OAuth2Framework\SecurityBundle\Annotation\Checker\ScopeChecker::check()

Complexity

Conditions	4
Paths	5

Size

Total Lines	17
Code Lines	10

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php
    public function check(OAuth2Token $token, OAuth2 $configuration): ?string
    {
        $scope = $configuration->getScope();
        if (null === $scope) {
            return null;
        }

        $scopes = explode(' ', $scope);
        $tokenScope = $token->getAccessToken()->hasParameter('scope') ? explode(' ', $token->getAccessToken()->getParameter('scope')) : [];
        $diff = array_diff($scopes, $tokenScope);

        if (!empty($diff)) {
            return sprintf('Insufficient scope. The scope rule is: %s', $configuration->getScope());
        }

        return  null;
    }
}