├── .github
    ├── CONTRIBUTING.md
    ├── FUNDING.yml
    ├── ISSUE_TEMPLATE
    │   ├── bug_report.md
    │   └── feature_request.md
    ├── dependabot.yml
    └── workflows
    │   ├── coding-standards.yml
    │   ├── mutation-tests.yml
    │   ├── rector_checkstyle.yaml
    │   ├── static-analyze.yml
    │   ├── tests.yml
    │   └── twig-lint.yml
├── .gitignore
├── .gitsplit.yml
├── LICENSE
├── Makefile
├── README.md
├── composer.json
├── ecs.php
├── infection.json.dist
├── phpstan.neon
├── phpunit.xml.dist
├── rector.php
├── src
    ├── Component
    │   ├── AuthorizationCodeGrant
    │   │   ├── .github
    │   │   │   └── PULL_REQUEST_TEMPLATE.md
    │   │   ├── AbstractAuthorizationCode.php
    │   │   ├── AuthorizationCode.php
    │   │   ├── AuthorizationCodeGrantType.php
    │   │   ├── AuthorizationCodeId.php
    │   │   ├── AuthorizationCodeRepository.php
    │   │   ├── AuthorizationCodeResponseType.php
    │   │   ├── LICENSE
    │   │   ├── PKCEMethod
    │   │   │   ├── PKCEMethod.php
    │   │   │   ├── PKCEMethodManager.php
    │   │   │   ├── Plain.php
    │   │   │   └── S256.php
    │   │   ├── README.md
    │   │   ├── composer.json
    │   │   └── phpunit.xml.dist
    │   ├── AuthorizationEndpoint
    │   │   ├── .github
    │   │   │   └── PULL_REQUEST_TEMPLATE.md
    │   │   ├── AuthorizationEndpoint.php
    │   │   ├── AuthorizationRequest
    │   │   │   ├── AuthorizationRequest.php
    │   │   │   └── AuthorizationRequestLoader.php
    │   │   ├── AuthorizationRequestEntryEndpoint.php
    │   │   ├── AuthorizationRequestHandler.php
    │   │   ├── AuthorizationRequestStorage.php
    │   │   ├── Consent
    │   │   │   ├── Consent.php
    │   │   │   └── ConsentRepository.php
    │   │   ├── ConsentHandler.php
    │   │   ├── Exception
    │   │   │   └── OAuth2AuthorizationException.php
    │   │   ├── Extension
    │   │   │   ├── Extension.php
    │   │   │   └── ExtensionManager.php
    │   │   ├── Hook
    │   │   │   ├── AuthorizationEndpointHook.php
    │   │   │   ├── ConsentPrompt.php
    │   │   │   ├── LoginPrompt.php
    │   │   │   ├── NonePrompt.php
    │   │   │   └── SelectAccountPrompt.php
    │   │   ├── LICENSE
    │   │   ├── LoginHandler.php
    │   │   ├── Middleware
    │   │   │   └── AuthorizationExceptionMiddleware.php
    │   │   ├── ParameterChecker
    │   │   │   ├── DisplayParameterChecker.php
    │   │   │   ├── ParameterChecker.php
    │   │   │   ├── ParameterCheckerManager.php
    │   │   │   ├── PromptParameterChecker.php
    │   │   │   ├── RedirectUriParameterChecker.php
    │   │   │   ├── ResponseTypeParameterChecker.php
    │   │   │   └── StateParameterChecker.php
    │   │   ├── README.md
    │   │   ├── ResponseMode
    │   │   │   ├── FormPostResponseMode.php
    │   │   │   ├── FormPostResponseRenderer.php
    │   │   │   ├── FragmentResponseMode.php
    │   │   │   ├── QueryResponseMode.php
    │   │   │   ├── ResponseMode.php
    │   │   │   └── ResponseModeManager.php
    │   │   ├── ResponseModeGuesser.php
    │   │   ├── ResponseType
    │   │   │   ├── ResponseType.php
    │   │   │   └── ResponseTypeManager.php
    │   │   ├── ResponseTypeGuesser.php
    │   │   ├── Rule
    │   │   │   ├── RequestUriRule.php
    │   │   │   ├── ResponseTypesRule.php
    │   │   │   └── SectorIdentifierUriRule.php
    │   │   ├── SelectAccountHandler.php
    │   │   ├── User
    │   │   │   ├── AuthenticationContextClassReferenceSupport.php
    │   │   │   ├── AuthenticationMethodReferenceSupport.php
    │   │   │   ├── MaxAgeParameterAuthenticationChecker.php
    │   │   │   ├── UserAccountDiscovery.php
    │   │   │   ├── UserAuthenticationChecker.php
    │   │   │   └── UserAuthenticationCheckerManager.php
    │   │   ├── composer.json
    │   │   └── phpunit.xml.dist
    │   ├── BearerTokenType
    │   │   ├── .github
    │   │   │   └── PULL_REQUEST_TEMPLATE.md
    │   │   ├── AuthorizationHeaderTokenFinder.php
    │   │   ├── BearerToken.php
    │   │   ├── LICENSE
    │   │   ├── QueryStringTokenFinder.php
    │   │   ├── README.md
    │   │   ├── RequestBodyTokenFinder.php
    │   │   ├── TokenFinder.php
    │   │   ├── composer.json
    │   │   └── phpunit.xml.dist
    │   ├── ClientAuthentication
    │   │   ├── AuthenticationMethod.php
    │   │   ├── AuthenticationMethodManager.php
    │   │   ├── ClientAssertionJwt.php
    │   │   ├── ClientAuthenticationMiddleware.php
    │   │   ├── ClientSecretBasic.php
    │   │   ├── ClientSecretPost.php
    │   │   ├── LICENSE
    │   │   ├── None.php
    │   │   ├── README.md
    │   │   ├── Rule
    │   │   │   └── ClientAuthenticationMethodRule.php
    │   │   ├── composer.json
    │   │   └── phpunit.xml.dist
    │   ├── ClientConfigurationEndpoint
    │   │   ├── .github
    │   │   │   └── PULL_REQUEST_TEMPLATE.md
    │   │   ├── ClientConfigurationDeleteEndpoint.php
    │   │   ├── ClientConfigurationEndpoint.php
    │   │   ├── ClientConfigurationGetEndpoint.php
    │   │   ├── ClientConfigurationPutEndpoint.php
    │   │   ├── LICENSE
    │   │   ├── README.md
    │   │   ├── Rule
    │   │   │   └── ClientConfigurationRouteRule.php
    │   │   ├── composer.json
    │   │   └── phpunit.xml.dist
    │   ├── ClientCredentialsGrant
    │   │   ├── .github
    │   │   │   └── PULL_REQUEST_TEMPLATE.md
    │   │   ├── ClientCredentialsGrantType.php
    │   │   ├── LICENSE
    │   │   ├── README.md
    │   │   ├── composer.json
    │   │   └── phpunit.xml.dist
    │   ├── ClientRegistrationEndpoint
    │   │   ├── .github
    │   │   │   └── PULL_REQUEST_TEMPLATE.md
    │   │   ├── AbstractInitialAccessToken.php
    │   │   ├── ClientRegistrationEndpoint.php
    │   │   ├── InitialAccessToken.php
    │   │   ├── InitialAccessTokenId.php
    │   │   ├── InitialAccessTokenMiddleware.php
    │   │   ├── InitialAccessTokenRepository.php
    │   │   ├── LICENSE
    │   │   ├── README.md
    │   │   ├── Rule
    │   │   │   └── SoftwareRule.php
    │   │   ├── composer.json
    │   │   └── phpunit.xml.dist
    │   ├── ClientRule
    │   │   ├── AbstractInternationalizedRule.php
    │   │   ├── ApplicationTypeParametersRule.php
    │   │   ├── ClientIdIssuedAtRule.php
    │   │   ├── CommonParametersRule.php
    │   │   ├── ContactsParametersRule.php
    │   │   ├── JwksRule.php
    │   │   ├── LICENSE
    │   │   ├── README.md
    │   │   ├── RedirectionUriRule.php
    │   │   ├── Rule.php
    │   │   ├── RuleHandler.php
    │   │   ├── RuleManager.php
    │   │   ├── composer.json
    │   │   └── phpunit.xml.dist
    │   ├── Core
    │   │   ├── .github
    │   │   │   └── PULL_REQUEST_TEMPLATE.md
    │   │   ├── AccessToken
    │   │   │   ├── AbstractAccessToken.php
    │   │   │   ├── AccessToken.php
    │   │   │   ├── AccessTokenId.php
    │   │   │   ├── AccessTokenIntrospectionTypeHint.php
    │   │   │   ├── AccessTokenRepository.php
    │   │   │   └── AccessTokenRevocationTypeHint.php
    │   │   ├── Client
    │   │   │   ├── AbstractClient.php
    │   │   │   ├── Client.php
    │   │   │   ├── ClientId.php
    │   │   │   └── ClientRepository.php
    │   │   ├── DataBag
    │   │   │   └── DataBag.php
    │   │   ├── LICENSE
    │   │   ├── Message
    │   │   │   ├── Factory
    │   │   │   │   ├── AccessDeniedResponseFactory.php
    │   │   │   │   ├── AuthenticateResponseForClientFactory.php
    │   │   │   │   ├── AuthenticateResponseForTokenFactory.php
    │   │   │   │   ├── BadRequestResponseFactory.php
    │   │   │   │   ├── MethodNotAllowedResponseFactory.php
    │   │   │   │   ├── NotImplementedResponseFactory.php
    │   │   │   │   ├── OAuth2ResponseFactory.php
    │   │   │   │   ├── RedirectResponseFactory.php
    │   │   │   │   └── ResponseFactory.php
    │   │   │   ├── MessageExtension.php
    │   │   │   ├── OAuth2Error.php
    │   │   │   └── OAuth2MessageFactoryManager.php
    │   │   ├── Middleware
    │   │   │   ├── AccessTokenMiddleware.php
    │   │   │   ├── Consumer.php
    │   │   │   ├── HttpMethodMiddleware.php
    │   │   │   ├── OAuth2MessageMiddleware.php
    │   │   │   ├── Pipe.php
    │   │   │   └── TerminalRequestHandler.php
    │   │   ├── README.md
    │   │   ├── ResourceOwner
    │   │   │   ├── ResourceOwner.php
    │   │   │   └── ResourceOwnerId.php
    │   │   ├── ResourceServer
    │   │   │   ├── ResourceServer.php
    │   │   │   ├── ResourceServerId.php
    │   │   │   └── ResourceServerRepository.php
    │   │   ├── TokenType
    │   │   │   ├── TokenType.php
    │   │   │   ├── TokenTypeGuesser.php
    │   │   │   ├── TokenTypeManager.php
    │   │   │   └── TokenTypeMiddleware.php
    │   │   ├── TrustedIssuer
    │   │   │   ├── TrustedIssuer.php
    │   │   │   └── TrustedIssuerRepository.php
    │   │   ├── UserAccount
    │   │   │   ├── UserAccount.php
    │   │   │   ├── UserAccountId.php
    │   │   │   └── UserAccountRepository.php
    │   │   ├── Util
    │   │   │   └── RequestBodyParser.php
    │   │   ├── composer.json
    │   │   └── phpunit.xml.dist
    │   ├── ImplicitGrant
    │   │   ├── .github
    │   │   │   └── PULL_REQUEST_TEMPLATE.md
    │   │   ├── ImplicitGrantType.php
    │   │   ├── LICENSE
    │   │   ├── README.md
    │   │   ├── TokenResponseType.php
    │   │   ├── composer.json
    │   │   └── phpunit.xml.dist
    │   ├── JwtBearerGrant
    │   │   ├── .github
    │   │   │   └── PULL_REQUEST_TEMPLATE.md
    │   │   ├── JwtBearerGrantType.php
    │   │   ├── LICENSE
    │   │   ├── README.md
    │   │   ├── composer.json
    │   │   └── phpunit.xml.dist
    │   ├── MetadataEndpoint
    │   │   ├── .github
    │   │   │   └── PULL_REQUEST_TEMPLATE.md
    │   │   ├── LICENSE
    │   │   ├── Metadata.php
    │   │   ├── MetadataEndpoint.php
    │   │   ├── README.md
    │   │   ├── composer.json
    │   │   └── phpunit.xml.dist
    │   ├── NoneGrant
    │   │   ├── .github
    │   │   │   └── PULL_REQUEST_TEMPLATE.md
    │   │   ├── AuthorizationStorage.php
    │   │   ├── LICENSE
    │   │   ├── NoneResponseType.php
    │   │   ├── README.md
    │   │   ├── composer.json
    │   │   └── phpunit.xml.dist
    │   ├── OpenIdConnect
    │   │   ├── .github
    │   │   │   └── PULL_REQUEST_TEMPLATE.md
    │   │   ├── ConsentScreen
    │   │   │   └── SessionStateParameterExtension.php
    │   │   ├── IFrame
    │   │   │   └── IFrameEndpoint.php
    │   │   ├── IdToken.php
    │   │   ├── IdTokenBuilder.php
    │   │   ├── IdTokenBuilderFactory.php
    │   │   ├── IdTokenGrant
    │   │   │   ├── CodeIdTokenResponseType.php
    │   │   │   ├── CodeIdTokenTokenResponseType.php
    │   │   │   ├── CodeTokenResponseType.php
    │   │   │   ├── IdTokenResponseType.php
    │   │   │   └── IdTokenTokenResponseType.php
    │   │   ├── IdTokenId.php
    │   │   ├── IdTokenLoader.php
    │   │   ├── OpenIdConnectExtension.php
    │   │   ├── ParameterChecker
    │   │   │   ├── ClaimsParameterChecker.php
    │   │   │   └── NonceParameterChecker.php
    │   │   ├── Rule
    │   │   │   ├── IdTokenAlgorithmsRule.php
    │   │   │   ├── SubjectTypeRule.php
    │   │   │   ├── UserParametersRule.php
    │   │   │   └── UserinfoEndpointAlgorithmsRule.php
    │   │   ├── UserInfo
    │   │   │   ├── Claim
    │   │   │   │   ├── Address.php
    │   │   │   │   ├── AuthenticationContextClassReference.php
    │   │   │   │   ├── AuthenticationMethodReference.php
    │   │   │   │   ├── AuthenticationTime.php
    │   │   │   │   ├── Birthdate.php
    │   │   │   │   ├── Claim.php
    │   │   │   │   ├── ClaimManager.php
    │   │   │   │   ├── ClaimSource.php
    │   │   │   │   ├── ClaimSourceManager.php
    │   │   │   │   ├── Email.php
    │   │   │   │   ├── EmailVerified.php
    │   │   │   │   ├── FamilyName.php
    │   │   │   │   ├── Gender.php
    │   │   │   │   ├── GivenName.php
    │   │   │   │   ├── Locale.php
    │   │   │   │   ├── MiddleName.php
    │   │   │   │   ├── Name.php
    │   │   │   │   ├── Nickname.php
    │   │   │   │   ├── PhoneNumber.php
    │   │   │   │   ├── PhoneNumberVerified.php
    │   │   │   │   ├── Picture.php
    │   │   │   │   ├── PreferredUsername.php
    │   │   │   │   ├── Profile.php
    │   │   │   │   ├── Source.php
    │   │   │   │   ├── UpdatedAt.php
    │   │   │   │   ├── Website.php
    │   │   │   │   └── Zoneinfo.php
    │   │   │   ├── Pairwise
    │   │   │   │   ├── EncryptedSubjectIdentifier.php
    │   │   │   │   └── PairwiseSubjectIdentifierAlgorithm.php
    │   │   │   ├── ScopeSupport
    │   │   │   │   ├── AddressScopeSupport.php
    │   │   │   │   ├── EmailScopeSupport.php
    │   │   │   │   ├── OpenIdScopeSupport.php
    │   │   │   │   ├── PhoneScopeSupport.php
    │   │   │   │   ├── ProfileScopeSupport.php
    │   │   │   │   ├── UserInfoScopeSupport.php
    │   │   │   │   └── UserInfoScopeSupportManager.php
    │   │   │   └── UserInfo.php
    │   │   └── UserInfoEndpoint
    │   │   │   └── UserInfoEndpoint.php
    │   ├── RefreshTokenGrant
    │   │   ├── .github
    │   │   │   └── PULL_REQUEST_TEMPLATE.md
    │   │   ├── AbstractRefreshToken.php
    │   │   ├── LICENSE
    │   │   ├── README.md
    │   │   ├── RefreshToken.php
    │   │   ├── RefreshTokenEndpointExtension.php
    │   │   ├── RefreshTokenGrantType.php
    │   │   ├── RefreshTokenId.php
    │   │   ├── RefreshTokenIntrospectionTypeHint.php
    │   │   ├── RefreshTokenRepository.php
    │   │   ├── RefreshTokenRevocationTypeHint.php
    │   │   ├── composer.json
    │   │   └── phpunit.xml.dist
    │   ├── ResourceOwnerPasswordCredentialsGrant
    │   │   ├── .github
    │   │   │   └── PULL_REQUEST_TEMPLATE.md
    │   │   ├── LICENSE
    │   │   ├── README.md
    │   │   ├── ResourceOwnerPasswordCredentialManager.php
    │   │   ├── ResourceOwnerPasswordCredentialsGrantType.php
    │   │   ├── ResourceOwnerWithPasswordCredential.php
    │   │   ├── composer.json
    │   │   └── phpunit.xml.dist
    │   ├── ResourceServerAuthentication
    │   │   ├── AuthenticationMethod.php
    │   │   ├── AuthenticationMethodManager.php
    │   │   ├── AuthenticationMiddleware.php
    │   │   ├── LICENSE
    │   │   ├── README.md
    │   │   ├── composer.json
    │   │   └── phpunit.xml.dist
    │   ├── Scope
    │   │   ├── Checker.php
    │   │   ├── LICENSE
    │   │   ├── Policy
    │   │   │   ├── DefaultScopePolicy.php
    │   │   │   ├── ErrorScopePolicy.php
    │   │   │   ├── NoScopePolicy.php
    │   │   │   ├── ScopePolicy.php
    │   │   │   └── ScopePolicyManager.php
    │   │   ├── README.md
    │   │   ├── Rule
    │   │   │   ├── ScopePolicyDefaultRule.php
    │   │   │   ├── ScopePolicyRule.php
    │   │   │   └── ScopeRule.php
    │   │   ├── Scope.php
    │   │   ├── ScopeParameterChecker.php
    │   │   ├── ScopeRepository.php
    │   │   ├── TokenEndpointScopeExtension.php
    │   │   ├── composer.json
    │   │   └── phpunit.xml.dist
    │   ├── TokenEndpoint
    │   │   ├── .github
    │   │   │   └── PULL_REQUEST_TEMPLATE.md
    │   │   ├── Extension
    │   │   │   ├── TokenEndpointExtension.php
    │   │   │   └── TokenEndpointExtensionManager.php
    │   │   ├── GrantType.php
    │   │   ├── GrantTypeData.php
    │   │   ├── GrantTypeManager.php
    │   │   ├── GrantTypeMiddleware.php
    │   │   ├── LICENSE
    │   │   ├── README.md
    │   │   ├── Rule
    │   │   │   └── GrantTypesRule.php
    │   │   ├── TokenEndpoint.php
    │   │   ├── composer.json
    │   │   └── phpunit.xml.dist
    │   ├── TokenIntrospectionEndpoint
    │   │   ├── .github
    │   │   │   └── PULL_REQUEST_TEMPLATE.md
    │   │   ├── LICENSE
    │   │   ├── README.md
    │   │   ├── TokenIntrospectionEndpoint.php
    │   │   ├── TokenTypeHint.php
    │   │   ├── TokenTypeHintManager.php
    │   │   ├── composer.json
    │   │   └── phpunit.xml.dist
    │   ├── TokenRevocationEndpoint
    │   │   ├── .github
    │   │   │   └── PULL_REQUEST_TEMPLATE.md
    │   │   ├── LICENSE
    │   │   ├── README.md
    │   │   ├── TokenRevocationEndpoint.php
    │   │   ├── TokenRevocationGetEndpoint.php
    │   │   ├── TokenRevocationPostEndpoint.php
    │   │   ├── TokenTypeHint.php
    │   │   ├── TokenTypeHintManager.php
    │   │   ├── composer.json
    │   │   └── phpunit.xml.dist
    │   └── WebFingerEndpoint
    │   │   ├── .github
    │   │       └── PULL_REQUEST_TEMPLATE.md
    │   │   ├── IdentifierResolver
    │   │       ├── AccountResolver.php
    │   │       ├── EmailResolver.php
    │   │       ├── Identifier.php
    │   │       ├── IdentifierResolver.php
    │   │       ├── IdentifierResolverManager.php
    │   │       └── UriResolver.php
    │   │   ├── LICENSE
    │   │   ├── Link.php
    │   │   ├── README.md
    │   │   ├── ResourceDescriptor.php
    │   │   ├── ResourceRepository.php
    │   │   ├── WebFingerEndpoint.php
    │   │   ├── composer.json
    │   │   └── phpunit.xml.dist
    ├── SecurityBundle
    │   ├── .github
    │   │   └── PULL_REQUEST_TEMPLATE.md
    │   ├── Annotation
    │   │   ├── AnnotationDriver.php
    │   │   ├── Checker
    │   │   │   ├── Checker.php
    │   │   │   ├── ClientIdChecker.php
    │   │   │   ├── ResourceOwnerIdChecker.php
    │   │   │   ├── ScopeChecker.php
    │   │   │   └── TokenTypeChecker.php
    │   │   └── OAuth2.php
    │   ├── DependencyInjection
    │   │   ├── Compiler
    │   │   │   ├── SecurityAnnotationCheckerCompilerPass.php
    │   │   │   └── TokenTypeCompilerPass.php
    │   │   └── OAuth2FrameworkSecurityExtension.php
    │   ├── EventListener
    │   │   └── RequestListener.php
    │   ├── LICENSE
    │   ├── OAuth2FrameworkSecurityBundle.php
    │   ├── Resolver
    │   │   └── AccessTokenResolver.php
    │   ├── Resources
    │   │   └── config
    │   │   │   └── security.php
    │   ├── Security
    │   │   ├── Authentication
    │   │   │   ├── AccessTokenBadge.php
    │   │   │   ├── DefaultFailureHandler.php
    │   │   │   ├── OAuth2Provider.php
    │   │   │   ├── OAuth2SecurityFactory.php
    │   │   │   ├── OAuth2Token.php
    │   │   │   └── ResourceOwner.php
    │   │   └── ExpressionLanguageProvider.php
    │   └── composer.json
    ├── ServerBundle
    │   ├── .github
    │   │   └── PULL_REQUEST_TEMPLATE.md
    │   ├── Component
    │   │   ├── ClientAuthentication
    │   │   │   ├── ClientAssertionJwtSource.php
    │   │   │   ├── ClientAuthenticationSource.php
    │   │   │   ├── ClientSecretBasicSource.php
    │   │   │   ├── ClientSecretPostSource.php
    │   │   │   ├── Compiler
    │   │   │   │   ├── ClientAssertionEncryptedJwtCompilerPass.php
    │   │   │   │   ├── ClientAssertionJkuSupportCompilerPass.php
    │   │   │   │   ├── ClientAssertionTrustedIssuerSupportCompilerPass.php
    │   │   │   │   ├── ClientAuthenticationMethodCompilerPass.php
    │   │   │   │   └── ClientJwtAssertionMetadataCompilerPass.php
    │   │   │   └── NoneSource.php
    │   │   ├── ClientRule
    │   │   │   ├── ClientRuleCompilerPass.php
    │   │   │   └── ClientRuleSource.php
    │   │   ├── Component.php
    │   │   ├── Core
    │   │   │   ├── AccessTokenSource.php
    │   │   │   ├── ClientSource.php
    │   │   │   ├── Compiler
    │   │   │   │   ├── OAuth2MessageExtensionCompilerClass.php
    │   │   │   │   ├── OAuth2MessageFactoryCompilerClass.php
    │   │   │   │   └── ResourceServerAuthenticationMethodCompilerPass.php
    │   │   │   ├── ResourceServerSource.php
    │   │   │   ├── ServicesSource.php
    │   │   │   ├── TrustedIssuerSource.php
    │   │   │   └── UserAccountSource.php
    │   │   ├── Endpoint
    │   │   │   ├── Authorization
    │   │   │   │   ├── AuthorizationEndpointSource.php
    │   │   │   │   ├── Compiler
    │   │   │   │   │   ├── AuthorizationEndpointRouteCompilerPass.php
    │   │   │   │   │   ├── AuthorizationRequestEntryEndpointRouteCompilerPass.php
    │   │   │   │   │   ├── AuthorizationRequestHookCompilerPass.php
    │   │   │   │   │   ├── AuthorizationRequestMetadataCompilerPass.php
    │   │   │   │   │   ├── ConsentScreenExtensionCompilerPass.php
    │   │   │   │   │   ├── ParameterCheckerCompilerPass.php
    │   │   │   │   │   ├── RequestObjectCompilerPass.php
    │   │   │   │   │   ├── RequestObjectEncryptionCompilerPass.php
    │   │   │   │   │   ├── RequestObjectReferenceCompilerPass.php
    │   │   │   │   │   ├── ResponseModeCompilerPass.php
    │   │   │   │   │   ├── ResponseTypeCompilerPass.php
    │   │   │   │   │   ├── TemplatePathCompilerPass.php
    │   │   │   │   │   └── UserAuthenticationCheckerCompilerPass.php
    │   │   │   │   ├── FormPostResponseModeSource.php
    │   │   │   │   ├── RequestObjectEncryptionSource.php
    │   │   │   │   ├── RequestObjectReferenceSource.php
    │   │   │   │   ├── RequestObjectSource.php
    │   │   │   │   └── ResponseModeSource.php
    │   │   │   ├── ClientConfiguration
    │   │   │   │   ├── ClientConfigurationSource.php
    │   │   │   │   └── Compiler
    │   │   │   │   │   └── ClientConfigurationEndpointRouteCompilerPass.php
    │   │   │   ├── ClientRegistration
    │   │   │   │   ├── ClientRegistrationSource.php
    │   │   │   │   ├── Compiler
    │   │   │   │   │   ├── ClientRegistrationEndpointRouteCompilerPass.php
    │   │   │   │   │   └── InitialAccessTokenCompilerPass.php
    │   │   │   │   ├── InitialAccessTokenSource.php
    │   │   │   │   └── SoftwareStatementSource.php
    │   │   │   ├── EndpointSource.php
    │   │   │   ├── JwksUri
    │   │   │   │   ├── JwksUriEndpointRouteCompilerPass.php
    │   │   │   │   └── JwksUriEndpointSource.php
    │   │   │   ├── Metadata
    │   │   │   │   ├── Compiler
    │   │   │   │   │   ├── CommonMetadataCompilerPass.php
    │   │   │   │   │   ├── CustomRoutesCompilerPass.php
    │   │   │   │   │   ├── CustomValuesCompilerPass.php
    │   │   │   │   │   ├── MetadataRouteCompilerPass.php
    │   │   │   │   │   └── SignedMetadataCompilerPass.php
    │   │   │   │   ├── CustomRouteSource.php
    │   │   │   │   ├── CustomValuesSource.php
    │   │   │   │   ├── MetadataEndpointSource.php
    │   │   │   │   └── SignatureSource.php
    │   │   │   ├── SessionManagement
    │   │   │   │   ├── Compiler
    │   │   │   │   │   └── SessionManagementRouteCompilerPass.php
    │   │   │   │   └── SessionManagementEndpointSource.php
    │   │   │   ├── Token
    │   │   │   │   ├── Compiler
    │   │   │   │   │   ├── GrantTypeCompilerPass.php
    │   │   │   │   │   ├── TokenEndpointExtensionCompilerPass.php
    │   │   │   │   │   └── TokenRouteCompilerPass.php
    │   │   │   │   └── TokenEndpointSource.php
    │   │   │   ├── TokenIntrospection
    │   │   │   │   ├── Compiler
    │   │   │   │   │   ├── TokenIntrospectionRouteCompilerPass.php
    │   │   │   │   │   └── TokenTypeHintCompilerPass.php
    │   │   │   │   └── TokenIntrospectionEndpointSource.php
    │   │   │   └── TokenRevocation
    │   │   │   │   ├── Compiler
    │   │   │   │       ├── TokenRevocationRouteCompilerPass.php
    │   │   │   │       └── TokenTypeHintCompilerPass.php
    │   │   │   │   └── TokenRevocationEndpointSource.php
    │   │   ├── Grant
    │   │   │   ├── AuthorizationCode
    │   │   │   │   ├── AuthorizationCodeSource.php
    │   │   │   │   ├── AuthorizationCodeSupportForIdTokenBuilderCompilerPass.php
    │   │   │   │   └── PKCEMethodCompilerPass.php
    │   │   │   ├── ClientCredentials
    │   │   │   │   └── ClientCredentialsSource.php
    │   │   │   ├── GrantSource.php
    │   │   │   ├── Implicit
    │   │   │   │   └── ImplicitSource.php
    │   │   │   ├── JwtBearer
    │   │   │   │   ├── Compiler
    │   │   │   │   │   ├── EncryptedAssertionCompilerPass.php
    │   │   │   │   │   └── TrustedIssuerSupportCompilerPass.php
    │   │   │   │   └── JwtBearerSource.php
    │   │   │   ├── None
    │   │   │   │   └── NoneSource.php
    │   │   │   ├── RefreshToken
    │   │   │   │   └── RefreshTokenSource.php
    │   │   │   └── ResourceOwnerPasswordCredential
    │   │   │   │   └── ResourceOwnerPasswordCredentialSource.php
    │   │   ├── KeySet.php
    │   │   ├── OpenIdConnect
    │   │   │   ├── Compiler
    │   │   │   │   ├── ClaimCompilerPass.php
    │   │   │   │   ├── ClaimSourceCompilerPass.php
    │   │   │   │   ├── ClaimsSupportedMetadataCompilerPass.php
    │   │   │   │   ├── IdTokenMetadataCompilerPass.php
    │   │   │   │   ├── JkuSupportForIdTokenBuilderCompilerPass.php
    │   │   │   │   ├── OpenIdConnectExtensionEncryptionCompilerPass.php
    │   │   │   │   ├── UserInfoPairwiseSubjectCompilerPass.php
    │   │   │   │   ├── UserInfoScopeSupportCompilerPass.php
    │   │   │   │   ├── UserinfoEndpointEncryptionCompilerPass.php
    │   │   │   │   ├── UserinfoEndpointSignatureCompilerPass.php
    │   │   │   │   └── UserinfoRouteCompilerPass.php
    │   │   │   ├── IdTokenSource.php
    │   │   │   ├── OpenIdConnectSource.php
    │   │   │   ├── PairwiseSubjectSource.php
    │   │   │   ├── ResponseTypeSource.php
    │   │   │   ├── UserinfoEndpointEncryptionSource.php
    │   │   │   ├── UserinfoEndpointSignatureSource.php
    │   │   │   └── UserinfoEndpointSource.php
    │   │   ├── Scope
    │   │   │   ├── Compiler
    │   │   │   │   ├── ScopeMetadataCompilerPass.php
    │   │   │   │   └── ScopePolicyCompilerPass.php
    │   │   │   └── ScopeSource.php
    │   │   └── TokenType
    │   │   │   ├── TokenTypeCompilerPass.php
    │   │   │   └── TokenTypeSource.php
    │   ├── Controller
    │   │   ├── ClientConfigurationMiddleware.php
    │   │   ├── MetadataController.php
    │   │   └── PipeController.php
    │   ├── DependencyInjection
    │   │   ├── Compiler
    │   │   │   └── HttpClientCompilerPass.php
    │   │   ├── Configuration.php
    │   │   └── OAuth2FrameworkExtension.php
    │   ├── Doctrine
    │   │   └── Type
    │   │   │   ├── AccessTokenIdType.php
    │   │   │   ├── AuthorizationCodeIdType.php
    │   │   │   ├── ClientIdType.php
    │   │   │   ├── DatabagType.php
    │   │   │   ├── InitialAccessTokenIdType.php
    │   │   │   ├── RefreshTokenIdType.php
    │   │   │   ├── ResourceOwnerIdType.php
    │   │   │   ├── ResourceServerIdType.php
    │   │   │   └── UserAccountIdType.php
    │   ├── LICENSE
    │   ├── OAuth2FrameworkServerBundle.php
    │   ├── Resources
    │   │   ├── config
    │   │   │   ├── client_authentication
    │   │   │   │   ├── client_assertion_jwt.php
    │   │   │   │   ├── client_authentication.php
    │   │   │   │   ├── client_secret_basic.php
    │   │   │   │   ├── client_secret_post.php
    │   │   │   │   └── none.php
    │   │   │   ├── client_rule
    │   │   │   │   └── client_rule.php
    │   │   │   ├── core
    │   │   │   │   ├── access_token.php
    │   │   │   │   ├── client.php
    │   │   │   │   ├── message.php
    │   │   │   │   └── services.php
    │   │   │   ├── doctrine-mapping
    │   │   │   │   ├── AccessToken
    │   │   │   │   │   └── AbstractAccessToken.orm.yml
    │   │   │   │   ├── AuthorizationCodeGrant
    │   │   │   │   │   └── AbstractAuthorizationCode.orm.yml
    │   │   │   │   ├── Client
    │   │   │   │   │   └── AbstractClient.orm.yml
    │   │   │   │   ├── ClientRegistrationEndpoint
    │   │   │   │   │   └── AbstractAccessToken.orm.yml
    │   │   │   │   └── RefreshTokenGrant
    │   │   │   │   │   └── AbstractAccessToken.orm.yml
    │   │   │   ├── endpoint
    │   │   │   │   ├── authorization
    │   │   │   │   │   ├── authorization.php
    │   │   │   │   │   ├── form_post_response_mode.php
    │   │   │   │   │   ├── response_mode.php
    │   │   │   │   │   └── sector_identifier_uri.php
    │   │   │   │   ├── client_configuration
    │   │   │   │   │   └── client_configuration.php
    │   │   │   │   ├── client_registration
    │   │   │   │   │   ├── client_registration.php
    │   │   │   │   │   ├── initial_access_token.php
    │   │   │   │   │   └── software_statement.php
    │   │   │   │   ├── metadata
    │   │   │   │   │   └── metadata.php
    │   │   │   │   ├── session_management
    │   │   │   │   │   └── session_management.php
    │   │   │   │   ├── token
    │   │   │   │   │   └── token.php
    │   │   │   │   ├── token_introspection
    │   │   │   │   │   └── introspection.php
    │   │   │   │   └── token_revocation
    │   │   │   │   │   └── revocation.php
    │   │   │   ├── grant
    │   │   │   │   ├── authorization_code.php
    │   │   │   │   ├── client_credentials.php
    │   │   │   │   ├── grant.php
    │   │   │   │   ├── implicit.php
    │   │   │   │   ├── jwt_bearer.php
    │   │   │   │   ├── none.php
    │   │   │   │   ├── refresh_token.php
    │   │   │   │   └── resource_owner_password_credential.php
    │   │   │   ├── openid_connect
    │   │   │   │   ├── id_token_hint.php
    │   │   │   │   ├── openid_connect.php
    │   │   │   │   ├── response_type
    │   │   │   │   │   ├── code_id_token.php
    │   │   │   │   │   ├── code_id_token_token.php
    │   │   │   │   │   ├── code_token.php
    │   │   │   │   │   ├── id_token.php
    │   │   │   │   │   └── id_token_token.php
    │   │   │   │   ├── userinfo_endpoint.php
    │   │   │   │   └── userinfo_scope_support.php
    │   │   │   ├── resource_server
    │   │   │   │   ├── authentication_middleware.php
    │   │   │   │   └── resource_server.php
    │   │   │   ├── routing
    │   │   │   │   └── routing.yml
    │   │   │   ├── scope
    │   │   │   │   ├── policy.php
    │   │   │   │   ├── policy_default.php
    │   │   │   │   ├── policy_error.php
    │   │   │   │   └── scope.php
    │   │   │   └── token_type
    │   │   │   │   ├── bearer_token.php
    │   │   │   │   └── token_type.php
    │   │   ├── translations
    │   │   │   ├── OAuth2FrameworkServer.en.yml
    │   │   │   ├── OAuth2FrameworkServer.fr.yml
    │   │   │   ├── validators.en.yml
    │   │   │   └── validators.fr.yml
    │   │   └── views
    │   │   │   ├── authorization
    │   │   │       └── authorization.html.twig
    │   │   │   ├── form_post
    │   │   │       ├── response.html.twig
    │   │   │       ├── response_body.html.twig
    │   │   │       └── response_header.html.twig
    │   │   │   └── iframe
    │   │   │       └── iframe.html.twig
    │   ├── Routing
    │   │   └── RouteLoader.php
    │   ├── Rule
    │   │   └── ClientConfigurationRouteRule.php
    │   ├── Service
    │   │   ├── AuthorizationRequestSessionStorage.php
    │   │   ├── IFrameEndpoint.php
    │   │   ├── IgnoreAccountSelectionHandler.php
    │   │   ├── MetadataBuilder.php
    │   │   ├── RedirectAuthorizationRequestHandler.php
    │   │   ├── SessionStateParameterExtension.php
    │   │   └── TwigFormPostResponseRenderer.php
    │   └── composer.json
    └── WebFingerBundle
    │   ├── .github
    │       └── PULL_REQUEST_TEMPLATE.md
    │   ├── Controller
    │       └── PipeController.php
    │   ├── DependencyInjection
    │       ├── Compiler
    │       │   └── IdentifierResolverCompilerPass.php
    │       ├── Configuration.php
    │       └── OAuth2FrameworkWebFingerExtension.php
    │   ├── LICENSE
    │   ├── Middleware
    │       ├── Consumer.php
    │       ├── Pipe.php
    │       └── TerminalRequestHandler.php
    │   ├── OAuth2FrameworkWebFingerBundle.php
    │   ├── Resources
    │       └── config
    │       │   ├── routing
    │       │       └── routing.php
    │       │   └── services.php
    │   ├── Service
    │       └── RouteLoader.php
    │   └── composer.json
└── tests
    ├── AppKernel.php
    ├── Component
        ├── AuthorizationCodeGrant
        │   ├── AuthorizationCodeGrantTypeTest.php
        │   ├── AuthorizationCodeResponseTypeTest.php
        │   ├── AuthorizationCodeTest.php
        │   └── PkceTest.php
        ├── AuthorizationEndpoint
        │   ├── AuthorizationEndpointTest.php
        │   ├── AuthorizationRequest
        │   │   ├── AuthorizationRequestLoaderTest.php
        │   │   └── AuthorizationRequestTest.php
        │   ├── ParameterChecker
        │   │   └── ParameterCheckerManagerTest.php
        │   ├── ResponseMode
        │   │   └── ResponseModeTest.php
        │   ├── ResponseTypeManagerTest.php
        │   ├── Rule
        │   │   ├── RequestUriRuleTest.php
        │   │   └── ResponseTypesRuleTest.php
        │   └── User
        │   │   └── MaxAgeParameterCheckerTest.php
        ├── BearerTokenType
        │   └── BearerTokenTest.php
        ├── ClientAuthentication
        │   ├── AuthenticationMethodManagerTest.php
        │   ├── ClientAssertionJwtAuthenticationMethodTest.php
        │   ├── ClientAuthenticationMiddlewareTest.php
        │   ├── ClientSecretBasicAuthenticationMethodTest.php
        │   ├── ClientSecretPostAuthenticationMethodTest.php
        │   └── NoneAuthenticationMethodTest.php
        ├── ClientConfigurationEndpoint
        │   ├── ClientConfigurationEndpointTest.php
        │   ├── ClientConfigurationRouteRule.php
        │   └── ClientRegistrationManagementRuleTest.php
        ├── ClientCredentialsGrant
        │   └── ClientCredentialsGrantTypeTest.php
        ├── ClientRegistrationEndpoint
        │   ├── ClientRegistrationEndpointTest.php
        │   ├── InitialAccessToken.php
        │   ├── InitialAccessTokenMiddlewareTest.php
        │   └── InitialAccessTokenTest.php
        ├── ClientRule
        │   ├── ApplicationTypeParameterRuleTest.php
        │   ├── ClientIdIssuedAtRuleTest.php
        │   ├── CommonParametersRuleTest.php
        │   ├── ContactsParametersRuleTest.php
        │   └── RedirectionUriRuleTest.php
        ├── Core
        │   ├── AccessToken
        │   │   ├── AccessTokenIntrospectionTypeHintTest.php
        │   │   ├── AccessTokenRevocationTypeHintTest.php
        │   │   └── AccessTokenTest.php
        │   ├── DataBag
        │   │   └── DataBagTest.php
        │   └── TokenType
        │   │   ├── TokenTypeMiddlewareTest.php
        │   │   ├── TokenTypeParameterCheckerTest.php
        │   │   └── TokenTypeTest.php
        ├── FakeAuthorizationRequestStorage.php
        ├── FakeConsentHandler.php
        ├── FakeFormPostRenderer.php
        ├── FakeLoginHandler.php
        ├── FakeSelectAccountHandler.php
        ├── ImplicitGrant
        │   ├── AccessToken.php
        │   ├── ImplicitGrantTypeTest.php
        │   └── TokenResponseTypeTest.php
        ├── JwtBearerGrant
        │   └── JwtBearerGrantTypeTest.php
        ├── MetadataEndpoint
        │   ├── MetadataEndpointTest.php
        │   └── MetadataTest.php
        ├── NoneGrant
        │   └── TokenResponseTypeTest.php
        ├── OAuth2TestCase.php
        ├── OpenIdConnect
        │   └── IdTokenAlgorithmsRuleTest.php
        ├── RefreshTokenGrant
        │   ├── RefreshToken.php
        │   ├── RefreshTokenGrantTypeTest.php
        │   ├── RefreshTokenRevocationTypeHintTest.php
        │   └── RefreshTokenTest.php
        ├── ResourceOwnerPasswordCredentialsGrant
        │   └── ResourceOwnerPasswordCredentialsGrantTypeTest.php
        ├── ResourceServerAuthentication
        │   └── AuthenticationMethodManagerTest.php
        ├── Scope
        │   ├── AccessToken.php
        │   ├── ScopeParameterCheckerTest.php
        │   ├── ScopePolicyDefaultRuleTest.php
        │   ├── ScopePolicyManagerTest.php
        │   ├── ScopePolicyRuleTest.php
        │   ├── ScopeRuleTest.php
        │   └── TokenEndpointScopeExtensionTest.php
        ├── TokenEndpoint
        │   ├── AccessToken.php
        │   ├── FooGrantType.php
        │   ├── GrantTypeMiddlewareTest.php
        │   ├── GrantTypesRuleTest.php
        │   └── TokenEndpointTest.php
        ├── TokenIntrospectionEndpoint
        │   └── TokenIntrospectionEndpointTest.php
        ├── TokenRevocationEndpoint
        │   ├── TokenRevocationGetEndpointTest.php
        │   └── TokenRevocationPostEndpointTest.php
        └── WebFingerEndpoint
        │   └── WebFingerEndpointTest.php
    ├── ComposerJsonTest.php
    ├── SecurityBundle
        └── Functional
        │   └── Security
        │       └── SecurityBundleTest.php
    ├── ServerBundle
        └── Functional
        │   ├── ClientRegistration
        │       └── ClientRegistrationEndpointTest.php
        │   ├── DataFixtureTestCase.php
        │   ├── Grant
        │       ├── AuthorizationCode
        │       │   ├── AuthorizationCodeGrantTest.php
        │       │   └── AuthorizationEndpointTest.php
        │       ├── ClientCredentials
        │       │   └── ClientCredentialsGrantTest.php
        │       ├── Implicit
        │       │   └── ImplicitGrantTest.php
        │       ├── JwtBearer
        │       │   └── JwtBearerGrantTest.php
        │       ├── RefreshToken
        │       │   └── RefreshTokenGrantTest.php
        │       └── ResourceOwnerPasswordCredentialsGrant
        │       │   └── ResourceOwnerPasswordCredentialsGrantTest.php
        │   ├── Metadata
        │       └── MetadataEndpointTest.php
        │   └── Revocation
        │       └── AccessToken
        │           └── RevocationEndpointTest.php
    ├── TestBundle
        ├── Controller
        │   ├── ApiController.php
        │   └── DocumentationController.php
        ├── DependencyInjection
        │   └── TestExtension.php
        ├── Entity
        │   ├── AccessToken.php
        │   ├── AuthorizationCode.php
        │   ├── Client.php
        │   ├── InitialAccessToken.php
        │   ├── RefreshToken.php
        │   ├── ResourceRepository.php
        │   ├── ResourceServer.php
        │   ├── Scope.php
        │   ├── TrustedIssuer.php
        │   └── UserAccount.php
        ├── Repository
        │   ├── AccessTokenRepository.php
        │   ├── AuthorizationCodeRepository.php
        │   ├── AuthorizationRepository.php
        │   ├── ClientRepository.php
        │   ├── ConsentRepository.php
        │   ├── InitialAccessTokenRepository.php
        │   ├── RefreshTokenRepository.php
        │   ├── ResourceOwnerPasswordCredentialRepository.php
        │   ├── ResourceServerRepository.php
        │   ├── ScopeRepository.php
        │   ├── TrustedIssuerRepository.php
        │   └── UserAccountRepository.php
        ├── Resources
        │   └── config
        │   │   └── services.php
        ├── Service
        │   ├── ConsentHandler.php
        │   ├── LoginHandler.php
        │   ├── SymfonyUserAccountDiscovery.php
        │   ├── UriPathResolver.php
        │   └── UserProvider.php
        └── TestBundle.php
    ├── WebFingerBundle
        └── Functional
        │   ├── ResourceRepository.php
        │   └── WebFingerEndpointTest.php
    └── config
        ├── config_test.yml
        ├── http.yml
        ├── jose.yml
        ├── oauth2_server.yml
        ├── routing.yml
        ├── security.yml
        └── webfinger.yml


