Bgy\OAuth2\GrantType\RefreshTokenGrantType

Complexity

Total Complexity

9

Size/Duplication

Total Lines	67
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	7

Importance

Changes	3
Bugs	0	Features	1

5 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	5	1
A	setRefreshTokenStorage()	0	4	1
B	grant()	0	38	5
A	getRequiredInputData()	0	6	1
A	getIdentifier()	0	4	1

<?php
/**
 * @author Boris Guéry <guery.b@gmail.com>
 */

namespace Bgy\OAuth2\GrantType;

use Bgy\OAuth2\ResourceOwner;
use Bgy\OAuth2\Storage\RefreshTokenNotFound;
use Bgy\OAuth2\Storage\RefreshTokenStorage;
use Bgy\OAuth2\TokenRequestAttempt;
use Bgy\OAuth2\Utils\GrantTypeUtils;

class RefreshTokenGrantType implements GrantType
{
    private $refreshTokenStorage;
    private $revokeRefreshTokenWhenUsed;

    public function __construct(RefreshTokenStorage $refreshTokenStorage = null, $revokeRefreshTokenWhenUsed)
    {
        $this->refreshTokenStorage        = $refreshTokenStorage;
        $this->revokeRefreshTokenWhenUsed = (bool) $revokeRefreshTokenWhenUsed;
    }

    public function setRefreshTokenStorage(RefreshTokenStorage $refreshTokenStorage)
    {
        $this->refreshTokenStorage = $refreshTokenStorage;
    }

    public function grant(TokenRequestAttempt $tokenRequestAttempt)
    {
        GrantTypeUtils::ensureRequestedGrantTypeIsSupported($this, $tokenRequestAttempt);

        try {
            GrantTypeUtils::ensureInputDataAreValid($this, $tokenRequestAttempt);

        } catch (MissingOrInvalidInputData $e) {

            return GrantDecision::denied(GrantError::invalidRequest($e->getMessage()));
        }

        try {

            $refreshToken = $this->refreshTokenStorage->findByToken($tokenRequestAttempt->getInputData()->getRefreshToken());

            if ($refreshToken->isRevoked()) {

                return GrantDecision::denied(GrantError::accessDenied());
            }

            if ($this->revokeRefreshTokenWhenUsed) {
                $refreshToken->revoke();
                $this->refreshTokenStorage->save($refreshToken);
            }

            return GrantDecision::allowed(
                new ResourceOwner(
                    $refreshToken->getAssociatedAccessToken()->getResourceOwner()->getResourceOwnerId(),
                    $refreshToken->getAssociatedAccessToken()->getResourceOwner()->getResourceOwnerType()
                )
            );

        } catch (RefreshTokenNotFound $e) {

            return GrantDecision::denied(GrantError::accessDenied());
        }
    }

    public function getRequiredInputData()
    {
        return [
            'refresh_token',
        ];
    }

    public function getIdentifier()
    {
        return 'refresh_token';
    }
}