Bgy\OAuth2\GrantType\ClientCredentialsGrantType

Complexity

Total Complexity

6

Size/Duplication

Total Lines	46
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	7

Importance

Changes	1
Bugs	0	Features	1

4 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	4	1
A	grant()	0	23	3
A	getRequiredInputData()	0	7	1
A	getIdentifier()	0	4	1

<?php
/**
 * @author Boris Guéry <guery.b@gmail.com>
 */

namespace Bgy\OAuth2\GrantType;

use Bgy\OAuth2\ClientAuthenticator;
use Bgy\OAuth2\Storage\ClientStorage;
use Bgy\OAuth2\TokenRequestAttempt;
use Bgy\OAuth2\Utils\GrantTypeUtils;

class ClientCredentialsGrantType implements GrantType
{
    private $clientAuthenticator;

    public function __construct(ClientAuthenticator $clientAuthenticator)
    {
        $this->clientAuthenticator = $clientAuthenticator;
    }

    public function grant(TokenRequestAttempt $tokenRequestAttempt)
    {
        GrantTypeUtils::ensureRequestedGrantTypeIsSupported($this, $tokenRequestAttempt);

        try {
            GrantTypeUtils::ensureInputDataAreValid($this, $tokenRequestAttempt);

        } catch (MissingOrInvalidInputData $e) {

            return GrantDecision::denied(GrantError::invalidRequest($e->getMessage()));
        }

        if (true === $this->clientAuthenticator->isClientValid(
                $tokenRequestAttempt->getInputData()->getClientId(),
                $tokenRequestAttempt->getInputData()->getClientSecret()
            )
        ) {

            return GrantDecision::allowed();
        }

        return GrantDecision::denied(GrantError::accessDenied());
    }

    public function getRequiredInputData()
    {
        return [
            'client_id',
            'client_secret',
        ];
    }

    public function getIdentifier()
    {
        return 'client_credentials';
    }
}