| 2596 | * @var null|TokenTypeMiddleware |
||
| 2597 | */ |
||
| 2598 | private $tokenTypeMiddleware = null; |
||
| 2599 | |||
| 2600 | /** |
||
| 2601 | * @return TokenTypeMiddleware |
||
| 2602 | */ |
||
| 2603 | public function getTokenTypeMiddleware(): TokenTypeMiddleware |
||
| 2604 | { |
||
| 2605 | if (null === $this->tokenTypeMiddleware) { |
||
| 2606 | $this->tokenTypeMiddleware = new TokenTypeMiddleware( |
||
| 2607 | $this->getTokenTypeManager(), |
||
| 2608 | true |
||
| 2609 | ); |
||
| 2610 | } |
||
| 2611 | |||
| 2612 | return $this->tokenTypeMiddleware; |
||
| 2613 | } |
||
| 2614 | |||
| 2615 | /** |
||
| 2616 | * @var null|CreateAccessTokenCommandHandler |
||
| 2617 | */ |
||
| 2618 | private $createAccessTokenCommandHandler = null; |
||
| 2619 | |||
| 2620 | /** |
||
| 2621 | * @return CreateAccessTokenCommandHandler |
||
| 2622 | */ |
||
| 2623 | public function getCreateAccessTokenCommandHandler(): CreateAccessTokenCommandHandler |
||
| 2624 | { |
||
| 2625 | if (null === $this->createAccessTokenCommandHandler) { |
||
| 2626 | $this->createAccessTokenCommandHandler = new CreateAccessTokenCommandHandler( |
||
| 2627 | $this->getAccessTokenRepository() |
||
| 2628 | ); |
||
| 2629 | } |
||
| 2630 | |||
| 2631 | return $this->createAccessTokenCommandHandler; |
||
| 2632 | } |
||
| 2633 | |||
| 2634 | /** |
||
| 2635 | * @var null|CreateAccessTokenWithRefreshTokenCommandHandler |
||
| 2636 | */ |
||
| 2637 | private $createAccessTokenWithRefreshTokenCommandHandler = null; |
||
| 2638 | |||
| 2639 | /** |
||
| 2640 | * @return CreateAccessTokenWithRefreshTokenCommandHandler |
||
| 2641 | */ |
||
| 2642 | public function getCreateAccessTokenWithRefreshTokenCommandHandler(): CreateAccessTokenWithRefreshTokenCommandHandler |
||
| 2643 | { |
||
| 2644 | if (null === $this->createAccessTokenWithRefreshTokenCommandHandler) { |
||
| 2645 | $this->createAccessTokenWithRefreshTokenCommandHandler = new CreateAccessTokenWithRefreshTokenCommandHandler( |
||
| 2646 | $this->getAccessTokenRepository(), |
||
| 2647 | $this->getRefreshTokenRepository() |
||
| 2648 | ); |
||
| 2649 | } |
||
| 2650 | |||
| 2651 | return $this->createAccessTokenWithRefreshTokenCommandHandler; |
||
| 2652 | } |
||
| 2653 | |||
| 2654 | /** |
||
| 2655 | * @var null|UserInfoEndpoint |
||
| 2656 | */ |
||
| 2657 | private $userInfoEndpoint = null; |
||
| 2658 | |||
| 2659 | /** |
||
| 2660 | * @return UserInfoEndpoint |
||
| 2661 | */ |
||
| 2662 | public function getUserInfoEndpoint(): UserInfoEndpoint |
||
| 2663 | { |
||
| 2664 | if (null === $this->userInfoEndpoint) { |
||
| 2665 | $this->userInfoEndpoint = new UserInfoEndpoint( |
||
| 2666 | $this->getIdTokenBuilderFactory(), |
||
| 2667 | $this->getClientRepository(), |
||
| 2668 | $this->getUserAccountRepository(), |
||
| 2669 | $this->getResponseFactory() |
||
| 2670 | ); |
||
| 2671 | } |
||
| 2672 | |||
| 2673 | return $this->userInfoEndpoint; |
||
| 2674 | } |
||
| 2675 | |||
| 2676 | /** |
||
| 2677 | * @var null|UserInfo |
||
| 2678 | */ |
||
| 2679 | private $userInfo = null; |
||
| 2680 | |||
| 2681 | /** |
||
| 2682 | * @return UserInfo |
||
| 2683 | */ |
||
| 2684 | public function getUserInfo(): UserInfo |
||
| 2685 | { |
||
| 2686 | if (null === $this->userInfo) { |
||
| 2687 | $this->userInfo = new UserInfo( |
||
| 2688 | $this->getUserInfoScopeSupportManager(), |
||
| 2689 | $this->getClaimSourceManager() |
||
| 2690 | ); |
||
| 2691 | $this->userInfo->enablePairwiseSubject( |
||
| 2692 | $this->getPairwiseSubjectIdentifierAlgorithm(), |
||
| 2693 | true |
||
| 2694 | ); |
||
| 2695 | } |
||
| 2696 | |||
| 2697 | return $this->userInfo; |
||
| 2698 | } |
||
| 2699 | |||
| 2700 | /** |
||
| 2701 | * @var null|PairwiseSubjectIdentifierAlgorithmInterface |
||
| 2702 | */ |
||
| 2703 | private $pairwiseSubjectIdentifierAlgorithm = null; |
||
| 2704 | |||
| 2705 | /** |
||
| 2706 | * @return PairwiseSubjectIdentifierAlgorithmInterface |
||
| 2707 | */ |
||
| 2708 | public function getPairwiseSubjectIdentifierAlgorithm(): PairwiseSubjectIdentifierAlgorithmInterface |
||
| 2709 | { |
||
| 2710 | if (null === $this->pairwiseSubjectIdentifierAlgorithm) { |
||
| 2711 | $this->pairwiseSubjectIdentifierAlgorithm = new EncryptedSubjectIdentifier( |
