|
1
|
|
|
<?php |
|
2
|
|
|
|
|
3
|
|
|
namespace hiapi\Core\Auth; |
|
4
|
|
|
|
|
5
|
|
|
use hiapi\exceptions\NotAuthenticatedException; |
|
6
|
|
|
use Psr\Http\Message\ServerRequestInterface; |
|
7
|
|
|
use yii\web\User; |
|
8
|
|
|
use GuzzleHttp\Client; |
|
9
|
|
|
use yii\web\IdentityInterface; |
|
10
|
|
|
|
|
11
|
|
|
/** |
|
12
|
|
|
* XXX Think if authentication can be done deferred? |
|
13
|
|
|
* XXX Does it make sence? |
|
14
|
|
|
*/ |
|
15
|
|
|
class OAuth2Middleware extends AuthMiddleware |
|
16
|
|
|
{ |
|
17
|
|
|
public $userinfoUrl; |
|
18
|
|
|
|
|
19
|
|
|
/** |
|
20
|
|
|
* @var User |
|
21
|
|
|
*/ |
|
22
|
|
|
private $user; |
|
23
|
|
|
|
|
24
|
|
|
public function __construct(User $user) |
|
25
|
|
|
{ |
|
26
|
|
|
$this->user = $user; |
|
27
|
|
|
} |
|
28
|
|
|
|
|
29
|
|
|
public function authenticate(ServerRequestInterface $request) |
|
30
|
|
|
{ |
|
31
|
|
|
$identity = $this->findIdentity($request); |
|
32
|
|
|
|
|
33
|
|
|
if (empty($identity)) { |
|
34
|
|
|
throw new NotAuthenticatedException('failed login by token'); |
|
35
|
|
|
} |
|
36
|
|
|
|
|
37
|
|
|
$ok = $this->user->login($identity); |
|
38
|
|
|
if ($ok !== true) { |
|
39
|
|
|
throw new NotAuthenticatedException('failed login by token'); |
|
40
|
|
|
} |
|
41
|
|
|
} |
|
42
|
|
|
|
|
43
|
|
|
private function findIdentity(ServerRequestInterface $request): ?IdentityInterface |
|
44
|
|
|
{ |
|
45
|
|
|
$token = $this->getAccessToken($request); |
|
46
|
|
|
if (empty($token)) { |
|
47
|
|
|
throw new NotAuthenticatedException('no access token given'); |
|
48
|
|
|
} |
|
49
|
|
|
|
|
50
|
|
|
try { |
|
51
|
|
|
$info = $this->getUserInfo($token); |
|
52
|
|
|
} catch (\Throwable $e) { |
|
|
|
|
|
|
53
|
|
|
throw new NotAuthenticatedException($e->getMessage()); |
|
54
|
|
|
} |
|
55
|
|
|
|
|
56
|
|
|
$class = $this->user->identityClass; |
|
57
|
|
|
|
|
58
|
|
|
return $class::fromArray($info); |
|
59
|
|
|
} |
|
60
|
|
|
|
|
61
|
|
|
private function getUserInfo(string $token) |
|
62
|
|
|
{ |
|
63
|
|
|
$res = $this->getClient()->request('GET', '', ['headers' => [ |
|
64
|
|
|
'Authorization' => 'Bearer ' . $token, |
|
65
|
|
|
]]); |
|
66
|
|
|
|
|
67
|
|
|
return \json_decode((string)$res->getBody(), true); |
|
68
|
|
|
} |
|
69
|
|
|
|
|
70
|
|
|
private function getClient(): Client |
|
71
|
|
|
{ |
|
72
|
|
|
return new Client([ |
|
73
|
|
|
'base_uri' => $this->userinfoUrl, |
|
74
|
|
|
'timeout' => 1.0, |
|
75
|
|
|
]); |
|
76
|
|
|
} |
|
77
|
|
|
} |
|
78
|
|
|
|
hiqdev /
hiapi
Scrutinizer analyzes your
composer.json/composer.lockfile if available to determine the classes, and functions that are defined by your dependencies.It seems like the listed class was neither found in your dependencies, nor was it found in the analyzed files in your repository. If you are using some other form of dependency management, you might want to disable this analysis.