php-guard / oauth-server

src/OAuth2/ScopePolicy/Policies/ScopePolicyInterface.php

Spacing +1 added lines, -1 removed lines

@@ -14,5 +14,5 @@
 interface ScopePolicyInterface
 {
 //    function check(array $scope, ClientInterface $client): bool ;
-    function getDefaultScopes(ClientInterface $client) : ?array ;
+    function getDefaultScopes(ClientInterface $client) : ?array;
 }
\ No newline at end of file

src/OAuth2/GrantTypes/ClientCredentialsGrantType.php

Spacing +1 added lines, -1 removed lines

@@ -53,7 +53,7 @@
         if (!$this->scopePolicyManager->checkScope($client, $scope)) {
             $supportedScopes = implode(', ', $this->scopePolicyManager->getSupportedScopes($client));
             throw new OAuthException('invalid_scope',
-                'Some of requested scopes are not supported. Scope supported : ' . $supportedScopes,
+                'Some of requested scopes are not supported. Scope supported : '.$supportedScopes,
                 'https://tools.ietf.org/html/rfc6749#section-4.1');
         }
 

src/OAuth2/GrantTypes/ResourceOwnerPasswordCredentialsGrantType.php

Spacing +5 added lines, -5 removed lines

@@ -63,14 +63,14 @@ 
                 'https://tools.ietf.org/html/rfc6749#section-5.2');
         }
 
-        $username= $request->getParsedBody()['username'] ?? '';
-        if(!$username) {
+        $username = $request->getParsedBody()['username'] ?? '';
+        if (!$username) {
             throw new OAuthException('invalid_request', 'Missing a required parameter : username',
                 'https://tools.ietf.org/html/rfc6749#section-4.3');
         }
 
-        $password= $request->getParsedBody()['password'] ?? '';
-        if(!$password) {
+        $password = $request->getParsedBody()['password'] ?? '';
+        if (!$password) {
             throw new OAuthException('invalid_request', 'Missing a required parameter : password',
                 'https://tools.ietf.org/html/rfc6749#section-4.3');
         }
@@ -79,7 +79,7 @@ 
         if (!$this->scopePolicyManager->checkScope($client, $scope)) {
             $supportedScopes = implode(', ', $this->scopePolicyManager->getSupportedScopes($client));
             throw new OAuthException('invalid_scope',
-                'Some of requested scopes are not supported. Scope supported : ' . $supportedScopes,
+                'Some of requested scopes are not supported. Scope supported : '.$supportedScopes,
                 'https://tools.ietf.org/html/rfc6749#section-4.1');
         }
 

Braces +1 added lines, -2 removed lines

@@ -85,8 +85,7 @@
 
         try {
             $resourceOwner = $this->resourceOwnerProvider->authenticate($username, $password);
-        }
-        catch (\Exception $e) {
+        } catch (\Exception $e) {
             throw new OAuthException('invalid_grant', $e->getMessage(),
                 'https://tools.ietf.org/html/rfc6749#section-4.3');
         }

src/OAuth2/GrantTypes/RefreshTokenGrantType.php

Spacing +6 added lines, -6 removed lines

@@ -65,18 +65,18 @@ 
         }
 
         $refreshToken = $request->getParsedBody()['refresh_token'] ?? '';
-        if(!$refreshToken) {
+        if (!$refreshToken) {
             throw new OAuthException('invalid_request', 'Missing a required parameter : refresh_token',
                 'https://tools.ietf.org/html/rfc6749#section-4.3');
         }
 
         $refreshToken = $this->refreshTokenStorage->get($refreshToken);
-        if(!$refreshToken || $refreshToken->getClientId() !== $client->getIdentifier()) {
+        if (!$refreshToken || $refreshToken->getClientId() !== $client->getIdentifier()) {
             throw new OAuthException('invalid_grant', 'Refresh token is invalid',
                 'https://tools.ietf.org/html/rfc6749#section-4.3');
         }
 