||
| 2712 | $this->getPairwiseKey(), |
||
| 2713 | 'aes-128-cbc', |
||
| 2714 | $this->getPairwiseAdditionalData(), |
||
| 2715 | $this->getPairwiseAdditionalData() |
||
| 2716 | ); |
||
| 2717 | } |
||
| 2718 | |||
| 2719 | return $this->pairwiseSubjectIdentifierAlgorithm; |
||
| 2720 | } |
||
| 2721 | |||
| 2722 | /** |
||
| 2723 | * @var null|UserInfoScopeSupportManager |
||
| 2724 | */ |
||
| 2725 | private $userInfoScopeSupportManager = null; |
||
| 2726 | |||
| 2727 | /** |
||
| 2728 | * @return UserInfoScopeSupportManager |
||
| 2729 | */ |
||
| 2730 | public function getUserInfoScopeSupportManager(): UserInfoScopeSupportManager |
||
| 2731 | { |
||
| 2732 | if (null === $this->userInfoScopeSupportManager) { |
||
| 2733 | $this->userInfoScopeSupportManager = new UserInfoScopeSupportManager(); |
||
| 2734 | $this->userInfoScopeSupportManager->add(new AddressScopeSupport()); |
||
| 2735 | $this->userInfoScopeSupportManager->add(new EmailScopeSupport()); |
||
| 2736 | $this->userInfoScopeSupportManager->add(new PhoneScopeSupport()); |
||
| 2737 | $this->userInfoScopeSupportManager->add(new ProfilScopeSupport()); |
||
| 2738 | } |
||
| 2739 | |||
| 2740 | return $this->userInfoScopeSupportManager; |
||
| 2741 | } |
||
| 2742 | |||
| 2743 | /** |
||
| 2744 | * @var null|ClaimSourceManager |
||
| 2745 | */ |
||
| 2746 | private $claimSourceManager = null; |
||
| 2747 | |||
| 2748 | /** |
||
| 2749 | * @return ClaimSourceManager |
||
| 2750 | */ |
||
| 2751 | public function getClaimSourceManager(): ClaimSourceManager |
||
| 2752 | { |
||
| 2753 | if (null === $this->claimSourceManager) { |
||
| 2754 | $this->claimSourceManager = new ClaimSourceManager(); |
||
| 2755 | $this->claimSourceManager->add(new DistributedClaimSource()); |
||
| 2756 | } |
||
| 2757 | |||
| 2758 | return $this->claimSourceManager; |
||
| 2759 | } |
||
| 2760 | |||
| 2761 | /** |
||
| 2762 | * @var null|Pipe |
||
| 2763 | */ |
||
| 2764 | private $userInfoEndpointPipe = null; |
||
| 2765 | |||
| 2766 | /** |
||
| 2767 | * @return Pipe |
||
| 2768 | */ |
||
| 2769 | public function getUserInfoEndpointPipe(): Pipe |
||
| 2770 | { |
||
| 2771 | if (null === $this->userInfoEndpointPipe) { |
||
| 2772 | $this->userInfoEndpointPipe = new Pipe(); |
||
| 2773 | $this->userInfoEndpointPipe->appendMiddleware($this->getOAuth2ResponseMiddleware()); |
||
| 2774 | $this->userInfoEndpointPipe->appendMiddleware($this->getSecurityMiddleware()); |
||
| 2775 | $this->userInfoEndpointPipe->appendMiddleware($this->getUserInfoEndpoint()); |
||
| 2776 | } |
||
| 2777 | |||
| 2778 | return $this->userInfoEndpointPipe; |
||
| 2779 | } |
||
| 2780 | |||
| 2781 | /** |
||
| 2782 | * @var null|OAuth2SecurityMiddleware |
||
| 2783 | */ |
||
| 2784 | private $securityMiddleware = null; |
||
| 2785 | |||
| 2786 | /** |
||
| 2787 | * @return OAuth2SecurityMiddleware |
||
| 2788 | */ |
||
| 2789 | public function getSecurityMiddleware(): OAuth2SecurityMiddleware |
||
| 2790 | { |
||
| 2791 | if (null === $this->securityMiddleware) { |
||
| 2792 | $this->securityMiddleware = new OAuth2SecurityMiddleware( |
||
| 2793 | $this->getTokenTypeManager(), |
||
| 2794 | $this->getAccessTokenHandlerManager(), |
||
| 2795 | 'openid' |
||
| 2796 | ); |
||
| 2797 | } |
||
| 2798 | |||
| 2799 | return $this->securityMiddleware; |
||
| 2800 | } |
||
| 2801 | |||
| 2802 | /** |
||
| 2803 | * @var null|AccessTokenHandlerManager |
||
| 2804 | */ |
||
| 2805 | private $accessTokenHandlerManager = null; |
||
| 2806 | |||
| 2807 | /** |
||
| 2808 | * @return AccessTokenHandlerManager |
||
| 2809 | */ |
||
| 2810 | public function getAccessTokenHandlerManager(): AccessTokenHandlerManager |
||
| 2811 | { |
||
| 2812 | if (null === $this->accessTokenHandlerManager) { |
||
| 2813 | $this->accessTokenHandlerManager = new AccessTokenHandlerManager(); |
||
| 2814 | $this->accessTokenHandlerManager->add(new AccessTokenHandlerUsingRepository( |
||
| 2815 | $this->getAccessTokenRepository() |
||
| 2816 | )); |
||
| 2817 | } |
||
| 2818 | |||
| 2819 | return $this->accessTokenHandlerManager; |
||
| 2820 | } |
||
| 2821 | |||
| 2822 | /** |
||
| 2823 | * @var null|IssuerDiscoveryEndpoint |
||
| 2824 | */ |
||
