for testing and deploying your application
for finding and fixing issues
for empowering human code reviews
<?php
declare(strict_types=1);
namespace League\OAuth2\Server\Handlers;
use League\OAuth2\Server\ResponseTypes\IntrospectionResponse;
use League\OAuth2\Server\ResponseTypes\IntrospectionResponseTypeInterface;
use Psr\Http\Message\ResponseInterface;
use Psr\Http\Message\ServerRequestInterface;
class TokenIntrospectionHandler extends AbstractTokenHandler
{
protected ?IntrospectionResponseTypeInterface $responseType = null;
protected function getResponseType(): IntrospectionResponseTypeInterface
return $this->responseType === null ? new IntrospectionResponse() : clone $this->responseType;
}
public function setResponseType(IntrospectionResponseTypeInterface $responseType): void
$this->responseType = $responseType;
public function respondToRequest(ServerRequestInterface $request, ResponseInterface $response): ResponseInterface
$client = $this->validateClient($request);
[$tokenType, $token] = $this->validateToken($request, $client);
$responseType = $this->getResponseType();
if ($tokenType !== null && $token !== null) {
$responseType->setActive(true);
$responseType->setTokenType($tokenType);
$responseType->setToken($token);
} else {
$responseType->setActive(false);
return $responseType->generateHttpResponse($response);
thephpleague /
oauth2-server