-        if(!is_null($refreshToken->getExpiresAt()) && $refreshToken->getExpiresAt() < time()) {
+        if (!is_null($refreshToken->getExpiresAt()) && $refreshToken->getExpiresAt() < time()) {
             $this->refreshTokenStorage->revoke($refreshToken->getToken());
 
             throw new OAuthException('invalid_grant', 'Refresh token has expired',
@@ -84,16 +84,16 @@ 
         }
 
         $includedScopes = isset($request->getParsedBody()['scope']) ? explode(' ', $request->getParsedBody()['scope']) : null;
-        if(is_array($includedScopes) && !empty(array_diff($includedScopes, explode(' ', $refreshToken->getToken())))) {
+        if (is_array($includedScopes) && !empty(array_diff($includedScopes, explode(' ', $refreshToken->getToken())))) {
             throw new OAuthException('invalid_scope',
-                'Some of scope included are not granted for this token. Scope granted : ' . $refreshToken->getScope(),
+                'Some of scope included are not granted for this token. Scope granted : '.$refreshToken->getScope(),
                 'https://tools.ietf.org/html/rfc6749#section-6');
         }
 
         // issue an access token token and, optionally, a refresh token
         $accessToken = $this->accessTokenStorage->create($client->getIdentifier(), $refreshToken->getUserId(), $refreshToken->getScope());
         $newRefreshToken = null;
-        if($this->configurationRepository->getConfig(Config::REGENERATE_REFRESH_TOKENS_AFTER_USE)) {
+        if ($this->configurationRepository->getConfig(Config::REGENERATE_REFRESH_TOKENS_AFTER_USE)) {
             $this->refreshTokenStorage->revoke($refreshToken->getToken());
             $newRefreshToken = $this->refreshTokenStorage->create(
                 $refreshToken->getClientId(), $refreshToken->getUserId(), $refreshToken->getScope())->getToken();

src/OAuth2/GrantTypes/AuthorizationCodeGrantType.php

Spacing +1 added lines, -1 removed lines

@@ -73,7 +73,7 @@
 
         $this->authorizationCodeStorage->revoke($authorizationCode->getCode());
 
-        if($authorizationCode->getExpiresAt() < time()) {
+        if ($authorizationCode->getExpiresAt() < time()) {
             throw new OAuthException('invalid_grant', 'Authorization code has expired',
                 'https://tools.ietf.org/html/rfc6749#section-4.1.3');
         }

src/OAuth2/EndpointMessages/Authorization/AuthorizationRequest.php

Spacing +2 added lines, -2 removed lines

@@ -96,11 +96,11 @@
      * @throws \Exception
      */
     public function validate() {
-        if(!$this->responseType) {
+        if (!$this->responseType) {
             throw new \Exception('Missing response_type parameter');
         }
 
-        if(!$this->clientId) {
+        if (!$this->clientId) {
             throw new \Exception('Missing client_id parameter');
         }
         return true;

src/OAuth2/OpenID/Credentials/IDToken.php

Spacing +2 added lines, -2 removed lines

@@ -30,12 +30,12 @@
     {
         $missingClaims = array_diff(self::REQUIRED_CLAIMS, array_keys($claims));
         if (!empty($missingClaims)) {
-            throw new \Exception('Missing claims : ' . implode(', ', $missingClaims));
+            throw new \Exception('Missing claims : '.implode(', ', $missingClaims));
         }
 
         $undefinedClaims = array_diff(array_keys($claims), self::DEFINED_CLAIMS);
         if (!empty($undefinedClaims)) {
-            throw new \Exception('Undefined claims : ' . implode(', ', $undefinedClaims));
+            throw new \Exception('Undefined claims : '.implode(', ', $undefinedClaims));
         }
 
