OAuth2\EndpointMessages\Authorization\AuthorizationResponse

Complexity

Total Complexity

2

Size/Duplication

Total Lines	26
Duplicated Lines	0 %

Coupling/Cohesion

Components	0
Dependencies	2

Test Coverage

Coverage

66.67%

Importance

Changes

0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	5	1
A	getRedirectUri()	0	4	1

<?php
/**
 * Created by PhpStorm.
 * User: Alexandre
 * Date: 31/12/2017
 * Time: 00:29
 */

namespace OAuth2\EndpointMessages\Authorization;

use GuzzleHttp\Psr7\Response;
use GuzzleHttp\Psr7\Uri;
use OAuth2\Credentials\AuthorizationCode;
use Psr\Http\Message\UriInterface;


/**
 * Class Response
 * @package OAuth2\Endpoints\Server\Messages\Authorization
 *
 * @see https://tools.ietf.org/html/rfc6749#section-4.1.2
 *
 * Authorization Response
 *
 *     If the resource owner grants the access request, the authorization
 * server issues an authorization code and delivers it to the client by
 * adding the following parameters to the query component of the
 * redirection URI using the "application/x-www-form-urlencoded" format,
 * per Appendix B:
 *
 * code
 * REQUIRED.  The authorization code generated by the
 * authorization server.  The authorization code MUST expire
 * shortly after it is issued to mitigate the risk of leaks.  A
 * maximum authorization code lifetime of 10 minutes is
 * RECOMMENDED.  The client MUST NOT use the authorization code
 * more than once.  If an authorization code is used more than
 * once, the authorization server MUST deny the request and SHOULD
 * revoke (when possible) all tokens previously issued based on
 * that authorization code.  The authorization code is bound to
 * the client identifier and redirection URI.
 *
 * state
 * REQUIRED if the "state" parameter was present in the client
 * authorization request.  The exact value received from the
 * client.
 *
 * For example, the authorization server redirects the user-agent by
 * sending the following HTTP response:
 *
 * HTTP/1.1 302 Found
 * Location: https://client.example.com/cb?code=SplxlOBeZQQYbYS6WxSbIA
 * &state=xyz
 *
 * The client MUST ignore unrecognized response parameters.  The
 * authorization code string size is left undefined by this
 * specification.  The client should avoid making assumptions about code
 * value sizes.  The authorization server SHOULD document the size of
 * any value it issues.
 */
class AuthorizationResponse extends Response
{
    /**
     * @var UriInterface
     */
    private $redirectUri;

    /**
     * Response constructor.
     * @param UriInterface $redirectUri
     */
    public function __construct(UriInterface $redirectUri)
    {
        parent::__construct(302, ['Location' => $redirectUri->__toString()]);
        $this->redirectUri = $redirectUri;
    }

    /**
     * @return UriInterface
     */
    public function getRedirectUri(): UriInterface
    {
        return $this->redirectUri;
    }

}