yrc\api\actions\RefreshAction::post()

Complexity

Conditions	4
Paths	4

Size

Total Lines	26
Code Lines	11

Duplication

Lines	0
Ratio	0 %

Importance

Changes	1
Bugs	0	Features	0

<?php
    public static function post($params)
    {
        // Get the token
        $token = AuthenticationAction::getAccessTokenFromHeader();
        
        $refreshToken = Yii::$app->request->post('refresh_token', false);

        if ($refreshToken !== $token->refresh_token) {
            return false;
        }

        // If we can delete the token, send a newly generated token out
        if ($token->delete()) {
            // Merge any extra attributes with the generated tokens
            $tokens = ArrayHelper::merge($params['class']['extraAttributes'], Token::generate(Yii::$app->user->id));
            // Merge the identity attributes
            foreach ($params['class']['identityAttributes'] as $attr) {
                $tokens[$attr] = Yii::$app->user->getIdentity()->$attr;
            }

            return $tokens;
        }

        // Return false for any other reasons
        return false;
    }
}