/.github/FUNDING.yml:
--------------------------------------------------------------------------------
1 | patreon: FlorentMorselli
2 | 


--------------------------------------------------------------------------------
/.github/ISSUE_TEMPLATE/bug_report.md:
--------------------------------------------------------------------------------
 1 | ---
 2 | name: Bug report
 3 | about: Create a report to help us improve
 4 | 
 5 | ---
 6 | 
 7 | **Describe the bug**
 8 | A clear and concise description of what the bug is.
 9 | 
10 | **To Reproduce**
11 | Steps to reproduce the behavior:
12 | 1. Go to '...'
13 | 2. Click on '....'
14 | 3. Scroll down to '....'
15 | 4. See error
16 | 
17 | **Expected behavior**
18 | A clear and concise description of what you expected to happen.
19 | 
20 | **Screenshots**
21 | If applicable, add screenshots to help explain your problem.
22 | 
23 | **Desktop (please complete the following information):**
24 |  - OS: [e.g. iOS]
25 |  - Browser [e.g. chrome, safari]
26 |  - Version [e.g. 22]
27 | 
28 | **Smartphone (please complete the following information):**
29 |  - Device: [e.g. iPhone6]
30 |  - OS: [e.g. iOS8.1]
31 |  - Browser [e.g. stock browser, safari]
32 |  - Version [e.g. 22]
33 | 
34 | **Additional context**
35 | Add any other context about the problem here.
36 | 


--------------------------------------------------------------------------------
/.github/ISSUE_TEMPLATE/feature_request.md:
--------------------------------------------------------------------------------
 1 | ---
 2 | name: Feature request
 3 | about: Suggest an idea for this project
 4 | 
 5 | ---
 6 | 
 7 | **Is your feature request related to a problem? Please describe.**
 8 | A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
 9 | 
10 | **Describe the solution you'd like**
11 | A clear and concise description of what you want to happen.
12 | 
13 | **Describe alternatives you've considered**
14 | A clear and concise description of any alternative solutions or features you've considered.
15 | 
16 | **Additional context**
17 | Add any other context or screenshots about the feature request here.
18 | 


--------------------------------------------------------------------------------
/.github/dependabot.yml:
--------------------------------------------------------------------------------
1 | version: 2
2 | updates:
3 |   - package-ecosystem: composer
4 |     directory: "/"
5 |     schedule:
6 |       interval: daily
7 |       time: "04:00"
8 |     open-pull-requests-limit: 10


--------------------------------------------------------------------------------
/.github/workflows/coding-standards.yml:
--------------------------------------------------------------------------------
 1 | name: Coding Standards
 2 | 
 3 | on: [push]
 4 | 
 5 | jobs:
 6 |   tests:
 7 |     runs-on: ${{ matrix.operating-system }}
 8 |     strategy:
 9 |       matrix:
10 |         operating-system: [ubuntu-latest]
11 |         php-versions: ['8.0']
12 |     name: PHP ${{ matrix.php-versions }} Test on ${{ matrix.operating-system }}
13 | 
14 |     steps:
15 |       - name: Checkout
16 |         uses: actions/checkout@v2
17 |         with:
18 |           ref: ${{ github.head_ref }}
19 | 
20 |       - name: Setup PHP, with composer and extensions
21 |         uses: shivammathur/setup-php@v2
22 |         with:
23 |           php-version: ${{ matrix.php-versions }}
24 |           extensions: json, mbstring, openssl, sqlite3, curl, uuid
25 |           coverage: xdebug
26 | 
27 |       - name: Install Composer dependencies
28 |         run: |
29 |           composer update --no-progress --no-suggest --prefer-dist --optimize-autoloader
30 | 
31 |       - name: PHP-CS-FIXER
32 |         run: make ci-cs
33 | 


--------------------------------------------------------------------------------
/.github/workflows/rector_checkstyle.yaml:
--------------------------------------------------------------------------------
 1 | name: Rector Checkstyle
 2 | 
 3 | on: [push]
 4 | 
 5 | jobs:
 6 |   tests:
 7 |     runs-on: ${{ matrix.operating-system }}
 8 |     strategy:
 9 |       matrix:
10 |         operating-system: [ ubuntu-latest ]
11 |         php-versions: ['8.0']
12 |     steps:
13 |       - name: Checkout
14 |         uses: actions/checkout@v2
15 |         with:
16 |           ref: ${{ github.head_ref }}
17 | 
18 |       - name: Setup PHP, with composer and extensions
19 |         uses: shivammathur/setup-php@v2
20 |         with:
21 |           php-version: ${{ matrix.php-versions }}
22 |           extensions: json, mbstring, openssl, sqlite3, curl, uuid
23 |           coverage: none
24 | 
25 |       - name: Install Composer dependencies
26 |         run: composer update --no-progress --no-suggest --prefer-dist --optimize-autoloader
27 | 
28 |       - name: Rector
29 |         run: make rector
30 | 


--------------------------------------------------------------------------------
/.github/workflows/static-analyze.yml:
--------------------------------------------------------------------------------
 1 | name: Static Analyze
 2 | 
 3 | on: [push]
 4 | 
 5 | jobs:
 6 |   tests:
 7 |     runs-on: ${{ matrix.operating-system }}
 8 |     strategy:
 9 |       matrix:
10 |         operating-system: [ubuntu-latest]
11 |         php-versions: ['8.0']
12 |     name: PHP ${{ matrix.php-versions }} Test on ${{ matrix.operating-system }}
13 | 
14 |     steps:
15 |       - name: Checkout
16 |         uses: actions/checkout@v2
17 |         with:
18 |           ref: ${{ github.head_ref }}
19 | 
20 |       - name: Setup PHP, with composer and extensions
21 |         uses: shivammathur/setup-php@v2
22 |         with:
23 |           php-version: ${{ matrix.php-versions }}
24 |           extensions: json, mbstring, openssl, sqlite3, curl, uuid
25 |           coverage: xdebug
26 | 
27 |       - name: Install Composer dependencies
28 |         run: |
29 |           composer update --no-progress --no-suggest --prefer-dist --optimize-autoloader
30 | 
31 |       - name: PHPStan
32 |         run: make st
33 | 


--------------------------------------------------------------------------------
/.github/workflows/tests.yml:
--------------------------------------------------------------------------------
 1 | name: Unit and Functional Tests
 2 | 
 3 | on: [push]
 4 | 
 5 | jobs:
 6 |   tests:
 7 |     runs-on: ${{ matrix.operating-system }}
 8 |     strategy:
 9 |       matrix:
10 |         operating-system: [ ubuntu-latest ]
11 |         php-versions: ['8.0']
12 |     name: PHP ${{ matrix.php-versions }} Test on ${{ matrix.operating-system }}
13 | 
14 |     steps:
15 |       - name: Checkout
16 |         uses: actions/checkout@v2
17 |         with:
18 |           ref: ${{ github.head_ref }}
19 | 
20 |       - name: Setup PHP, with composer and extensions
21 |         uses: shivammathur/setup-php@v2
22 |         with:
23 |           php-version: ${{ matrix.php-versions }}
24 |           extensions: json, mbstring, openssl, sqlite3, curl, uuid
25 |           coverage: xdebug
26 | 
27 |       - name: Install Composer dependencies
28 |         run: |
29 |           composer update --no-progress --no-suggest --prefer-dist --optimize-autoloader
30 | 
31 |       - name: Run tests
32 |         run: make ci-cc
33 | 


--------------------------------------------------------------------------------
/.github/workflows/twig-lint.yml:
--------------------------------------------------------------------------------
 1 | name: Twig Lint
 2 | 
 3 | on: [push]
 4 | 
 5 | jobs:
 6 |   tests:
 7 |     runs-on: ${{ matrix.operating-system }}
 8 |     strategy:
 9 |       matrix:
10 |         operating-system: [ ubuntu-latest ]
11 |         php-versions: ['8.0']
12 |     name: PHP ${{ matrix.php-versions }} Test on ${{ matrix.operating-system }}
13 | 
14 |     steps:
15 |       - name: Checkout
16 |         uses: actions/checkout@v2
17 |         with:
18 |           ref: ${{ github.head_ref }}
19 | 
20 |       - name: Setup PHP, with composer and extensions
21 |         uses: shivammathur/setup-php@v2
22 |         with:
23 |           php-version: ${{ matrix.php-versions }}
24 |           extensions: json, mbstring, openssl, sqlite3, curl, uuid
25 |           coverage: xdebug
26 | 
27 |       - name: Install Composer dependencies
28 |         run: |
29 |           composer update --no-progress --no-suggest --prefer-dist --optimize-autoloader
30 | 
31 |       - name: Run tests
32 |         run: make te
33 | 


--------------------------------------------------------------------------------
/.gitignore:
--------------------------------------------------------------------------------
1 | *.cache
2 | composer.lock
3 | oidctest/
4 | 


