OAuth2OLD\Endpoint\Server\Messages\Authorization\AuthorizationResponse

Complexity

Total Complexity

5

Size/Duplication

Total Lines	56
Duplicated Lines	0 %

Test Coverage

Coverage

0%

Importance

Changes

0

4 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	11	2
A	getCode()	0	3	1
A	getRedirectUri()	0	3	1
A	getState()	0	3	1

<?php
/**
 * Created by PhpStorm.
 * User: Alexandre
 * Date: 31/12/2017
 * Time: 00:29
 */

namespace OAuth2OLD\Endpoint\Server\Messages\Authorization;
use GuzzleHttp\Psr7\Response;
use GuzzleHttp\Psr7\Uri;
use OAuth2OLD\Credential\AuthorizationCode;
use Psr\Http\Message\UriInterface;


/**
 * Class Response
 * @package OAuth2\Endpoints\Server\Messages\Authorization
 *
 * @see https://tools.ietf.org/html/rfc6749#section-4.1.2
 *
 * Authorization Response
 *
 *     If the resource owner grants the access request, the authorization
 * server issues an authorization code and delivers it to the client by
 * adding the following parameters to the query component of the
 * redirection URI using the "application/x-www-form-urlencoded" format,
 * per Appendix B:
 *
 * code
 * REQUIRED.  The authorization code generated by the
 * authorization server.  The authorization code MUST expire
 * shortly after it is issued to mitigate the risk of leaks.  A
 * maximum authorization code lifetime of 10 minutes is
 * RECOMMENDED.  The client MUST NOT use the authorization code
 * more than once.  If an authorization code is used more than
 * once, the authorization server MUST deny the request and SHOULD
 * revoke (when possible) all tokens previously issued based on
 * that authorization code.  The authorization code is bound to
 * the client identifier and redirection URI.
 *
 * state
 * REQUIRED if the "state" parameter was present in the client
 * authorization request.  The exact value received from the
 * client.
 *
 * For example, the authorization server redirects the user-agent by
 * sending the following HTTP response:
 *
 * HTTP/1.1 302 Found
 * Location: https://client.example.com/cb?code=SplxlOBeZQQYbYS6WxSbIA
 * &state=xyz
 *
 * The client MUST ignore unrecognized response parameters.  The
 * authorization code string size is left undefined by this
 * specification.  The client should avoid making assumptions about code
 * value sizes.  The authorization server SHOULD document the size of
 * any value it issues.
 */
class AuthorizationResponse extends Response
{
    /**
     * @var UriInterface
     */
    private $redirectUri;
    /**
     * @var AuthorizationCode
     */
    private $code;
    /**
     * @var string|null
     */
    private $state;

    /**
     * Response constructor.
     * @param UriInterface $redirectUri
     * @param AuthorizationCode $code
     * @param string $state
     */
    public function __construct(UriInterface $redirectUri, AuthorizationCode $code, ?string $state = null)
    {
        $redirectUri = Uri::withQueryValue($redirectUri, 'code', $code->getCode());
        if ($state) {
            $redirectUri = Uri::withQueryValue($redirectUri, 'state', $state);
        }
        $redirectUri = $redirectUri->__toString();
        parent::__construct(302, ['Location' => $redirectUri]);
        $this->redirectUri = $redirectUri;

It seems like $redirectUri of type string is incompatible with the declared type Psr\Http\Message\UriInterface of property $redirectUri.

        $this->code = $code;
        $this->state = $state;
    }

    /**
     * @return string
     */
    public function getCode(): string
    {
        return $this->code;

The expression return $this->code returns the type OAuth2OLD\Credential\AuthorizationCode which is incompatible with the type-hinted return string.

    }

    /**
     * @return UriInterface
     */
    public function getRedirectUri(): UriInterface
    {
        return $this->redirectUri;
    }

    /**
     * @return string|null
     */
    public function getState(): ?string
    {
        return $this->state;
    }
}