| 2825 | private $issuerDiscoveryEndpoint = null; |
||
| 2826 | |||
| 2827 | /** |
||
| 2828 | * @return IssuerDiscoveryEndpoint |
||
| 2829 | */ |
||
| 2830 | public function getIssuerDiscoveryEndpoint(): IssuerDiscoveryEndpoint |
||
| 2831 | { |
||
| 2832 | if (null === $this->issuerDiscoveryEndpoint) { |
||
| 2833 | $this->issuerDiscoveryEndpoint = new IssuerDiscoveryEndpoint( |
||
| 2834 | $this->getResourceRepository(), |
||
| 2835 | $this->getResponseFactory(), |
||
| 2836 | $this->getUriFactory(), |
||
| 2837 | 'https://my-service.com:9000/' |
||
| 2838 | ); |
||
| 2839 | } |
||
| 2840 | |||
| 2841 | return $this->issuerDiscoveryEndpoint; |
||
| 2842 | } |
||
| 2843 | |||
| 2844 | /** |
||
| 2845 | * @var null|ResourceRepository |
||
| 2846 | */ |
||
| 2847 | private $resourceRepository = null; |
||
| 2848 | |||
| 2849 | /** |
||
| 2850 | * @return ResourceRepository |
||
| 2851 | */ |
||
| 2852 | public function getResourceRepository(): ResourceRepository |
||
| 2853 | { |
||
| 2854 | if (null === $this->resourceRepository) { |
||
| 2855 | $this->resourceRepository = new ResourceRepository(); |
||
| 2856 | } |
||
| 2857 | |||
| 2858 | return $this->resourceRepository; |
||
| 2859 | } |
||
| 2860 | |||
| 2861 | /** |
||
| 2862 | * @var null|Pipe |
||
| 2863 | */ |
||
| 2864 | private $issuerDiscoveryPipe = null; |
||
| 2865 | |||
| 2866 | /** |
||
| 2867 | * @return Pipe |
||
| 2868 | */ |
||
| 2869 | public function getIssuerDiscoveryPipe(): Pipe |
||
| 2870 | { |
||
| 2871 | if (null === $this->issuerDiscoveryPipe) { |
||
| 2872 | $this->issuerDiscoveryPipe = new Pipe(); |
||
| 2873 | $this->issuerDiscoveryPipe->appendMiddleware($this->getOAuth2ResponseMiddleware()); |
||
| 2874 | $this->issuerDiscoveryPipe->appendMiddleware($this->getIssuerDiscoveryEndpoint()); |
||
| 2875 | } |
||
| 2876 | |||
| 2877 | return $this->issuerDiscoveryPipe; |
||
| 2878 | } |
||
| 2879 | |||
| 2880 | /** |
||
| 2881 | * @var null|Pipe |
||
| 2882 | */ |
||
| 2883 | private $JWKSetEndpointPipe = null; |
||
| 2884 | |||
| 2885 | /** |
||
| 2886 | * @return Pipe |
||
| 2887 | */ |
||
| 2888 | public function getJWKSetEndpointPipe(): Pipe |
||
| 2889 | { |
||
| 2890 | if (null === $this->JWKSetEndpointPipe) { |
||
| 2891 | $this->JWKSetEndpointPipe = new Pipe(); |
||
| 2892 | $this->JWKSetEndpointPipe->appendMiddleware($this->getJWKSetEndpoint()); |
||
| 2893 | } |
||
| 2894 | |||
| 2895 | return $this->JWKSetEndpointPipe; |
||
| 2896 | } |
||
| 2897 | |||
| 2898 | /** |
||
| 2899 | * @var null|JWKSetEndpoint |
||
| 2900 | */ |
||
| 2901 | private $JWKSetEndpoint = null; |
||
| 2902 | |||
| 2903 | /** |
||
| 2904 | * @return JWKSetEndpoint |
||
| 2905 | */ |
||
| 2906 | public function getJWKSetEndpoint(): JWKSetEndpoint |
||
| 2907 | { |
||
| 2908 | if (null === $this->JWKSetEndpoint) { |
||
| 2909 | $this->JWKSetEndpoint = new JWKSetEndpoint( |
||
| 2910 | $this->getResponseFactory(), |
||
| 2911 | $this->getPublicKeys() |
||
| 2912 | ); |
||
| 2913 | } |
||
| 2914 | |||
| 2915 | return $this->JWKSetEndpoint; |
||
| 2916 | } |
||
| 2917 | |||
| 2918 | /** |
||
| 2919 | * @var null|Pipe |
||
| 2920 | */ |
||
| 2921 | private $iFrameEndpointPipe = null; |
||
| 2922 | |||
| 2923 | /** |
||
| 2924 | * @return Pipe |
||
| 2925 | */ |
||
| 2926 | public function getIFrameEndpointPipe(): Pipe |
||
| 2927 | { |
||
| 2928 | if (null === $this->iFrameEndpointPipe) { |
||
| 2929 | $this->iFrameEndpointPipe = new Pipe(); |
||
| 2930 | $this->iFrameEndpointPipe->appendMiddleware($this->getIFrameEndpoint()); |
||
| 2931 | } |
||
| 2932 | |||
| 2933 | return $this->iFrameEndpointPipe; |
||
| 2934 | } |
||
| 2935 | |||
| 2936 | /** |
||
| 2937 | * @var null|IFrameEndpoint |
||
| 2938 | */ |
||
| 2939 | private $iFrameEndpoint = null; |
||
| 2940 | |||
| 2941 | /** |
||
| 2942 | * @return IFrameEndpoint |
||
| 2943 | */ |
||
| 2944 | public function getIFrameEndpoint(): IFrameEndpoint |
||
| 2945 | { |
||
| 2946 | if (null === $this->iFrameEndpoint) { |
||
| 2947 | $this->iFrameEndpoint = new IFrameEndpoint( |
||
| 2948 | $this->getResponseFactory()); |
||
| 2949 | } |
||
| 2950 | |||
| 2951 | return $this->iFrameEndpoint; |
||
| 2952 | } |
||
| 2953 | |||
| 2954 | /** |
||