--------------------------------------------------------------------------------
/infection.json.dist:
--------------------------------------------------------------------------------
 1 | {
 2 |     "timeout": 10,
 3 |     "source": {
 4 |         "directories": [
 5 |             "src"
 6 |         ]
 7 |     },
 8 |     "logs": {
 9 |         "text": "infection-log.txt"
10 |     }
11 | }
12 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationCodeGrant/.github/PULL_REQUEST_TEMPLATE.md:
--------------------------------------------------------------------------------
1 | Please do not send any PR here.
2 | PRs should be send to the main repository at https://github.com/oauth2-framework/oauth2-framework
3 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationCodeGrant/AuthorizationCodeId.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\AuthorizationCodeGrant;
 6 | 
 7 | use Stringable;
 8 | 
 9 | final class AuthorizationCodeId implements Stringable
10 | {
11 |     public function __construct(
12 |         private readonly string $value
13 |     ) {
14 |     }
15 | 
16 |     public function __toString(): string
17 |     {
18 |         return $this->getValue();
19 |     }
20 | 
21 |     public static function create(string $value): static
22 |     {
23 |         return new self($value);
24 |     }
25 | 
26 |     public function getValue(): string
27 |     {
28 |         return $this->value;
29 |     }
30 | }
31 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationCodeGrant/PKCEMethod/PKCEMethod.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\AuthorizationCodeGrant\PKCEMethod;
 6 | 
 7 | interface PKCEMethod
 8 | {
 9 |     public function name(): string;
10 | 
11 |     public function isChallengeVerified(string $codeVerifier, string $codeChallenge): bool;
12 | }
13 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationCodeGrant/PKCEMethod/PKCEMethodManager.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\AuthorizationCodeGrant\PKCEMethod;
 6 | 
 7 | use function array_key_exists;
 8 | 
 9 | class PKCEMethodManager
10 | {
11 |     /**
12 |      * @var PKCEMethod[]
13 |      */
14 |     private array $pkceMethods = [];
15 | 
16 |     public static function create(): static
17 |     {
18 |         return new self();
19 |     }
20 | 
21 |     public function add(PKCEMethod $method): static
22 |     {
23 |         $this->pkceMethods[$method->name()] = $method;
24 | 
25 |         return $this;
26 |     }
27 | 
28 |     public function has(string $method): bool
29 |     {
30 |         return array_key_exists($method, $this->pkceMethods);
31 |     }
32 | 
33 |     public function get(string $method): PKCEMethod
34 |     {
35 |         return $this->pkceMethods[$method];
36 |     }
37 | 
38 |     /**
39 |      * @return string[]
40 |      */
41 |     public function names(): array
42 |     {
43 |         return array_keys($this->pkceMethods);
44 |     }
45 | }
46 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationCodeGrant/PKCEMethod/Plain.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\AuthorizationCodeGrant\PKCEMethod;
 6 | 
 7 | final class Plain implements PKCEMethod
 8 | {
 9 |     public static function create(): static
10 |     {
11 |         return new self();
12 |     }
13 | 
14 |     public function name(): string
15 |     {
16 |         return 'plain';
17 |     }
18 | 
19 |     public function isChallengeVerified(string $codeVerifier, string $codeChallenge): bool
20 |     {
21 |         return hash_equals($codeChallenge, $codeVerifier);
22 |     }
23 | }
24 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationCodeGrant/PKCEMethod/S256.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\AuthorizationCodeGrant\PKCEMethod;
 6 | 
 7 | use Base64Url\Base64Url;
 8 | 
 9 | final class S256 implements PKCEMethod
10 | {
11 |     public static function create(): static
12 |     {
13 |         return new self();
14 |     }
15 | 
16 |     public function name(): string
17 |     {
18 |         return 'S256';
19 |     }
20 | 
21 |     public function isChallengeVerified(string $codeVerifier, string $codeChallenge): bool
22 |     {
23 |         return hash_equals($codeChallenge, Base64Url::encode(hash('sha256', $codeVerifier, true)));
24 |     }
25 | }
26 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationCodeGrant/README.md:
--------------------------------------------------------------------------------
 1 | Authorization Code Grant for the OAuth2 Framework
 2 | =================================================
 3 | 
 4 | This repository is a sub repository of [OAuth2 and OpenId Connect Framework](https://github.com/oauth2-framework/oauth2-framework) project and is READ ONLY.
 5 | 
 6 | **Please do not submit any Pull Request here.**
 7 | You should go to [the main repository](https://github.com/oauth2-framework/oauth2-framework) instead. 
 8 | 
 9 | # Documentation
10 | 
11 | The official documentation is available as https://oauth2-framework.spomky-labs.com/
12 | 
13 | # Licence
14 | 
15 | This software is release under [MIT licence](LICENSE).
16 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationCodeGrant/phpunit.xml.dist:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <phpunit
 3 |         backupGlobals="false"
 4 |         backupStaticAttributes="false"
 5 |         convertErrorsToExceptions="true"
 6 |         convertNoticesToExceptions="true"
 7 |         convertWarningsToExceptions="true"
 8 |         processIsolation="false"
 9 |         stopOnFailure="false"
10 |         bootstrap="vendor/autoload.php"
11 |         colors="true">
12 |     <testsuites>
13 |         <testsuite name="Test Suite">
14 |             <directory>./Tests/</directory>
15 |         </testsuite>
16 |     </testsuites>
17 | 
18 |     <filter>
19 |         <whitelist>
20 |             <directory suffix=".php">./</directory>
21 |             <exclude>
22 |                 <directory>./vendor</directory>
23 |                 <directory>./Tests</directory>
24 |                 <directory suffix="Test.php">./src</directory>
25 |             </exclude>
26 |         </whitelist>
27 |     </filter>
28 | </phpunit>
29 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationEndpoint/.github/PULL_REQUEST_TEMPLATE.md:
--------------------------------------------------------------------------------
1 | Please do not send any PR here.
2 | PRs should be send to the main repository at https://github.com/OAuth2-Framework/oauth2-framework
3 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationEndpoint/AuthorizationRequestHandler.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\AuthorizationEndpoint;
 6 | 
 7 | use Psr\Http\Message\ResponseInterface;
 8 | use Psr\Http\Message\ServerRequestInterface;
 9 | 
10 | interface AuthorizationRequestHandler
11 | {
12 |     public function handle(ServerRequestInterface $request, string $authorizationId): ?ResponseInterface;
13 | }
14 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationEndpoint/AuthorizationRequestStorage.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\AuthorizationEndpoint;
 6 | 
 7 | use OAuth2Framework\Component\AuthorizationEndpoint\AuthorizationRequest\AuthorizationRequest;
 8 | use Psr\Http\Message\ServerRequestInterface;
 9 | 
10 | interface AuthorizationRequestStorage
11 | {
12 |     public function generateId(): string;
13 | 
14 |     public function getId(ServerRequestInterface $request): string;
15 | 
16 |     public function has(string $authorizationId): bool;
17 | 
18 |     public function get(string $authorizationId): AuthorizationRequest;
19 | 
20 |     public function set(string $authorizationId, AuthorizationRequest $authorization): void;
21 | 
22 |     public function remove(string $authorizationId): void;
23 | }
24 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationEndpoint/Consent/ConsentRepository.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\AuthorizationEndpoint\Consent;
 6 | 
 7 | use OAuth2Framework\Component\AuthorizationEndpoint\AuthorizationRequest\AuthorizationRequest;
 8 | 
 9 | interface ConsentRepository
10 | {
11 |     /**
12 |      * Returns true if the consent has been given earlier.
13 |      * This method shall take into account:
14 |      *     - the client ID,
15 |      *     - the user account,
16 |      *     - the scope,
17 |      *     - the response type.
18 |      *
19 |      * Returns false if the consent has never been given.
20 |      */
21 |     public function hasConsentBeenGiven(AuthorizationRequest $authorizationRequest): bool;
22 | }
23 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationEndpoint/ConsentHandler.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\AuthorizationEndpoint;
 6 | 
 7 | use Psr\Http\Message\ResponseInterface;
 8 | use Psr\Http\Message\ServerRequestInterface;
 9 | 
10 | interface ConsentHandler
11 | {
12 |     public function handle(ServerRequestInterface $request, string $authorizationId): ResponseInterface;
13 | }
14 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationEndpoint/Exception/OAuth2AuthorizationException.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\AuthorizationEndpoint\Exception;
 6 | 
 7 | use Exception;
 8 | use OAuth2Framework\Component\AuthorizationEndpoint\AuthorizationRequest\AuthorizationRequest;
 9 | use Throwable;
10 | 
11 | class OAuth2AuthorizationException extends Exception
12 | {
13 |     public function __construct(
14 |         string $error,
15 |         private ?string $errorDescription,
16 |         private AuthorizationRequest $authorization,
17 |         ?Throwable $previous = null
18 |     ) {
19 |         parent::__construct($error, 0, $previous);
20 |     }
21 | 
22 |     public function getAuthorization(): AuthorizationRequest
23 |     {
24 |         return $this->authorization;
25 |     }
26 | 
27 |     public function getErrorDescription(): ?string
28 |     {
29 |         return $this->errorDescription;
30 |     }
31 | }
32 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationEndpoint/Extension/Extension.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\AuthorizationEndpoint\Extension;
 6 | 
 7 | use OAuth2Framework\Component\AuthorizationEndpoint\AuthorizationRequest\AuthorizationRequest;
 8 | use Psr\Http\Message\ServerRequestInterface;
 9 | 
10 | interface Extension
11 | {
12 |     public function process(ServerRequestInterface $request, AuthorizationRequest $authorization): void;
13 | }
14 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationEndpoint/Extension/ExtensionManager.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\AuthorizationEndpoint\Extension;
 6 | 
 7 | use OAuth2Framework\Component\AuthorizationEndpoint\AuthorizationRequest\AuthorizationRequest;
 8 | use Psr\Http\Message\ServerRequestInterface;
 9 | 
10 | class ExtensionManager
11 | {
12 |     /**
13 |      * @var Extension[]
14 |      */
15 |     private array $extensions = [];
16 | 
17 |     public static function create(): static
18 |     {
19 |         return new self();
20 |     }
21 | 
22 |     public function add(Extension $extension): static
23 |     {
24 |         $this->extensions[] = $extension;
25 | 
26 |         return $this;
27 |     }
28 | 
29 |     public function process(ServerRequestInterface $request, AuthorizationRequest $authorization): void
30 |     {
31 |         foreach ($this->extensions as $extension) {
32 |             $extension->process($request, $authorization);
33 |         }
34 |     }
35 | }
36 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationEndpoint/Hook/AuthorizationEndpointHook.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\AuthorizationEndpoint\Hook;
 6 | 
 7 | use OAuth2Framework\Component\AuthorizationEndpoint\AuthorizationRequest\AuthorizationRequest;
 8 | use Psr\Http\Message\ResponseInterface;
 9 | use Psr\Http\Message\ServerRequestInterface;
10 | 
11 | interface AuthorizationEndpointHook
12 | {
13 |     public function handle(
14 |         ServerRequestInterface $request,
15 |         string $authorizationRequestId,
16 |         AuthorizationRequest $authorizationRequest
17 |     ): ?ResponseInterface;
18 | }
19 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationEndpoint/LoginHandler.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\AuthorizationEndpoint;
 6 | 
 7 | use Psr\Http\Message\ResponseInterface;
 8 | use Psr\Http\Message\ServerRequestInterface;
 9 | 
10 | interface LoginHandler
11 | {
12 |     public function handle(ServerRequestInterface $request, string $authorizationId): ResponseInterface;
13 | }
14 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationEndpoint/ParameterChecker/ParameterChecker.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\AuthorizationEndpoint\ParameterChecker;
 6 | 
 7 | use OAuth2Framework\Component\AuthorizationEndpoint\AuthorizationRequest\AuthorizationRequest;
 8 | 
 9 | interface ParameterChecker
10 | {
11 |     public function check(AuthorizationRequest $authorization): void;
12 | }
13 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationEndpoint/ParameterChecker/StateParameterChecker.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\AuthorizationEndpoint\ParameterChecker;
 6 | 
 7 | use OAuth2Framework\Component\AuthorizationEndpoint\AuthorizationRequest\AuthorizationRequest;
 8 | 
 9 | /**
10 |  * @see http://tools.ietf.org/html/rfc6749#section-3.1.2
11 |  */
12 | final class StateParameterChecker implements ParameterChecker
13 | {
14 |     public static function create(): static
15 |     {
16 |         return new self();
17 |     }
18 | 
19 |     public function check(AuthorizationRequest $authorization): void
20 |     {
21 |         if (! $authorization->hasQueryParam('state')) {
22 |             return;
23 |         }
24 | 
25 |         $authorization->setResponseParameter('state', $authorization->getQueryParam('state'));
26 |     }
27 | }
28 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationEndpoint/README.md:
--------------------------------------------------------------------------------
 1 | Authorization Endpoint for the OAuth2 Framework
 2 | ===============================================
 3 | 
 4 | This repository is a sub repository of [OAuth2 and OpenId Connect Framework](https://github.com/oauth2-framework/oauth2-framework) project and is READ ONLY.
 5 | 
 6 | **Please do not submit any Pull Request here.**
 7 | You should go to [the main repository](https://github.com/oauth2-framework/oauth2-framework) instead. 
 8 | 
 9 | # Documentation
10 | 
11 | The official documentation is available as https://oauth2-framework.spomky-labs.com/
12 | 
13 | # Licence
14 | 
15 | This software is release under [MIT licence](LICENSE).
16 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationEndpoint/ResponseMode/FormPostResponseRenderer.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\AuthorizationEndpoint\ResponseMode;
 6 | 
 7 | interface FormPostResponseRenderer
 8 | {
 9 |     public function render(string $redirectUri, array $data): string;
10 | }
11 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationEndpoint/ResponseMode/ResponseMode.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\AuthorizationEndpoint\ResponseMode;
 6 | 
 7 | use Psr\Http\Message\ResponseInterface;
 8 | 
 9 | interface ResponseMode
10 | {
11 |     public function name(): string;
12 | 
13 |     public function buildResponse(string $redirectUri, array $data): ResponseInterface;
14 | }
15 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationEndpoint/SelectAccountHandler.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\AuthorizationEndpoint;
 6 | 
 7 | use Psr\Http\Message\ResponseInterface;
 8 | use Psr\Http\Message\ServerRequestInterface;
 9 | 
10 | interface SelectAccountHandler
11 | {
12 |     public function handle(ServerRequestInterface $request, string $authorizationId): ?ResponseInterface;
13 | }
14 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationEndpoint/User/AuthenticationContextClassReferenceSupport.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\AuthorizationEndpoint\User;
 6 | 
 7 | use OAuth2Framework\Component\Core\UserAccount\UserAccount;
 8 | 
 9 | interface AuthenticationContextClassReferenceSupport
10 | {
11 |     public function getAuthenticationContextClassReferenceFor(UserAccount $userAccount): ?string;
12 | }
13 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationEndpoint/User/AuthenticationMethodReferenceSupport.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\AuthorizationEndpoint\User;
 6 | 
 7 | use OAuth2Framework\Component\Core\UserAccount\UserAccount;
 8 | 
 9 | interface AuthenticationMethodReferenceSupport
10 | {
11 |     /**
12 |      * @return string[]|null
13 |      */
14 |     public function getAuthenticationMethodReferenceFor(UserAccount $userAccount): ?array;
15 | }
16 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationEndpoint/User/UserAccountDiscovery.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\AuthorizationEndpoint\User;
 6 | 
 7 | use OAuth2Framework\Component\Core\UserAccount\UserAccount;
 8 | 
 9 | interface UserAccountDiscovery
10 | {
11 |     public function getCurrentAccount(): ?UserAccount;
12 | }
13 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationEndpoint/User/UserAuthenticationChecker.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\AuthorizationEndpoint\User;
 6 | 
 7 | use OAuth2Framework\Component\AuthorizationEndpoint\AuthorizationRequest\AuthorizationRequest;
 8 | 
 9 | interface UserAuthenticationChecker
10 | {
11 |     public function isAuthenticationNeeded(AuthorizationRequest $authorization): bool;
12 | }
13 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationEndpoint/User/UserAuthenticationCheckerManager.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\AuthorizationEndpoint\User;
 6 | 
 7 | use OAuth2Framework\Component\AuthorizationEndpoint\AuthorizationRequest\AuthorizationRequest;
 8 | 
 9 | final class UserAuthenticationCheckerManager
10 | {
11 |     /**
12 |      * @var UserAuthenticationChecker[]
13 |      */
14 |     private array $checkers = [];
15 | 
16 |     public static function create(): static
17 |     {
18 |         return new self();
19 |     }
20 | 
21 |     public function add(UserAuthenticationChecker $checker): static
22 |     {
23 |         $this->checkers[] = $checker;
24 | 
25 |         return $this;
26 |     }
27 | 
28 |     public function isAuthenticationNeeded(AuthorizationRequest $authorization): bool
29 |     {
30 |         foreach ($this->checkers as $checker) {
31 |             if ($checker->isAuthenticationNeeded($authorization)) {
32 |                 return true;
33 |             }
34 |         }
35 | 
36 |         return false;
37 |     }
38 | }
39 | 


--------------------------------------------------------------------------------
/src/Component/AuthorizationEndpoint/phpunit.xml.dist:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <phpunit
 3 |         backupGlobals="false"
 4 |         backupStaticAttributes="false"
 5 |         convertErrorsToExceptions="true"
 6 |         convertNoticesToExceptions="true"
 7 |         convertWarningsToExceptions="true"
 8 |         processIsolation="false"
 9 |         stopOnFailure="false"
10 |         bootstrap="vendor/autoload.php"
11 |         colors="true">
12 |     <testsuites>
13 |         <testsuite name="Test Suite">
14 |             <directory>./Tests/</directory>
15 |         </testsuite>
16 |     </testsuites>
17 | 
18 |     <filter>
19 |         <whitelist>
20 |             <directory suffix=".php">./</directory>
21 |             <exclude>
22 |                 <directory>./vendor</directory>
23 |                 <directory>./Tests</directory>
24 |                 <directory suffix="Test.php">./src</directory>
25 |             </exclude>
26 |         </whitelist>
27 |     </filter>
28 | </phpunit>
29 | 


--------------------------------------------------------------------------------
/src/Component/BearerTokenType/.github/PULL_REQUEST_TEMPLATE.md:
--------------------------------------------------------------------------------
1 | Please do not send any PR here.
2 | PRs should be send to the main repository at https://github.com/OAuth2-Framework/oauth2-framework
3 | 


--------------------------------------------------------------------------------
/src/Component/BearerTokenType/AuthorizationHeaderTokenFinder.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\BearerTokenType;
 6 | 
 7 | use Psr\Http\Message\ServerRequestInterface;
 8 | 
 9 | final class AuthorizationHeaderTokenFinder implements TokenFinder
10 | {
11 |     public static function create(): static
12 |     {
13 |         return new self();
14 |     }
15 | 
16 |     public function find(ServerRequestInterface $request, array &$additionalCredentialValues): ?string
17 |     {
18 |         $authorizationHeaders = $request->getHeader('AUTHORIZATION');
19 | 
20 |         foreach ($authorizationHeaders as $header) {
21 |             if (preg_match('/' . preg_quote('Bearer', '/') . '\s([a-zA-Z0-9\-_\+~\/\.]+)/', $header, $matches) === 1) {
22 |                 return $matches[1];
23 |             }
24 |         }
25 | 
26 |         return null;
27 |     }
28 | }
29 | 


--------------------------------------------------------------------------------
/src/Component/BearerTokenType/QueryStringTokenFinder.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\BearerTokenType;
 6 | 
 7 | use Psr\Http\Message\ServerRequestInterface;
 8 | 
 9 | final class QueryStringTokenFinder implements TokenFinder
10 | {
11 |     public static function create(): static
12 |     {
13 |         return new self();
14 |     }
15 | 
16 |     public function find(ServerRequestInterface $request, array &$additionalCredentialValues): ?string
17 |     {
18 |         $params = $request->getQueryParams();
19 | 
20 |         return $params['access_token'] ?? null;
21 |     }
22 | }
23 | 


--------------------------------------------------------------------------------
/src/Component/BearerTokenType/README.md:
--------------------------------------------------------------------------------
 1 | Bearer Token Type for the OAuth2 Framework
 2 | ==========================================
 3 | 
 4 | This repository is a sub repository of [OAuth2 and OpenId Connect Framework](https://github.com/oauth2-framework/oauth2-framework) project and is READ ONLY.
 5 | 
 6 | **Please do not submit any Pull Request here.**
 7 | You should go to [the main repository](https://github.com/oauth2-framework/oauth2-framework) instead. 
 8 | 
 9 | # Documentation
10 | 
11 | The official documentation is available as https://oauth2-framework.spomky-labs.com/
12 | 
13 | # Licence
14 | 
15 | This software is release under [MIT licence](LICENSE).
16 | 


--------------------------------------------------------------------------------
/src/Component/BearerTokenType/RequestBodyTokenFinder.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\BearerTokenType;
 6 | 
 7 | use OAuth2Framework\Component\Core\Util\RequestBodyParser;
 8 | use Psr\Http\Message\ServerRequestInterface;
 9 | use Throwable;
10 | 
11 | final class RequestBodyTokenFinder implements TokenFinder
12 | {
13 |     public static function create(): static
14 |     {
15 |         return new self();
16 |     }
17 | 
18 |     public function find(ServerRequestInterface $request, array &$additionalCredentialValues): ?string
19 |     {
20 |         try {
21 |             return RequestBodyParser::parseFormUrlEncoded($request)->get('access_token');
22 |         } catch (Throwable) {
23 |             return null;
24 |         }
25 |     }
26 | }
27 | 


--------------------------------------------------------------------------------
/src/Component/BearerTokenType/TokenFinder.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\BearerTokenType;
 6 | 
 7 | use Psr\Http\Message\ServerRequestInterface;
 8 | 
 9 | interface TokenFinder
10 | {
11 |     public function find(ServerRequestInterface $request, array &$additionalCredentialValues): ?string;
12 | }
13 | 


--------------------------------------------------------------------------------
/src/Component/BearerTokenType/composer.json:
--------------------------------------------------------------------------------
 1 | {
 2 |     "name": "oauth2-framework/bearer-token-type",
 3 |     "type": "library",
 4 |     "description": "Bearer Token Type for the OAuth2 Framework",
 5 |     "license": "MIT",
 6 |     "keywords": ["RFC6749", "RFC6750", "oauth2", "framework", "bearer", "token", "library"],
 7 |     "homepage": "https://oauth2-framework.spomky-labs.com/",
 8 |     "authors": [
 9 |         {
10 |             "name": "Florent Morselli",
11 |             "homepage": "https://github.com/Spomky"
12 |         },
13 |         {
14 |             "name": "All contributors",
15 |             "homepage": "https://github.com/OAuth2-Framework/oauth2-framework/contributors"
16 |         }
17 |     ],
18 |     "require": {
19 |         "php": "^8.1",
20 |         "oauth2-framework/core": "^2.0",
21 |         "psr/http-message": "^1.0"
22 |     },
23 |     "autoload": {
24 |         "psr-4": {
25 |             "OAuth2Framework\\Component\\BearerTokenType\\": ""
26 |         }
27 |     },
28 |     "config": {
29 |         "sort-packages": true
30 |     }
31 | }
32 | 


--------------------------------------------------------------------------------
/src/Component/BearerTokenType/phpunit.xml.dist:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <phpunit
 3 |         backupGlobals="false"
 4 |         backupStaticAttributes="false"
 5 |         convertErrorsToExceptions="true"
 6 |         convertNoticesToExceptions="true"
 7 |         convertWarningsToExceptions="true"
 8 |         processIsolation="false"
 9 |         stopOnFailure="false"
10 |         bootstrap="vendor/autoload.php"
11 |         colors="true">
12 |     <testsuites>
13 |         <testsuite name="Test Suite">
14 |             <directory>./Tests/</directory>
15 |         </testsuite>
16 |     </testsuites>
17 | 
18 |     <filter>
19 |         <whitelist>
20 |             <directory suffix=".php">./</directory>
21 |             <exclude>
22 |                 <directory>./vendor</directory>
23 |                 <directory>./Tests</directory>
24 |                 <directory suffix="Test.php">./src</directory>
25 |             </exclude>
26 |         </whitelist>
27 |     </filter>
28 | </phpunit>
29 | 


--------------------------------------------------------------------------------
/src/Component/ClientAuthentication/README.md:
--------------------------------------------------------------------------------
 1 | Client Authentication for the OAuth2 Framework
 2 | ==============================================
 3 | 
 4 | This repository is a sub repository of [OAuth2 and OpenId Connect Framework](https://github.com/oauth2-framework/oauth2-framework) project and is READ ONLY.
 5 | 
 6 | **Please do not submit any Pull Request here.**
 7 | You should go to [the main repository](https://github.com/oauth2-framework/oauth2-framework) instead. 
 8 | 
 9 | # Documentation
10 | 
11 | The official documentation is available as https://oauth2-framework.spomky-labs.com/
12 | 
13 | # Licence
14 | 
15 | This software is release under [MIT licence](LICENSE).
16 | 


--------------------------------------------------------------------------------
/src/Component/ClientAuthentication/phpunit.xml.dist:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <phpunit
 3 |         backupGlobals="false"
 4 |         backupStaticAttributes="false"
 5 |         convertErrorsToExceptions="true"
 6 |         convertNoticesToExceptions="true"
 7 |         convertWarningsToExceptions="true"
 8 |         processIsolation="false"
 9 |         stopOnFailure="false"
10 |         bootstrap="vendor/autoload.php"
11 |         colors="true">
12 |     <testsuites>
13 |         <testsuite name="Test Suite">
14 |             <directory>./Tests/</directory>
15 |         </testsuite>
16 |     </testsuites>
17 | 
18 |     <filter>
19 |         <whitelist>
20 |             <directory suffix=".php">./</directory>
21 |             <exclude>
22 |                 <directory>./vendor</directory>
23 |                 <directory>./Tests</directory>
24 |                 <directory suffix="Test.php">./src</directory>
25 |             </exclude>
26 |         </whitelist>
27 |     </filter>
28 | </phpunit>
29 | 


--------------------------------------------------------------------------------
/src/Component/ClientConfigurationEndpoint/.github/PULL_REQUEST_TEMPLATE.md:
--------------------------------------------------------------------------------
1 | Please do not send any PR here.
2 | PRs should be send to the main repository at https://github.com/OAuth2-Framework/oauth2-framework
3 | 


--------------------------------------------------------------------------------
/src/Component/ClientConfigurationEndpoint/README.md:
--------------------------------------------------------------------------------
 1 | Client Configuration Endpoint for the OAuth2 Framework
 2 | ======================================================
 3 | 
 4 | This repository is a sub repository of [OAuth2 and OpenId Connect Framework](https://github.com/oauth2-framework/oauth2-framework) project and is READ ONLY.
 5 | 
 6 | **Please do not submit any Pull Request here.**
 7 | You should go to [the main repository](https://github.com/oauth2-framework/oauth2-framework) instead. 
 8 | 
 9 | # Documentation
10 | 
11 | The official documentation is available as https://oauth2-framework.spomky-labs.com/
12 | 
13 | # Licence
14 | 
15 | This software is release under [MIT licence](LICENSE).
16 | 


--------------------------------------------------------------------------------
/src/Component/ClientConfigurationEndpoint/phpunit.xml.dist:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <phpunit
 3 |         backupGlobals="false"
 4 |         backupStaticAttributes="false"
 5 |         convertErrorsToExceptions="true"
 6 |         convertNoticesToExceptions="true"
 7 |         convertWarningsToExceptions="true"
 8 |         processIsolation="false"
 9 |         stopOnFailure="false"
10 |         bootstrap="vendor/autoload.php"
11 |         colors="true">
12 |     <testsuites>
13 |         <testsuite name="Test Suite">
14 |             <directory>./Tests/</directory>
15 |         </testsuite>
16 |     </testsuites>
17 | 
18 |     <filter>
19 |         <whitelist>
20 |             <directory suffix=".php">./</directory>
21 |             <exclude>
22 |                 <directory>./vendor</directory>
23 |                 <directory>./Tests</directory>
24 |                 <directory suffix="Test.php">./src</directory>
25 |             </exclude>
26 |         </whitelist>
27 |     </filter>
28 | </phpunit>
29 | 


--------------------------------------------------------------------------------
/src/Component/ClientCredentialsGrant/.github/PULL_REQUEST_TEMPLATE.md:
--------------------------------------------------------------------------------
1 | Please do not send any PR here.
2 | PRs should be send to the main repository at https://github.com/OAuth2-Framework/oauth2-framework
3 | 


--------------------------------------------------------------------------------
/src/Component/ClientCredentialsGrant/README.md:
--------------------------------------------------------------------------------
 1 | Resource Owner Password Credentials Grant for the OAuth2 Framework
 2 | ==================================================================
 3 | 
 4 | This repository is a sub repository of [OAuth2 and OpenId Connect Framework](https://github.com/oauth2-framework/oauth2-framework) project and is READ ONLY.
 5 | 
 6 | **Please do not submit any Pull Request here.**
 7 | You should go to [the main repository](https://github.com/oauth2-framework/oauth2-framework) instead. 
 8 | 
 9 | # Documentation
10 | 
11 | The official documentation is available as https://oauth2-framework.spomky-labs.com/
12 | 
13 | # Licence
14 | 
15 | This software is release under [MIT licence](LICENSE).
16 | 


--------------------------------------------------------------------------------
/src/Component/ClientCredentialsGrant/phpunit.xml.dist:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <phpunit
 3 |         backupGlobals="false"
 4 |         backupStaticAttributes="false"
 5 |         convertErrorsToExceptions="true"
 6 |         convertNoticesToExceptions="true"
 7 |         convertWarningsToExceptions="true"
 8 |         processIsolation="false"
 9 |         stopOnFailure="false"
10 |         bootstrap="vendor/autoload.php"
11 |         colors="true">
12 |     <testsuites>
13 |         <testsuite name="Test Suite">
14 |             <directory>./Tests/</directory>
15 |         </testsuite>
16 |     </testsuites>
17 | 
18 |     <filter>
19 |         <whitelist>
20 |             <directory suffix=".php">./</directory>
21 |             <exclude>
22 |                 <directory>./vendor</directory>
23 |                 <directory>./Tests</directory>
24 |                 <directory suffix="Test.php">./src</directory>
25 |             </exclude>
26 |         </whitelist>
27 |     </filter>
28 | </phpunit>
29 | 


--------------------------------------------------------------------------------
/src/Component/ClientRegistrationEndpoint/.github/PULL_REQUEST_TEMPLATE.md:
--------------------------------------------------------------------------------
1 | Please do not send any PR here.
2 | PRs should be send to the main repository at https://github.com/OAuth2-Framework/oauth2-framework
3 | 


--------------------------------------------------------------------------------
/src/Component/ClientRegistrationEndpoint/InitialAccessToken.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\ClientRegistrationEndpoint;
 6 | 
 7 | use DateTimeImmutable;
 8 | use OAuth2Framework\Component\Core\UserAccount\UserAccountId;
 9 | 
10 | interface InitialAccessToken
11 | {
12 |     public function getId(): InitialAccessTokenId;
13 | 
14 |     public function getUserAccountId(): ?UserAccountId;
15 | 
16 |     public function getExpiresAt(): ?DateTimeImmutable;
17 | 
18 |     public function hasExpired(): bool;
19 | 
20 |     public function isRevoked(): bool;
21 | 
22 |     /**
23 |      * This method should be immutable.
24 |      */
25 |     public function markAsRevoked(): static;
26 | }
27 | 


--------------------------------------------------------------------------------
/src/Component/ClientRegistrationEndpoint/InitialAccessTokenId.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\ClientRegistrationEndpoint;
 6 | 
 7 | use Stringable;
 8 | 
 9 | class InitialAccessTokenId implements Stringable
10 | {
11 |     public function __construct(
12 |         private readonly string $value
13 |     ) {
14 |     }
15 | 
16 |     public function __toString(): string
17 |     {
18 |         return $this->getValue();
19 |     }
20 | 
21 |     public static function create(string $value): static
22 |     {
23 |         return new self($value);
24 |     }
25 | 
26 |     public function getValue(): string
27 |     {
28 |         return $this->value;
29 |     }
30 | }
31 | 


--------------------------------------------------------------------------------
/src/Component/ClientRegistrationEndpoint/InitialAccessTokenRepository.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\ClientRegistrationEndpoint;
 6 | 
 7 | interface InitialAccessTokenRepository
 8 | {
 9 |     public function save(InitialAccessToken $initialAccessToken): void;
10 | 
11 |     /**
12 |      * This function verifies the request and validate or not the initial access token. MUST return null if the initial
13 |      * access token is not valid (expired, revoked...).
14 |      *
15 |      * @param InitialAccessTokenId $initialAccessTokenId The initial access token
16 |      *
17 |      * @return InitialAccessToken|null Return the initial access token or null if the argument is not a valid initial access token
18 |      */
19 |     public function find(InitialAccessTokenId $initialAccessTokenId): ?InitialAccessToken;
20 | }
21 | 


--------------------------------------------------------------------------------
/src/Component/ClientRegistrationEndpoint/README.md:
--------------------------------------------------------------------------------
 1 | Client Registration Endpoint for the OAuth2 Framework
 2 | =====================================================
 3 | 
 4 | This repository is a sub repository of [OAuth2 and OpenId Connect Framework](https://github.com/oauth2-framework/oauth2-framework) project and is READ ONLY.
 5 | 
 6 | **Please do not submit any Pull Request here.**
 7 | You should go to [the main repository](https://github.com/oauth2-framework/oauth2-framework) instead. 
 8 | 
 9 | # Documentation
10 | 
11 | The official documentation is available as https://oauth2-framework.spomky-labs.com/
12 | 
13 | # Licence
14 | 
15 | This software is release under [MIT licence](LICENSE).
16 | 


--------------------------------------------------------------------------------
/src/Component/ClientRegistrationEndpoint/phpunit.xml.dist:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <phpunit
 3 |         backupGlobals="false"
 4 |         backupStaticAttributes="false"
 5 |         convertErrorsToExceptions="true"
 6 |         convertNoticesToExceptions="true"
 7 |         convertWarningsToExceptions="true"
 8 |         processIsolation="false"
 9 |         stopOnFailure="false"
10 |         bootstrap="vendor/autoload.php"
11 |         colors="true">
12 |     <testsuites>
13 |         <testsuite name="Test Suite">
14 |             <directory>./Tests/</directory>
15 |         </testsuite>
16 |     </testsuites>
17 | 
18 |     <filter>
19 |         <whitelist>
20 |             <directory suffix=".php">./</directory>
21 |             <exclude>
22 |                 <directory>./vendor</directory>
23 |                 <directory>./Tests</directory>
24 |                 <directory suffix="Test.php">./src</directory>
25 |             </exclude>
26 |         </whitelist>
27 |     </filter>
28 | </phpunit>
29 | 


--------------------------------------------------------------------------------
/src/Component/ClientRule/ClientIdIssuedAtRule.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\ClientRule;
 6 | 
 7 | use OAuth2Framework\Component\Core\Client\ClientId;
 8 | use OAuth2Framework\Component\Core\DataBag\DataBag;
 9 | 
10 | final class ClientIdIssuedAtRule implements Rule
11 | {
12 |     public function handle(
13 |         ClientId $clientId,
14 |         DataBag $commandParameters,
15 |         DataBag $validatedParameters,
16 |         RuleHandler $next
17 |     ): DataBag {
18 |         if ($commandParameters->has('client_id_issued_at')) {
19 |             $validatedParameters->set('client_id_issued_at', $commandParameters->get('client_id_issued_at'));
20 |         } else {
21 |             $validatedParameters->set('client_id_issued_at', time());
22 |         }
23 | 
24 |         return $next->handle($clientId, $commandParameters, $validatedParameters);
25 |     }
26 | }
27 | 


--------------------------------------------------------------------------------
/src/Component/ClientRule/README.md:
--------------------------------------------------------------------------------
 1 | Client Rule for the OAuth2 Framework
 2 | ====================================
 3 | 
 4 | This repository is a sub repository of [OAuth2 and OpenId Connect Framework](https://github.com/oauth2-framework/oauth2-framework) project and is READ ONLY.
 5 | 
 6 | **Please do not submit any Pull Request here.**
 7 | You should go to [the main repository](https://github.com/oauth2-framework/oauth2-framework) instead. 
 8 | 
 9 | # Documentation
10 | 
11 | The official documentation is available as https://oauth2-framework.spomky-labs.com/
12 | 
13 | # Licence
14 | 
15 | This software is release under [MIT licence](LICENSE).
16 | 


--------------------------------------------------------------------------------
/src/Component/ClientRule/Rule.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\ClientRule;
 6 | 
 7 | use OAuth2Framework\Component\Core\Client\ClientId;
 8 | use OAuth2Framework\Component\Core\DataBag\DataBag;
 9 | 
10 | interface Rule
11 | {
12 |     public function handle(
13 |         ClientId $clientId,
14 |         DataBag $commandParameters,
15 |         DataBag $validatedParameters,
16 |         RuleHandler $next
17 |     ): DataBag;
18 | }
19 | 


--------------------------------------------------------------------------------
/src/Component/ClientRule/RuleHandler.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\ClientRule;
 6 | 
 7 | use function call_user_func;
 8 | use OAuth2Framework\Component\Core\Client\ClientId;
 9 | use OAuth2Framework\Component\Core\DataBag\DataBag;
10 | 
11 | class RuleHandler
12 | {
13 |     /**
14 |      * @var callable
15 |      */
16 |     private $callback;
17 | 
18 |     public function __construct(callable $callback)
19 |     {
20 |         $this->callback = $callback;
21 |     }
22 | 
23 |     public function handle(ClientId $clientId, DataBag $commandParameters, DataBag $validatedParameters): DataBag
24 |     {
25 |         return call_user_func($this->callback, $clientId, $commandParameters, $validatedParameters);
26 |     }
27 | }
28 | 


--------------------------------------------------------------------------------
/src/Component/ClientRule/composer.json:
--------------------------------------------------------------------------------
 1 | {
 2 |     "name": "oauth2-framework/client-rule",
 3 |     "type": "library",
 4 |     "description": "Client Rule for the OAuth2 Framework",
 5 |     "license": "MIT",
 6 |     "keywords": ["RFC6749", "RFC6750", "oauth2", "framework", "client", "rule", "library"],
 7 |     "homepage": "https://oauth2-framework.spomky-labs.com/",
 8 |     "authors": [
 9 |         {
10 |             "name": "Florent Morselli",
11 |             "homepage": "https://github.com/Spomky"
12 |         },
13 |         {
14 |             "name": "All contributors",
15 |             "homepage": "https://github.com/OAuth2-Framework/oauth2-framework/contributors"
16 |         }
17 |     ],
18 |     "require": {
19 |         "php": "^8.1",
20 |         "league/uri": "^5.3",
21 |         "oauth2-framework/core": "^2.0"
22 |     },
23 |     "autoload": {
24 |         "psr-4": {
25 |             "OAuth2Framework\\Component\\ClientRule\\": ""
26 |         }
27 |     },
28 |     "config": {
29 |         "sort-packages": true
30 |     }
31 | }
32 | 


