accounts/api/components/OAuth2/Repositories/ClientRepository.php

<?php
declare(strict_types=1);

namespace api\components\OAuth2\Repositories;

use api\components\OAuth2\Entities\ClientEntity;
use common\models\OauthClient;
use League\OAuth2\Server\Entities\ClientEntityInterface;
use League\OAuth2\Server\Repositories\ClientRepositoryInterface;

class ClientRepository implements ClientRepositoryInterface {

    public function getClientEntity($clientId): ?ClientEntityInterface {
        $client = $this->findModel($clientId);
        if ($client === null) {
            return null;
        }

        return new ClientEntity($client->id, $client->name, $client->redirect_uri, (bool)$client->is_trusted);
    }

    public function validateClient($clientId, $clientSecret, $grantType): bool {
        $client = $this->findModel($clientId);
        if ($client === null) {
            return false;
        }

        if ($clientSecret !== null && $clientSecret !== $client->secret) {
            return false;
        }

        // TODO: there is missing behavior of checking redirectUri. Is it now bundled into grant?

        return true;
    }

    private function findModel(string $id): ?OauthClient {
        return OauthClient::findOne(['id' => $id]);
    }

}