         // todo check nonce required if present in authentication request

src/OAuth2/OpenID/Endpoints/AuthorizationEndpoint.php

Spacing +8 added lines, -8 removed lines

@@ -159,7 +159,7 @@ 
             }
 
             // OpenID
-            if(!in_array('openid', $scope)) {
+            if (!in_array('openid', $scope)) {
                 return compact('client', 'redirectUri', 'responseTypes', 'data', 'scope', 'isSecure');
             }
 
@@ -204,7 +204,7 @@ 
         if (!$scopePolicyManager->checkScope($client, $scope)) {
             $supportedScopes = implode(', ', $scopePolicyManager->getSupportedScopes($client));
             throw new OAuthException('invalid_scope',
-                'Some of requested scopes are not supported. Scope supported : ' . $supportedScopes,
+                'Some of requested scopes are not supported. Scope supported : '.$supportedScopes,
                 'https://tools.ietf.org/html/rfc6749#section-4.1');
         }
 
@@ -213,13 +213,13 @@ 
 
     protected function checkRedirectionEndpointConfidentiality(ClientInterface $client, array $responseTypes, Uri $redirectUri) : bool {
         $enforceTls = $this->server->getConfigurationRepository()->getConfig(Config::ENFORCE_TLS);
-        if($redirectUri->getScheme() === 'https') {
+        if ($redirectUri->getScheme() === 'https') {
             return true;
         }
 
         foreach ($responseTypes as $responseType) {
-            if($responseType->requireTLS()) {
-                if($enforceTls === true || (is_null($enforceTls) && $client->isTLSSupported())) {
+            if ($responseType->requireTLS()) {
+                if ($enforceTls === true || (is_null($enforceTls) && $client->isTLSSupported())) {
                     throw new OAuthException('access_denied',
                         'Require the use of TLS for the redirect URI',
                         'https://tools.ietf.org/html/rfc6749#section-3.1.2.1');
@@ -340,12 +340,12 @@ 
             $responseType = $this->server->getResponseTypeRepository()->getResponseType($responseTypeName);
             if (!$responseType) {
                 throw new OAuthException('invalid_request',
-                    'Unknown response_type : ' . $responseTypeName);
+                    'Unknown response_type : '.$responseTypeName);
             }
 
             if (!$responseType->isMultiValuedResponseTypeSupported() == ResponseTypeInterface::RESPONSE_MODE_FRAGMENT) {
                 throw new OAuthException('invalid_request',
-                    'Multi-valued response_type not supported with response_type : ' . $responseTypeName);
+                    'Multi-valued response_type not supported with response_type : '.$responseTypeName);
             }
 
             $responseTypes[] = $responseType;
@@ -393,7 +393,7 @@ 
 
         if (!in_array($responseMode, $supportedResponsesModes)) {
             throw new OAuthException('invalid_request',
-                'Unsupported response_mode. Supported response_mode are : ' . implode(', ', $supportedResponsesModes));
+                'Unsupported response_mode. Supported response_mode are : '.implode(', ', $supportedResponsesModes));
         }
 
         if ($responseMode === ResponseTypeInterface::RESPONSE_MODE_QUERY && !$isResponseModeQueryAllowed) {

Braces +1 added lines, -2 removed lines

@@ -68,8 +68,7 @@
         // https://developer.okta.com/docs/api/resources/oidc#parameter-details
         if (isset($data['response_mode']) && $data['response_mode'] == 'post_message') {
             return $this->popupResponse(['access_token' => 'a'], $redirectUri);
-        }
-        else {
+        } else {
             return new AuthorizationResponse($redirectUri);
         }
     }

src/OAuth2/OpenID/ResponseTypes/NoneResponseType.php

Indentation +1 added lines, -1 removed lines

@@ -31,7 +31,7 @@
      * @return array
      */
     public function handle(ServerRequestInterface $request, ResourceOwnerInterface $resourceOwner,
-                           RegisteredClient $client, ?array $scope = null): array
+                            RegisteredClient $client, ?array $scope = null): array
     {
         return [];
     }