| 2955 | * @var null|Pipe |
||
| 2956 | */ |
||
| 2957 | private $metadataEndpointPipe = null; |
||
| 2958 | |||
| 2959 | /** |
||
| 2960 | * @return Pipe |
||
| 2961 | */ |
||
| 2962 | public function getMetadataEndpointPipe(): Pipe |
||
| 2963 | { |
||
| 2964 | if (null === $this->metadataEndpointPipe) { |
||
| 2965 | $this->metadataEndpointPipe = new Pipe(); |
||
| 2966 | $this->metadataEndpointPipe->appendMiddleware($this->getMetadataEndpoint()); |
||
| 2967 | } |
||
| 2968 | |||
| 2969 | return $this->metadataEndpointPipe; |
||
| 2970 | } |
||
| 2971 | |||
| 2972 | /** |
||
| 2973 | * @var null|MetadataEndpoint |
||
| 2974 | */ |
||
| 2975 | private $metadataEndpoint = null; |
||
| 2976 | |||
| 2977 | /** |
||
| 2978 | * @return MetadataEndpoint |
||
| 2979 | */ |
||
| 2980 | public function getMetadataEndpoint(): MetadataEndpoint |
||
| 2981 | { |
||
| 2982 | if (null === $this->metadataEndpoint) { |
||
| 2983 | $this->metadataEndpoint = new MetadataEndpoint( |
||
| 2984 | $this->getResponseFactory(), |
||
| 2985 | $this->getMetadata() |
||
| 2986 | ); |
||
| 2987 | $this->metadataEndpoint->enableSignedMetadata( |
||
| 2988 | $this->getJwtCreator(), |
||
| 2989 | 'RS256', |
||
| 2990 | $this->getPrivateKeys() |
||
| 2991 | ); |
||
| 2992 | } |
||
| 2993 | |||
| 2994 | return $this->metadataEndpoint; |
||
| 2995 | } |
||
| 2996 | |||
| 2997 | /** |
||
| 2998 | * @var null|Metadata |
||
| 2999 | */ |
||
| 3000 | private $metadata = null; |
||
| 3001 | |||
| 3002 | /** |
||
| 3003 | * @return Metadata |
||
| 3004 | */ |
||
| 3005 | public function getMetadata(): Metadata |
||
| 3006 | { |
||
| 3007 | if (null === $this->metadata) { |
||
| 3008 | $this->metadata = new Metadata(); |
||
| 3009 | $this->metadata->set('issuer', 'https://my.server.com/'); |
||
| 3010 | $this->metadata->set('authorization_endpoint', 'https://my.server.com/authorize'); |
||
| 3011 | $this->metadata->set('token_endpoint', 'https://my.server.com/token'); |
||
| 3012 | $this->metadata->set('userinfo_endpoint', 'https://my.server.com/user_info'); |
||
| 3013 | $this->metadata->set('jwks_uri', 'https://my.server.com/jwks'); |
||
| 3014 | $this->metadata->set('registration_endpoint', 'https://my.server.com/register'); |
||
| 3015 | $this->metadata->set('scopes_supported', $this->getScopeRepository()->getSupportedScopes()); |
||
| 3016 | $this->metadata->set('response_types_supported', $this->getResponseTypeManager()->all()); |
||
| 3017 | if ($this->getResponseTypeAndResponseModeParameterChecker()->isResponseModeParameterInAuthorizationRequestAllowed()) { |
||
| 3018 | $this->metadata->set('response_modes_supported', $this->getResponseModeManager()->getSupportedResponseModes()); |
||
| 3019 | } |
||
| 3020 | $this->metadata->set('grant_types_supported', $this->getGrantTypeManager()->getSupportedGrantTypes()); |
||
| 3021 | $this->metadata->set('acr_values_supported', []); |
||
| 3022 | $this->metadata->set('subject_types_supported', $this->getUserInfo()->isPairwiseSubjectIdentifierSupported() ? ['public', 'pairwise'] : ['public']); |
||
| 3023 | $this->metadata->set('id_token_signing_alg_values_supported', $this->getJwtCreator()->getSupportedSignatureAlgorithms()); |
||
| 3024 | $this->metadata->set('id_token_encryption_alg_values_supported', $this->getJwtCreator()->getSupportedKeyEncryptionAlgorithms()); |
||
| 3025 | $this->metadata->set('id_token_encryption_enc_values_supported', $this->getJwtCreator()->getSupportedContentEncryptionAlgorithms()); |
||
| 3026 | $this->metadata->set('userinfo_signing_alg_values_supported', $this->getJwtCreator()->getSupportedSignatureAlgorithms()); |
||
| 3027 | $this->metadata->set('userinfo_encryption_alg_values_supported', $this->getJwtCreator()->getSupportedKeyEncryptionAlgorithms()); |
||
| 3028 | $this->metadata->set('userinfo_encryption_enc_values_supported', $this->getJwtCreator()->getSupportedContentEncryptionAlgorithms()); |
||
| 3029 | $this->metadata->set('request_object_signing_alg_values_supported', $this->getJWTLoader()->getSupportedSignatureAlgorithms()); |
||
| 3030 | $this->metadata->set('request_object_encryption_alg_values_supported', $this->getJWTLoader()->getSupportedKeyEncryptionAlgorithms()); |
||
