vendor/league/oauth2-server/src/Grant/ClientCredentialsGrant.php line 36

  1. <?php
  2. /**
  3.  * OAuth 2.0 Client credentials grant.
  4.  *
  5.  * @author      Alex Bilbie <hello@alexbilbie.com>
  6.  * @copyright   Copyright (c) Alex Bilbie
  7.  * @license     http://mit-license.org/
  8.  *
  9.  * @link        https://github.com/thephpleague/oauth2-server
  10.  */
  12. namespace League\OAuth2\Server\Grant;
  14. use DateInterval;
  15. use League\OAuth2\Server\Exception\OAuthServerException;
  16. use League\OAuth2\Server\RequestAccessTokenEvent;
  17. use League\OAuth2\Server\RequestEvent;
  18. use League\OAuth2\Server\ResponseTypes\ResponseTypeInterface;
  19. use Psr\Http\Message\ServerRequestInterface;
  21. /**
  22.  * Client credentials grant class.
  23.  */
  24. class ClientCredentialsGrant extends AbstractGrant
  25. {
  26.     /**
  27.      * {@inheritdoc}
  28.      */
  29.     public function respondToAccessTokenRequest(
  30.         ServerRequestInterface $request,
  31.         ResponseTypeInterface $responseType,
  32.         DateInterval $accessTokenTTL
  33.     ) {
  34.         list($clientId) = $this->getClientCredentials($request);
  36.         $client = $this->getClientEntityOrFail($clientId, $request);
  38.         if (!$client->isConfidential()) {
  39.             $this->getEmitter()->emit(new RequestEvent(RequestEvent::CLIENT_AUTHENTICATION_FAILED, $request));
  41.             throw OAuthServerException::invalidClient($request);
  42.         }
  44.         // Validate request
  45.         $this->validateClient($request);
  47.         $scopes = $this->validateScopes($this->getRequestParameter('scope', $request, $this->defaultScope));
  49.         // Finalize the requested scopes
  50.         $finalizedScopes = $this->scopeRepository->finalizeScopes($scopes, $this->getIdentifier(), $client);
  52.         // Issue and persist access token
  53.         $accessToken = $this->issueAccessToken($accessTokenTTL, $client, null, $finalizedScopes);
  55.         // Send event to emitter
  56.         $this->getEmitter()->emit(new RequestAccessTokenEvent(RequestEvent::ACCESS_TOKEN_ISSUED, $request, $accessToken));
  58.         // Inject access token into response type
  59.         $responseType->setAccessToken($accessToken);
  61.         return $responseType;
  62.     }
  64.     /**
  65.      * {@inheritdoc}
  66.      */
  67.     public function getIdentifier()
  68.     {
  69.         return 'client_credentials';
  70.     }
  71. }