--------------------------------------------------------------------------------
/src/Component/ClientRule/phpunit.xml.dist:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <phpunit
 3 |         backupGlobals="false"
 4 |         backupStaticAttributes="false"
 5 |         convertErrorsToExceptions="true"
 6 |         convertNoticesToExceptions="true"
 7 |         convertWarningsToExceptions="true"
 8 |         processIsolation="false"
 9 |         stopOnFailure="false"
10 |         bootstrap="vendor/autoload.php"
11 |         colors="true">
12 |     <testsuites>
13 |         <testsuite name="Test Suite">
14 |             <directory>./Tests/</directory>
15 |         </testsuite>
16 |     </testsuites>
17 | 
18 |     <filter>
19 |         <whitelist>
20 |             <directory suffix=".php">./</directory>
21 |             <exclude>
22 |                 <directory>./vendor</directory>
23 |                 <directory>./Tests</directory>
24 |                 <directory suffix="Test.php">./src</directory>
25 |             </exclude>
26 |         </whitelist>
27 |     </filter>
28 | </phpunit>
29 | 


--------------------------------------------------------------------------------
/src/Component/Core/.github/PULL_REQUEST_TEMPLATE.md:
--------------------------------------------------------------------------------
1 | Please do not send any PR here.
2 | PRs should be send to the main repository at https://github.com/oauth2-framework/oauth2-framework
3 | 


--------------------------------------------------------------------------------
/src/Component/Core/AccessToken/AccessTokenId.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Core\AccessToken;
 6 | 
 7 | use Stringable;
 8 | 
 9 | class AccessTokenId implements Stringable
10 | {
11 |     public function __construct(
12 |         private readonly string $value
13 |     ) {
14 |     }
15 | 
16 |     public function __toString(): string
17 |     {
18 |         return $this->getValue();
19 |     }
20 | 
21 |     public static function create(string $value): static
22 |     {
23 |         return new self($value);
24 |     }
25 | 
26 |     public function getValue(): string
27 |     {
28 |         return $this->value;
29 |     }
30 | }
31 | 


--------------------------------------------------------------------------------
/src/Component/Core/Client/ClientId.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Core\Client;
 6 | 
 7 | use OAuth2Framework\Component\Core\ResourceOwner\ResourceOwnerId;
 8 | 
 9 | class ClientId extends ResourceOwnerId
10 | {
11 |     public static function create(string $value): static
12 |     {
13 |         return new self($value);
14 |     }
15 | }
16 | 


--------------------------------------------------------------------------------
/src/Component/Core/Client/ClientRepository.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Core\Client;
 6 | 
 7 | use OAuth2Framework\Component\Core\DataBag\DataBag;
 8 | use OAuth2Framework\Component\Core\UserAccount\UserAccountId;
 9 | 
10 | interface ClientRepository
11 | {
12 |     /**
13 |      * Save the client.
14 |      */
15 |     public function save(Client $client): void;
16 | 
17 |     /**
18 |      * Get a client using its Id.
19 |      *
20 |      * @return Client|null return the client object or null if no client is found
21 |      */
22 |     public function find(ClientId $clientId): ?Client;
23 | 
24 |     /**
25 |      * Creates an unique client ID.
26 |      */
27 |     public function createClientId(): ClientId;
28 | 
29 |     /**
30 |      * Creates an empty client.
31 |      */
32 |     public function create(ClientId $clientId, DataBag $parameters, ?UserAccountId $ownerId): Client;
33 | }
34 | 


--------------------------------------------------------------------------------
/src/Component/Core/Message/Factory/AccessDeniedResponseFactory.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Core\Message\Factory;
 6 | 
 7 | final class AccessDeniedResponseFactory extends OAuth2ResponseFactory
 8 | {
 9 |     public function getSupportedCode(): int
10 |     {
11 |         return 403;
12 |     }
13 | }
14 | 


--------------------------------------------------------------------------------
/src/Component/Core/Message/Factory/BadRequestResponseFactory.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Core\Message\Factory;
 6 | 
 7 | final class BadRequestResponseFactory extends OAuth2ResponseFactory
 8 | {
 9 |     public function getSupportedCode(): int
10 |     {
11 |         return 400;
12 |     }
13 | }
14 | 


--------------------------------------------------------------------------------
/src/Component/Core/Message/Factory/MethodNotAllowedResponseFactory.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Core\Message\Factory;
 6 | 
 7 | final class MethodNotAllowedResponseFactory extends OAuth2ResponseFactory
 8 | {
 9 |     public function getSupportedCode(): int
10 |     {
11 |         return 405;
12 |     }
13 | }
14 | 


--------------------------------------------------------------------------------
/src/Component/Core/Message/Factory/NotImplementedResponseFactory.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Core\Message\Factory;
 6 | 
 7 | final class NotImplementedResponseFactory extends OAuth2ResponseFactory
 8 | {
 9 |     public function getSupportedCode(): int
10 |     {
11 |         return 501;
12 |     }
13 | }
14 | 


--------------------------------------------------------------------------------
/src/Component/Core/Message/Factory/ResponseFactory.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Core\Message\Factory;
 6 | 
 7 | use Psr\Http\Message\ResponseInterface;
 8 | 
 9 | interface ResponseFactory
10 | {
11 |     public function getSupportedCode(): int;
12 | 
13 |     /**
14 |      * @param array $data Data sent to the response
15 |      */
16 |     public function createResponse(array $data, ResponseInterface $response): ResponseInterface;
17 | }
18 | 


--------------------------------------------------------------------------------
/src/Component/Core/Message/MessageExtension.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Core\Message;
 6 | 
 7 | interface MessageExtension
 8 | {
 9 |     /**
10 |      * @param OAuth2Error $error The code of the response
11 |      */
12 |     public function process(OAuth2Error $error): array;
13 | }
14 | 


--------------------------------------------------------------------------------
/src/Component/Core/Middleware/Consumer.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Core\Middleware;
 6 | 
 7 | use Generator;
 8 | use Psr\Http\Message\ResponseInterface;
 9 | use Psr\Http\Message\ServerRequestInterface;
10 | use Psr\Http\Server\RequestHandlerInterface;
11 | 
12 | /**
13 |  * @internal
14 |  */
15 | final class Consumer implements RequestHandlerInterface
16 | {
17 |     public function __construct(
18 |         private Generator $generator,
19 |         private RequestHandlerInterface $delegate
20 |     ) {
21 |     }
22 | 
23 |     public function handle(ServerRequestInterface $request): ResponseInterface
24 |     {
25 |         if (! $this->generator->valid()) {
26 |             return $this->delegate->handle($request);
27 |         }
28 | 
29 |         $current = $this->generator->current();
30 |         $this->generator->next();
31 | 
32 |         return $current->process($request, $this);
33 |     }
34 | }
35 | 


--------------------------------------------------------------------------------
/src/Component/Core/Middleware/OAuth2MessageMiddleware.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Core\Middleware;
 6 | 
 7 | use OAuth2Framework\Component\Core\Message\OAuth2Error;
 8 | use OAuth2Framework\Component\Core\Message\OAuth2MessageFactoryManager;
 9 | use Psr\Http\Message\ResponseInterface;
10 | use Psr\Http\Message\ServerRequestInterface;
11 | use Psr\Http\Server\MiddlewareInterface;
12 | use Psr\Http\Server\RequestHandlerInterface;
13 | 
14 | final class OAuth2MessageMiddleware implements MiddlewareInterface
15 | {
16 |     public function __construct(
17 |         private OAuth2MessageFactoryManager $auth2messageFactoryManager
18 |     ) {
19 |     }
20 | 
21 |     public function process(ServerRequestInterface $request, RequestHandlerInterface $handler): ResponseInterface
22 |     {
23 |         try {
24 |             return $handler->handle($request);
25 |         } catch (OAuth2Error $e) {
26 |             return $this->auth2messageFactoryManager->getResponse($e);
27 |         }
28 |     }
29 | }
30 | 


--------------------------------------------------------------------------------
/src/Component/Core/Middleware/TerminalRequestHandler.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Core\Middleware;
 6 | 
 7 | use Nyholm\Psr7\Factory\Psr17Factory;
 8 | use Psr\Http\Message\ResponseFactoryInterface;
 9 | use Psr\Http\Message\ResponseInterface;
10 | use Psr\Http\Message\ServerRequestInterface;
11 | use Psr\Http\Server\RequestHandlerInterface;
12 | 
13 | final class TerminalRequestHandler implements RequestHandlerInterface
14 | {
15 |     private ResponseFactoryInterface $responseFactory;
16 | 
17 |     public function __construct()
18 |     {
19 |         $this->responseFactory = new Psr17Factory();
20 |     }
21 | 
22 |     public function handle(ServerRequestInterface $request): ResponseInterface
23 |     {
24 |         return $this->responseFactory->createResponse();
25 |     }
26 | }
27 | 


--------------------------------------------------------------------------------
/src/Component/Core/README.md:
--------------------------------------------------------------------------------
 1 | Core component for the OAuth2 Framework
 2 | =================================================
 3 | 
 4 | This repository is a sub repository of [OAuth2 and OpenId Connect Framework](https://github.com/oauth2-framework/oauth2-framework) project and is READ ONLY.
 5 | 
 6 | **Please do not submit any Pull Request here.**
 7 | You should go to [the main repository](https://github.com/oauth2-framework/oauth2-framework) instead. 
 8 | 
 9 | # Documentation
10 | 
11 | The official documentation is available as https://oauth2-framework.spomky-labs.com/
12 | 
13 | # Licence
14 | 
15 | This software is release under [MIT licence](LICENSE).
16 | 


--------------------------------------------------------------------------------
/src/Component/Core/ResourceOwner/ResourceOwner.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Core\ResourceOwner;
 6 | 
 7 | interface ResourceOwner
 8 | {
 9 |     public function getPublicId(): ResourceOwnerId;
10 | 
11 |     public function has(string $key): bool;
12 | 
13 |     /**
14 |      * @return mixed|null
15 |      */
16 |     public function get(string $key);
17 | }
18 | 


--------------------------------------------------------------------------------
/src/Component/Core/ResourceOwner/ResourceOwnerId.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Core\ResourceOwner;
 6 | 
 7 | use Stringable;
 8 | 
 9 | abstract class ResourceOwnerId implements Stringable
10 | {
11 |     public function __construct(
12 |         private string $value
13 |     ) {
14 |     }
15 | 
16 |     public function __toString(): string
17 |     {
18 |         return $this->getValue();
19 |     }
20 | 
21 |     public function getValue(): string
22 |     {
23 |         return $this->value;
24 |     }
25 | }
26 | 


--------------------------------------------------------------------------------
/src/Component/Core/ResourceServer/ResourceServer.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Core\ResourceServer;
 6 | 
 7 | interface ResourceServer
 8 | {
 9 |     public function getResourceServerId(): ResourceServerId;
10 | 
11 |     public function getAuthenticationMethod(): string;
12 | }
13 | 


--------------------------------------------------------------------------------
/src/Component/Core/ResourceServer/ResourceServerId.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Core\ResourceServer;
 6 | 
 7 | use Stringable;
 8 | 
 9 | class ResourceServerId implements Stringable
10 | {
11 |     public function __construct(
12 |         private readonly string $value
13 |     ) {
14 |     }
15 | 
16 |     public function __toString(): string
17 |     {
18 |         return $this->getValue();
19 |     }
20 | 
21 |     public static function create(string $value): static
22 |     {
23 |         return new self($value);
24 |     }
25 | 
26 |     public function getValue(): string
27 |     {
28 |         return $this->value;
29 |     }
30 | }
31 | 


--------------------------------------------------------------------------------
/src/Component/Core/ResourceServer/ResourceServerRepository.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Core\ResourceServer;
 6 | 
 7 | interface ResourceServerRepository
 8 | {
 9 |     /**
10 |      * @param ResourceServerId $resourceServerId The resource server
11 |      *
12 |      * @return ResourceServer|null Return the resource server or null if the argument is not a valid resource server ID
13 |      */
14 |     public function find(ResourceServerId $resourceServerId): ?ResourceServer;
15 | }
16 | 


--------------------------------------------------------------------------------
/src/Component/Core/TokenType/TokenTypeGuesser.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Core\TokenType;
 6 | 
 7 | use OAuth2Framework\Component\AuthorizationEndpoint\AuthorizationRequest\AuthorizationRequest;
 8 | 
 9 | class TokenTypeGuesser
10 | {
11 |     public function __construct(
12 |         private readonly TokenTypeManager $tokenTypeManager,
13 |         private readonly bool $tokenTypeParameterAllowed
14 |     ) {
15 |     }
16 | 
17 |     public static function create(TokenTypeManager $tokenTypeManager, bool $tokenTypeParameterAllowed): static
18 |     {
19 |         return new self($tokenTypeManager, $tokenTypeParameterAllowed);
20 |     }
21 | 
22 |     public function find(AuthorizationRequest $authorization): TokenType
23 |     {
24 |         if (! $this->tokenTypeParameterAllowed || ! $authorization->hasQueryParam('token_type')) {
25 |             return $this->tokenTypeManager->getDefault();
26 |         }
27 | 
28 |         return $this->tokenTypeManager->get($authorization->getQueryParam('token_type'));
29 |     }
30 | }
31 | 


--------------------------------------------------------------------------------
/src/Component/Core/TrustedIssuer/TrustedIssuer.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Core\TrustedIssuer;
 6 | 
 7 | use Jose\Component\Core\JWKSet;
 8 | 
 9 | interface TrustedIssuer
10 | {
11 |     public function name(): string;
12 | 
13 |     /**
14 |      * @return string[]
15 |      */
16 |     public function getAllowedAssertionTypes(): array;
17 | 
18 |     /**
19 |      * @return string[]
20 |      */
21 |     public function getAllowedSignatureAlgorithms(): array;
22 | 
23 |     public function getJWKSet(): JWKSet;
24 | }
25 | 


--------------------------------------------------------------------------------
/src/Component/Core/TrustedIssuer/TrustedIssuerRepository.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Core\TrustedIssuer;
 6 | 
 7 | interface TrustedIssuerRepository
 8 | {
 9 |     public function find(string $trustedIssuer): ?TrustedIssuer;
10 | }
11 | 


--------------------------------------------------------------------------------
/src/Component/Core/UserAccount/UserAccount.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Core\UserAccount;
 6 | 
 7 | use DateTimeInterface;
 8 | use OAuth2Framework\Component\Core\ResourceOwner\ResourceOwner;
 9 | 
10 | interface UserAccount extends ResourceOwner
11 | {
12 |     public function getLastLoginAt(): ?DateTimeInterface;
13 | 
14 |     public function getLastUpdateAt(): ?DateTimeInterface;
15 | 
16 |     public function getUserAccountId(): UserAccountId;
17 | }
18 | 


--------------------------------------------------------------------------------
/src/Component/Core/UserAccount/UserAccountId.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Core\UserAccount;
 6 | 
 7 | use OAuth2Framework\Component\Core\ResourceOwner\ResourceOwnerId;
 8 | 
 9 | class UserAccountId extends ResourceOwnerId
10 | {
11 |     public static function create(string $value): static
12 |     {
13 |         return new self($value);
14 |     }
15 | }
16 | 


--------------------------------------------------------------------------------
/src/Component/Core/UserAccount/UserAccountRepository.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Core\UserAccount;
 6 | 
 7 | interface UserAccountRepository
 8 | {
 9 |     public function find(UserAccountId $publicId): ?UserAccount;
10 | }
11 | 


--------------------------------------------------------------------------------
/src/Component/Core/composer.json:
--------------------------------------------------------------------------------
 1 | {
 2 |     "name": "oauth2-framework/core",
 3 |     "type": "library",
 4 |     "description": "Core Component for the OAuth2 Framework",
 5 |     "license": "MIT",
 6 |     "keywords": ["RFC6749", "oauth2", "framework", "authorization", "library"],
 7 |     "homepage": "https://oauth2-framework.spomky-labs.com/",
 8 |     "authors": [
 9 |         {
10 |             "name": "Florent Morselli",
11 |             "homepage": "https://github.com/Spomky"
12 |         },
13 |         {
14 |             "name": "All contributors",
15 |             "homepage": "https://github.com/OAuth2-Framework/oauth2-framework/contributors"
16 |         }
17 |     ],
18 |     "require": {
19 |         "php": "^8.1",
20 |         "ext-json": "*",
21 |         "ext-openssl": "*",
22 |         "beberlei/assert": "^3.2",
23 |         "nyholm/psr7": "^1.0"
24 |     },
25 |     "autoload": {
26 |         "psr-4": {
27 |             "OAuth2Framework\\Component\\Core\\": ""
28 |         }
29 |     },
30 |     "config": {
31 |         "sort-packages": true
32 |     }
33 | }
34 | 


--------------------------------------------------------------------------------
/src/Component/Core/phpunit.xml.dist:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <phpunit
 3 |         backupGlobals="false"
 4 |         backupStaticAttributes="false"
 5 |         convertErrorsToExceptions="true"
 6 |         convertNoticesToExceptions="true"
 7 |         convertWarningsToExceptions="true"
 8 |         processIsolation="false"
 9 |         stopOnFailure="false"
10 |         bootstrap="vendor/autoload.php"
11 |         colors="true">
12 |     <testsuites>
13 |         <testsuite name="Test Suite">
14 |             <directory>./Tests/</directory>
15 |         </testsuite>
16 |     </testsuites>
17 | 
18 |     <filter>
19 |         <whitelist>
20 |             <directory suffix=".php">./</directory>
21 |             <exclude>
22 |                 <directory>./vendor</directory>
23 |                 <directory>./Tests</directory>
24 |                 <directory suffix="Test.php">./src</directory>
25 |             </exclude>
26 |         </whitelist>
27 |     </filter>
28 | </phpunit>
29 | 


--------------------------------------------------------------------------------
/src/Component/ImplicitGrant/.github/PULL_REQUEST_TEMPLATE.md:
--------------------------------------------------------------------------------
1 | Please do not send any PR here.
2 | PRs should be send to the main repository at https://github.com/OAuth2-Framework/oauth2-framework
3 | 


--------------------------------------------------------------------------------
/src/Component/ImplicitGrant/README.md:
--------------------------------------------------------------------------------
 1 | Implicit Grant for the OAuth2 Framework
 2 | =======================================
 3 | 
 4 | This repository is a sub repository of [OAuth2 and OpenId Connect Framework](https://github.com/oauth2-framework/oauth2-framework) project and is READ ONLY.
 5 | 
 6 | **Please do not submit any Pull Request here.**
 7 | You should go to [the main repository](https://github.com/oauth2-framework/oauth2-framework) instead. 
 8 | 
 9 | # Documentation
10 | 
11 | The official documentation is available as https://oauth2-framework.spomky-labs.com/
12 | 
13 | # Licence
14 | 
15 | This software is release under [MIT licence](LICENSE).
16 | 


--------------------------------------------------------------------------------
/src/Component/ImplicitGrant/phpunit.xml.dist:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <phpunit
 3 |         backupGlobals="false"
 4 |         backupStaticAttributes="false"
 5 |         convertErrorsToExceptions="true"
 6 |         convertNoticesToExceptions="true"
 7 |         convertWarningsToExceptions="true"
 8 |         processIsolation="false"
 9 |         stopOnFailure="false"
10 |         bootstrap="vendor/autoload.php"
11 |         colors="true">
12 |     <testsuites>
13 |         <testsuite name="Test Suite">
14 |             <directory>./Tests/</directory>
15 |         </testsuite>
16 |     </testsuites>
17 | 
18 |     <filter>
19 |         <whitelist>
20 |             <directory suffix=".php">./</directory>
21 |             <exclude>
22 |                 <directory>./vendor</directory>
23 |                 <directory>./Tests</directory>
24 |                 <directory suffix="Test.php">./src</directory>
25 |             </exclude>
26 |         </whitelist>
27 |     </filter>
28 | </phpunit>
29 | 


--------------------------------------------------------------------------------
/src/Component/JwtBearerGrant/.github/PULL_REQUEST_TEMPLATE.md:
--------------------------------------------------------------------------------
1 | Please do not send any PR here.
2 | PRs should be send to the main repository at https://github.com/OAuth2-Framework/oauth2-framework
3 | 


--------------------------------------------------------------------------------
/src/Component/JwtBearerGrant/README.md:
--------------------------------------------------------------------------------
 1 | JWT Bearer Grant for the OAuth2 Framework
 2 | =========================================
 3 | 
 4 | This repository is a sub repository of [OAuth2 and OpenId Connect Framework](https://github.com/oauth2-framework/oauth2-framework) project and is READ ONLY.
 5 | 
 6 | **Please do not submit any Pull Request here.**
 7 | You should go to [the main repository](https://github.com/oauth2-framework/oauth2-framework) instead. 
 8 | 
 9 | # Documentation
10 | 
11 | The official documentation is available as https://oauth2-framework.spomky-labs.com/
12 | 
13 | # Licence
14 | 
15 | This software is release under [MIT licence](LICENSE).
16 | 


--------------------------------------------------------------------------------
/src/Component/JwtBearerGrant/phpunit.xml.dist:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <phpunit
 3 |         backupGlobals="false"
 4 |         backupStaticAttributes="false"
 5 |         convertErrorsToExceptions="true"
 6 |         convertNoticesToExceptions="true"
 7 |         convertWarningsToExceptions="true"
 8 |         processIsolation="false"
 9 |         stopOnFailure="false"
10 |         bootstrap="vendor/autoload.php"
11 |         colors="true">
12 |     <testsuites>
13 |         <testsuite name="Test Suite">
14 |             <directory>./Tests/</directory>
15 |         </testsuite>
16 |     </testsuites>
17 | 
18 |     <filter>
19 |         <whitelist>
20 |             <directory suffix=".php">./</directory>
21 |             <exclude>
22 |                 <directory>./vendor</directory>
23 |                 <directory>./Tests</directory>
24 |                 <directory suffix="Test.php">./src</directory>
25 |             </exclude>
26 |         </whitelist>
27 |     </filter>
28 | </phpunit>
29 | 


--------------------------------------------------------------------------------
/src/Component/MetadataEndpoint/.github/PULL_REQUEST_TEMPLATE.md:
--------------------------------------------------------------------------------
1 | Please do not send any PR here.
2 | PRs should be send to the main repository at https://github.com/OAuth2-Framework/oauth2-framework
3 | 


--------------------------------------------------------------------------------
/src/Component/MetadataEndpoint/Metadata.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\MetadataEndpoint;
 6 | 
 7 | use function array_key_exists;
 8 | use InvalidArgumentException;
 9 | 
10 | class Metadata
11 | {
12 |     private array $values = [];
13 | 
14 |     public function has(string $key): bool
15 |     {
16 |         return array_key_exists($key, $this->values);
17 |     }
18 | 
19 |     /**
20 |      * @return mixed|null
21 |      */
22 |     public function get(string $key)
23 |     {
24 |         if (! $this->has($key)) {
25 |             throw new InvalidArgumentException(sprintf('The value with key "%s" does not exist.', $key));
26 |         }
27 | 
28 |         return $this->values[$key];
29 |     }
30 | 
31 |     public function set(string $key, mixed $value): static
32 |     {
33 |         $this->values[$key] = $value;
34 | 
35 |         return $this;
36 |     }
37 | 
38 |     public function all(): array
39 |     {
40 |         return $this->values;
41 |     }
42 | }
43 | 


--------------------------------------------------------------------------------
/src/Component/MetadataEndpoint/README.md:
--------------------------------------------------------------------------------
 1 | Metadata Endpoint for the OAuth2 Framework
 2 | ==========================================
 3 | 
 4 | This repository is a sub repository of [OAuth2 and OpenId Connect Framework](https://github.com/oauth2-framework/oauth2-framework) project and is READ ONLY.
 5 | 
 6 | **Please do not submit any Pull Request here.**
 7 | You should go to [the main repository](https://github.com/oauth2-framework/oauth2-framework) instead. 
 8 | 
 9 | # Documentation
10 | 
11 | The official documentation is available as https://oauth2-framework.spomky-labs.com/
12 | 
13 | # Licence
14 | 
15 | This software is release under [MIT licence](LICENSE).
16 | 


--------------------------------------------------------------------------------
/src/Component/MetadataEndpoint/phpunit.xml.dist:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <phpunit
 3 |         backupGlobals="false"
 4 |         backupStaticAttributes="false"
 5 |         convertErrorsToExceptions="true"
 6 |         convertNoticesToExceptions="true"
 7 |         convertWarningsToExceptions="true"
 8 |         processIsolation="false"
 9 |         stopOnFailure="false"
10 |         bootstrap="vendor/autoload.php"
11 |         colors="true">
12 |     <testsuites>
13 |         <testsuite name="Test Suite">
14 |             <directory>./Tests/</directory>
15 |         </testsuite>
16 |     </testsuites>
17 | 
18 |     <filter>
19 |         <whitelist>
20 |             <directory suffix=".php">./</directory>
21 |             <exclude>
22 |                 <directory>./vendor</directory>
23 |                 <directory>./Tests</directory>
24 |                 <directory suffix="Test.php">./src</directory>
25 |             </exclude>
26 |         </whitelist>
27 |     </filter>
28 | </phpunit>
29 | 


--------------------------------------------------------------------------------
/src/Component/NoneGrant/.github/PULL_REQUEST_TEMPLATE.md:
--------------------------------------------------------------------------------
1 | Please do not send any PR here.
2 | PRs should be send to the main repository at https://github.com/OAuth2-Framework/oauth2-framework
3 | 


--------------------------------------------------------------------------------
/src/Component/NoneGrant/AuthorizationStorage.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\NoneGrant;
 6 | 
 7 | use OAuth2Framework\Component\AuthorizationEndpoint\AuthorizationRequest\AuthorizationRequest;
 8 | 
 9 | /**
10 |  * Interface AuthorizationRepository.
11 |  */
12 | interface AuthorizationStorage
13 | {
14 |     public function save(AuthorizationRequest $authorization): void;
15 | }
16 | 


--------------------------------------------------------------------------------
/src/Component/NoneGrant/README.md:
--------------------------------------------------------------------------------
 1 | None Grant for the OAuth2 Framework
 2 | ===================================
 3 | 
 4 | This repository is a sub repository of [OAuth2 and OpenId Connect Framework](https://github.com/oauth2-framework/oauth2-framework) project and is READ ONLY.
 5 | 
 6 | **Please do not submit any Pull Request here.**
 7 | You should go to [the main repository](https://github.com/oauth2-framework/oauth2-framework) instead. 
 8 | 
 9 | # Documentation
10 | 
11 | The official documentation is available as https://oauth2-framework.spomky-labs.com/
12 | 
13 | # Licence
14 | 
15 | This software is release under [MIT licence](LICENSE).
16 | 


--------------------------------------------------------------------------------
/src/Component/NoneGrant/composer.json:
--------------------------------------------------------------------------------
 1 | {
 2 |     "name": "oauth2-framework/none-grant",
 3 |     "type": "library",
 4 |     "description": "None Grant for the OAuth2 Framework",
 5 |     "license": "MIT",
 6 |     "keywords": ["RFC6749", "oauth2", "framework", "none", "grant", "library"],
 7 |     "homepage": "https://oauth2-framework.spomky-labs.com/",
 8 |     "authors": [
 9 |         {
10 |             "name": "Florent Morselli",
11 |             "homepage": "https://github.com/Spomky"
12 |         },
13 |         {
14 |             "name": "All contributors",
15 |             "homepage": "https://github.com/OAuth2-Framework/oauth2-framework/contributors"
16 |         }
17 |     ],
18 |     "require": {
19 |         "php": "^8.1",
20 |         "oauth2-framework/core": "^2.0",
21 |         "oauth2-framework/authorization-endpoint": "^2.0"
22 |     },
23 |     "autoload": {
24 |         "psr-4": {
25 |             "OAuth2Framework\\Component\\NoneGrant\\": ""
26 |         }
27 |     },
28 |     "config": {
29 |         "sort-packages": true
30 |     }
31 | }
32 | 