| 3031 | $this->metadata->set('request_object_encryption_enc_values_supported', $this->getJWTLoader()->getSupportedContentEncryptionAlgorithms()); |
||
| 3032 | $this->metadata->set('token_endpoint_auth_methods_supported', $this->getTokenEndpointAuthMethodManager()->getSupportedTokenEndpointAuthMethods()); |
||
| 3033 | $this->metadata->set('token_endpoint_auth_signing_alg_values_supported', $this->getJWTLoader()->getSupportedSignatureAlgorithms()); |
||
| 3034 | $this->metadata->set('token_endpoint_auth_encryption_alg_values_supported', $this->getJWTLoader()->getSupportedKeyEncryptionAlgorithms()); |
||
| 3035 | $this->metadata->set('token_endpoint_auth_encryption_enc_values_supported', $this->getJWTLoader()->getSupportedContentEncryptionAlgorithms()); |
||
| 3036 | $this->metadata->set('display_values_supported', ['page']); |
||
| 3037 | $this->metadata->set('claim_types_supported', false); |
||
| 3038 | $this->metadata->set('claims_supported', false); |
||
| 3039 | $this->metadata->set('service_documentation', 'https://my.server.com/documentation'); |
||
| 3040 | $this->metadata->set('claims_locales_supported', []); |
||
| 3041 | $this->metadata->set('ui_locales_supported', ['en_US', 'fr_FR']); |
||
| 3042 | $this->metadata->set('claims_parameter_supported', false); |
||
| 3043 | $this->metadata->set('request_parameter_supported', $this->getAuthorizationRequestLoader()->isRequestObjectSupportEnabled()); |
||
| 3044 | $this->metadata->set('request_uri_parameter_supported', $this->getAuthorizationRequestLoader()->isRequestObjectReferenceSupportEnabled()); |
||
| 3045 | $this->metadata->set('require_request_uri_registration', true); |
||
| 3046 | $this->metadata->set('op_policy_uri', 'https://my.server.com/policy.html'); |
||
| 3047 | $this->metadata->set('op_tos_uri', 'https://my.server.com/tos.html'); |
||
| 3048 | } |
||
| 3049 | |||
| 3050 | return $this->metadata; |
||
| 3051 | } |
||
| 3052 | |||
| 3053 | /** |
||
| 3054 | * @var null|TokenEndpointExtensionManager |
||
| 3055 | */ |
||
| 3056 | private $accessTokenParameterExtensionManager = null; |
||
| 3057 | |||
| 3058 | /** |
||
| 3059 | * @return TokenEndpointExtensionManager |
||
| 3060 | */ |
||
| 3061 | public function getTokenEndpointExtensionManager(): TokenEndpointExtensionManager |
||
| 3062 | { |
||
| 3063 | if (null === $this->accessTokenParameterExtensionManager) { |
||
| 3064 | $this->accessTokenParameterExtensionManager = new TokenEndpointExtensionManager(); |
||
| 3065 | $this->accessTokenParameterExtensionManager->add($this->getOpenIdConnectExtension()); |
||
| 3066 | } |
||
| 3067 | |||
| 3068 | return $this->accessTokenParameterExtensionManager; |
||
| 3069 | } |
||
| 3070 | |||
| 3071 | /** |
||
| 3072 | * @var null|OpenIdConnectExtension |
||
| 3073 | */ |
||
| 3074 | private $openIdConnectExtension = null; |
||
| 3075 | |||
| 3076 | /** |
||
| 3077 | * @return OpenIdConnectExtension |
||
| 3078 | */ |
||
| 3079 | public function getOpenIdConnectExtension(): OpenIdConnectExtension |
||
| 3080 | { |
||
| 3081 | if (null === $this->openIdConnectExtension) { |
||
| 3082 | $this->openIdConnectExtension = new OpenIdConnectExtension( |
||
| 3083 | $this->getIdTokenBuilderFactory(), |
||
| 3084 | 'RS256' |
||
| 3085 | ); |
||
| 3086 | } |
||
| 3087 | |||
| 3088 | return $this->openIdConnectExtension; |
||
| 3089 | } |
||
| 3090 | |||
| 3091 | /** |
||
| 3092 | * @var null|IdTokenBuilderFactory |
||
| 3093 | */ |
||
| 3094 | private $idTokenBuilderFactory = null; |
||
| 3095 | |||
| 3096 | /** |
||
| 3097 | * @return IdTokenBuilderFactory |
||
| 3098 | */ |
||
| 3099 | public function getIdTokenBuilderFactory(): IdTokenBuilderFactory |
||
| 3100 | { |
||
| 3101 | if (null === $this->idTokenBuilderFactory) { |
||
| 3102 | $this->idTokenBuilderFactory = new IdTokenBuilderFactory( |
||
| 3103 | $this->getJwtCreator(), |
||
| 3104 | 'https://www.my-service.com', |
||
| 3105 | $this->getUserInfo(), |
||
| 3106 | $this->getPrivateKeys(), |
||
| 3107 | 600 |
||
| 3108 | ); |
||
| 3109 | } |
||
| 3110 | |||
| 3111 | return $this->idTokenBuilderFactory; |
||
| 3112 | } |
||
| 3113 | |||
| 3114 | /** |
||
| 3115 | * @var null|IdTokenLoader |
||
| 3116 | */ |
||
| 3117 | private $idTokenLoader = null; |
||
| 3118 | |||
