OAuth2\Flows\ClientCredentialsFlow

Complexity

Total Complexity

8

Size/Duplication

Total Lines	59
Duplicated Lines	0 %

Importance

Changes

0

7 Methods

Rating	Name	Duplication	Size	Complexity
A	getResponseTypes()	0	3	1
A	getGrantTypes()	0	3	1
A	getDefaultResponseMode()	0	3	1
A	getUnsupportedResponseModes()	0	3	1
A	__construct()	0	6	1
A	handleAuthorizationRequest()	0	3	1
A	handleAccessTokenRequest()	0	13	2

<?php
/**
 * Created by PhpStorm.
 * User: GCC-MED
 * Date: 12/03/2018
 * Time: 15:41
 */

namespace OAuth2\Flows;


use OAuth2\Endpoints\AuthorizationEndpoint;
use OAuth2\Endpoints\TokenEndpoint;
use OAuth2\Exceptions\OAuthException;
use OAuth2\GrantTypes\AbstractGrantType;
use OAuth2\GrantTypes\GrantTypeInterface;
use OAuth2\ResponseTypes\ResponseTypeInterface;
use OAuth2\Roles\Clients\ConfidentialClientInterface;
use OAuth2\ScopePolicy\ScopePolicyManager;
use OAuth2\Storages\AccessTokenStorageInterface;
use OAuth2\Storages\RefreshTokenStorageInterface;

class ClientCredentialsFlow extends AbstractGrantType implements FlowInterface
{
    /**
     * @var ScopePolicyManager
     */
    private $scopePolicyManager;

    public function __construct(ScopePolicyManager $scopePolicyManager,
                                AccessTokenStorageInterface $accessTokenStorage,
                                RefreshTokenStorageInterface $refreshTokenStorage)
    {
        parent::__construct($accessTokenStorage, $refreshTokenStorage);
        $this->scopePolicyManager = $scopePolicyManager;
    }

    /**
     * @return ResponseTypeInterface[]
     */
    function getResponseTypes(): array

It is generally recommended to explicitly declare the visibility for methods.

    {
        return [];
    }

    /**
     * @return GrantTypeInterface[]
     */
    function getGrantTypes(): array

It is generally recommended to explicitly declare the visibility for methods.

    {
        return ['client_credentials'];

The expression return array('client_credentials') returns the type array<integer,string> which is incompatible with the documented return type OAuth2\GrantTypes\GrantTypeInterface[].

    }

    function handleAccessTokenRequest(TokenEndpoint $tokenEndpoint, array $requestData): array

It is generally recommended to explicitly declare the visibility for methods.

    {
        if (!$tokenEndpoint->getClient() instanceof ConfidentialClientInterface) {
            throw new OAuthException('unauthorized_client',
                'The authenticated client is not authorized to use this authorization grant type. 
                The client credentials grant type MUST only be used by confidential clients.',
                'https://tools.ietf.org/html/rfc6749#section-4.4');
        }

        $scopes = $this->scopePolicyManager->getScopes($tokenEndpoint->getClient(), $requestData['scope'] ?? null);
        $this->scopePolicyManager->verifyScopes($tokenEndpoint->getClient(), $scopes);

        return $this->issueAccessToken(implode(' ', $scopes), $tokenEndpoint->getClient()->getIdentifier(), null);
    }

    function handleAuthorizationRequest(AuthorizationEndpoint $authorizationEndpoint, array $requestData): array

It is generally recommended to explicitly declare the visibility for methods.

    {
        throw new \BadMethodCallException();
    }

    function getDefaultResponseMode(): string

It is generally recommended to explicitly declare the visibility for methods.

    {
        throw new \BadMethodCallException();
    }

    function getUnsupportedResponseModes(): array

It is generally recommended to explicitly declare the visibility for methods.

    {
        throw new \BadMethodCallException();
    }
}