ElyBy-Mirror/accounts
1
0
Fork 0
mirror of https://github.com/elyby/accounts.git synced 2025-05-31 14:11:46 +05:30
Code Issues Packages Projects Releases Wiki Activity

Implemented device code grant

Browse Source
This commit is contained in:
ErickSkrauch
2024-12-08 16:54:45 +01:00
parent c7d192d14e
commit 2cc27d34ad
28 changed files with 665 additions and 171 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
api/modules/oauth/controllers/AuthorizationController.php
View File

@@ -50,6 +50,7 @@ final class AuthorizationController extends Controller {
return [
'validate' => ['GET'],
'complete' => ['POST'],
'device' => ['POST'],
'token' => ['POST'],
];
}
@@ -62,6 +63,10 @@ final class AuthorizationController extends Controller {
return $this->oauthProcess->complete($this->getServerRequest());
}
public function actionDevice(): array {
return $this->oauthProcess->deviceCode($this->getServerRequest());
}
public function actionToken(): array {
return $this->oauthProcess->getToken($this->getServerRequest());
}

37
api/modules/oauth/models/OauthProcess.php
View File

@@ -109,8 +109,10 @@ final readonly class OauthProcess {
$result = [
'success' => true,
'redirectUri' => $response->getHeaderLine('Location'),
];
if ($response->hasHeader('Location')) {
$result['redirectUri'] = $response->getHeaderLine('Location');
}
Yii::$app->statsd->inc('oauth.complete.success');
} catch (OAuthServerException $e) {
@@ -125,6 +127,31 @@ final readonly class OauthProcess {
return $result;
}
/**
* @return array{
* device_code: string,
* user_code: string,
* verification_uri: string,
* interval: int,
* expires_in: int,
* }|array{
* error: string,
* message: string,
* }
*/
public function deviceCode(ServerRequestInterface $request): array {
try {
$response = $this->server->respondToDeviceAuthorizationRequest($request, new Response());
} catch (OAuthServerException $e) {
Yii::$app->response->statusCode = $e->getHttpStatusCode();
return $this->buildIssueErrorResponse($e);
}
Yii::$app->statsd->inc('oauth.deviceCode.initialize');
return json_decode((string)$response->getBody(), true);
}
/**
* The method is executed by the application server to which auth_token or refresh_token was given.
*
@@ -245,6 +272,7 @@ final readonly class OauthProcess {
'response_type',
'scope',
'state',
'user_code',
])),
'client' => [
'id' => $client->id,
@@ -281,14 +309,19 @@ final readonly class OauthProcess {
*/
private function buildCompleteErrorResponse(OAuthServerException $e): array {
$hint = $e->getPayload()['hint'] ?? '';
$parameter = null;
if (preg_match('/the `(\w+)` scope/', $hint, $matches)) {
$parameter = $matches[1];
}
if ($parameter === null && str_starts_with($e->getErrorType(), 'invalid_')) {
$parameter = substr($e->getErrorType(), 8); // 8 is the length of the "invalid_"
}
$response = [
'success' => false,
'error' => $e->getErrorType(),
'parameter' => $parameter ?? null,
'parameter' => $parameter,
'statusCode' => $e->getHttpStatusCode(),
];