| 3119 | /** |
||
| 3120 | * @return IdTokenLoader |
||
| 3121 | */ |
||
| 3122 | public function getIdTokenLoader(): IdTokenLoader |
||
| 3123 | { |
||
| 3124 | if (null === $this->idTokenLoader) { |
||
| 3125 | $this->idTokenLoader = new IdTokenLoader( |
||
| 3126 | $this->getJwtLoader(), |
||
| 3127 | $this->getPrivateKeys(), |
||
| 3128 | 'RS256' |
||
| 3129 | ); |
||
| 3130 | } |
||
| 3131 | |||
| 3132 | return $this->idTokenLoader; |
||
| 3133 | } |
||
| 3134 | |||
| 3135 | /** |
||
| 3136 | * @var null|ParameterCheckerManager |
||
| 3137 | */ |
||
| 3138 | private $parameterCheckerManager = null; |
||
| 3139 | |||
| 3140 | /** |
||
| 3141 | * @return ParameterCheckerManager |
||
| 3142 | */ |
||
| 3143 | public function getParameterCheckerManager(): ParameterCheckerManager |
||
| 3144 | { |
||
| 3145 | if (null === $this->parameterCheckerManager) { |
||
| 3146 | $this->parameterCheckerManager = new ParameterCheckerManager(); |
||
| 3147 | $this->parameterCheckerManager->add($this->getResponseTypeAndResponseModeParameterChecker()); |
||
| 3148 | $this->parameterCheckerManager->add(new RedirectUriParameterChecker(true, true)); |
||
| 3149 | $this->parameterCheckerManager->add(new DisplayParameterChecker()); |
||
| 3150 | $this->parameterCheckerManager->add(new NonceParameterChecker()); |
||
| 3151 | $this->parameterCheckerManager->add(new PromptParameterChecker()); |
||
| 3152 | $this->parameterCheckerManager->add(new ScopeParameterChecker($this->getScopeRepository())); |
||
| 3153 | $this->parameterCheckerManager->add(new StateParameterChecker(true)); |
||
| 3154 | $this->parameterCheckerManager->add(new TokenTypeParameterChecker($this->getTokenTypeManager(), true)); |
||
| 3155 | } |
||
| 3156 | |||
| 3157 | return $this->parameterCheckerManager; |
||
| 3158 | } |
||
| 3159 | |||
| 3160 | /** |
||
| 3161 | * @var null|ResponseTypeAndResponseModeParameterChecker |
||
| 3162 | */ |
||
| 3163 | private $responseTypeAndResponseModeParameterChecker = null; |
||
| 3164 | |||
| 3165 | /** |
||
| 3166 | * @return ResponseTypeAndResponseModeParameterChecker |
||
| 3167 | */ |
||
| 3168 | public function getResponseTypeAndResponseModeParameterChecker(): ResponseTypeAndResponseModeParameterChecker |
||
| 3169 | { |
||
| 3170 | if (null === $this->responseTypeAndResponseModeParameterChecker) { |
||
| 3171 | $this->responseTypeAndResponseModeParameterChecker = new ResponseTypeAndResponseModeParameterChecker( |
||
| 3172 | $this->getResponseTypeManager(), |
||
| 3173 | $this->getResponseModeManager(), |
||
| 3174 | true |
||
| 3175 | ); |
||
| 3176 | } |
||
| 3177 | |||
| 3178 | return $this->responseTypeAndResponseModeParameterChecker; |
||
| 3179 | } |
||
| 3180 | |||
| 3181 | /** |
||
| 3182 | * @var null|ResponseModeManager |
||
| 3183 | */ |
||
| 3184 | private $responseModeManager = null; |
||
| 3185 | |||
| 3186 | /** |
||
| 3187 | * @return ResponseModeManager |
||
| 3188 | */ |
||
| 3189 | public function getResponseModeManager(): ResponseModeManager |
||
| 3190 | { |
||
| 3191 | if (null === $this->responseModeManager) { |
||
| 3192 | $this->responseModeManager = new ResponseModeManager(); |
||
| 3193 | $this->responseModeManager->add(new FragmentResponseMode( |
||
| 3194 | $this->getUriFactory(), |
||
| 3195 | $this->getResponseFactory()) |
||
| 3196 | ); |
||
| 3197 | $this->responseModeManager->add(new QueryResponseMode( |
||
| 3198 | $this->getUriFactory(), |
||
| 3199 | $this->getResponseFactory()) |
||
| 3200 | ); |
||
| 3201 | $this->responseModeManager->add(new FormPostResponseMode( |
||
| 3202 | new FormPostResponseRenderer(), |
||
| 3203 | $this->getResponseFactory()) |
||
| 3204 | ); |
||
| 3205 | } |
||
| 3206 | |||
| 3207 | return $this->responseModeManager; |
||
| 3208 | } |
||
| 3209 | |||
| 3210 | /** |
||
| 3211 | * @var null|HttpClient |
||
| 3212 | */ |
||
| 3213 | private $httpClient = null; |
||
| 3214 | |||
| 3215 | /** |
||
| 3216 | * @return HttpClient |
||
| 3217 | */ |
||
| 3218 | public function getHttpClient(): HttpClient |
||
| 3219 | { |
||
| 3220 | if (null === $this->httpClient) { |
||
| 3221 | $this->httpClient = new Client(); |
||
| 3222 | } |
||
| 3223 | |||
| 3224 | return $this->httpClient; |
||
| 3225 | } |
