Rinvex\Oauth\Repositories\ClientRepository

Complexity

Total Complexity

18

Size/Duplication

Total Lines	71
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	2

Importance

Changes

0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	getClientEntity()	0	18	4
A	validateClient()	0	15	6
B	handlesGrant()	0	19	8

<?php

declare(strict_types=1);

namespace Rinvex\Oauth\Repositories;

use Rinvex\Oauth\Bridge\Client;
use League\OAuth2\Server\Repositories\ClientRepositoryInterface;

class ClientRepository implements ClientRepositoryInterface
{
    /**
     * {@inheritdoc}
     */
    public function getClientEntity($clientIdentifier)
    {
        $client = app('rinvex.oauth.client')->resolveRouteBinding($clientIdentifier);

        $record = $client && ! $client->is_revoked ? $client : null;

        if (! $record) {
            return;
        }

        return new Client(
            $clientIdentifier,
            $record->name,
            $record->redirect,
            $record->user_type,
            $record->isConfidential()
        );
    }

    /**
     * {@inheritdoc}
     */
    public function validateClient($clientIdentifier, $clientSecret, $grantType)
    {
        // First, we will verify that the client exists and is authorized to create personal
        // access tokens. Generally personal access tokens are only generated by the user
        // from the main interface. We'll only let certain clients generate the tokens.
        $client = app('rinvex.oauth.client')->resolveRouteBinding($clientIdentifier);

        $record = $client && ! $client->is_revoked ? $client : null;

        if (! $record || ! $this->handlesGrant($record, $grantType)) {
            return false;
        }

        return ! $record->isConfidential() || password_verify((string) $clientSecret, $record->secret);
    }

    /**
     * Determine if the given client can handle the given grant type.
     *
     * @param \Rinvex\Oauth\Models\Client $record
     * @param string                      $grantType
     *
     * @return bool
     */
    protected function handlesGrant($record, $grantType)
    {
        if (is_array($record->grant_types) && ! in_array($grantType, $record->grant_types)) {
            return false;
        }

        switch ($grantType) {
            case 'authorization_code':
                return ! $record->firstParty();
            case 'personal_access':
                return $record->grant_type === 'personal_access' && $record->isConfidential();
            case 'password':
                return $record->grant_type === 'password';
            case 'client_credentials':
                return $record->isConfidential();
            default:
                return true;
        }
    }
}