rhertogh\Yii2Oauth2Server\components\openidconnect\server\responses\Oauth2OidcBearerTokenResponse::getExtraParams()

Complexity

Conditions	4
Paths	4

Size

Total Lines	38
Code Lines	22

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php
    protected function getExtraParams(AccessTokenEntityInterface $accessToken)
    {
        $extraParams = parent::getExtraParams($accessToken);

        $scopeIdentifiers = array_map(fn($scope) => $scope->getIdentifier(), $accessToken->getScopes());

        // Not a OpenId Connect request if OpenId scope is not present.
        if (!in_array(Oauth2OidcScopeInterface::OPENID_CONNECT_SCOPE_OPENID, $scopeIdentifiers)) {
            return $extraParams;
        }

        $module = $this->getModule();

        $user = $module->getUserRepository()->getUserEntityByIdentifier($accessToken->getUserIdentifier());
        if ($user === null) {
            throw new InvalidArgumentException(
                'No user with identifier "' . $accessToken->getUserIdentifier() . '" found.'
            );
        }
        if (!($user instanceof Oauth2OidcUserInterface)) {
            throw new InvalidConfigException(
                get_class($user) . ' must implement ' . Oauth2OidcUserInterface::class
            );
        }

        $nonce = Yii::$app->request->post(Oauth2OidcAuthenticationRequestInterface::REQUEST_PARAMETER_NONCE);

        $token = $module->generateOpenIdConnectUserClaimsToken(
            $user,
            $accessToken->getClient()->getIdentifier(),
            $this->privateKey,
            $scopeIdentifiers,
            $nonce,

It seems like $nonce can also be of type array; however, parameter $nonce of rhertogh\Yii2Oauth2Server\base\Oauth2BaseModule::generateOpenIdConnectUserClaimsToken() does only seem to accept null|string, maybe add an additional type check?

            $accessToken->getExpiryDateTime()
        );

        return ArrayHelper::merge($extraParams, [
            static::TOKEN_RESPONSE_ID_TOKEN => $token->toString()
        ]);