OAuth2\Endpoint\Server\Messages\Authorization\AuthorizationRequest

Complexity

Total Complexity

10

Size/Duplication

Total Lines	64
Duplicated Lines	0 %

Test Coverage

Coverage

0%

Importance

Changes

0

8 Methods

Rating	Name	Duplication	Size	Complexity
A	getRedirectUri()	0	3	1
A	getScope()	0	3	1
A	getState()	0	3	1
A	__construct()	0	7	1
A	getResponseType()	0	3	1
A	validate()	0	9	3
A	createFromServerRequest()	0	8	1
A	getClientId()	0	3	1

<?php
/**
 * Created by PhpStorm.
 * User: Alexandre
 * Date: 31/12/2017
 * Time: 00:29
 */

namespace OAuth2OLD\Endpoint\Server\Messages\Authorization;
use Psr\Http\Message\ServerRequestInterface;


/**
 * Class Request
 * @package OAuth2\Endpoints\Server\Messages\Authorization
 *
 * @see https://tools.ietf.org/html/rfc6749#section-4.1.1
 *
 * Authorization Request
 *
 *     The client constructs the request URI by adding the following
 * parameters to the query component of the authorization endpoint URI
 * using the "application/x-www-form-urlencoded" format, per Appendix B:
 *
 * response_type
 * REQUIRED.  Value MUST be set to "code".
 *
 * client_id
 * REQUIRED.  The client identifier as described in Section 2.2.
 *
 * redirect_uri
 * OPTIONAL.  As described in Section 3.1.2.
 *
 * scope
 * OPTIONAL.  The scope of the access request as described by
 * Section 3.3.
 *
 * state
 * RECOMMENDED.  An opaque value used by the client to maintain
 * state between the request and callback.  The authorization
 * server includes this value when redirecting the user-agent back
 * to the client.  The parameter SHOULD be used for preventing
 * cross-site request forgery as described in Section 10.12.
 *
 * The client directs the resource owner to the constructed URI using an
 * HTTP redirection response, or by other means available to it via the
 * user-agent.
 *
 * For example, the client directs the user-agent to make the following
 * HTTP request using TLS (with extra line breaks for display purposes
 * only):
 *
 * GET /authorize?response_type=code&client_id=s6BhdRkqt3&state=xyz
 * &redirect_uri=https%3A%2F%2Fclient%2Eexample%2Ecom%2Fcb HTTP/1.1
 * Host: server.example.com
 *
 * The authorization server validates the request to ensure that all
 * required parameters are present and valid.  If the request is valid,
 * the authorization server authenticates the resource owner and obtains
 * an authorization decision (by asking the resource owner or by
 * establishing approval via other means).
 *
 * When a decision is established, the authorization server directs the
 * user-agent to the provided client redirection URI using an HTTP
 * redirection response, or by other means available to it via the
 * user-agent.
 */
class AuthorizationRequest
{
    protected $responseType;
    protected $clientId;
    protected $redirectUri;
    protected $scope;
    protected $state;

    public function __construct($responseType, $clientId, $redirectUri = null, $scope = null, $state = null)
    {
        $this->responseType = $responseType;
        $this->clientId = $clientId;
        $this->redirectUri = $redirectUri;
        $this->scope = $scope;
        $this->state = $state;
    }

    static public function createFromServerRequest(ServerRequestInterface $request) {

As per PSR2, the static declaration should come after the visibility declaration.

        $responseType = $request->getQueryParams()['response_type'] ?? null;
        $clientId = $request->getQueryParams()['client_id'] ?? null;
        $redirectUri = $request->getQueryParams()['redirect_uri'] ?? null;
        $scope = $request->getQueryParams()['scope'] ?? null;
        $state = $request->getQueryParams()['state'] ?? null;

        return new self($responseType, $clientId, $redirectUri, $scope, $state);
    }

    /**
     * @throws \Exception
     */
    public function validate() {
        if(!$this->responseType) {
            throw new \Exception('Missing response_type parameter');
        }

        if(!$this->clientId) {
            throw new \Exception('Missing client_id parameter');
        }
        return true;
    }

    public function getResponseType()
    {
        return $this->responseType;
    }

    public function getClientId()
    {
        return $this->clientId;
    }

    public function getRedirectUri()
    {
        return $this->redirectUri;
    }

    public function getScope()
    {
        return $this->scope;
    }

    public function getState()
    {
        return $this->state;
    }


}