--------------------------------------------------------------------------------
/src/Component/NoneGrant/phpunit.xml.dist:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <phpunit
 3 |         backupGlobals="false"
 4 |         backupStaticAttributes="false"
 5 |         convertErrorsToExceptions="true"
 6 |         convertNoticesToExceptions="true"
 7 |         convertWarningsToExceptions="true"
 8 |         processIsolation="false"
 9 |         stopOnFailure="false"
10 |         bootstrap="vendor/autoload.php"
11 |         colors="true">
12 |     <testsuites>
13 |         <testsuite name="Test Suite">
14 |             <directory>./Tests/</directory>
15 |         </testsuite>
16 |     </testsuites>
17 | 
18 |     <filter>
19 |         <whitelist>
20 |             <directory suffix=".php">./</directory>
21 |             <exclude>
22 |                 <directory>./vendor</directory>
23 |                 <directory>./Tests</directory>
24 |                 <directory suffix="Test.php">./src</directory>
25 |             </exclude>
26 |         </whitelist>
27 |     </filter>
28 | </phpunit>
29 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/.github/PULL_REQUEST_TEMPLATE.md:
--------------------------------------------------------------------------------
1 | Please do not send any PR here.
2 | PRs should be send to the main repository at https://github.com/OAuth2-Framework/oauth2-framework
3 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/IdTokenId.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect;
 6 | 
 7 | use Stringable;
 8 | 
 9 | class IdTokenId implements Stringable
10 | {
11 |     public function __construct(
12 |         private readonly string $value
13 |     ) {
14 |     }
15 | 
16 |     public function __toString(): string
17 |     {
18 |         return $this->getValue();
19 |     }
20 | 
21 |     public static function create(string $value): static
22 |     {
23 |         return new self($value);
24 |     }
25 | 
26 |     public function getValue(): string
27 |     {
28 |         return $this->value;
29 |     }
30 | }
31 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/Claim/Address.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\Claim;
 6 | 
 7 | use OAuth2Framework\Component\Core\UserAccount\UserAccount;
 8 | 
 9 | final class Address implements Claim
10 | {
11 |     private const CLAIM_NAME = 'address';
12 | 
13 |     public function name(): string
14 |     {
15 |         return self::CLAIM_NAME;
16 |     }
17 | 
18 |     public function isAvailableForUserAccount(UserAccount $userAccount, ?string $claimLocale): bool
19 |     {
20 |         return $userAccount->has($this->getComputedClaimName($claimLocale));
21 |     }
22 | 
23 |     public function getForUserAccount(UserAccount $userAccount, ?string $claimLocale)
24 |     {
25 |         return $userAccount->get($this->getComputedClaimName($claimLocale));
26 |     }
27 | 
28 |     private function getComputedClaimName(?string $claimLocale): string
29 |     {
30 |         return $claimLocale !== null ? sprintf('%s#%s', self::CLAIM_NAME, $claimLocale) : static::CLAIM_NAME;
31 |     }
32 | }
33 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/Claim/AuthenticationTime.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\Claim;
 6 | 
 7 | use OAuth2Framework\Component\Core\UserAccount\UserAccount;
 8 | 
 9 | final class AuthenticationTime implements Claim
10 | {
11 |     private const CLAIM_NAME = 'auth_time';
12 | 
13 |     public function name(): string
14 |     {
15 |         return self::CLAIM_NAME;
16 |     }
17 | 
18 |     public function isAvailableForUserAccount(UserAccount $userAccount, ?string $claimLocale): bool
19 |     {
20 |         return $userAccount->getLastLoginAt() !== null;
21 |     }
22 | 
23 |     public function getForUserAccount(UserAccount $userAccount, ?string $claimLocale)
24 |     {
25 |         return $userAccount->getLastLoginAt();
26 |     }
27 | }
28 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/Claim/Birthdate.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\Claim;
 6 | 
 7 | use OAuth2Framework\Component\Core\UserAccount\UserAccount;
 8 | 
 9 | final class Birthdate implements Claim
10 | {
11 |     private const CLAIM_NAME = 'birthdate';
12 | 
13 |     public function name(): string
14 |     {
15 |         return self::CLAIM_NAME;
16 |     }
17 | 
18 |     public function isAvailableForUserAccount(UserAccount $userAccount, ?string $claimLocale): bool
19 |     {
20 |         return $userAccount->has(self::CLAIM_NAME);
21 |     }
22 | 
23 |     public function getForUserAccount(UserAccount $userAccount, ?string $claimLocale)
24 |     {
25 |         return $userAccount->get(self::CLAIM_NAME);
26 |     }
27 | }
28 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/Claim/Claim.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\Claim;
 6 | 
 7 | use OAuth2Framework\Component\Core\UserAccount\UserAccount;
 8 | 
 9 | interface Claim
10 | {
11 |     public function name(): string;
12 | 
13 |     public function isAvailableForUserAccount(UserAccount $userAccount, ?string $claimLocale): bool;
14 | 
15 |     /**
16 |      * @return mixed|null
17 |      */
18 |     public function getForUserAccount(UserAccount $userAccount, ?string $claimLocale);
19 | }
20 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/Claim/ClaimSource.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\Claim;
 6 | 
 7 | use OAuth2Framework\Component\Core\UserAccount\UserAccount;
 8 | 
 9 | interface ClaimSource
10 | {
11 |     /**
12 |      * @param string[] $scope
13 |      */
14 |     public function getUserInfo(UserAccount $userAccount, array $scope, array $claims): ?Source;
15 | }
16 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/Claim/Email.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\Claim;
 6 | 
 7 | use OAuth2Framework\Component\Core\UserAccount\UserAccount;
 8 | 
 9 | final class Email implements Claim
10 | {
11 |     private const CLAIM_NAME = 'email';
12 | 
13 |     public function name(): string
14 |     {
15 |         return self::CLAIM_NAME;
16 |     }
17 | 
18 |     public function isAvailableForUserAccount(UserAccount $userAccount, ?string $claimLocale): bool
19 |     {
20 |         return $userAccount->has($this->getComputedClaimName($claimLocale));
21 |     }
22 | 
23 |     public function getForUserAccount(UserAccount $userAccount, ?string $claimLocale)
24 |     {
25 |         return $userAccount->get($this->getComputedClaimName($claimLocale));
26 |     }
27 | 
28 |     private function getComputedClaimName(?string $claimLocale): string
29 |     {
30 |         return $claimLocale !== null ? sprintf('%s#%s', self::CLAIM_NAME, $claimLocale) : static::CLAIM_NAME;
31 |     }
32 | }
33 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/Claim/EmailVerified.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\Claim;
 6 | 
 7 | use OAuth2Framework\Component\Core\UserAccount\UserAccount;
 8 | 
 9 | final class EmailVerified implements Claim
10 | {
11 |     private const CLAIM_NAME = 'email_verified';
12 | 
13 |     public function name(): string
14 |     {
15 |         return self::CLAIM_NAME;
16 |     }
17 | 
18 |     public function isAvailableForUserAccount(UserAccount $userAccount, ?string $claimLocale): bool
19 |     {
20 |         return $userAccount->has(self::CLAIM_NAME);
21 |     }
22 | 
23 |     public function getForUserAccount(UserAccount $userAccount, ?string $claimLocale)
24 |     {
25 |         return $userAccount->get(self::CLAIM_NAME);
26 |     }
27 | }
28 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/Claim/FamilyName.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\Claim;
 6 | 
 7 | use OAuth2Framework\Component\Core\UserAccount\UserAccount;
 8 | 
 9 | final class FamilyName implements Claim
10 | {
11 |     private const CLAIM_NAME = 'family_name';
12 | 
13 |     public function name(): string
14 |     {
15 |         return self::CLAIM_NAME;
16 |     }
17 | 
18 |     public function isAvailableForUserAccount(UserAccount $userAccount, ?string $claimLocale): bool
19 |     {
20 |         return $userAccount->has($this->getComputedClaimName($claimLocale));
21 |     }
22 | 
23 |     public function getForUserAccount(UserAccount $userAccount, ?string $claimLocale)
24 |     {
25 |         return $userAccount->get($this->getComputedClaimName($claimLocale));
26 |     }
27 | 
28 |     private function getComputedClaimName(?string $claimLocale): string
29 |     {
30 |         return $claimLocale !== null ? sprintf('%s#%s', self::CLAIM_NAME, $claimLocale) : static::CLAIM_NAME;
31 |     }
32 | }
33 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/Claim/Gender.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\Claim;
 6 | 
 7 | use OAuth2Framework\Component\Core\UserAccount\UserAccount;
 8 | 
 9 | final class Gender implements Claim
10 | {
11 |     private const CLAIM_NAME = 'gender';
12 | 
13 |     public function name(): string
14 |     {
15 |         return self::CLAIM_NAME;
16 |     }
17 | 
18 |     public function isAvailableForUserAccount(UserAccount $userAccount, ?string $claimLocale): bool
19 |     {
20 |         return $userAccount->has($this->getComputedClaimName($claimLocale));
21 |     }
22 | 
23 |     public function getForUserAccount(UserAccount $userAccount, ?string $claimLocale)
24 |     {
25 |         return $userAccount->get($this->getComputedClaimName($claimLocale));
26 |     }
27 | 
28 |     private function getComputedClaimName(?string $claimLocale): string
29 |     {
30 |         return $claimLocale !== null ? sprintf('%s#%s', self::CLAIM_NAME, $claimLocale) : static::CLAIM_NAME;
31 |     }
32 | }
33 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/Claim/GivenName.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\Claim;
 6 | 
 7 | use OAuth2Framework\Component\Core\UserAccount\UserAccount;
 8 | 
 9 | final class GivenName implements Claim
10 | {
11 |     private const CLAIM_NAME = 'given_name';
12 | 
13 |     public function name(): string
14 |     {
15 |         return self::CLAIM_NAME;
16 |     }
17 | 
18 |     public function isAvailableForUserAccount(UserAccount $userAccount, ?string $claimLocale): bool
19 |     {
20 |         return $userAccount->has($this->getComputedClaimName($claimLocale));
21 |     }
22 | 
23 |     public function getForUserAccount(UserAccount $userAccount, ?string $claimLocale)
24 |     {
25 |         return $userAccount->get($this->getComputedClaimName($claimLocale));
26 |     }
27 | 
28 |     private function getComputedClaimName(?string $claimLocale): string
29 |     {
30 |         return $claimLocale !== null ? sprintf('%s#%s', self::CLAIM_NAME, $claimLocale) : static::CLAIM_NAME;
31 |     }
32 | }
33 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/Claim/Locale.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\Claim;
 6 | 
 7 | use OAuth2Framework\Component\Core\UserAccount\UserAccount;
 8 | 
 9 | final class Locale implements Claim
10 | {
11 |     private const CLAIM_NAME = 'locale';
12 | 
13 |     public function name(): string
14 |     {
15 |         return self::CLAIM_NAME;
16 |     }
17 | 
18 |     public function isAvailableForUserAccount(UserAccount $userAccount, ?string $claimLocale): bool
19 |     {
20 |         return $userAccount->has(self::CLAIM_NAME);
21 |     }
22 | 
23 |     public function getForUserAccount(UserAccount $userAccount, ?string $claimLocale)
24 |     {
25 |         return $userAccount->get(self::CLAIM_NAME);
26 |     }
27 | }
28 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/Claim/MiddleName.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\Claim;
 6 | 
 7 | use OAuth2Framework\Component\Core\UserAccount\UserAccount;
 8 | 
 9 | final class MiddleName implements Claim
10 | {
11 |     private const CLAIM_NAME = 'middle_name';
12 | 
13 |     public function name(): string
14 |     {
15 |         return self::CLAIM_NAME;
16 |     }
17 | 
18 |     public function isAvailableForUserAccount(UserAccount $userAccount, ?string $claimLocale): bool
19 |     {
20 |         return $userAccount->has($this->getComputedClaimName($claimLocale));
21 |     }
22 | 
23 |     public function getForUserAccount(UserAccount $userAccount, ?string $claimLocale)
24 |     {
25 |         return $userAccount->get($this->getComputedClaimName($claimLocale));
26 |     }
27 | 
28 |     private function getComputedClaimName(?string $claimLocale): string
29 |     {
30 |         return $claimLocale !== null ? sprintf('%s#%s', self::CLAIM_NAME, $claimLocale) : static::CLAIM_NAME;
31 |     }
32 | }
33 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/Claim/Name.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\Claim;
 6 | 
 7 | use OAuth2Framework\Component\Core\UserAccount\UserAccount;
 8 | 
 9 | final class Name implements Claim
10 | {
11 |     private const CLAIM_NAME = 'name';
12 | 
13 |     public function name(): string
14 |     {
15 |         return self::CLAIM_NAME;
16 |     }
17 | 
18 |     public function isAvailableForUserAccount(UserAccount $userAccount, ?string $claimLocale): bool
19 |     {
20 |         return $userAccount->has($this->getComputedClaimName($claimLocale));
21 |     }
22 | 
23 |     public function getForUserAccount(UserAccount $userAccount, ?string $claimLocale)
24 |     {
25 |         return $userAccount->get($this->getComputedClaimName($claimLocale));
26 |     }
27 | 
28 |     private function getComputedClaimName(?string $claimLocale): string
29 |     {
30 |         return $claimLocale !== null ? sprintf('%s#%s', self::CLAIM_NAME, $claimLocale) : static::CLAIM_NAME;
31 |     }
32 | }
33 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/Claim/Nickname.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\Claim;
 6 | 
 7 | use OAuth2Framework\Component\Core\UserAccount\UserAccount;
 8 | 
 9 | final class Nickname implements Claim
10 | {
11 |     private const CLAIM_NAME = 'nickname';
12 | 
13 |     public function name(): string
14 |     {
15 |         return self::CLAIM_NAME;
16 |     }
17 | 
18 |     public function isAvailableForUserAccount(UserAccount $userAccount, ?string $claimLocale): bool
19 |     {
20 |         return $userAccount->has($this->getComputedClaimName($claimLocale));
21 |     }
22 | 
23 |     public function getForUserAccount(UserAccount $userAccount, ?string $claimLocale)
24 |     {
25 |         return $userAccount->get($this->getComputedClaimName($claimLocale));
26 |     }
27 | 
28 |     private function getComputedClaimName(?string $claimLocale): string
29 |     {
30 |         return $claimLocale !== null ? sprintf('%s#%s', self::CLAIM_NAME, $claimLocale) : static::CLAIM_NAME;
31 |     }
32 | }
33 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/Claim/PhoneNumber.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\Claim;
 6 | 
 7 | use OAuth2Framework\Component\Core\UserAccount\UserAccount;
 8 | 
 9 | final class PhoneNumber implements Claim
10 | {
11 |     private const CLAIM_NAME = 'phone_number';
12 | 
13 |     public function name(): string
14 |     {
15 |         return self::CLAIM_NAME;
16 |     }
17 | 
18 |     public function isAvailableForUserAccount(UserAccount $userAccount, ?string $claimLocale): bool
19 |     {
20 |         return $userAccount->has($this->getComputedClaimName($claimLocale));
21 |     }
22 | 
23 |     public function getForUserAccount(UserAccount $userAccount, ?string $claimLocale)
24 |     {
25 |         return $userAccount->get($this->getComputedClaimName($claimLocale));
26 |     }
27 | 
28 |     private function getComputedClaimName(?string $claimLocale): string
29 |     {
30 |         return $claimLocale !== null ? sprintf('%s#%s', self::CLAIM_NAME, $claimLocale) : static::CLAIM_NAME;
31 |     }
32 | }
33 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/Claim/PhoneNumberVerified.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\Claim;
 6 | 
 7 | use OAuth2Framework\Component\Core\UserAccount\UserAccount;
 8 | 
 9 | final class PhoneNumberVerified implements Claim
10 | {
11 |     private const CLAIM_NAME = 'phone_number_verified';
12 | 
13 |     public function name(): string
14 |     {
15 |         return self::CLAIM_NAME;
16 |     }
17 | 
18 |     public function isAvailableForUserAccount(UserAccount $userAccount, ?string $claimLocale): bool
19 |     {
20 |         return $userAccount->has(self::CLAIM_NAME);
21 |     }
22 | 
23 |     public function getForUserAccount(UserAccount $userAccount, ?string $claimLocale)
24 |     {
25 |         return $userAccount->get(self::CLAIM_NAME);
26 |     }
27 | }
28 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/Claim/Picture.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\Claim;
 6 | 
 7 | use OAuth2Framework\Component\Core\UserAccount\UserAccount;
 8 | 
 9 | final class Picture implements Claim
10 | {
11 |     private const CLAIM_NAME = 'picture';
12 | 
13 |     public function name(): string
14 |     {
15 |         return self::CLAIM_NAME;
16 |     }
17 | 
18 |     public function isAvailableForUserAccount(UserAccount $userAccount, ?string $claimLocale): bool
19 |     {
20 |         return $userAccount->has($this->getComputedClaimName($claimLocale));
21 |     }
22 | 
23 |     public function getForUserAccount(UserAccount $userAccount, ?string $claimLocale)
24 |     {
25 |         return $userAccount->get($this->getComputedClaimName($claimLocale));
26 |     }
27 | 
28 |     private function getComputedClaimName(?string $claimLocale): string
29 |     {
30 |         return $claimLocale !== null ? sprintf('%s#%s', self::CLAIM_NAME, $claimLocale) : static::CLAIM_NAME;
31 |     }
32 | }
33 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/Claim/PreferredUsername.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\Claim;
 6 | 
 7 | use OAuth2Framework\Component\Core\UserAccount\UserAccount;
 8 | 
 9 | final class PreferredUsername implements Claim
10 | {
11 |     private const CLAIM_NAME = 'preferred_username';
12 | 
13 |     public function name(): string
14 |     {
15 |         return self::CLAIM_NAME;
16 |     }
17 | 
18 |     public function isAvailableForUserAccount(UserAccount $userAccount, ?string $claimLocale): bool
19 |     {
20 |         return $userAccount->has($this->getComputedClaimName($claimLocale));
21 |     }
22 | 
23 |     public function getForUserAccount(UserAccount $userAccount, ?string $claimLocale)
24 |     {
25 |         return $userAccount->get($this->getComputedClaimName($claimLocale));
26 |     }
27 | 
28 |     private function getComputedClaimName(?string $claimLocale): string
29 |     {
30 |         return $claimLocale !== null ? sprintf('%s#%s', self::CLAIM_NAME, $claimLocale) : static::CLAIM_NAME;
31 |     }
32 | }
33 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/Claim/Profile.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\Claim;
 6 | 
 7 | use OAuth2Framework\Component\Core\UserAccount\UserAccount;
 8 | 
 9 | final class Profile implements Claim
10 | {
11 |     private const CLAIM_NAME = 'profile';
12 | 
13 |     public function name(): string
14 |     {
15 |         return self::CLAIM_NAME;
16 |     }
17 | 
18 |     public function isAvailableForUserAccount(UserAccount $userAccount, ?string $claimLocale): bool
19 |     {
20 |         return $userAccount->has($this->getComputedClaimName($claimLocale));
21 |     }
22 | 
23 |     public function getForUserAccount(UserAccount $userAccount, ?string $claimLocale)
24 |     {
25 |         return $userAccount->get($this->getComputedClaimName($claimLocale));
26 |     }
27 | 
28 |     private function getComputedClaimName(?string $claimLocale): string
29 |     {
30 |         return $claimLocale !== null ? sprintf('%s#%s', self::CLAIM_NAME, $claimLocale) : static::CLAIM_NAME;
31 |     }
32 | }
33 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/Claim/Source.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\Claim;
 6 | 
 7 | class Source
 8 | {
 9 |     /**
10 |      * @var string[]
11 |      */
12 |     private array $availableClaims;
13 | 
14 |     private array $source;
15 | 
16 |     /**
17 |      * @param string[] $availableClaims
18 |      */
19 |     public function __construct(array $availableClaims, array $source)
20 |     {
21 |         $this->availableClaims = $availableClaims;
22 |         $this->source = $source;
23 |     }
24 | 
25 |     /**
26 |      * @return string[]
27 |      */
28 |     public function getAvailableClaims(): array
29 |     {
30 |         return $this->availableClaims;
31 |     }
32 | 
33 |     public function getSource(): array
34 |     {
35 |         return $this->source;
36 |     }
37 | }
38 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/Claim/UpdatedAt.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\Claim;
 6 | 
 7 | use OAuth2Framework\Component\Core\UserAccount\UserAccount;
 8 | 
 9 | final class UpdatedAt implements Claim
10 | {
11 |     private const CLAIM_NAME = 'updated_at';
12 | 
13 |     public function name(): string
14 |     {
15 |         return self::CLAIM_NAME;
16 |     }
17 | 
18 |     public function isAvailableForUserAccount(UserAccount $userAccount, ?string $claimLocale): bool
19 |     {
20 |         return $userAccount->getLastUpdateAt() !== null;
21 |     }
22 | 
23 |     public function getForUserAccount(UserAccount $userAccount, ?string $claimLocale)
24 |     {
25 |         return $userAccount->getLastUpdateAt();
26 |     }
27 | }
28 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/Claim/Website.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\Claim;
 6 | 
 7 | use OAuth2Framework\Component\Core\UserAccount\UserAccount;
 8 | 
 9 | final class Website implements Claim
10 | {
11 |     private const CLAIM_NAME = 'website';
12 | 
13 |     public function name(): string
14 |     {
15 |         return self::CLAIM_NAME;
16 |     }
17 | 
18 |     public function isAvailableForUserAccount(UserAccount $userAccount, ?string $claimLocale): bool
19 |     {
20 |         return $userAccount->has($this->getComputedClaimName($claimLocale));
21 |     }
22 | 
23 |     public function getForUserAccount(UserAccount $userAccount, ?string $claimLocale)
24 |     {
25 |         return $userAccount->get($this->getComputedClaimName($claimLocale));
26 |     }
27 | 
28 |     private function getComputedClaimName(?string $claimLocale): string
29 |     {
30 |         return $claimLocale !== null ? sprintf('%s#%s', self::CLAIM_NAME, $claimLocale) : static::CLAIM_NAME;
31 |     }
32 | }
33 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/Claim/Zoneinfo.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\Claim;
 6 | 
 7 | use OAuth2Framework\Component\Core\UserAccount\UserAccount;
 8 | 
 9 | final class Zoneinfo implements Claim
10 | {
11 |     private const CLAIM_NAME = 'zoneinfo';
12 | 
13 |     public function name(): string
14 |     {
15 |         return self::CLAIM_NAME;
16 |     }
17 | 
18 |     public function isAvailableForUserAccount(UserAccount $userAccount, ?string $claimLocale): bool
19 |     {
20 |         return $userAccount->has(self::CLAIM_NAME);
21 |     }
22 | 
23 |     public function getForUserAccount(UserAccount $userAccount, ?string $claimLocale)
24 |     {
25 |         return $userAccount->get(self::CLAIM_NAME);
26 |     }
27 | }
28 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/Pairwise/PairwiseSubjectIdentifierAlgorithm.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\Pairwise;
 6 | 
 7 | use OAuth2Framework\Component\Core\UserAccount\UserAccount;
 8 | 
 9 | interface PairwiseSubjectIdentifierAlgorithm
10 | {
11 |     public function calculateSubjectIdentifier(UserAccount $user, string $sectorIdentifierUri): string;
12 | 
13 |     public function getPublicIdFromSubjectIdentifier(string $subjectIdentifier): ?string;
14 | }
15 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/ScopeSupport/AddressScopeSupport.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\ScopeSupport;
 6 | 
 7 | class AddressScopeSupport implements UserInfoScopeSupport
 8 | {
 9 |     public function getName(): string
10 |     {
11 |         return 'address';
12 |     }
13 | 
14 |     public function getAssociatedClaims(): array
15 |     {
16 |         return ['address'];
17 |     }
18 | }
19 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/ScopeSupport/EmailScopeSupport.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\ScopeSupport;
 6 | 
 7 | class EmailScopeSupport implements UserInfoScopeSupport
 8 | {
 9 |     public function getName(): string
10 |     {
11 |         return 'email';
12 |     }
13 | 
14 |     public function getAssociatedClaims(): array
15 |     {
16 |         return ['email', 'email_verified'];
17 |     }
18 | }
19 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/ScopeSupport/OpenIdScopeSupport.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\ScopeSupport;
 6 | 
 7 | class OpenIdScopeSupport implements UserInfoScopeSupport
 8 | {
 9 |     public function getName(): string
10 |     {
11 |         return 'openid';
12 |     }
13 | 
14 |     public function getAssociatedClaims(): array
15 |     {
16 |         return ['sub'];
17 |     }
18 | }
19 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/ScopeSupport/PhoneScopeSupport.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\ScopeSupport;
 6 | 
 7 | class PhoneScopeSupport implements UserInfoScopeSupport
 8 | {
 9 |     public function getName(): string
10 |     {
11 |         return 'phone';
12 |     }
13 | 
14 |     public function getAssociatedClaims(): array
15 |     {
16 |         return ['phone_number', 'phone_number_verified'];
17 |     }
18 | }
19 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/ScopeSupport/ProfileScopeSupport.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\ScopeSupport;
 6 | 
 7 | class ProfileScopeSupport implements UserInfoScopeSupport
 8 | {
 9 |     public function getName(): string
10 |     {
11 |         return 'profile';
12 |     }
13 | 
14 |     public function getAssociatedClaims(): array
15 |     {
16 |         return [
17 |             'name',
18 |             'given_name',
19 |             'middle_name',
20 |             'family_name',
21 |             'nickname',
22 |             'preferred_username',
23 |             'profile',
24 |             'picture',
25 |             'website',
26 |             'gender',
27 |             'birthdate',
28 |             'zoneinfo',
29 |             'locale',
30 |             'updated_at',
31 |         ];
32 |     }
33 | }
34 | 


--------------------------------------------------------------------------------
/src/Component/OpenIdConnect/UserInfo/ScopeSupport/UserInfoScopeSupport.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\OpenIdConnect\UserInfo\ScopeSupport;
 6 | 
 7 | interface UserInfoScopeSupport
 8 | {
 9 |     public function getName(): string;
10 | 
11 |     /**
12 |      * @return string[]
13 |      */
14 |     public function getAssociatedClaims(): array;
15 | }
16 | 


--------------------------------------------------------------------------------
/src/Component/RefreshTokenGrant/.github/PULL_REQUEST_TEMPLATE.md:
--------------------------------------------------------------------------------
1 | Please do not send any PR here.
2 | PRs should be send to the main repository at https://github.com/OAuth2-Framework/oauth2-framework
3 | 


--------------------------------------------------------------------------------
/src/Component/RefreshTokenGrant/README.md:
--------------------------------------------------------------------------------
 1 | Refresh Token Grant for the OAuth2 Framework
 2 | ============================================
 3 | 
 4 | This repository is a sub repository of [OAuth2 and OpenId Connect Framework](https://github.com/oauth2-framework/oauth2-framework) project and is READ ONLY.
 5 | 
 6 | **Please do not submit any Pull Request here.**
 7 | You should go to [the main repository](https://github.com/oauth2-framework/oauth2-framework) instead. 
 8 | 
 9 | # Documentation
10 | 
11 | The official documentation is available as https://oauth2-framework.spomky-labs.com/
12 | 
13 | # Licence
14 | 
15 | This software is release under [MIT licence](LICENSE).
16 | 


--------------------------------------------------------------------------------
/src/Component/RefreshTokenGrant/RefreshTokenId.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\RefreshTokenGrant;
 6 | 
 7 | use Stringable;
 8 | 
 9 | class RefreshTokenId implements Stringable
10 | {
11 |     public function __construct(
12 |         private readonly string $value
13 |     ) {
14 |     }
15 | 
16 |     public function __toString(): string
17 |     {
18 |         return $this->getValue();
19 |     }
20 | 
21 |     public static function create(string $value): static
22 |     {
23 |         return new self($value);
24 |     }
25 | 
26 |     public function getValue(): string
27 |     {
28 |         return $this->value;
29 |     }
30 | }
31 | 


--------------------------------------------------------------------------------
/src/Component/RefreshTokenGrant/RefreshTokenRepository.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\RefreshTokenGrant;
 6 | 
 7 | use DateTimeImmutable;
 8 | use OAuth2Framework\Component\Core\Client\ClientId;
 9 | use OAuth2Framework\Component\Core\DataBag\DataBag;
10 | use OAuth2Framework\Component\Core\ResourceOwner\ResourceOwnerId;
11 | use OAuth2Framework\Component\Core\ResourceServer\ResourceServerId;
12 | 
13 | /**
14 |  * @see    http://tools.ietf.org/html/rfc6749#section-6
15 |  * @see    http://tools.ietf.org/html/rfc6749#section-1.5
16 |  */
17 | interface RefreshTokenRepository
18 | {
19 |     public function save(RefreshToken $refreshToken): void;
20 | 
21 |     public function find(RefreshTokenId $refreshTokenId): ?RefreshToken;
22 | 
23 |     public function create(
24 |         ClientId $clientId,
25 |         ResourceOwnerId $resourceOwnerId,
26 |         DateTimeImmutable $expiresAt,
27 |         DataBag $parameter,
28 |         DataBag $metadata,
29 |         ?ResourceServerId $resourceServerId
30 |     ): RefreshToken;
31 | }
32 | 


--------------------------------------------------------------------------------
/src/Component/RefreshTokenGrant/phpunit.xml.dist:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <phpunit
 3 |         backupGlobals="false"
 4 |         backupStaticAttributes="false"
 5 |         convertErrorsToExceptions="true"
 6 |         convertNoticesToExceptions="true"
 7 |         convertWarningsToExceptions="true"
 8 |         processIsolation="false"
 9 |         stopOnFailure="false"
10 |         bootstrap="vendor/autoload.php"
11 |         colors="true">
12 |     <testsuites>
13 |         <testsuite name="Test Suite">
14 |             <directory>./Tests/</directory>
15 |         </testsuite>
16 |     </testsuites>
17 | 
18 |     <filter>
19 |         <whitelist>
20 |             <directory suffix=".php">./</directory>
21 |             <exclude>
22 |                 <directory>./vendor</directory>
23 |                 <directory>./Tests</directory>
24 |                 <directory suffix="Test.php">./src</directory>
25 |             </exclude>
26 |         </whitelist>
27 |     </filter>
28 | </phpunit>
29 | 


--------------------------------------------------------------------------------
/src/Component/ResourceOwnerPasswordCredentialsGrant/.github/PULL_REQUEST_TEMPLATE.md:
--------------------------------------------------------------------------------
1 | Please do not send any PR here.
2 | PRs should be send to the main repository at https://github.com/OAuth2-Framework/oauth2-framework
3 | 


--------------------------------------------------------------------------------
/src/Component/ResourceOwnerPasswordCredentialsGrant/README.md:
--------------------------------------------------------------------------------
 1 | Client Credentials Grant for the OAuth2 Framework
 2 | =================================================
 3 | 
 4 | This repository is a sub repository of [OAuth2 and OpenId Connect Framework](https://github.com/oauth2-framework/oauth2-framework) project and is READ ONLY.
 5 | 
 6 | **Please do not submit any Pull Request here.**
 7 | You should go to [the main repository](https://github.com/oauth2-framework/oauth2-framework) instead. 
 8 | 
 9 | # Documentation
10 | 
11 | The official documentation is available as https://oauth2-framework.spomky-labs.com/
12 | 
13 | # Licence
14 | 
15 | This software is release under [MIT licence](LICENSE).
16 | 


--------------------------------------------------------------------------------
/src/Component/ResourceOwnerPasswordCredentialsGrant/ResourceOwnerPasswordCredentialManager.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\ResourceOwnerPasswordCredentialsGrant;
 6 | 
 7 | use OAuth2Framework\Component\Core\ResourceOwner\ResourceOwnerId;
 8 | 
 9 | interface ResourceOwnerPasswordCredentialManager
10 | {
11 |     public function findResourceOwnerIdWithUsernameAndPassword(string $username, string $password): ?ResourceOwnerId;
12 | }
13 | 


--------------------------------------------------------------------------------
/src/Component/ResourceOwnerPasswordCredentialsGrant/ResourceOwnerWithPasswordCredential.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\ResourceOwnerPasswordCredentialsGrant;
 6 | 
 7 | interface ResourceOwnerWithPasswordCredential
 8 | {
 9 |     public function hasPasswordCredential(string $password): bool;
10 | }
11 | 


--------------------------------------------------------------------------------
/src/Component/ResourceOwnerPasswordCredentialsGrant/phpunit.xml.dist:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <phpunit
 3 |         backupGlobals="false"
 4 |         backupStaticAttributes="false"
 5 |         convertErrorsToExceptions="true"
 6 |         convertNoticesToExceptions="true"
 7 |         convertWarningsToExceptions="true"
 8 |         processIsolation="false"
 9 |         stopOnFailure="false"
10 |         bootstrap="vendor/autoload.php"
11 |         colors="true">
12 |     <testsuites>
13 |         <testsuite name="Test Suite">
14 |             <directory>./Tests/</directory>
15 |         </testsuite>
16 |     </testsuites>
17 | 
18 |     <filter>
19 |         <whitelist>
20 |             <directory suffix=".php">./</directory>
21 |             <exclude>
22 |                 <directory>./vendor</directory>
23 |                 <directory>./Tests</directory>
24 |                 <directory suffix="Test.php">./src</directory>
25 |             </exclude>
26 |         </whitelist>
27 |     </filter>
28 | </phpunit>
29 | 


--------------------------------------------------------------------------------
/src/Component/ResourceServerAuthentication/README.md:
--------------------------------------------------------------------------------
 1 | Client Authentication for the OAuth2 Framework
 2 | ==============================================
 3 | 
 4 | This repository is a sub repository of [OAuth2 and OpenId Connect Framework](https://github.com/oauth2-framework/oauth2-framework) project and is READ ONLY.
 5 | 
 6 | **Please do not submit any Pull Request here.**
 7 | You should go to [the main repository](https://github.com/oauth2-framework/oauth2-framework) instead. 
 8 | 
 9 | # Documentation
10 | 
11 | The official documentation is available as https://oauth2-framework.spomky-labs.com/
12 | 
13 | # Licence
14 | 
15 | This software is release under [MIT licence](LICENSE).
16 | 


--------------------------------------------------------------------------------
/src/Component/ResourceServerAuthentication/phpunit.xml.dist:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <phpunit
 3 |         backupGlobals="false"
 4 |         backupStaticAttributes="false"
 5 |         convertErrorsToExceptions="true"
 6 |         convertNoticesToExceptions="true"
 7 |         convertWarningsToExceptions="true"
 8 |         processIsolation="false"
 9 |         stopOnFailure="false"
10 |         bootstrap="vendor/autoload.php"
11 |         colors="true">
12 |     <testsuites>
13 |         <testsuite name="Test Suite">
14 |             <directory>./Tests/</directory>
15 |         </testsuite>
16 |     </testsuites>
17 | 
18 |     <filter>
19 |         <whitelist>
20 |             <directory suffix=".php">./</directory>
21 |             <exclude>
22 |                 <directory>./vendor</directory>
23 |                 <directory>./Tests</directory>
24 |                 <directory suffix="Test.php">./src</directory>
25 |             </exclude>
26 |         </whitelist>
27 |     </filter>
28 | </phpunit>
29 | 


