OAuth2\GrantTypes\RefreshTokenGrantType

Complexity

Total Complexity

7

Size/Duplication

Total Lines	40
Duplicated Lines	0 %

Test Coverage

Coverage

0%

Importance

Changes

0

1 Method

Rating	Name	Duplication	Size	Complexity
C	handleAccessTokenRequest()	0	38	7

<?php
/**
 * Created by PhpStorm.
 * User: GCC-MED
 * Date: 12/03/2018
 * Time: 14:36
 */

namespace OAuth2\GrantTypes;


use OAuth2\Endpoints\TokenEndpoint;
use OAuth2\Exceptions\OAuthException;
use OAuth2\Storages\AccessTokenStorageInterface;
use OAuth2\Storages\RefreshTokenStorageInterface;

class RefreshTokenGrantType extends AbstractGrantType implements GrantTypeInterface
{
    function handleAccessTokenRequest(TokenEndpoint $tokenEndpoint, array $requestData): array

It is generally recommended to explicitly declare the visibility for methods.

    {
        if(empty($requestData['refresh_token'])) {
            throw new OAuthException('invalid_request',
                'The request is missing the required parameter refresh_token.',
                'https://tools.ietf.org/html/rfc7636#section-4.4');
        }

        $refreshToken = $this->refreshTokenStorage->get($requestData['refresh_token']);
        if(!$refreshToken || $refreshToken->getClientIdentifier() !== $tokenEndpoint->getClient()->getIdentifier()) {
            throw new OAuthException('invalid_grant',
                'The request includes the invalid parameter refresh_token.',
                'https://tools.ietf.org/html/rfc7636#section-4.4');
        }

        // TODO Config alwaysRevokeRefreshTokenOnUse
        $this->refreshTokenStorage->revoke($refreshToken->getToken());

        if($this->refreshTokenStorage->hasExpired($refreshToken)) {
            throw new OAuthException('invalid_grant',
                'The request includes the invalid parameter refresh_token. The token has expired.',
                'https://tools.ietf.org/html/rfc7636#section-4.4');
        }

        $scope = $refreshToken->getScope();
        if(!empty($requestData['scope'])) {
            if(!empty(array_diff(
                explode(' ', $requestData['scope']),
                explode(' ', $refreshToken->getScope())))) {
                throw new OAuthException('invalid_request',
                    'The request includes the invalid parameter scope.',
                    'https://tools.ietf.org/html/rfc7636#section-4.4');
            }
            $scope = $requestData['scope'];
        }

        // TODO Config issueTokens or only accessToken
        return $this->issueTokens($scope, $refreshToken->getClientIdentifier(), $refreshToken->getResourceOwnerIdentifier());
    }
}