ElyBy-Mirror/accounts
1
0
Fork 0
mirror of https://github.com/elyby/accounts.git synced 2025-05-31 14:11:46 +05:30
Code Issues Packages Projects Releases Wiki Activity

Validate user_code expiry during the Device Code grant.

Browse Source 
Add mock responses related to the Device Code grant.
This commit is contained in:
ErickSkrauch
2024-12-14 18:55:31 +01:00
parent 2cc27d34ad
commit 119a0f8078
8 changed files with 143 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

62
api/eventListeners/MockDataResponse.php
View File

@@ -9,6 +9,7 @@ use api\modules\accounts\actions\ChangeEmailAction;
use api\modules\accounts\actions\EmailVerificationAction;
use api\modules\accounts\actions\NewEmailVerificationAction;
use api\modules\accounts\controllers\DefaultController;
use api\modules\oauth\controllers\AuthorizationController as OauthAuthorizationController;
use Closure;
use yii\base\ActionEvent;
use yii\base\BootstrapInterface;
@@ -37,11 +38,15 @@ final class MockDataResponse implements BootstrapInterface {
$event->isValid = false;
}
/**
* @return array<mixed>|null
*/
private function getResponse(ActionEvent $event): ?array {
$action = $event->action;
/** @var \yii\web\Controller $controller */
$controller = $action->controller;
$request = $controller->request;
$response = $controller->response;
if ($controller instanceof SignupController && $action->id === 'index') {
$email = $request->post('email');
if ($email === 'let-me-register@ely.by') {
@@ -91,6 +96,63 @@ final class MockDataResponse implements BootstrapInterface {
}
}
if ($controller instanceof OauthAuthorizationController) {
if ($action->id === 'validate') {
$userCode = $request->get('user_code');
if ($userCode === 'E2E-APPROVED' || $userCode === 'E2E-UNAPPROVED') {
return [
'success' => true,
'client' => [
'id' => 'test',
'name' => 'Ely.by Test',
'description' => "Some client's description",
],
'session' => [
'scopes' => 'account_info minecraft_server_session',
],
];
}
if ($userCode === 'E2E-EXPIRED') {
$response->setStatusCode(400);
return [
'success' => false,
'error' => 'expired_token',
'parameter' => 'user_code',
'statusCode' => 400,
];
}
if ($userCode === 'E2E-COMPLETED') {
$response->setStatusCode(400);
return [
'success' => false,
'error' => 'used_user_code',
'parameter' => 'user_code',
'statusCode' => 400,
];
}
}
if ($action->id === 'complete') {
$userCode = $request->get('user_code');
$accept = $request->post('accept');
if ($userCode === 'E2E-APPROVED' || ($userCode === 'E2E-UNAPPROVED' && $accept !== null)) {
return ['success' => true];
}
if ($userCode === 'E2E-UNAPPROVED' && $accept === null) {
$response->setStatusCode(401);
return [
'success' => false,
'error' => 'accept_required',
'parameter' => null,
'statusCode' => 401,
];
}
}
}
if ($controller instanceof DefaultController && $action->id === 'get') {
$httpAuth = $request->getHeaders()->get('authorization');
if ($httpAuth === 'Bearer dummy_token') {