--------------------------------------------------------------------------------
/src/Component/Scope/Checker.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Scope;
 6 | 
 7 | use function count;
 8 | use InvalidArgumentException;
 9 | 
10 | class Checker
11 | {
12 |     public static function checkUsedOnce(string $scope, string $scopes): void
13 |     {
14 |         $scopes = explode(' ', $scopes);
15 |         if (count(array_keys($scopes, $scope, true)) > 1) {
16 |             throw new InvalidArgumentException(sprintf('Scope "%s" appears more than once.', $scope));
17 |         }
18 |     }
19 | 
20 |     public static function checkCharset(string $scope): void
21 |     {
22 |         if (preg_match('/^[\x20\x23-\x5B\x5D-\x7E]+$/', $scope) !== 1) {
23 |             throw new InvalidArgumentException('Scope contains illegal characters.');
24 |         }
25 |     }
26 | }
27 | 


--------------------------------------------------------------------------------
/src/Component/Scope/Policy/DefaultScopePolicy.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Scope\Policy;
 6 | 
 7 | use OAuth2Framework\Component\Core\Client\Client;
 8 | 
 9 | final class DefaultScopePolicy implements ScopePolicy
10 | {
11 |     public function __construct(
12 |         private readonly string $defaultScopes
13 |     ) {
14 |     }
15 | 
16 |     public static function create(string $defaultScopes): static
17 |     {
18 |         return new self($defaultScopes);
19 |     }
20 | 
21 |     public function name(): string
22 |     {
23 |         return 'default';
24 |     }
25 | 
26 |     public function applyScopePolicy(string $scope, Client $client): string
27 |     {
28 |         return $client->has('default_scope') ? $client->get('default_scope') : $this->getDefaultScopes();
29 |     }
30 | 
31 |     private function getDefaultScopes(): string
32 |     {
33 |         return $this->defaultScopes;
34 |     }
35 | }
36 | 


--------------------------------------------------------------------------------
/src/Component/Scope/Policy/ErrorScopePolicy.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Scope\Policy;
 6 | 
 7 | use InvalidArgumentException;
 8 | use OAuth2Framework\Component\Core\Client\Client;
 9 | 
10 | final class ErrorScopePolicy implements ScopePolicy
11 | {
12 |     public static function create(): static
13 |     {
14 |         return new self();
15 |     }
16 | 
17 |     public function name(): string
18 |     {
19 |         return 'error';
20 |     }
21 | 
22 |     public function applyScopePolicy(string $scope, Client $client): string
23 |     {
24 |         throw new InvalidArgumentException('No scope was requested.');
25 |     }
26 | }
27 | 


--------------------------------------------------------------------------------
/src/Component/Scope/Policy/NoScopePolicy.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Scope\Policy;
 6 | 
 7 | use OAuth2Framework\Component\Core\Client\Client;
 8 | 
 9 | final class NoScopePolicy implements ScopePolicy
10 | {
11 |     public static function create(): static
12 |     {
13 |         return new self();
14 |     }
15 | 
16 |     public function name(): string
17 |     {
18 |         return 'none';
19 |     }
20 | 
21 |     public function applyScopePolicy(string $scope, Client $client): string
22 |     {
23 |         return $scope;
24 |     }
25 | }
26 | 


--------------------------------------------------------------------------------
/src/Component/Scope/Policy/ScopePolicy.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Scope\Policy;
 6 | 
 7 | use OAuth2Framework\Component\Core\Client\Client;
 8 | 
 9 | interface ScopePolicy
10 | {
11 |     public function name(): string;
12 | 
13 |     /**
14 |      * This function check if the scopes respect the scope policy for the client.
15 |      *
16 |      * @param string $scope  The scopes. This variable may be modified according to the scope policy
17 |      * @param Client $client The client
18 |      */
19 |     public function applyScopePolicy(string $scope, Client $client): string;
20 | }
21 | 


--------------------------------------------------------------------------------
/src/Component/Scope/README.md:
--------------------------------------------------------------------------------
 1 | Scope for the OAuth2 Framework
 2 | ==============================
 3 | 
 4 | This repository is a sub repository of [OAuth2 and OpenId Connect Framework](https://github.com/oauth2-framework/oauth2-framework) project and is READ ONLY.
 5 | 
 6 | **Please do not submit any Pull Request here.**
 7 | You should go to [the main repository](https://github.com/oauth2-framework/oauth2-framework) instead. 
 8 | 
 9 | # Documentation
10 | 
11 | The official documentation is available as https://oauth2-framework.spomky-labs.com/
12 | 
13 | # Licence
14 | 
15 | This software is release under [MIT licence](LICENSE).
16 | 


--------------------------------------------------------------------------------
/src/Component/Scope/Scope.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Scope;
 6 | 
 7 | use JsonSerializable;
 8 | 
 9 | interface Scope extends JsonSerializable
10 | {
11 |     public function __toString(): string;
12 | 
13 |     public function getName(): string;
14 | 
15 |     public function getParent(): ?string;
16 | 
17 |     public function isParentMandatory(): bool;
18 | }
19 | 


--------------------------------------------------------------------------------
/src/Component/Scope/ScopeRepository.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\Scope;
 6 | 
 7 | interface ScopeRepository
 8 | {
 9 |     public function has(string $scope): bool;
10 | 
11 |     public function get(string $scope): Scope;
12 | 
13 |     /**
14 |      * @return Scope[]
15 |      */
16 |     public function all(): array;
17 | }
18 | 


--------------------------------------------------------------------------------
/src/Component/Scope/phpunit.xml.dist:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <phpunit
 3 |         backupGlobals="false"
 4 |         backupStaticAttributes="false"
 5 |         convertErrorsToExceptions="true"
 6 |         convertNoticesToExceptions="true"
 7 |         convertWarningsToExceptions="true"
 8 |         processIsolation="false"
 9 |         stopOnFailure="false"
10 |         bootstrap="vendor/autoload.php"
11 |         colors="true">
12 |     <testsuites>
13 |         <testsuite name="Test Suite">
14 |             <directory>./Tests/</directory>
15 |         </testsuite>
16 |     </testsuites>
17 | 
18 |     <filter>
19 |         <whitelist>
20 |             <directory suffix=".php">./</directory>
21 |             <exclude>
22 |                 <directory>./vendor</directory>
23 |                 <directory>./Tests</directory>
24 |                 <directory suffix="Test.php">./src</directory>
25 |             </exclude>
26 |         </whitelist>
27 |     </filter>
28 | </phpunit>
29 | 


--------------------------------------------------------------------------------
/src/Component/TokenEndpoint/.github/PULL_REQUEST_TEMPLATE.md:
--------------------------------------------------------------------------------
1 | Please do not send any PR here.
2 | PRs should be send to the main repository at https://github.com/OAuth2-Framework/oauth2-framework
3 | 


--------------------------------------------------------------------------------
/src/Component/TokenEndpoint/Extension/TokenEndpointExtension.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\TokenEndpoint\Extension;
 6 | 
 7 | use OAuth2Framework\Component\Core\AccessToken\AccessToken;
 8 | use OAuth2Framework\Component\Core\Client\Client;
 9 | use OAuth2Framework\Component\Core\ResourceOwner\ResourceOwner;
10 | use OAuth2Framework\Component\TokenEndpoint\GrantType;
11 | use OAuth2Framework\Component\TokenEndpoint\GrantTypeData;
12 | use Psr\Http\Message\ServerRequestInterface;
13 | 
14 | interface TokenEndpointExtension
15 | {
16 |     public function beforeAccessTokenIssuance(
17 |         ServerRequestInterface $request,
18 |         GrantTypeData $grantTypeData,
19 |         GrantType $grantType,
20 |         callable $next
21 |     ): GrantTypeData;
22 | 
23 |     public function afterAccessTokenIssuance(
24 |         Client $client,
25 |         ResourceOwner $resourceOwner,
26 |         AccessToken $accessToken,
27 |         callable $next
28 |     ): array;
29 | }
30 | 


--------------------------------------------------------------------------------
/src/Component/TokenEndpoint/GrantType.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\TokenEndpoint;
 6 | 
 7 | use Psr\Http\Message\ServerRequestInterface;
 8 | 
 9 | interface GrantType
10 | {
11 |     /**
12 |      * This function returns the list of associated response types.
13 |      *
14 |      * @return string[]
15 |      */
16 |     public function associatedResponseTypes(): array;
17 | 
18 |     /**
19 |      * This function returns the supported grant type.
20 |      */
21 |     public function name(): string;
22 | 
23 |     /**
24 |      * This function checks the request.
25 |      */
26 |     public function checkRequest(ServerRequestInterface $request): void;
27 | 
28 |     /**
29 |      * This function checks the request and returns information to issue an access token.
30 |      */
31 |     public function prepareResponse(ServerRequestInterface $request, GrantTypeData $grantTypeData): void;
32 | 
33 |     public function grant(ServerRequestInterface $request, GrantTypeData $grantTypeData): void;
34 | }
35 | 


--------------------------------------------------------------------------------
/src/Component/TokenEndpoint/README.md:
--------------------------------------------------------------------------------
 1 | Token Endpoint for the OAuth2 Framework
 2 | =======================================
 3 | 
 4 | This repository is a sub repository of [OAuth2 and OpenId Connect Framework](https://github.com/oauth2-framework/oauth2-framework) project and is READ ONLY.
 5 | 
 6 | **Please do not submit any Pull Request here.**
 7 | You should go to [the main repository](https://github.com/oauth2-framework/oauth2-framework) instead. 
 8 | 
 9 | # Documentation
10 | 
11 | The official documentation is available as https://oauth2-framework.spomky-labs.com/
12 | 
13 | # Licence
14 | 
15 | This software is release under [MIT licence](LICENSE).
16 | 


--------------------------------------------------------------------------------
/src/Component/TokenEndpoint/phpunit.xml.dist:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <phpunit
 3 |         backupGlobals="false"
 4 |         backupStaticAttributes="false"
 5 |         convertErrorsToExceptions="true"
 6 |         convertNoticesToExceptions="true"
 7 |         convertWarningsToExceptions="true"
 8 |         processIsolation="false"
 9 |         stopOnFailure="false"
10 |         bootstrap="vendor/autoload.php"
11 |         colors="true">
12 |     <testsuites>
13 |         <testsuite name="Test Suite">
14 |             <directory>./Tests/</directory>
15 |         </testsuite>
16 |     </testsuites>
17 | 
18 |     <filter>
19 |         <whitelist>
20 |             <directory suffix=".php">./</directory>
21 |             <exclude>
22 |                 <directory>./vendor</directory>
23 |                 <directory>./Tests</directory>
24 |                 <directory suffix="Test.php">./src</directory>
25 |             </exclude>
26 |         </whitelist>
27 |     </filter>
28 | </phpunit>
29 | 


--------------------------------------------------------------------------------
/src/Component/TokenIntrospectionEndpoint/.github/PULL_REQUEST_TEMPLATE.md:
--------------------------------------------------------------------------------
1 | Please do not send any PR here.
2 | PRs should be send to the main repository at https://github.com/OAuth2-Framework/oauth2-framework
3 | 


--------------------------------------------------------------------------------
/src/Component/TokenIntrospectionEndpoint/README.md:
--------------------------------------------------------------------------------
 1 | Token Introspection Endpoint for the OAuth2 Framework
 2 | =====================================================
 3 | 
 4 | This repository is a sub repository of [OAuth2 and OpenId Connect Framework](https://github.com/oauth2-framework/oauth2-framework) project and is READ ONLY.
 5 | 
 6 | **Please do not submit any Pull Request here.**
 7 | You should go to [the main repository](https://github.com/oauth2-framework/oauth2-framework) instead. 
 8 | 
 9 | # Documentation
10 | 
11 | The official documentation is available as https://oauth2-framework.spomky-labs.com/
12 | 
13 | # Licence
14 | 
15 | This software is release under [MIT licence](LICENSE).
16 | 


--------------------------------------------------------------------------------
/src/Component/TokenIntrospectionEndpoint/TokenTypeHint.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\TokenIntrospectionEndpoint;
 6 | 
 7 | use OAuth2Framework\Component\Core\ResourceServer\ResourceServerId;
 8 | 
 9 | interface TokenTypeHint
10 | {
11 |     public function hint(): string;
12 | 
13 |     public function find(string $token, ?ResourceServerId $resourceServerId): mixed;
14 | 
15 |     public function introspect(mixed $token): array;
16 | }
17 | 


--------------------------------------------------------------------------------
/src/Component/TokenIntrospectionEndpoint/TokenTypeHintManager.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\TokenIntrospectionEndpoint;
 6 | 
 7 | class TokenTypeHintManager
 8 | {
 9 |     /**
10 |      * @var TokenTypeHint[]
11 |      */
12 |     private array $tokenTypeHints = [];
13 | 
14 |     public static function create(): static
15 |     {
16 |         return new self();
17 |     }
18 | 
19 |     /**
20 |      * @return TokenTypeHint[]
21 |      */
22 |     public function getTokenTypeHints(): array
23 |     {
24 |         return $this->tokenTypeHints;
25 |     }
26 | 
27 |     public function add(TokenTypeHint $tokenTypeHint): static
28 |     {
29 |         $this->tokenTypeHints[$tokenTypeHint->hint()] = $tokenTypeHint;
30 | 
31 |         return $this;
32 |     }
33 | }
34 | 


--------------------------------------------------------------------------------
/src/Component/TokenIntrospectionEndpoint/phpunit.xml.dist:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <phpunit
 3 |         backupGlobals="false"
 4 |         backupStaticAttributes="false"
 5 |         convertErrorsToExceptions="true"
 6 |         convertNoticesToExceptions="true"
 7 |         convertWarningsToExceptions="true"
 8 |         processIsolation="false"
 9 |         stopOnFailure="false"
10 |         bootstrap="vendor/autoload.php"
11 |         colors="true">
12 |     <testsuites>
13 |         <testsuite name="Test Suite">
14 |             <directory>./Tests/</directory>
15 |         </testsuite>
16 |     </testsuites>
17 | 
18 |     <filter>
19 |         <whitelist>
20 |             <directory suffix=".php">./</directory>
21 |             <exclude>
22 |                 <directory>./vendor</directory>
23 |                 <directory>./Tests</directory>
24 |                 <directory suffix="Test.php">./src</directory>
25 |             </exclude>
26 |         </whitelist>
27 |     </filter>
28 | </phpunit>
29 | 


--------------------------------------------------------------------------------
/src/Component/TokenRevocationEndpoint/.github/PULL_REQUEST_TEMPLATE.md:
--------------------------------------------------------------------------------
1 | Please do not send any PR here.
2 | PRs should be send to the main repository at https://github.com/OAuth2-Framework/oauth2-framework
3 | 


--------------------------------------------------------------------------------
/src/Component/TokenRevocationEndpoint/README.md:
--------------------------------------------------------------------------------
 1 | Token Revocation Endpoint for the OAuth2 Framework
 2 | ==================================================
 3 | 
 4 | This repository is a sub repository of [OAuth2 and OpenId Connect Framework](https://github.com/oauth2-framework/oauth2-framework) project and is READ ONLY.
 5 | 
 6 | **Please do not submit any Pull Request here.**
 7 | You should go to [the main repository](https://github.com/oauth2-framework/oauth2-framework) instead. 
 8 | 
 9 | # Documentation
10 | 
11 | The official documentation is available as https://oauth2-framework.spomky-labs.com/
12 | 
13 | # Licence
14 | 
15 | This software is release under [MIT licence](LICENSE).
16 | 


--------------------------------------------------------------------------------
/src/Component/TokenRevocationEndpoint/TokenRevocationPostEndpoint.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\TokenRevocationEndpoint;
 6 | 
 7 | use OAuth2Framework\Component\Core\Util\RequestBodyParser;
 8 | use Psr\Http\Message\ServerRequestInterface;
 9 | 
10 | final class TokenRevocationPostEndpoint extends TokenRevocationEndpoint
11 | {
12 |     protected function getRequestParameters(ServerRequestInterface $request): array
13 |     {
14 |         $parameters = RequestBodyParser::parseFormUrlEncoded($request);
15 | 
16 |         return array_filter([
17 |             'token' => $parameters->get('token'),
18 |             'token_type_hint' => $parameters->get('token_type_hint'),
19 |         ], static function (null|string $item): bool {
20 |             return $item !== null;
21 |         });
22 |     }
23 | }
24 | 


--------------------------------------------------------------------------------
/src/Component/TokenRevocationEndpoint/TokenTypeHint.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\TokenRevocationEndpoint;
 6 | 
 7 | interface TokenTypeHint
 8 | {
 9 |     public function hint(): string;
10 | 
11 |     public function find(string $token): mixed;
12 | 
13 |     public function revoke(mixed $token): void;
14 | }
15 | 


--------------------------------------------------------------------------------
/src/Component/TokenRevocationEndpoint/TokenTypeHintManager.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\TokenRevocationEndpoint;
 6 | 
 7 | class TokenTypeHintManager
 8 | {
 9 |     /**
10 |      * @var TokenTypeHint[]
11 |      */
12 |     private array $tokenTypeHints = [];
13 | 
14 |     public static function create(): static
15 |     {
16 |         return new self();
17 |     }
18 | 
19 |     /**
20 |      * @return TokenTypeHint[]
21 |      */
22 |     public function getTokenTypeHints(): array
23 |     {
24 |         return $this->tokenTypeHints;
25 |     }
26 | 
27 |     public function add(TokenTypeHint $tokenTypeHint): static
28 |     {
29 |         $this->tokenTypeHints[$tokenTypeHint->hint()] = $tokenTypeHint;
30 | 
31 |         return $this;
32 |     }
33 | }
34 | 


--------------------------------------------------------------------------------
/src/Component/TokenRevocationEndpoint/phpunit.xml.dist:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <phpunit
 3 |         backupGlobals="false"
 4 |         backupStaticAttributes="false"
 5 |         convertErrorsToExceptions="true"
 6 |         convertNoticesToExceptions="true"
 7 |         convertWarningsToExceptions="true"
 8 |         processIsolation="false"
 9 |         stopOnFailure="false"
10 |         bootstrap="vendor/autoload.php"
11 |         colors="true">
12 |     <testsuites>
13 |         <testsuite name="Test Suite">
14 |             <directory>./Tests/</directory>
15 |         </testsuite>
16 |     </testsuites>
17 | 
18 |     <filter>
19 |         <whitelist>
20 |             <directory suffix=".php">./</directory>
21 |             <exclude>
22 |                 <directory>./vendor</directory>
23 |                 <directory>./Tests</directory>
24 |                 <directory suffix="Test.php">./src</directory>
25 |             </exclude>
26 |         </whitelist>
27 |     </filter>
28 | </phpunit>
29 | 


--------------------------------------------------------------------------------
/src/Component/WebFingerEndpoint/.github/PULL_REQUEST_TEMPLATE.md:
--------------------------------------------------------------------------------
1 | Please do not send any PR here.
2 | PRs should be send to the main repository at https://github.com/OAuth2-Framework/oauth2-framework
3 | 


--------------------------------------------------------------------------------
/src/Component/WebFingerEndpoint/IdentifierResolver/Identifier.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\WebFingerEndpoint\IdentifierResolver;
 6 | 
 7 | final class Identifier
 8 | {
 9 |     public function __construct(
10 |         private readonly string $id,
11 |         private readonly string $domain,
12 |         private readonly ?int $port
13 |     ) {
14 |     }
15 | 
16 |     public static function create(string $id, string $domain, ?int $port): static
17 |     {
18 |         return new self($id, $domain, $port);
19 |     }
20 | 
21 |     public function getId(): string
22 |     {
23 |         return $this->id;
24 |     }
25 | 
26 |     public function getDomain(): string
27 |     {
28 |         return $this->domain;
29 |     }
30 | 
31 |     public function getPort(): ?int
32 |     {
33 |         return $this->port;
34 |     }
35 | }
36 | 


--------------------------------------------------------------------------------
/src/Component/WebFingerEndpoint/IdentifierResolver/IdentifierResolver.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\WebFingerEndpoint\IdentifierResolver;
 6 | 
 7 | interface IdentifierResolver
 8 | {
 9 |     public function supports(string $resource): bool;
10 | 
11 |     public function resolve(string $resource): Identifier;
12 | }
13 | 


--------------------------------------------------------------------------------
/src/Component/WebFingerEndpoint/IdentifierResolver/IdentifierResolverManager.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\WebFingerEndpoint\IdentifierResolver;
 6 | 
 7 | use InvalidArgumentException;
 8 | 
 9 | final class IdentifierResolverManager
10 | {
11 |     /**
12 |      * @var IdentifierResolver[]
13 |      */
14 |     private array $resolvers = [];
15 | 
16 |     public static function create(): static
17 |     {
18 |         return new self();
19 |     }
20 | 
21 |     public function add(IdentifierResolver $resolver): static
22 |     {
23 |         $this->resolvers[] = $resolver;
24 | 
25 |         return $this;
26 |     }
27 | 
28 |     public function resolve(string $resource): Identifier
29 |     {
30 |         foreach ($this->resolvers as $resolver) {
31 |             if ($resolver->supports($resource)) {
32 |                 return $resolver->resolve($resource);
33 |             }
34 |         }
35 | 
36 |         throw new InvalidArgumentException('Resource not supported.');
37 |     }
38 | }
39 | 


--------------------------------------------------------------------------------
/src/Component/WebFingerEndpoint/IdentifierResolver/UriResolver.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\WebFingerEndpoint\IdentifierResolver;
 6 | 
 7 | use League\Uri\Components\UserInfo;
 8 | use League\Uri\Uri;
 9 | 
10 | final class UriResolver implements IdentifierResolver
11 | {
12 |     public static function create(): static
13 |     {
14 |         return new self();
15 |     }
16 | 
17 |     public function supports(string $resource): bool
18 |     {
19 |         $uri = Uri::createFromString($resource);
20 |         $userInfo = UserInfo::createFromUri($uri);
21 | 
22 |         return $uri->getScheme() === 'https' && $uri->getHost() !== null && $userInfo->getUser() !== null;
23 |     }
24 | 
25 |     public function resolve(string $resource): Identifier
26 |     {
27 |         $uri = Uri::createFromString($resource);
28 |         $userInfo = UserInfo::createFromUri($uri);
29 | 
30 |         return Identifier::create($userInfo->getUser(), $uri->getHost(), $uri->getPort());
31 |     }
32 | }
33 | 


--------------------------------------------------------------------------------
/src/Component/WebFingerEndpoint/README.md:
--------------------------------------------------------------------------------
 1 | WebFinger Endpoint for the OAuth2 Framework
 2 | ===========================================
 3 | 
 4 | This repository is a sub repository of [OAuth2 and OpenId Connect Framework](https://github.com/oauth2-framework/oauth2-framework) project and is READ ONLY.
 5 | 
 6 | **Please do not submit any Pull Request here.**
 7 | You should go to [the main repository](https://github.com/oauth2-framework/oauth2-framework) instead. 
 8 | 
 9 | # Documentation
10 | 
11 | The official documentation is available as https://oauth2-framework.spomky-labs.com/
12 | 
13 | # Licence
14 | 
15 | This software is release under [MIT licence](LICENSE).
16 | 


--------------------------------------------------------------------------------
/src/Component/WebFingerEndpoint/ResourceRepository.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Component\WebFingerEndpoint;
 6 | 
 7 | use OAuth2Framework\Component\WebFingerEndpoint\IdentifierResolver\Identifier;
 8 | 
 9 | interface ResourceRepository
10 | {
11 |     public function find(string $resource, Identifier $identifier): ?ResourceDescriptor;
12 | }
13 | 


--------------------------------------------------------------------------------
/src/Component/WebFingerEndpoint/phpunit.xml.dist:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <phpunit
 3 |         backupGlobals="false"
 4 |         backupStaticAttributes="false"
 5 |         convertErrorsToExceptions="true"
 6 |         convertNoticesToExceptions="true"
 7 |         convertWarningsToExceptions="true"
 8 |         processIsolation="false"
 9 |         stopOnFailure="false"
10 |         bootstrap="vendor/autoload.php"
11 |         colors="true">
12 |     <testsuites>
13 |         <testsuite name="Test Suite">
14 |             <directory>./Tests/</directory>
15 |         </testsuite>
16 |     </testsuites>
17 | 
18 |     <filter>
19 |         <whitelist>
20 |             <directory suffix=".php">./</directory>
21 |             <exclude>
22 |                 <directory>./vendor</directory>
23 |                 <directory>./Tests</directory>
24 |                 <directory suffix="Test.php">./src</directory>
25 |             </exclude>
26 |         </whitelist>
27 |     </filter>
28 | </phpunit>
29 | 


--------------------------------------------------------------------------------
/src/SecurityBundle/.github/PULL_REQUEST_TEMPLATE.md:
--------------------------------------------------------------------------------
1 | Please do not send any PR here.
2 | PRs should be send to the main repository at https://github.com/OAuth2-Framework/oauth2-framework
3 | 


--------------------------------------------------------------------------------
/src/SecurityBundle/Annotation/Checker/Checker.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\SecurityBundle\Annotation\Checker;
 6 | 
 7 | use OAuth2Framework\SecurityBundle\Annotation\OAuth2;
 8 | use OAuth2Framework\SecurityBundle\Security\Authentication\OAuth2Token;
 9 | 
10 | interface Checker
11 | {
12 |     public function check(OAuth2Token $token, OAuth2 $configuration): void;
13 | }
14 | 


--------------------------------------------------------------------------------
/src/SecurityBundle/Annotation/Checker/ClientIdChecker.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\SecurityBundle\Annotation\Checker;
 6 | 
 7 | use Exception;
 8 | use OAuth2Framework\SecurityBundle\Annotation\OAuth2;
 9 | use OAuth2Framework\SecurityBundle\Security\Authentication\OAuth2Token;
10 | 
11 | final class ClientIdChecker implements Checker
12 | {
13 |     public function check(OAuth2Token $token, OAuth2 $configuration): void
14 |     {
15 |         if ($configuration->getClientId() === null) {
16 |             return;
17 |         }
18 | 
19 |         if ($configuration->getClientId() !== $token->getClientId()) {
20 |             throw new Exception('Client not authorized.');
21 |         }
22 |     }
23 | }
24 | 


--------------------------------------------------------------------------------
/src/SecurityBundle/Annotation/Checker/ResourceOwnerIdChecker.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\SecurityBundle\Annotation\Checker;
 6 | 
 7 | use Exception;
 8 | use OAuth2Framework\SecurityBundle\Annotation\OAuth2;
 9 | use OAuth2Framework\SecurityBundle\Security\Authentication\OAuth2Token;
10 | 
11 | final class ResourceOwnerIdChecker implements Checker
12 | {
13 |     public function check(OAuth2Token $token, OAuth2 $configuration): void
14 |     {
15 |         if ($configuration->getResourceOwnerId() === null) {
16 |             return;
17 |         }
18 | 
19 |         if ($configuration->getResourceOwnerId() !== $token->getResourceOwnerId()) {
20 |             throw new Exception('Resource owner not authorized.');
21 |         }
22 |     }
23 | }
24 | 


--------------------------------------------------------------------------------
/src/SecurityBundle/Annotation/Checker/TokenTypeChecker.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\SecurityBundle\Annotation\Checker;
 6 | 
 7 | use Exception;
 8 | use OAuth2Framework\SecurityBundle\Annotation\OAuth2;
 9 | use OAuth2Framework\SecurityBundle\Security\Authentication\OAuth2Token;
10 | 
11 | final class TokenTypeChecker implements Checker
12 | {
13 |     public function check(OAuth2Token $token, OAuth2 $configuration): void
14 |     {
15 |         if ($configuration->getTokenType() === null) {
16 |             return;
17 |         }
18 | 
19 |         if ($configuration->getTokenType() !== $token->getTokenType()) {
20 |             throw new Exception(sprintf(
21 |                 'Token type "%s" not allowed. Please use "%s"',
22 |                 $token->getTokenType(),
23 |                 $configuration->getTokenType()
24 |             ));
25 |         }
26 |     }
27 | }
28 | 


--------------------------------------------------------------------------------
/src/SecurityBundle/DependencyInjection/Compiler/TokenTypeCompilerPass.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\SecurityBundle\DependencyInjection\Compiler;
 6 | 
 7 | use Symfony\Component\DependencyInjection\Compiler\CompilerPassInterface;
 8 | use Symfony\Component\DependencyInjection\ContainerBuilder;
 9 | use Symfony\Component\DependencyInjection\Reference;
10 | 
11 | final class TokenTypeCompilerPass implements CompilerPassInterface
12 | {
13 |     public function process(ContainerBuilder $container): void
14 |     {
15 |         if (! $container->hasDefinition('oauth2_security.token_type_manager')) {
16 |             return;
17 |         }
18 | 
19 |         $definition = $container->getDefinition('oauth2_security.token_type_manager');
20 |         $taggedServices = $container->findTaggedServiceIds('oauth2_security_token_type');
21 |         foreach ($taggedServices as $id => $tags) {
22 |             $definition->addMethodCall('add', [new Reference($id)]);
23 |         }
24 |     }
25 | }
26 | 


--------------------------------------------------------------------------------
/src/SecurityBundle/DependencyInjection/OAuth2FrameworkSecurityExtension.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\SecurityBundle\DependencyInjection;
 6 | 
 7 | use OAuth2Framework\SecurityBundle\Annotation\Checker\Checker;
 8 | use Symfony\Component\Config\FileLocator;
 9 | use Symfony\Component\DependencyInjection\ContainerBuilder;
10 | use Symfony\Component\DependencyInjection\Loader\PhpFileLoader;
11 | use Symfony\Component\HttpKernel\DependencyInjection\Extension;
12 | 
13 | final class OAuth2FrameworkSecurityExtension extends Extension
14 | {
15 |     public function load(array $configs, ContainerBuilder $container): void
16 |     {
17 |         $container->registerForAutoconfiguration(Checker::class)->addTag('oauth2_security_annotation_checker');
18 | 
19 |         $loader = new PhpFileLoader($container, new FileLocator(__DIR__ . '/../Resources/config/'));
20 |         $loader->load('security.php');
21 |     }
22 | }
23 | 


--------------------------------------------------------------------------------
/src/SecurityBundle/Security/Authentication/AccessTokenBadge.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\SecurityBundle\Security\Authentication;
 6 | 
 7 | use OAuth2Framework\Component\Core\AccessToken\AccessToken;
 8 | use Symfony\Component\Security\Http\Authenticator\Passport\Credentials\CredentialsInterface;
 9 | 
10 | final class AccessTokenBadge implements CredentialsInterface
11 | {
12 |     public function __construct(
13 |         private readonly AccessToken $accessToken
14 |     ) {
15 |     }
16 | 
17 |     public static function create(AccessToken $accessToken): static
18 |     {
19 |         return new self($accessToken);
20 |     }
21 | 
22 |     public function isResolved(): bool
23 |     {
24 |         return ! $this->accessToken->isRevoked() && ! $this->accessToken->hasExpired();
25 |     }
26 | 
27 |     public function getAccessToken(): AccessToken
28 |     {
29 |         return $this->accessToken;
30 |     }
31 | }
32 | 


