Replace separate minecraft access tokens with JWT

api/modules/authserver/models/ValidateForm.php

@@ -1,35 +1,33 @@
 <?php
+declare(strict_types=1);
+
 namespace api\modules\authserver\models;
 
 use api\models\base\ApiForm;
-use api\modules\authserver\exceptions\ForbiddenOperationException;
+use api\modules\authserver\validators\AccessTokenValidator;
 use api\modules\authserver\validators\RequiredValidator;
-use common\models\MinecraftAccessKey;
 
 class ValidateForm extends ApiForm {
 
+    /**
+     * @var string
+     */
     public $accessToken;
 
-    public function rules() {
+    public function rules(): array {
         return [
             [['accessToken'], RequiredValidator::class],
+            [['accessToken'], AccessTokenValidator::class],
         ];
     }
 
+    /**
+     * @return bool
+     * @throws \api\modules\authserver\exceptions\ForbiddenOperationException
+     * @throws \api\modules\authserver\exceptions\IllegalArgumentException
+     */
     public function validateToken(): bool {
-        $this->validate();
-
-        /** @var MinecraftAccessKey|null $result */
-        $result = MinecraftAccessKey::findOne($this->accessToken);
-        if ($result === null) {
-            throw new ForbiddenOperationException('Invalid token.');
-        }
-
-        if ($result->isExpired()) {
-            throw new ForbiddenOperationException('Token expired.');
-        }
-
-        return true;
+        return $this->validate();
     }
 
 }