||
| 3226 | |||
| 3227 | /** |
||
| 3228 | * @var null|AuthorizationRequestLoader |
||
| 3229 | */ |
||
| 3230 | private $authorizationRequestLoader = null; |
||
| 3231 | |||
| 3232 | /** |
||
| 3233 | * @return AuthorizationRequestLoader |
||
| 3234 | */ |
||
| 3235 | public function getAuthorizationRequestLoader(): AuthorizationRequestLoader |
||
| 3236 | { |
||
| 3237 | if (null === $this->authorizationRequestLoader) { |
||
| 3238 | $this->authorizationRequestLoader = new AuthorizationRequestLoader($this->getClientRepository()); |
||
| 3239 | $this->authorizationRequestLoader->enableRequestObjectSupport($this->getJwtLoader()); |
||
| 3240 | $this->authorizationRequestLoader->enableEncryptedRequestObjectSupport($this->getPrivateKeys(), false); |
||
| 3241 | $this->authorizationRequestLoader->enableRequestObjectReferenceSupport($this->getHttpClient(), true); |
||
| 3242 | } |
||
| 3243 | |||
| 3244 | return $this->authorizationRequestLoader; |
||
| 3245 | } |
||
| 3246 | |||
| 3247 | /** |
||
| 3248 | * @var null|AuthorizationFactory |
||
| 3249 | */ |
||
| 3250 | private $authorizationFactory = null; |
||
| 3251 | |||
| 3252 | /** |
||
| 3253 | * @return AuthorizationFactory |
||
| 3254 | */ |
||
| 3255 | public function getAuthorizationFactory(): AuthorizationFactory |
||
| 3256 | { |
||
| 3257 | if (null === $this->authorizationFactory) { |
||
| 3258 | $this->authorizationFactory = new AuthorizationFactory($this->getAuthorizationRequestLoader(), $this->getParameterCheckerManager()); |
||
| 3259 | } |
||
| 3260 | |||
| 3261 | return $this->authorizationFactory; |
||
| 3262 | } |
||
| 3263 | |||
| 3264 | /** |
||
| 3265 | * @var null|AuthorizationEndpoint |
||
| 3266 | */ |
||
| 3267 | private $authorizationEndpoint = null; |
||
| 3268 | |||
| 3269 | /** |
||
| 3270 | * @return AuthorizationEndpoint |
||
| 3271 | */ |
||
| 3272 | public function getAuthorizationEndpoint(): AuthorizationEndpoint |
||
| 3273 | { |
||
| 3274 | if (null === $this->authorizationEndpoint) { |
||
| 3275 | $this->authorizationEndpoint = new AuthorizationEndpoint( |
||
| 3276 | $this->getResponseFactory(), |
||
| 3277 | $this->getAuthorizationFactory(), |
||
| 3278 | $this->getUserAccountDiscoveryManager(), |
||
| 3279 | $this->getBeforeConsentScreenManager(), |
||
| 3280 | $this->getAfterConsentScreenManager() |
||
| 3281 | ); |
||
| 3282 | } |
||
| 3283 | |||
| 3284 | return $this->authorizationEndpoint; |
||
| 3285 | } |
||
| 3286 | |||
| 3287 | /** |
||
| 3288 | * @var null|Pipe |
||
| 3289 | */ |
||
| 3290 | private $authorizationEndpointPipe = null; |
||
| 3291 | |||
| 3292 | /** |
||
| 3293 | * @return Pipe |
||
| 3294 | */ |
||
| 3295 | public function getAuthorizationEndpointPipe(): Pipe |
||
| 3296 | { |
||
| 3297 | if (null === $this->authorizationEndpointPipe) { |
||
| 3298 | $this->authorizationEndpointPipe = new Pipe(); |
||
| 3299 | $this->authorizationEndpointPipe->appendMiddleware($this->getOAuth2ResponseMiddleware()); |
||
| 3300 | $this->authorizationEndpointPipe->appendMiddleware($this->getTokenTypeMiddleware()); |
||
| 3301 | $this->authorizationEndpointPipe->appendMiddleware($this->getAuthorizationEndpoint()); |
||
| 3302 | } |
||
| 3303 | |||
| 3304 | return $this->authorizationEndpointPipe; |
||
| 3305 | } |
||
| 3306 | |||
| 3307 | /** |
||
| 3308 | * @var null|UserAccountDiscoveryManager |
||
| 3309 | */ |
||
| 3310 | private $userAccountDiscoveryManager = null; |
||
| 3311 | |||
| 3312 | /** |
||
| 3313 | * @return UserAccountDiscoveryManager |
||
| 3314 | */ |
||
| 3315 | public function getUserAccountDiscoveryManager(): UserAccountDiscoveryManager |
||
| 3316 | { |
||
| 3317 | if (null === $this->userAccountDiscoveryManager) { |
||
| 3318 | $this->userAccountDiscoveryManager = new UserAccountDiscoveryManager(); |
||
| 3319 | $this->userAccountDiscoveryManager->add($this->getIdTokenHintDiscovery()); |
||
| 3320 | $this->userAccountDiscoveryManager->add($this->getSecurityLayer()); |
||
| 3321 | $this->userAccountDiscoveryManager->add(new LoginParameterChecker()); |
||
| 3322 | $this->userAccountDiscoveryManager->add(new MaxAgeParameterChecker()); |
||
| 3323 | $this->userAccountDiscoveryManager->add(new PromptNoneParameterChecker()); |
||
| 3324 | } |
