for testing and deploying your application
for finding and fixing issues
for empowering human code reviews
<?php
declare(strict_types=1);
/*
* The MIT License (MIT)
*
* Copyright (c) 2014-2017 Spomky-Labs
* This software may be modified and distributed under the terms
* of the MIT license. See the LICENSE file for details.
*/
namespace OAuth2Framework\Bundle\Server\Annotation\Checker;
use OAuth2Framework\Bundle\Server\Annotation\OAuth2;
use OAuth2Framework\Bundle\Server\Security\Authentication\Token\OAuth2Token;
use OAuth2Framework\Component\Server\Model\Scope\ScopeRepositoryInterface;
use Symfony\Component\ExpressionLanguage\ExpressionLanguage;
final class ScopeChecker implements CheckerInterface
{
/**
* @var ScopeRepositoryInterface
private $scopeRepository;
* ScopeChecker constructor.
* @param ScopeRepositoryInterface $scopeRepository
public function __construct(ScopeRepositoryInterface $scopeRepository)
$this->scopeRepository = $scopeRepository;
}
* {@inheritdoc}
public function check(OAuth2Token $token, OAuth2 $configuration): ?string
$scope = $configuration->getScope();
if (null === $scope) {
return null;
$scopes = explode(' ', $scope);
$diff = array_diff($scopes, $token->getAccessToken()->getScopes());
if (!empty($diff)) {
return sprintf('Insufficient scope. The scope rule is: %s', $configuration->getScope());