2018-02-16 02:47:56 +00:00
|
|
|
<?php
|
|
|
|
|
|
|
|
namespace Zotlabs\Identity;
|
|
|
|
|
2019-07-08 06:35:24 +00:00
|
|
|
use Zotlabs\Lib\System;
|
|
|
|
use OAuth2\Server;
|
|
|
|
use OAuth2\Storage\Memory;
|
|
|
|
use OAuth2\GrantType\ClientCredentials;
|
|
|
|
use OAuth2\OpenID\GrantType\AuthorizationCode;
|
|
|
|
|
2021-12-03 03:01:39 +00:00
|
|
|
class OAuth2Server extends Server
|
|
|
|
{
|
|
|
|
|
|
|
|
public function __construct(OAuth2Storage $storage, $config = null)
|
|
|
|
{
|
|
|
|
|
|
|
|
if (! is_array($config)) {
|
|
|
|
$config = [
|
|
|
|
// 'use_openid_connect' => true,
|
|
|
|
'issuer' => System::get_site_name(),
|
|
|
|
// 'use_jwt_access_tokens' => true,
|
|
|
|
// 'enforce_state' => false
|
|
|
|
];
|
|
|
|
}
|
|
|
|
|
|
|
|
parent::__construct($storage, $config);
|
|
|
|
|
|
|
|
// Add the "Client Credentials" grant type (it is the simplest of the grant types)
|
|
|
|
$this->addGrantType(new ClientCredentials($storage));
|
|
|
|
|
|
|
|
// Add the "Authorization Code" grant type (this is where the oauth magic happens)
|
|
|
|
// Need to use OpenID\GrantType to return id_token
|
|
|
|
// (see:https://github.com/bshaffer/oauth2-server-php/issues/443)
|
|
|
|
$this->addGrantType(new AuthorizationCode($storage));
|
|
|
|
|
|
|
|
$keyStorage = new Memory([
|
|
|
|
'keys' => [
|
|
|
|
'public_key' => get_config('system', 'pubkey'),
|
|
|
|
'private_key' => get_config('system', 'prvkey')
|
|
|
|
]
|
|
|
|
]);
|
|
|
|
|
|
|
|
$this->addStorage($keyStorage, 'public_key');
|
|
|
|
}
|
2018-02-17 00:49:01 +00:00
|
|
|
}
|