fkooman\OAuth\Client\Http\BearerClient::get()

Complexity

Conditions	7
Paths	9

Size

Total Lines	64
Code Lines	32

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php
    public function get($requestUri, array $requestHeaders = [])
    {
        // make sure we have an access token
        $accessToken = $this->tokenStorage->getAccessToken($this->userId);
        if (is_null($accessToken)) {
            error_log('no access_token available');

            return false;
        }

        $refreshedToken = false;
        if ($accessToken->isExpired()) {
            error_log('access_token expired');
            // access_token is expired, try to refresh it
            if (is_null($accessToken->getRefreshToken())) {
                error_log('no refresh_token available, delete access_token');
                // we do not have a refresh_token, delete this access token, it
                // is useless now...
                $this->tokenStorage->deleteAccessToken($this->userId, $accessToken);

                return false;
            }

            error_log('attempting to refresh access_token');
            // deal with possibly revoked authorization! XXX
            try {
                $accessToken = $this->oauthClient->refreshAccessToken($accessToken);
            } catch (OAuthServerException $e) {
                error_log(sprintf('unable to use refresh_token %s', $e->getMessage()));

                // delete the access_token, the refresh_token could not be used
                $this->tokenStorage->deleteAccessToken($this->userId, $accessToken);

                return false;
            }

            // maybe delete old accesstoken here? XXX
            error_log('access_token refreshed');
            $refreshedToken = true;
        }

        // add Authorization header to the request headers
        $requestHeaders['Authorization'] = sprintf('Bearer %s', $accessToken->getToken());

        $response = $this->oauthClient->getHttpClient()->get($requestUri, $requestHeaders);
        if (401 === $response->getStatusCode()) {
            error_log('access_token appears to be invalid, delete access_token');
            // this indicates an invalid access_token
            $this->tokenStorage->deleteAccessToken($this->userId, $accessToken);

            return false;
        }

        error_log('access_token was valid, call succeeded');

        if ($refreshedToken) {
            error_log('access_token was refreshed, so store it now for future use');
            // if we refreshed the token, and it was successful, i.e. not a 401,
            // update the stored AccessToken
            $this->tokenStorage->setAccessToken($this->userId, $accessToken);
        }

        return $response;
    }