--------------------------------------------------------------------------------
/src/SecurityBundle/Security/Authentication/ResourceOwner.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\SecurityBundle\Security\Authentication;
 6 | 
 7 | use Symfony\Component\Security\Core\User\UserInterface;
 8 | 
 9 | final class ResourceOwner implements UserInterface
10 | {
11 |     public function __construct(
12 |         private readonly string $id
13 |     ) {
14 |     }
15 | 
16 |     public function getRoles(): array
17 |     {
18 |         return [];
19 |     }
20 | 
21 |     public function getPassword(): ?string
22 |     {
23 |         return null;
24 |     }
25 | 
26 |     public function getSalt(): ?string
27 |     {
28 |         return null;
29 |     }
30 | 
31 |     public function eraseCredentials(): void
32 |     {
33 |     }
34 | 
35 |     public function getUserIdentifier(): string
36 |     {
37 |         return $this->id;
38 |     }
39 | 
40 |     public function getUsername(): string
41 |     {
42 |         return $this->id;
43 |     }
44 | }
45 | 


--------------------------------------------------------------------------------
/src/ServerBundle/.github/PULL_REQUEST_TEMPLATE.md:
--------------------------------------------------------------------------------
1 | Please do not send any PR here.
2 | PRs should be send to the main repository at https://github.com/OAuth2-Framework/oauth2-framework
3 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Component/ClientRule/ClientRuleCompilerPass.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\ServerBundle\Component\ClientRule;
 6 | 
 7 | use OAuth2Framework\Component\ClientRule\RuleManager;
 8 | use Symfony\Component\DependencyInjection\Compiler\CompilerPassInterface;
 9 | use Symfony\Component\DependencyInjection\ContainerBuilder;
10 | use Symfony\Component\DependencyInjection\Reference;
11 | 
12 | class ClientRuleCompilerPass implements CompilerPassInterface
13 | {
14 |     public function process(ContainerBuilder $container): void
15 |     {
16 |         if (! $container->hasDefinition(RuleManager::class)) {
17 |             return;
18 |         }
19 | 
20 |         $client_manager = $container->getDefinition(RuleManager::class);
21 | 
22 |         $taggedServices = $container->findTaggedServiceIds('oauth2_server_client_rule');
23 |         foreach ($taggedServices as $id => $attributes) {
24 |             $client_manager->addMethodCall('add', [new Reference($id)]);
25 |         }
26 |     }
27 | }
28 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Component/Component.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\ServerBundle\Component;
 6 | 
 7 | use Symfony\Component\Config\Definition\Builder\ArrayNodeDefinition;
 8 | use Symfony\Component\DependencyInjection\ContainerBuilder;
 9 | 
10 | interface Component
11 | {
12 |     public function name(): string;
13 | 
14 |     public function load(array $configs, ContainerBuilder $container): void;
15 | 
16 |     public function build(ContainerBuilder $container): void;
17 | 
18 |     public function getNodeDefinition(ArrayNodeDefinition $node, ArrayNodeDefinition $rootNode): void;
19 | 
20 |     public function prepend(ContainerBuilder $container, array $config): array;
21 | }
22 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Component/Endpoint/Authorization/Compiler/TemplatePathCompilerPass.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\ServerBundle\Component\Endpoint\Authorization\Compiler;
 6 | 
 7 | use Symfony\Component\DependencyInjection\Compiler\CompilerPassInterface;
 8 | use Symfony\Component\DependencyInjection\ContainerBuilder;
 9 | 
10 | class TemplatePathCompilerPass implements CompilerPassInterface
11 | {
12 |     public function process(ContainerBuilder $container): void
13 |     {
14 |         if (! $container->hasDefinition('twig.loader.filesystem')) {
15 |             return;
16 |         }
17 | 
18 |         $loader = $container->getDefinition('twig.loader.filesystem');
19 |         $loader->addMethodCall('addPath', [__DIR__ . '/../../../../Resources/views', 'OAuth2FrameworkServerBundle']);
20 |     }
21 | }
22 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Component/Endpoint/JwksUri/JwksUriEndpointRouteCompilerPass.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\ServerBundle\Component\Endpoint\JwksUri;
 6 | 
 7 | use OAuth2Framework\ServerBundle\Service\MetadataBuilder;
 8 | use Symfony\Component\DependencyInjection\Compiler\CompilerPassInterface;
 9 | use Symfony\Component\DependencyInjection\ContainerBuilder;
10 | 
11 | class JwksUriEndpointRouteCompilerPass implements CompilerPassInterface
12 | {
13 |     public function process(ContainerBuilder $container): void
14 |     {
15 |         if (! $container->hasDefinition(MetadataBuilder::class) || ! $container->has(
16 |             'jose.key_set.oauth2_server.endpoint.jwks_uri'
17 |         )) {
18 |             return;
19 |         }
20 | 
21 |         $routeName = 'jwkset_jose.controller.oauth2_server.endpoint.jwks_uri';
22 |         $definition = $container->getDefinition(MetadataBuilder::class);
23 |         $definition->addMethodCall('addRoute', ['jwks_uri', $routeName]);
24 |     }
25 | }
26 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Component/Endpoint/Metadata/Compiler/CommonMetadataCompilerPass.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\ServerBundle\Component\Endpoint\Metadata\Compiler;
 6 | 
 7 | use OAuth2Framework\ServerBundle\Service\MetadataBuilder;
 8 | use Symfony\Component\DependencyInjection\Compiler\CompilerPassInterface;
 9 | use Symfony\Component\DependencyInjection\ContainerBuilder;
10 | 
11 | class CommonMetadataCompilerPass implements CompilerPassInterface
12 | {
13 |     public function process(ContainerBuilder $container): void
14 |     {
15 |         if (! $container->hasDefinition(MetadataBuilder::class)) {
16 |             return;
17 |         }
18 | 
19 |         $metadata = $container->getDefinition(MetadataBuilder::class);
20 |         $issuer = $container->getParameter('oauth2_server.server_uri');
21 |         $metadata->addMethodCall('addKeyValuePair', ['issuer', $issuer]);
22 |     }
23 | }
24 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Component/Endpoint/Metadata/Compiler/CustomRoutesCompilerPass.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\ServerBundle\Component\Endpoint\Metadata\Compiler;
 6 | 
 7 | use OAuth2Framework\ServerBundle\Service\MetadataBuilder;
 8 | use Symfony\Component\DependencyInjection\Compiler\CompilerPassInterface;
 9 | use Symfony\Component\DependencyInjection\ContainerBuilder;
10 | 
11 | class CustomRoutesCompilerPass implements CompilerPassInterface
12 | {
13 |     public function process(ContainerBuilder $container): void
14 |     {
15 |         if (! $container->hasDefinition(MetadataBuilder::class)) {
16 |             return;
17 |         }
18 | 
19 |         $definition = $container->getDefinition(MetadataBuilder::class);
20 |         $customRoutes = $container->getParameter('oauth2_server.endpoint.metadata.custom_routes');
21 |         foreach ($customRoutes as $key => $parameters) {
22 |             $definition->addMethodCall('addRoute', [$key, $parameters['route_name'], $parameters['route_parameters']]);
23 |         }
24 |     }
25 | }
26 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Component/Endpoint/Metadata/Compiler/CustomValuesCompilerPass.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\ServerBundle\Component\Endpoint\Metadata\Compiler;
 6 | 
 7 | use OAuth2Framework\ServerBundle\Service\MetadataBuilder;
 8 | use Symfony\Component\DependencyInjection\Compiler\CompilerPassInterface;
 9 | use Symfony\Component\DependencyInjection\ContainerBuilder;
10 | 
11 | class CustomValuesCompilerPass implements CompilerPassInterface
12 | {
13 |     public function process(ContainerBuilder $container): void
14 |     {
15 |         if (! $container->hasDefinition(MetadataBuilder::class)) {
16 |             return;
17 |         }
18 | 
19 |         $definition = $container->getDefinition(MetadataBuilder::class);
20 |         $customValues = $container->getParameter('oauth2_server.endpoint.metadata.custom_values');
21 |         foreach ($customValues as $key => $parameters) {
22 |             $definition->addMethodCall('addKeyValuePair', [$key, $parameters]);
23 |         }
24 |     }
25 | }
26 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Component/OpenIdConnect/Compiler/ClaimCompilerPass.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\ServerBundle\Component\OpenIdConnect\Compiler;
 6 | 
 7 | use OAuth2Framework\Component\OpenIdConnect\UserInfo\Claim\ClaimManager;
 8 | use Symfony\Component\DependencyInjection\Compiler\CompilerPassInterface;
 9 | use Symfony\Component\DependencyInjection\ContainerBuilder;
10 | use Symfony\Component\DependencyInjection\Reference;
11 | 
12 | class ClaimCompilerPass implements CompilerPassInterface
13 | {
14 |     public function process(ContainerBuilder $container): void
15 |     {
16 |         if (! $container->hasDefinition(ClaimManager::class)) {
17 |             return;
18 |         }
19 | 
20 |         $definition = $container->getDefinition(ClaimManager::class);
21 | 
22 |         $taggedServices = $container->findTaggedServiceIds('oauth2_server_claim');
23 |         foreach ($taggedServices as $id => $attributes) {
24 |             $definition->addMethodCall('add', [new Reference($id)]);
25 |         }
26 |     }
27 | }
28 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Component/OpenIdConnect/Compiler/ClaimSourceCompilerPass.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\ServerBundle\Component\OpenIdConnect\Compiler;
 6 | 
 7 | use OAuth2Framework\Component\OpenIdConnect\UserInfo\Claim\ClaimSourceManager;
 8 | use Symfony\Component\DependencyInjection\Compiler\CompilerPassInterface;
 9 | use Symfony\Component\DependencyInjection\ContainerBuilder;
10 | use Symfony\Component\DependencyInjection\Reference;
11 | 
12 | class ClaimSourceCompilerPass implements CompilerPassInterface
13 | {
14 |     public function process(ContainerBuilder $container): void
15 |     {
16 |         if (! $container->hasDefinition(ClaimSourceManager::class)) {
17 |             return;
18 |         }
19 | 
20 |         $definition = $container->getDefinition(ClaimSourceManager::class);
21 | 
22 |         $taggedServices = $container->findTaggedServiceIds('oauth2_server_claim_source');
23 |         foreach ($taggedServices as $id => $attributes) {
24 |             $definition->addMethodCall('add', [new Reference($id)]);
25 |         }
26 |     }
27 | }
28 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Component/OpenIdConnect/Compiler/UserInfoPairwiseSubjectCompilerPass.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\ServerBundle\Component\OpenIdConnect\Compiler;
 6 | 
 7 | use OAuth2Framework\Component\OpenIdConnect\UserInfo\UserInfo;
 8 | use Symfony\Component\DependencyInjection\Compiler\CompilerPassInterface;
 9 | use Symfony\Component\DependencyInjection\ContainerBuilder;
10 | use Symfony\Component\DependencyInjection\Reference;
11 | 
12 | class UserInfoPairwiseSubjectCompilerPass implements CompilerPassInterface
13 | {
14 |     public function process(ContainerBuilder $container): void
15 |     {
16 |         if (! $container->hasAlias('oauth2_server.openid_connect.pairwise.service')) {
17 |             return;
18 |         }
19 | 
20 |         $definition = $container->getDefinition(UserInfo::class);
21 |         $definition->addMethodCall(
22 |             'enablePairwiseSubject',
23 |             [new Reference('oauth2_server.openid_connect.pairwise.service')]
24 |         );
25 |     }
26 | }
27 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Component/Scope/Compiler/ScopeMetadataCompilerPass.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\ServerBundle\Component\Scope\Compiler;
 6 | 
 7 | use OAuth2Framework\Component\Scope\ScopeRepository;
 8 | use OAuth2Framework\ServerBundle\Service\MetadataBuilder;
 9 | use Symfony\Component\DependencyInjection\Compiler\CompilerPassInterface;
10 | use Symfony\Component\DependencyInjection\ContainerBuilder;
11 | use Symfony\Component\DependencyInjection\Reference;
12 | 
13 | class ScopeMetadataCompilerPass implements CompilerPassInterface
14 | {
15 |     public function process(ContainerBuilder $container): void
16 |     {
17 |         if (! $container->hasDefinition(MetadataBuilder::class) || ! $container->hasAlias(ScopeRepository::class)) {
18 |             return;
19 |         }
20 |         $metadata = $container->getDefinition(MetadataBuilder::class);
21 |         $metadata->addMethodCall('setScopeRepository', [new Reference(ScopeRepository::class)]);
22 |     }
23 | }
24 | 


--------------------------------------------------------------------------------
/src/ServerBundle/DependencyInjection/Compiler/HttpClientCompilerPass.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\ServerBundle\DependencyInjection\Compiler;
 6 | 
 7 | use Psr\Http\Client\ClientInterface;
 8 | use Symfony\Component\DependencyInjection\Compiler\CompilerPassInterface;
 9 | use Symfony\Component\DependencyInjection\ContainerBuilder;
10 | use Symfony\Component\DependencyInjection\Definition;
11 | use Symfony\Component\HttpClient\Psr18Client;
12 | 
13 | class HttpClientCompilerPass implements CompilerPassInterface
14 | {
15 |     public function process(ContainerBuilder $container): void
16 |     {
17 |         if ($container->has(ClientInterface::class)) {
18 |             return;
19 |         }
20 |         if (! $container->has(Psr18Client::class)) {
21 |             $container->setDefinition(Psr18Client::class, new Definition(Psr18Client::class));
22 |         }
23 | 
24 |         $container->setAlias(ClientInterface::class, Psr18Client::class);
25 |     }
26 | }
27 | 


--------------------------------------------------------------------------------
/src/ServerBundle/DependencyInjection/Configuration.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\ServerBundle\DependencyInjection;
 6 | 
 7 | use OAuth2Framework\ServerBundle\Component\Component;
 8 | use Symfony\Component\Config\Definition\Builder\TreeBuilder;
 9 | use Symfony\Component\Config\Definition\ConfigurationInterface;
10 | 
11 | final class Configuration implements ConfigurationInterface
12 | {
13 |     /**
14 |      * @param Component[] $components
15 |      */
16 |     public function __construct(
17 |         private readonly string $alias,
18 |         private readonly array $components
19 |     ) {
20 |     }
21 | 
22 |     public function getConfigTreeBuilder(): TreeBuilder
23 |     {
24 |         $treeBuilder = new TreeBuilder($this->alias);
25 |         $rootNode = $treeBuilder->getRootNode();
26 | 
27 |         foreach ($this->components as $component) {
28 |             $component->getNodeDefinition($rootNode, $rootNode);
29 |         }
30 | 
31 |         return $treeBuilder;
32 |     }
33 | }
34 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/client_authentication/client_assertion_jwt.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | use OAuth2Framework\Component\ClientAuthentication\ClientAssertionJwt;
 6 | use Symfony\Component\DependencyInjection\Loader\Configurator\ContainerConfigurator;
 7 | use function Symfony\Component\DependencyInjection\Loader\Configurator\service;
 8 | 
 9 | return static function (ContainerConfigurator $container): void {
10 |     $container = $container->services()
11 |         ->defaults()
12 |         ->private()
13 |         ->autoconfigure()
14 |     ;
15 | 
16 |     $container->set(ClientAssertionJwt::class)
17 |         ->args([
18 |             service('jose.jws_verifier.client_authentication.client_assertion_jwt'),
19 |             service('jose.header_checker.client_authentication.client_assertion_jwt'),
20 |             service('jose.claim_checker.client_authentication.client_assertion_jwt'),
21 |             '%oauth2_server.client_authentication.client_assertion_jwt.secret_lifetime%',
22 |         ])
23 |     ;
24 | };
25 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/client_authentication/client_secret_basic.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | use OAuth2Framework\Component\ClientAuthentication\ClientSecretBasic;
 6 | use Symfony\Component\DependencyInjection\Loader\Configurator\ContainerConfigurator;
 7 | 
 8 | return static function (ContainerConfigurator $container): void {
 9 |     $container = $container->services()
10 |         ->defaults()
11 |         ->private()
12 |         ->autoconfigure()
13 |     ;
14 | 
15 |     $container->set(ClientSecretBasic::class)
16 |         ->args([
17 |             '%oauth2_server.client_authentication.client_secret_basic.realm%',
18 |             '%oauth2_server.client_authentication.client_secret_basic.secret_lifetime%',
19 |         ])
20 |     ;
21 | };
22 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/client_authentication/client_secret_post.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | use OAuth2Framework\Component\ClientAuthentication\ClientSecretPost;
 6 | use Symfony\Component\DependencyInjection\Loader\Configurator\ContainerConfigurator;
 7 | 
 8 | return static function (ContainerConfigurator $container): void {
 9 |     $container = $container->services()
10 |         ->defaults()
11 |         ->private()
12 |         ->autoconfigure()
13 |     ;
14 | 
15 |     $container->set(ClientSecretPost::class)
16 |         ->args(['%oauth2_server.client_authentication.client_secret_post.secret_lifetime%'])
17 |     ;
18 | };
19 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/client_authentication/none.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | use OAuth2Framework\Component\ClientAuthentication\None;
 6 | use Symfony\Component\DependencyInjection\Loader\Configurator\ContainerConfigurator;
 7 | 
 8 | return static function (ContainerConfigurator $container): void {
 9 |     $container = $container->services()
10 |         ->defaults()
11 |         ->private()
12 |         ->autoconfigure()
13 |     ;
14 | 
15 |     $container->set(None::class);
16 | };
17 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/core/access_token.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | declare(strict_types=1);
4 | 
5 | use Symfony\Component\DependencyInjection\Loader\Configurator\ContainerConfigurator;
6 | 
7 | return static function (ContainerConfigurator $container): void {
8 | };
9 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/core/client.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | declare(strict_types=1);
4 | 
5 | use Symfony\Component\DependencyInjection\Loader\Configurator\ContainerConfigurator;
6 | 
7 | return static function (ContainerConfigurator $container): void {
8 | };
9 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/core/services.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | use OAuth2Framework\ServerBundle\Routing\RouteLoader;
 6 | use Symfony\Component\DependencyInjection\Loader\Configurator\ContainerConfigurator;
 7 | 
 8 | return static function (ContainerConfigurator $container): void {
 9 |     $container = $container->services()
10 |         ->defaults()
11 |         ->private()
12 |     ;
13 | 
14 |     $container->set(RouteLoader::class)
15 |         ->tag('routing.loader')
16 |     ;
17 | };
18 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/doctrine-mapping/AccessToken/AbstractAccessToken.orm.yml:
--------------------------------------------------------------------------------
 1 | OAuth2Framework\Component\Core\AccessToken\AbstractAccessToken:
 2 |     type: mappedSuperclass
 3 |     fields:
 4 |         expiresAt:
 5 |             type: date_immutable
 6 |         resourceOwnerId:
 7 |             type: resource_owner_id
 8 |         clientId:
 9 |             type: client_id
10 |         parameter:
11 |             type: databag
12 |         metadata:
13 |             type: databag
14 |         revoked:
15 |             type: boolean
16 |         resourceServerId:
17 |             type: resource_server_id
18 |             nullable: true
19 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/doctrine-mapping/AuthorizationCodeGrant/AbstractAuthorizationCode.orm.yml:
--------------------------------------------------------------------------------
 1 | OAuth2Framework\Component\AuthorizationCodeGrant\AbstractAuthorizationCode:
 2 |     type: mappedSuperclass
 3 |     fields:
 4 |         queryParameters:
 5 |             type: array
 6 |         redirectUri:
 7 |             type: string
 8 |         used:
 9 |             type: boolean
10 |         expiresAt:
11 |             type: date_immutable
12 |         userAccountId:
13 |             type: user_account_id
14 |         clientId:
15 |             type: client_id
16 |         parameter:
17 |             type: databag
18 |         metadata:
19 |             type: databag
20 |         revoked:
21 |             type: boolean
22 |         resourceServerId:
23 |             type: resource_server_id
24 |             nullable: true
25 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/doctrine-mapping/Client/AbstractClient.orm.yml:
--------------------------------------------------------------------------------
 1 | OAuth2Framework\Component\Core\Client\AbstractClient:
 2 |     type: mappedSuperclass
 3 |     fields:
 4 |         ownerId:
 5 |             type: resource_owner_id
 6 |             nullable: true
 7 |         parameter:
 8 |             type: databag
 9 |         deleted:
10 |             type: boolean
11 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/doctrine-mapping/ClientRegistrationEndpoint/AbstractAccessToken.orm.yml:
--------------------------------------------------------------------------------
 1 | OAuth2Framework\Component\ClientRegistrationEndpoint\AbstractInitialAccessToken:
 2 |     type: mappedSuperclass
 3 |     fields:
 4 |         expiresAt:
 5 |             type: date_immutable
 6 |         userAccountId:
 7 |             type: user_account_id
 8 |         revoked:
 9 |             type: boolean
10 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/doctrine-mapping/RefreshTokenGrant/AbstractAccessToken.orm.yml:
--------------------------------------------------------------------------------
 1 | OAuth2Framework\Component\RefreshTokenGrant\AbstractRefreshToken:
 2 |     type: mappedSuperclass
 3 |     fields:
 4 |         accessTokenIds:
 5 |             type: array
 6 |         expiresAt:
 7 |             type: date_immutable
 8 |         resourceOwnerId:
 9 |             type: resource_owner_id
10 |         clientId:
11 |             type: client_id
12 |         parameter:
13 |             type: databag
14 |         metadata:
15 |             type: databag
16 |         revoked:
17 |             type: boolean
18 |         resourceServerId:
19 |             type: resource_server_id
20 |             nullable: true
21 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/endpoint/authorization/form_post_response_mode.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | use OAuth2Framework\Component\AuthorizationEndpoint\ResponseMode\FormPostResponseMode;
 6 | use OAuth2Framework\ServerBundle\Service\TwigFormPostResponseRenderer;
 7 | use Symfony\Component\DependencyInjection\Loader\Configurator\ContainerConfigurator;
 8 | use function Symfony\Component\DependencyInjection\Loader\Configurator\service;
 9 | 
10 | return static function (ContainerConfigurator $container): void {
11 |     $container = $container->services()
12 |         ->defaults()
13 |         ->private()
14 |         ->autoconfigure()
15 |     ;
16 | 
17 |     $container->set(TwigFormPostResponseRenderer::class)
18 |         ->args([service('twig'), '%oauth2_server.endpoint.authorization.response_mode.form_post.template%'])
19 |     ;
20 | 
21 |     $container->set(FormPostResponseMode::class)
22 |         ->args([service(TwigFormPostResponseRenderer::class)])
23 |     ;
24 | };
25 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/endpoint/authorization/sector_identifier_uri.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | use OAuth2Framework\Component\AuthorizationEndpoint\Rule\SectorIdentifierUriRule;
 6 | use Symfony\Component\DependencyInjection\Loader\Configurator\ContainerConfigurator;
 7 | use function Symfony\Component\DependencyInjection\Loader\Configurator\service;
 8 | 
 9 | return static function (ContainerConfigurator $container): void {
10 |     $container = $container->services()
11 |         ->defaults()
12 |         ->private()
13 |         ->autoconfigure()
14 |     ;
15 | 
16 |     $container->set(SectorIdentifierUriRule::class)
17 |         ->args([service('oauth2_server.http_client')])
18 |     ;
19 | };
20 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/grant/client_credentials.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | use OAuth2Framework\Component\ClientCredentialsGrant\ClientCredentialsGrantType;
 6 | use Symfony\Component\DependencyInjection\Loader\Configurator\ContainerConfigurator;
 7 | 
 8 | return static function (ContainerConfigurator $container): void {
 9 |     $container = $container->services()
10 |         ->defaults()
11 |         ->private()
12 |         ->autoconfigure()
13 |     ;
14 | 
15 |     $container->set(ClientCredentialsGrantType::class);
16 | };
17 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/grant/grant.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | use OAuth2Framework\Component\AuthorizationEndpoint\ResponseType\ResponseTypeManager;
 6 | use OAuth2Framework\Component\TokenEndpoint\GrantTypeManager;
 7 | use OAuth2Framework\Component\TokenEndpoint\Rule\GrantTypesRule;
 8 | use Symfony\Component\DependencyInjection\Loader\Configurator\ContainerConfigurator;
 9 | 
10 | return static function (ContainerConfigurator $container): void {
11 |     $container = $container->services()
12 |         ->defaults()
13 |         ->private()
14 |         ->autoconfigure()
15 |         ->autowire()
16 |     ;
17 | 
18 |     $container->set(GrantTypeManager::class);
19 |     $container->set(ResponseTypeManager::class);
20 |     $container->set(GrantTypesRule::class);
21 | };
22 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/grant/implicit.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | use OAuth2Framework\Component\Core\AccessToken\AccessTokenRepository;
 6 | use OAuth2Framework\Component\Core\TokenType\TokenTypeGuesser;
 7 | use OAuth2Framework\Component\ImplicitGrant\ImplicitGrantType;
 8 | use OAuth2Framework\Component\ImplicitGrant\TokenResponseType;
 9 | use Symfony\Component\DependencyInjection\Loader\Configurator\ContainerConfigurator;
10 | use function Symfony\Component\DependencyInjection\Loader\Configurator\service;
11 | 
12 | return static function (ContainerConfigurator $container): void {
13 |     $container = $container->services()
14 |         ->defaults()
15 |         ->private()
16 |         ->autoconfigure()
17 |     ;
18 | 
19 |     $container->set(ImplicitGrantType::class);
20 | 
21 |     $container->set(TokenResponseType::class)
22 |         ->args([
23 |             service(AccessTokenRepository::class),
24 |             '%oauth2_server.access_token_lifetime%',
25 |             service(TokenTypeGuesser::class),
26 |         ])
27 |     ;
28 | };
29 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/grant/none.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | use OAuth2Framework\Component\NoneGrant\NoneResponseType;
 6 | use Symfony\Component\DependencyInjection\Loader\Configurator\ContainerConfigurator;
 7 | use function Symfony\Component\DependencyInjection\Loader\Configurator\service;
 8 | 
 9 | return static function (ContainerConfigurator $container): void {
10 |     $container = $container->services()
11 |         ->defaults()
12 |         ->private()
13 |         ->autoconfigure()
14 |     ;
15 | 
16 |     $container->set(NoneResponseType::class)
17 |         ->args([service('oauth2_server.grant.none.authorization_storage')])
18 |     ;
19 | };
20 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/openid_connect/id_token_hint.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | use OAuth2Framework\Component\OpenIdConnect\IdTokenLoader;
 6 | use Symfony\Component\DependencyInjection\Loader\Configurator\ContainerConfigurator;
 7 | use function Symfony\Component\DependencyInjection\Loader\Configurator\service;
 8 | 
 9 | return static function (ContainerConfigurator $container): void {
10 |     $container = $container->services()
11 |         ->defaults()
12 |         ->private()
13 |         ->autoconfigure()
14 |     ;
15 | 
16 |     $container->set(IdTokenLoader::class)
17 |         ->args([
18 |             service('jose.jws_loader.oauth2_server.openid_connect.id_token.signature'),
19 |             service('jose.key_set.oauth2_server.openid_connect.id_token'),
20 |             '%oauth2_server.openid_connect.id_token.signature_algorithms%',
21 |         ])
22 |     ;
23 | };
24 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/openid_connect/response_type/code_id_token.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | use OAuth2Framework\Component\AuthorizationCodeGrant\AuthorizationCodeResponseType;
 6 | use OAuth2Framework\Component\OpenIdConnect\IdTokenGrant\CodeIdTokenResponseType;
 7 | use OAuth2Framework\Component\OpenIdConnect\IdTokenGrant\IdTokenResponseType;
 8 | use Symfony\Component\DependencyInjection\Loader\Configurator\ContainerConfigurator;
 9 | use function Symfony\Component\DependencyInjection\Loader\Configurator\service;
10 | 
11 | return static function (ContainerConfigurator $container): void {
12 |     $container = $container->services()
13 |         ->defaults()
14 |         ->private()
15 |         ->autoconfigure()
16 |     ;
17 | 
18 |     $container->set(CodeIdTokenResponseType::class)
19 |         ->args([service(AuthorizationCodeResponseType::class), service(IdTokenResponseType::class)])
20 |     ;
21 | };
22 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/openid_connect/response_type/code_token.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | use OAuth2Framework\Component\AuthorizationCodeGrant\AuthorizationCodeResponseType;
 6 | use OAuth2Framework\Component\ImplicitGrant\TokenResponseType;
 7 | use OAuth2Framework\Component\OpenIdConnect\IdTokenGrant\CodeTokenResponseType;
 8 | use Symfony\Component\DependencyInjection\Loader\Configurator\ContainerConfigurator;
 9 | use function Symfony\Component\DependencyInjection\Loader\Configurator\service;
10 | 
11 | return static function (ContainerConfigurator $container): void {
12 |     $container = $container->services()
13 |         ->defaults()
14 |         ->private()
15 |         ->autoconfigure()
16 |     ;
17 | 
18 |     $container->set(CodeTokenResponseType::class)
19 |         ->args([service(AuthorizationCodeResponseType::class), service(TokenResponseType::class)])
20 |     ;
21 | };
22 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/openid_connect/response_type/id_token_token.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | use OAuth2Framework\Component\ImplicitGrant\TokenResponseType;
 6 | use OAuth2Framework\Component\OpenIdConnect\IdTokenGrant\IdTokenResponseType;
 7 | use OAuth2Framework\Component\OpenIdConnect\IdTokenGrant\IdTokenTokenResponseType;
 8 | use Symfony\Component\DependencyInjection\Loader\Configurator\ContainerConfigurator;
 9 | use function Symfony\Component\DependencyInjection\Loader\Configurator\service;
10 | 
11 | return static function (ContainerConfigurator $container): void {
12 |     $container = $container->services()
13 |         ->defaults()
14 |         ->private()
15 |         ->autoconfigure()
16 |     ;
17 | 
18 |     $container->set(IdTokenTokenResponseType::class)
19 |         ->args([service(IdTokenResponseType::class), service(TokenResponseType::class)])
20 |     ;
21 | };
22 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/openid_connect/userinfo_scope_support.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | use OAuth2Framework\Component\OpenIdConnect\UserInfo\ScopeSupport\AddressScopeSupport;
 6 | use OAuth2Framework\Component\OpenIdConnect\UserInfo\ScopeSupport\EmailScopeSupport;
 7 | use OAuth2Framework\Component\OpenIdConnect\UserInfo\ScopeSupport\PhoneScopeSupport;
 8 | use OAuth2Framework\Component\OpenIdConnect\UserInfo\ScopeSupport\ProfileScopeSupport;
 9 | use Symfony\Component\DependencyInjection\Loader\Configurator\ContainerConfigurator;
10 | 
11 | return static function (ContainerConfigurator $container): void {
12 |     $container = $container->services()
13 |         ->defaults()
14 |         ->private()
15 |         ->autoconfigure()
16 |     ;
17 | 
18 |     $container->set(AddressScopeSupport::class);
19 |     $container->set(EmailScopeSupport::class);
20 |     $container->set(PhoneScopeSupport::class);
21 |     $container->set(ProfileScopeSupport::class);
22 | };
23 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/resource_server/authentication_middleware.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | use OAuth2Framework\Component\Core\ResourceServer\ResourceServerRepository;
 6 | use OAuth2Framework\Component\ResourceServerAuthentication\AuthenticationMethodManager;
 7 | use OAuth2Framework\Component\ResourceServerAuthentication\AuthenticationMiddleware;
 8 | use Symfony\Component\DependencyInjection\Loader\Configurator\ContainerConfigurator;
 9 | use function Symfony\Component\DependencyInjection\Loader\Configurator\service;
10 | 
11 | return static function (ContainerConfigurator $container): void {
12 |     $container = $container->services()
13 |         ->defaults()
14 |         ->private()
15 |         ->autoconfigure()
16 |     ;
17 | 
18 |     $container->set(AuthenticationMiddleware::class)
19 |         ->args([service(ResourceServerRepository::class), service(AuthenticationMethodManager::class)])
20 |     ;
21 | };
22 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/resource_server/resource_server.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | use OAuth2Framework\Component\ResourceServerAuthentication\AuthenticationMethodManager;
 6 | use Symfony\Component\DependencyInjection\Loader\Configurator\ContainerConfigurator;
 7 | 
 8 | return static function (ContainerConfigurator $container): void {
 9 |     $container = $container->services()
10 |         ->defaults()
11 |         ->private()
12 |         ->autoconfigure()
13 |     ;
14 | 
15 |     $container->set(AuthenticationMethodManager::class);
16 | };
17 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/routing/routing.yml:
--------------------------------------------------------------------------------
1 | oauth2_server_routes:
2 |     resource: '.'
3 |     type: 'oauth2_server'
4 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/scope/policy.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | use OAuth2Framework\Component\Scope\Rule\ScopePolicyRule;
 6 | use Symfony\Component\DependencyInjection\Loader\Configurator\ContainerConfigurator;
 7 | 
 8 | return static function (ContainerConfigurator $container): void {
 9 |     $container = $container->services()
10 |         ->defaults()
11 |         ->private()
12 |         ->autoconfigure()
13 |         ->autowire()
14 |     ;
15 | 
16 |     $container->set(ScopePolicyRule::class);
17 | };
18 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/scope/policy_default.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | use OAuth2Framework\Component\Scope\Policy\DefaultScopePolicy;
 6 | use OAuth2Framework\Component\Scope\Rule\ScopePolicyDefaultRule;
 7 | use Symfony\Component\DependencyInjection\Loader\Configurator\ContainerConfigurator;
 8 | 
 9 | return static function (ContainerConfigurator $container): void {
10 |     $container = $container->services()
11 |         ->defaults()
12 |         ->private()
13 |         ->autoconfigure()
14 |         ->autowire()
15 |     ;
16 | 
17 |     $container->set(DefaultScopePolicy::class)
18 |         ->args(['%oauth2_server.scope.policy.default.scope%'])
19 |         ->tag('oauth2_server_scope_policy', [
20 |             'policy_name' => 'default',
21 |         ])
22 |     ;
23 | 
24 |     $container->set(ScopePolicyDefaultRule::class)
25 |         ->tag('oauth2_server_client_rule')
26 |     ;
27 | };
28 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/scope/policy_error.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | use OAuth2Framework\Component\Scope\Policy\ErrorScopePolicy;
 6 | use Symfony\Component\DependencyInjection\Loader\Configurator\ContainerConfigurator;
 7 | 
 8 | return static function (ContainerConfigurator $container): void {
 9 |     $container = $container->services()
10 |         ->defaults()
11 |         ->private()
12 |         ->autoconfigure()
13 |         ->autowire()
14 |     ;
15 | 
16 |     $container->set(ErrorScopePolicy::class)
17 |         ->args(['%oauth2_server.scope.policy.default.scope%'])
18 |         ->tag('oauth2_server_scope_policy', [
19 |             'policy_name' => 'error',
20 |         ])
21 |     ;
22 | };
23 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/config/token_type/bearer_token.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | use OAuth2Framework\Component\BearerTokenType\BearerToken;
 6 | use Symfony\Component\DependencyInjection\Loader\Configurator\ContainerConfigurator;
 7 | 
 8 | return static function (ContainerConfigurator $container): void {
 9 |     $container = $container->services()
10 |         ->defaults()
11 |         ->private()
12 |         ->autoconfigure()
13 |         ->autowire()
14 |     ;
15 | 
16 |     $container->set(BearerToken::class)
17 |         ->args(['Unused', false, false, false])
18 |         ->tag('oauth2_server_token_type', [
19 |             'scheme' => 'Bearer',
20 |         ])
21 |     ;
22 | };
23 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/translations/OAuth2FrameworkServer.en.yml:
--------------------------------------------------------------------------------
1 | authorization:
2 |     form:
3 |         save: "Allow next authorization requests for this client with the same parameters"
4 |         accept: 'Accept'
5 |         reject: 'Reject'
6 |         message: 'A client, with public Id "%client_id%", needs your authorization to get access on your resources.'
7 |         scope: "The client requests access to the following scope(s)"
8 |         no_scope: "The client does not request any scope"
9 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/translations/OAuth2FrameworkServer.fr.yml:
--------------------------------------------------------------------------------
1 | authorization:
2 |     form:
3 |         save: "Autoriser les futures requêtes de ce client avec les mêmes paramètres."
4 |         accept: "Accepter"
5 |         reject: "Rejeter"
6 |         message: "Un client, avec l'ID publique « %client_id% », a besoin de votre autorisation pour accéder à vos resources."
7 |         scope: "Le client souhaite avoir accès aux scopes suivants"
8 |         no_scope: "Le client n'a demandé l'accès à aucun scope"
9 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/translations/validators.en.yml:
--------------------------------------------------------------------------------
1 | spomky_labs:
2 |     oauth2_server:
3 |       password:
4 |           mismatch: 'The entered passwords do not match'
5 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/translations/validators.fr.yml:
--------------------------------------------------------------------------------
1 | spomky_labs:
2 |     oauth2_server:
3 |       password:
4 |           mismatch: 'Les deux mots de passe ne sont pas identiques'
5 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/views/form_post/response.html.twig:
--------------------------------------------------------------------------------
1 | {% spaceless %}
2 | <!doctype html>
3 | <html>
4 |     {% include "@OAuth2FrameworkServerBundle/form_post/response_header.html.twig" %}
5 |     {% include "@OAuth2FrameworkServerBundle/form_post/response_body.html.twig" %}
6 | </html>
7 | {% endspaceless %}
8 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/views/form_post/response_body.html.twig:
--------------------------------------------------------------------------------
 1 | {% spaceless %}
 2 | <body onload='submitform();'>
 3 |     <form method="post" action="{{ redirect_uri }}">
 4 |         {% for key,value in inputs %}
 5 |         <input type="hidden" name="{{ key }}" value="{{ value }}" />
 6 |         {% endfor %}
 7 |     </form>
 8 | </body>
 9 | {% endspaceless %}
10 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Resources/views/form_post/response_header.html.twig:
--------------------------------------------------------------------------------
1 | {% spaceless %}
2 | <head>
3 |     <title>Authorization Form</title>
4 |     <meta name="referrer" content="origin"/>
5 |     <script type="text/javascript">function submitform() {document.forms[0].submit();}</script>
6 | </head>
7 | {% endspaceless %}
8 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Service/IgnoreAccountSelectionHandler.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\ServerBundle\Service;
 6 | 
 7 | use OAuth2Framework\Component\AuthorizationEndpoint\SelectAccountHandler as SelectAccountHandlerInterface;
 8 | use Psr\Http\Message\ResponseInterface;
 9 | use Psr\Http\Message\ServerRequestInterface;
10 | 
11 | class IgnoreAccountSelectionHandler implements SelectAccountHandlerInterface
12 | {
13 |     public function handle(ServerRequestInterface $request, string $authorizationId): ?ResponseInterface
14 |     {
15 |         return null;
16 |     }
17 | }
18 | 