||
| 3325 | |||
| 3326 | return $this->userAccountDiscoveryManager; |
||
| 3327 | } |
||
| 3328 | |||
| 3329 | /** |
||
| 3330 | * @var null|IdTokenHintDiscovery |
||
| 3331 | */ |
||
| 3332 | private $idTokenHintDiscovery = null; |
||
| 3333 | |||
| 3334 | /** |
||
| 3335 | * @return IdTokenHintDiscovery |
||
| 3336 | */ |
||
| 3337 | public function getIdTokenHintDiscovery(): IdTokenHintDiscovery |
||
| 3338 | { |
||
| 3339 | if (null === $this->idTokenHintDiscovery) { |
||
| 3340 | $this->idTokenHintDiscovery = new IdTokenHintDiscovery( |
||
| 3341 | $this->getIdTokenLoader(), |
||
| 3342 | $this->getUserAccountRepository() |
||
| 3343 | ); |
||
| 3344 | $this->idTokenHintDiscovery->enablePairwiseSubject($this->getPairwiseSubjectIdentifierAlgorithm()); |
||
| 3345 | } |
||
| 3346 | |||
| 3347 | return $this->idTokenHintDiscovery; |
||
| 3348 | } |
||
| 3349 | |||
| 3350 | /** |
||
| 3351 | * @var null|SecurityLayer |
||
| 3352 | */ |
||
| 3353 | private $securityLayer = null; |
||
| 3354 | |||
| 3355 | /** |
||
| 3356 | * @return SecurityLayer |
||
| 3357 | */ |
||
| 3358 | public function getSecurityLayer(): SecurityLayer |
||
| 3359 | { |
||
| 3360 | if (null === $this->securityLayer) { |
||
| 3361 | $this->securityLayer = new SecurityLayer(); |
||
| 3362 | } |
||
| 3363 | |||
| 3364 | return $this->securityLayer; |
||
| 3365 | } |
||
| 3366 | |||
| 3367 | /** |
||
| 3368 | * @var null|BeforeConsentScreenManager |
||
| 3369 | */ |
||
| 3370 | private $beforeConsentScreenManager = null; |
||
| 3371 | |||
| 3372 | /** |
||
| 3373 | * @return BeforeConsentScreenManager |
||
| 3374 | */ |
||
| 3375 | public function getBeforeConsentScreenManager(): BeforeConsentScreenManager |
||
| 3376 | { |
||
| 3377 | if (null === $this->beforeConsentScreenManager) { |
||
| 3378 | $this->beforeConsentScreenManager = new BeforeConsentScreenManager(); |
||
| 3379 | $this->beforeConsentScreenManager->add(new PreConfiguredAuthorizationExtension( |
||
| 3380 | $this->getPreConfiguredAuthorizationRepository() |
||
| 3381 | )); |
||
| 3382 | } |
||
| 3383 | |||
| 3384 | return $this->beforeConsentScreenManager; |
||
| 3385 | } |
||
| 3386 | |||
| 3387 | /** |
||
| 3388 | * @var null|AfterConsentScreenManager |
||
| 3389 | */ |
||
| 3390 | private $afterConsentScreenManager = null; |
||
| 3391 | |||
| 3392 | /** |
||
| 3393 | * @return AfterConsentScreenManager |
||
| 3394 | */ |
||
| 3395 | public function getAfterConsentScreenManager(): AfterConsentScreenManager |
||
| 3396 | { |
||
| 3397 | if (null === $this->afterConsentScreenManager) { |
||
| 3398 | $this->afterConsentScreenManager = new AfterConsentScreenManager(); |
||
| 3399 | $this->afterConsentScreenManager->add(new SessionStateParameterExtension('DefaultStorage')); |
||
| 3400 | } |
||
| 3401 | |||
| 3402 | return $this->afterConsentScreenManager; |
||
| 3403 | } |
||
| 3404 | |||
| 3405 | /** |
||
| 3406 | * @var null|PreConfiguredAuthorizationRepository |
||
| 3407 | */ |
||
| 3408 | private $preConfiguredAuthorizationRepository = null; |
||
| 3409 | |||
| 3410 | /** |
||
| 3411 | * @return PreConfiguredAuthorizationRepository |
||
| 3412 | */ |
||
| 3413 | public function getPreConfiguredAuthorizationRepository(): PreConfiguredAuthorizationRepository |
||
| 3414 | { |
||
| 3415 | if (null === $this->preConfiguredAuthorizationRepository) { |
||
| 3416 | $this->preConfiguredAuthorizationRepository = new PreConfiguredAuthorizationRepository( |
||
| 3417 | $this->getPreConfiguredAuthorizationEventStore(), |
||
| 3418 | $this->getPublicMessageRecorder() |
||
| 3419 | ); |
||
| 3420 | } |
||
| 3421 | |||
| 3422 | return $this->preConfiguredAuthorizationRepository; |
||
| 3423 | } |
||
| 3424 | |||
| 3425 | /** |
||
| 3426 | * @var null|DomainConverter |
||
| 3427 | */ |
||
| 3428 | private $eventConverter = null; |
||
| 3429 | |||
| 3430 | /** |
||
| 3431 | * @return DomainConverter |
||
| 3432 | */ |
||
| 3433 | public function getDomainConverter(): DomainConverter |
||
| 3434 | { |
||
| 3435 | if (null === $this->eventConverter) { |
||
| 3436 | $this->eventConverter = new DomainConverter(); |
||
| 3437 | } |
||
| 3438 | |||
| 3439 | return $this->eventConverter; |
||
| 3440 | } |
||
| 3441 | } |
||
| 3442 |