blob: ce44485a10efd2bcd406b7d52313fb79b61b96c2 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
|
<?php
namespace JsonApi\Middlewares\Auth;
use League\OAuth2\Server\Exception\OAuthServerException;
use League\OAuth2\Server\ResourceServer;
use Psr\Http\Message\ResponseInterface as Response;
use Psr\Http\Message\ServerRequestInterface as Request;
use Studip\OAuth2\Container;
use Studip\OAuth2\Models\AccessToken;
use Studip\OAuth2\Models\Client;
class OAuth2Strategy implements Strategy
{
/** @var callable */
protected $authenticator;
/** @var Request */
protected $request;
/** @var ?\User */
protected $user;
/**
* @param callable $authenticator
*/
public function __construct(Request $request, $authenticator)
{
$this->request = $request;
$this->authenticator = $authenticator;
}
public function check()
{
return !is_null($this->user());
}
public function user()
{
if (!is_null($this->user)) {
return $this->user;
}
$this->user = $this->detect();
return $this->user;
}
public function addChallenge(Response $response)
{
return $response->withHeader('Authorization', '');
}
private function detect(): ?\User
{
$bearerToken = $this->bearerToken($this->request);
if (!$bearerToken) {
return null;
}
$container = new Container();
$server = $container->get(ResourceServer::class);
try {
$psrRequest = $server->validateAuthenticatedRequest($this->request);
$userId = $psrRequest->getAttribute('oauth_user_id');
$user = \User::find($userId);
if (!$user) {
return null;
}
$clientId = $psrRequest->getAttribute('oauth_client_id');
if (Client::revoked($clientId)) {
return null;
}
return $user;
} catch (OAuthServerException $oauthException) {
// TODO: reporting?
}
return null;
}
/**
* @return string|null
*/
private function bearerToken(Request $request)
{
if ($request->hasHeader('Authorization')) {
$header = $request->getHeaderLine('Authorization');
$position = strrpos($header, 'Bearer ');
if ($position !== false) {
$header = substr($header, $position + 7);
return strpos($header, ',') !== false ? strstr($header, ',', true) : $header;
}
}
return null;
}
}
|
