OAuth2Framework\SecurityBundle\Annotation\Checker\ScopeChecker

Complexity

Total Complexity

4

Size/Duplication

Total Lines	21
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	3

Importance

Changes

0

1 Method

Rating	Name	Duplication	Size	Complexity
A	check()	0	15	4

<?php

declare(strict_types=1);

/*
 * The MIT License (MIT)
 *
 * Copyright (c) 2014-2018 Spomky-Labs
 *
 * This software may be modified and distributed under the terms
 * of the MIT license.  See the LICENSE file for details.
 */

namespace OAuth2Framework\SecurityBundle\Annotation\Checker;

use OAuth2Framework\SecurityBundle\Annotation\OAuth2;
use OAuth2Framework\SecurityBundle\Security\Authentication\Token\OAuth2Token;

final class ScopeChecker implements Checker
{
    /**
     * {@inheritdoc}
     */
    public function check(OAuth2Token $token, OAuth2 $configuration): void
    {
        $scope = $configuration->getScope();
        if (null === $scope) {
            return;
        }

        $scopes = explode(' ', $scope);
        $tokenScope = $token->getAccessToken()->hasParameter('scope') ? explode(' ', $token->getAccessToken()->getParameter('scope')) : [];
        $diff = array_diff($scopes, $tokenScope);

        if (!empty($diff)) {
            throw new \Exception(sprintf('Insufficient scope. The required scope is "%s"', $configuration->getScope()));
        }
    }
}