--------------------------------------------------------------------------------
/src/ServerBundle/Service/TwigFormPostResponseRenderer.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\ServerBundle\Service;
 6 | 
 7 | use OAuth2Framework\Component\AuthorizationEndpoint\ResponseMode\FormPostResponseRenderer;
 8 | use Twig\Environment;
 9 | 
10 | final class TwigFormPostResponseRenderer implements FormPostResponseRenderer
11 | {
12 |     public function __construct(
13 |         private readonly Environment $templateEngine,
14 |         private readonly string $template
15 |     ) {
16 |     }
17 | 
18 |     public function render(string $redirectUri, array $data): string
19 |     {
20 |         return $this->templateEngine->render(
21 |             $this->template,
22 |             [
23 |                 'redirect_uri' => $redirectUri,
24 |                 'inputs' => $data,
25 |             ]
26 |         );
27 |     }
28 | }
29 | 


--------------------------------------------------------------------------------
/src/WebFingerBundle/.github/PULL_REQUEST_TEMPLATE.md:
--------------------------------------------------------------------------------
1 | Please do not send any PR here.
2 | PRs should be send to the main repository at https://github.com/OAuth2-Framework/oauth2-framework
3 | 


--------------------------------------------------------------------------------
/src/WebFingerBundle/Middleware/Consumer.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\WebFingerBundle\Middleware;
 6 | 
 7 | use Generator;
 8 | use Psr\Http\Message\ResponseInterface;
 9 | use Psr\Http\Message\ServerRequestInterface;
10 | use Psr\Http\Server\RequestHandlerInterface;
11 | 
12 | /**
13 |  * @internal
14 |  */
15 | final class Consumer implements RequestHandlerInterface
16 | {
17 |     public function __construct(
18 |         private readonly Generator $generator,
19 |         private readonly RequestHandlerInterface $delegate
20 |     ) {
21 |     }
22 | 
23 |     public function handle(ServerRequestInterface $request): ResponseInterface
24 |     {
25 |         if (! $this->generator->valid()) {
26 |             return $this->delegate->handle($request);
27 |         }
28 | 
29 |         $current = $this->generator->current();
30 |         $this->generator->next();
31 | 
32 |         return $current->process($request, $this);
33 |     }
34 | }
35 | 


--------------------------------------------------------------------------------
/src/WebFingerBundle/Middleware/Pipe.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\WebFingerBundle\Middleware;
 6 | 
 7 | use Generator;
 8 | use Psr\Http\Message\ResponseInterface;
 9 | use Psr\Http\Message\ServerRequestInterface;
10 | use Psr\Http\Server\MiddlewareInterface;
11 | use Psr\Http\Server\RequestHandlerInterface;
12 | 
13 | final class Pipe implements MiddlewareInterface
14 | {
15 |     public function __construct(
16 |         private array $middlewares = []
17 |     ) {
18 |     }
19 | 
20 |     public function push(MiddlewareInterface $value): void
21 |     {
22 |         $this->middlewares[] = $value;
23 |     }
24 | 
25 |     public function process(ServerRequestInterface $request, RequestHandlerInterface $handler): ResponseInterface
26 |     {
27 |         return (new Consumer($this->getGenerator(), $handler))->handle($request);
28 |     }
29 | 
30 |     private function getGenerator(): Generator
31 |     {
32 |         yield from $this->middlewares;
33 |     }
34 | }
35 | 


--------------------------------------------------------------------------------
/src/WebFingerBundle/Middleware/TerminalRequestHandler.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\WebFingerBundle\Middleware;
 6 | 
 7 | use Nyholm\Psr7\Factory\Psr17Factory;
 8 | use Psr\Http\Message\ResponseInterface;
 9 | use Psr\Http\Message\ServerRequestInterface;
10 | use Psr\Http\Server\RequestHandlerInterface;
11 | 
12 | final class TerminalRequestHandler implements RequestHandlerInterface
13 | {
14 |     public function handle(ServerRequestInterface $request): ResponseInterface
15 |     {
16 |         return (new Psr17Factory())->createResponse();
17 |     }
18 | }
19 | 


--------------------------------------------------------------------------------
/src/WebFingerBundle/OAuth2FrameworkWebFingerBundle.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\WebFingerBundle;
 6 | 
 7 | use OAuth2Framework\WebFingerBundle\DependencyInjection\Compiler\IdentifierResolverCompilerPass;
 8 | use OAuth2Framework\WebFingerBundle\DependencyInjection\OAuth2FrameworkWebFingerExtension;
 9 | use Symfony\Component\DependencyInjection\ContainerBuilder;
10 | use Symfony\Component\DependencyInjection\Extension\ExtensionInterface;
11 | use Symfony\Component\HttpKernel\Bundle\Bundle;
12 | 
13 | class OAuth2FrameworkWebFingerBundle extends Bundle
14 | {
15 |     public function getContainerExtension(): ?ExtensionInterface
16 |     {
17 |         return new OAuth2FrameworkWebFingerExtension('webfinger');
18 |     }
19 | 
20 |     public function build(ContainerBuilder $container): void
21 |     {
22 |         $container->addCompilerPass(new IdentifierResolverCompilerPass());
23 |     }
24 | }
25 | 


--------------------------------------------------------------------------------
/src/WebFingerBundle/Resources/config/routing/routing.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | use Symfony\Component\Routing\Loader\Configurator\RoutingConfigurator;
 6 | 
 7 | return static function (RoutingConfigurator $routes): void {
 8 |     $routes->import('.', 'webfinger');
 9 | };
10 | 


--------------------------------------------------------------------------------
/tests/Component/AuthorizationEndpoint/ResponseTypeManagerTest.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Tests\Component\AuthorizationEndpoint;
 6 | 
 7 | use InvalidArgumentException;
 8 | use OAuth2Framework\Tests\Component\OAuth2TestCase;
 9 | 
10 | /**
11 |  * @internal
12 |  */
13 | final class ResponseTypeManagerTest extends OAuth2TestCase
14 | {
15 |     /**
16 |      * @test
17 |      */
18 |     public function basicCalls(): void
19 |     {
20 |         $this->expectException(InvalidArgumentException::class);
21 |         $this->expectExceptionMessage('The response type "bar" is not supported.');
22 |         $manager = $this->getResponseTypeManager();
23 | 
24 |         static::assertTrue($manager->has('code'));
25 |         static::assertFalse($manager->has('bar'));
26 |         static::assertSame(['token', 'none', 'code'], $manager->list());
27 |         static::assertCount(3, $manager->all());
28 | 
29 |         $manager->get('bar');
30 |     }
31 | }
32 | 


--------------------------------------------------------------------------------
/tests/Component/ClientConfigurationEndpoint/ClientConfigurationRouteRule.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Tests\Component\ClientConfigurationEndpoint;
 6 | 
 7 | use OAuth2Framework\Component\ClientConfigurationEndpoint\Rule\ClientConfigurationRouteRule as Base;
 8 | use OAuth2Framework\Component\Core\Client\ClientId;
 9 | 
10 | class ClientConfigurationRouteRule extends Base
11 | {
12 |     protected function getRegistrationClientUri(ClientId $clientId): string
13 |     {
14 |         return sprintf('https://www.example.com/client/%s', $clientId->getValue());
15 |     }
16 | 
17 |     protected function generateRegistrationAccessToken(): string
18 |     {
19 |         return base64_encode(random_bytes(16));
20 |     }
21 | }
22 | 


--------------------------------------------------------------------------------
/tests/Component/Core/DataBag/DataBagTest.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Tests\Component\Core\DataBag;
 6 | 
 7 | use OAuth2Framework\Component\Core\DataBag\DataBag;
 8 | use OAuth2Framework\Tests\Component\OAuth2TestCase;
 9 | 
10 | /**
11 |  * @internal
12 |  */
13 | final class DataBagTest extends OAuth2TestCase
14 | {
15 |     /**
16 |      * @test
17 |      */
18 |     public function iCanCreateADataBag(): void
19 |     {
20 |         $data = DataBag::create([
21 |             'foo' => 'bar',
22 |         ]);
23 |         $data->set('foo', 'BAR');
24 | 
25 |         static::assertInstanceOf(DataBag::class, $data);
26 |         static::assertTrue($data->has('foo'));
27 |         static::assertFalse($data->has('---'));
28 |     }
29 | }
30 | 


--------------------------------------------------------------------------------
/tests/Component/Core/TokenType/TokenTypeMiddlewareTest.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Tests\Component\Core\TokenType;
 6 | 
 7 | use InvalidArgumentException;
 8 | use OAuth2Framework\Component\Core\Middleware\TerminalRequestHandler;
 9 | use OAuth2Framework\Tests\Component\OAuth2TestCase;
10 | 
11 | /**
12 |  * @internal
13 |  */
14 | final class TokenTypeMiddlewareTest extends OAuth2TestCase
15 | {
16 |     /**
17 |      * @test
18 |      */
19 |     public function aTokenTypeIsFoundInTheRequestButNotSupported(): void
20 |     {
21 |         $this->expectException(InvalidArgumentException::class);
22 |         $this->expectExceptionMessage('Unsupported token type "bar".');
23 |         $request = $this->buildRequest('GET', [
24 |             'token_type' => 'bar',
25 |         ]);
26 | 
27 |         $this->getTokenTypeMiddleware()
28 |             ->process($request, new TerminalRequestHandler())
29 |         ;
30 |     }
31 | }
32 | 


--------------------------------------------------------------------------------
/tests/Component/FakeConsentHandler.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Tests\Component;
 6 | 
 7 | use Nyholm\Psr7\Factory\Psr17Factory;
 8 | use OAuth2Framework\Component\AuthorizationEndpoint\ConsentHandler as ConsentHandlerInterface;
 9 | use Psr\Http\Message\ResponseInterface;
10 | use Psr\Http\Message\ServerRequestInterface;
11 | 
12 | final class FakeConsentHandler implements ConsentHandlerInterface
13 | {
14 |     public static function create(): self
15 |     {
16 |         return new self();
17 |     }
18 | 
19 |     public function handle(ServerRequestInterface $request, string $authorizationId): ResponseInterface
20 |     {
21 |         $response = (new Psr17Factory())->createResponse(303);
22 | 
23 |         return $response->withHeader('location', 'https://foo.bar/authorization/___ID___/consent');
24 |     }
25 | }
26 | 


--------------------------------------------------------------------------------
/tests/Component/FakeFormPostRenderer.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Tests\Component;
 6 | 
 7 | use const JSON_THROW_ON_ERROR;
 8 | use OAuth2Framework\Component\AuthorizationEndpoint\ResponseMode\FormPostResponseRenderer;
 9 | 
10 | final class FakeFormPostRenderer implements FormPostResponseRenderer
11 | {
12 |     public static function create(): self
13 |     {
14 |         return new self();
15 |     }
16 | 
17 |     public function render(string $redirectUri, array $data): string
18 |     {
19 |         return json_encode([$redirectUri, $data], JSON_THROW_ON_ERROR);
20 |     }
21 | }
22 | 


--------------------------------------------------------------------------------
/tests/Component/FakeLoginHandler.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Tests\Component;
 6 | 
 7 | use Nyholm\Psr7\Factory\Psr17Factory;
 8 | use OAuth2Framework\Component\AuthorizationEndpoint\LoginHandler as LoginHandlerInterface;
 9 | use Psr\Http\Message\ResponseInterface;
10 | use Psr\Http\Message\ServerRequestInterface;
11 | 
12 | final class FakeLoginHandler implements LoginHandlerInterface
13 | {
14 |     public static function create(): self
15 |     {
16 |         return new self();
17 |     }
18 | 
19 |     public function handle(ServerRequestInterface $request, string $authorizationId): ResponseInterface
20 |     {
21 |         $response = (new Psr17Factory())->createResponse(303);
22 | 
23 |         return $response->withHeader('location', 'https://foo.bar/authorization/___ID___/login');
24 |     }
25 | }
26 | 


--------------------------------------------------------------------------------
/tests/Component/FakeSelectAccountHandler.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Tests\Component;
 6 | 
 7 | use Nyholm\Psr7\Factory\Psr17Factory;
 8 | use OAuth2Framework\Component\AuthorizationEndpoint\SelectAccountHandler as SelectAccountHandlerInterface;
 9 | use Psr\Http\Message\ResponseInterface;
10 | use Psr\Http\Message\ServerRequestInterface;
11 | 
12 | final class FakeSelectAccountHandler implements SelectAccountHandlerInterface
13 | {
14 |     public static function create(): self
15 |     {
16 |         return new self();
17 |     }
18 | 
19 |     public function handle(ServerRequestInterface $request, string $authorizationId): ResponseInterface
20 |     {
21 |         $response = (new Psr17Factory())->createResponse(303);
22 | 
23 |         return $response->withHeader('location', 'https://foo.bar/authorization/___ID___/select_account');
24 |     }
25 | }
26 | 


--------------------------------------------------------------------------------
/tests/Component/MetadataEndpoint/MetadataTest.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Tests\Component\MetadataEndpoint;
 6 | 
 7 | use InvalidArgumentException;
 8 | use OAuth2Framework\Component\MetadataEndpoint\Metadata;
 9 | use OAuth2Framework\Tests\Component\OAuth2TestCase;
10 | 
11 | /**
12 |  * @internal
13 |  */
14 | final class MetadataTest extends OAuth2TestCase
15 | {
16 |     /**
17 |      * @test
18 |      */
19 |     public function genericObjectMethods(): void
20 |     {
21 |         $metadata = new Metadata();
22 |         static::assertFalse($metadata->has('foo'));
23 |         $metadata->set('foo', 'bar');
24 |         static::assertTrue($metadata->has('foo'));
25 |         static::assertSame('bar', $metadata->get('foo'));
26 | 
27 |         try {
28 |             $metadata->get('bar');
29 |         } catch (InvalidArgumentException $e) {
30 |             static::assertSame('The value with key "bar" does not exist.', $e->getMessage());
31 |         }
32 |     }
33 | }
34 | 


--------------------------------------------------------------------------------
/tests/Component/ResourceServerAuthentication/AuthenticationMethodManagerTest.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Tests\Component\ResourceServerAuthentication;
 6 | 
 7 | use OAuth2Framework\Tests\Component\OAuth2TestCase;
 8 | 
 9 | /**
10 |  * @internal
11 |  */
12 | final class AuthenticationMethodManagerTest extends OAuth2TestCase
13 | {
14 |     /**
15 |      * @test
16 |      */
17 |     public function genericCalls(): void
18 |     {
19 |         static::assertSame([
20 |             'none',
21 |             'client_secret_post',
22 |             'client_secret_basic',
23 |             'client_secret_jwt',
24 |             'private_key_jwt',
25 |         ], $this->getAuthenticationMethodManager()
26 |             ->list());
27 |         static::assertCount(4, $this->getAuthenticationMethodManager()->all());
28 |         static::assertSame(
29 |             ['Basic realm="My Service",charset="UTF-8"'],
30 |             $this->getAuthenticationMethodManager()
31 |                 ->getSchemesParameters()
32 |         );
33 |     }
34 | }
35 | 


--------------------------------------------------------------------------------
/tests/TestBundle/DependencyInjection/TestExtension.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Tests\TestBundle\DependencyInjection;
 6 | 
 7 | use Symfony\Component\Config\FileLocator;
 8 | use Symfony\Component\DependencyInjection\ContainerBuilder;
 9 | use Symfony\Component\DependencyInjection\Loader\PhpFileLoader;
10 | use Symfony\Component\HttpKernel\DependencyInjection\Extension;
11 | 
12 | final class TestExtension extends Extension
13 | {
14 |     public function load(array $configs, ContainerBuilder $container): void
15 |     {
16 |         $loader = new PhpFileLoader($container, new FileLocator(__DIR__ . '/../Resources/config'));
17 |         $loader->load('services.php');
18 |     }
19 | }
20 | 


--------------------------------------------------------------------------------
/tests/TestBundle/Entity/Client.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Tests\TestBundle\Entity;
 6 | 
 7 | use OAuth2Framework\Component\Core\Client\AbstractClient;
 8 | use OAuth2Framework\Component\Core\Client\ClientId;
 9 | use OAuth2Framework\Component\Core\DataBag\DataBag;
10 | use OAuth2Framework\Component\Core\UserAccount\UserAccountId;
11 | 
12 | class Client extends AbstractClient
13 | {
14 |     public function __construct(
15 |         protected ClientId $clientId,
16 |         DataBag $parameters,
17 |         ?UserAccountId $ownerId
18 |     ) {
19 |         parent::__construct($parameters, $ownerId);
20 |     }
21 | 
22 |     public static function create(ClientId $clientId, DataBag $parameters, ?UserAccountId $ownerId): self
23 |     {
24 |         return new self($clientId, $parameters, $ownerId);
25 |     }
26 | 
27 |     public function getClientId(): ClientId
28 |     {
29 |         return $this->clientId;
30 |     }
31 | }
32 | 


--------------------------------------------------------------------------------
/tests/TestBundle/Entity/ResourceServer.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Tests\TestBundle\Entity;
 6 | 
 7 | use OAuth2Framework\Component\Core\ResourceServer\ResourceServer as ResourceServerInterface;
 8 | use OAuth2Framework\Component\Core\ResourceServer\ResourceServerId;
 9 | 
10 | final class ResourceServer implements ResourceServerInterface
11 | {
12 |     public function __construct(
13 |         private readonly ResourceServerId $resourceServerId
14 |     ) {
15 |     }
16 | 
17 |     public static function create(ResourceServerId $resourceServerId): self
18 |     {
19 |         return new self($resourceServerId);
20 |     }
21 | 
22 |     public function getResourceServerId(): ResourceServerId
23 |     {
24 |         return $this->resourceServerId;
25 |     }
26 | 
27 |     public function getAuthenticationMethod(): string
28 |     {
29 |         return 'none';
30 |     }
31 | }
32 | 


--------------------------------------------------------------------------------
/tests/TestBundle/Repository/AuthorizationRepository.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Tests\TestBundle\Repository;
 6 | 
 7 | use OAuth2Framework\Component\AuthorizationEndpoint\AuthorizationRequest\AuthorizationRequest;
 8 | use OAuth2Framework\Component\NoneGrant\AuthorizationStorage as AuthorizationStorageInterface;
 9 | 
10 | final class AuthorizationRepository implements AuthorizationStorageInterface
11 | {
12 |     /**
13 |      * @var AuthorizationRequest[]
14 |      */
15 |     private array $authorizations = [];
16 | 
17 |     public static function create(): self
18 |     {
19 |         return new self();
20 |     }
21 | 
22 |     public function save(AuthorizationRequest $authorization): void
23 |     {
24 |         $this->authorizations[] = $authorization;
25 |     }
26 | 
27 |     /**
28 |      * @return AuthorizationRequest[]
29 |      */
30 |     public function getAuthorizations(): array
31 |     {
32 |         return $this->authorizations;
33 |     }
34 | }
35 | 


--------------------------------------------------------------------------------
/tests/TestBundle/Repository/ConsentRepository.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Tests\TestBundle\Repository;
 6 | 
 7 | use OAuth2Framework\Component\AuthorizationEndpoint\AuthorizationRequest\AuthorizationRequest;
 8 | use OAuth2Framework\Component\AuthorizationEndpoint\Consent\ConsentRepository as ConsentRepositoryInterface;
 9 | 
10 | final class ConsentRepository implements ConsentRepositoryInterface
11 | {
12 |     public function hasConsentBeenGiven(AuthorizationRequest $authorizationRequest): bool
13 |     {
14 |         return $authorizationRequest->getClient()
15 |             ->getClientId()
16 |             ->getValue() === 'CLIENT_ID_2' && $authorizationRequest->getUserAccount()
17 |             ->getPublicId()
18 |             ->getValue() === 'john.1'
19 |             ;
20 |     }
21 | }
22 | 


--------------------------------------------------------------------------------
/tests/TestBundle/Repository/ResourceServerRepository.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Tests\TestBundle\Repository;
 6 | 
 7 | use OAuth2Framework\Component\Core\ResourceServer\ResourceServer as ResourceServerInterface;
 8 | use OAuth2Framework\Component\Core\ResourceServer\ResourceServerId;
 9 | use OAuth2Framework\Component\Core\ResourceServer\ResourceServerRepository as ResourceServerRepositoryInterface;
10 | use OAuth2Framework\Tests\TestBundle\Entity\ResourceServer;
11 | 
12 | final class ResourceServerRepository implements ResourceServerRepositoryInterface
13 | {
14 |     public function find(ResourceServerId $resourceServerId): ?ResourceServerInterface
15 |     {
16 |         if ($resourceServerId->getValue() === 'http://foo.com') {
17 |             return new ResourceServer($resourceServerId);
18 |         }
19 | 
20 |         return null;
21 |     }
22 | }
23 | 


--------------------------------------------------------------------------------
/tests/TestBundle/Repository/TrustedIssuerRepository.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Tests\TestBundle\Repository;
 6 | 
 7 | use OAuth2Framework\Component\Core\TrustedIssuer\TrustedIssuer as TrustedIssuerInterface;
 8 | use OAuth2Framework\Component\Core\TrustedIssuer\TrustedIssuerRepository as TrustedIssuerRepositoryInterface;
 9 | use OAuth2Framework\Tests\TestBundle\Entity\TrustedIssuer;
10 | 
11 | final class TrustedIssuerRepository implements TrustedIssuerRepositoryInterface
12 | {
13 |     /**
14 |      * @var array<string, TrustedIssuer>
15 |      */
16 |     private array $trustedIssuers = [];
17 | 
18 |     public function save(TrustedIssuerInterface $trustedIssuer): void
19 |     {
20 |         $this->trustedIssuers[$trustedIssuer->name()] = $trustedIssuer;
21 |     }
22 | 
23 |     public function find(string $trustedIssuer): ?TrustedIssuerInterface
24 |     {
25 |         return $this->trustedIssuers[$trustedIssuer] ?? null;
26 |     }
27 | }
28 | 


--------------------------------------------------------------------------------
/tests/TestBundle/TestBundle.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | declare(strict_types=1);
 4 | 
 5 | namespace OAuth2Framework\Tests\TestBundle;
 6 | 
 7 | use OAuth2Framework\Tests\TestBundle\DependencyInjection\TestExtension;
 8 | use Symfony\Component\DependencyInjection\Extension\ExtensionInterface;
 9 | use Symfony\Component\HttpKernel\Bundle\Bundle;
10 | 
11 | final class TestBundle extends Bundle
12 | {
13 |     public function getContainerExtension(): ExtensionInterface
14 |     {
15 |         return new TestExtension();
16 |     }
17 | }
18 | 


--------------------------------------------------------------------------------
/tests/config/http.yml:
--------------------------------------------------------------------------------
1 | services:
2 |     _defaults:
3 |         public: true
4 | 
5 |     Nyholm\Psr7\Factory\Psr17Factory: ~
6 | 


--------------------------------------------------------------------------------
/tests/config/jose.yml:
--------------------------------------------------------------------------------
1 | jose:
2 |     jku_factory:
3 |         enabled: true
4 |         client: 'Psr\Http\Client\ClientInterface'
5 |         request_factory: 'Nyholm\Psr7\Factory\Psr17Factory'
6 | 


--------------------------------------------------------------------------------
/tests/config/routing.yml:
--------------------------------------------------------------------------------
 1 | # API & Login Routes
 2 | test:
 3 |     resource: '@TestBundle/Controller'
 4 |     type:     'annotation'
 5 | # Jose Routes
 6 | jwkset_endpoint:
 7 |     resource: "@JoseFrameworkBundle/Resources/config/routing/jwkset_controller.php"
 8 |     prefix: '/keys'
 9 | 
10 | # OAuth2FrameworkServerBundle Routes
11 | oauth2:
12 |     resource: '@OAuth2FrameworkServerBundle/Resources/config/routing/routing.yml'
13 | 
14 | # OAuth2FrameworkWebFingerBundle Routes
15 | webfinger:
16 |     resource: '@OAuth2FrameworkWebFingerBundle/Resources/config/routing/routing.php'
17 | 


--------------------------------------------------------------------------------
/tests/config/webfinger.yml:
--------------------------------------------------------------------------------
1 | webfinger:
2 |     path: '/.well-known/webfinger'
3 |     resource_repository: 'OAuth2Framework\Tests\TestBundle\Entity\ResourceRepository'
4 | 


--------------------------------------------------------------------------------