Controller
final class Controller implements LoggerAwareInterface (View source)
Traits
Trait LoggerAwareTrait A trait used with LoggerAwareInterface
Constants
STEP_LOGIN |
|
STEP_AUTHORIZE_CLIENT |
|
STEP_COMPLETE |
|
Properties
private AuthorizationServer | $oauthServer | ||
private EntityManagerInterface | $entityManager | ||
private ServerRequestInterface | $request | ||
private Session | $session | ||
private Token | $token | ||
private Repository | $config | ||
private User | $user |
Methods
No description
No description
Handle authorization
Returns true if a) all scopes are allowed by the client or b) the scopes passed in the request are included in the allowed list of client scopes
Handle the login portion of an authorization request This method renders a view for login that handles either email or username based login
Handle the scope authorization portion of an authorization request This method renders a view that outputs a list of scopes and asks the user to verify that they want to give the client the access that is being requested.
Prune old authentication tokens
Loop over a list of results and prune them
Remove items in a buffer from the entity manager
No description
Get the consent type associated with the current request
Store a request against session
Restore a real request from the passed data
Remove all session data related to this flow
Inflate an identifier into a specific type
Figure out what step we should be rendering based on the active authorization request This method should handle verifying authorization and login
Create a new authorize login view with the given data in scope
Details
getLoggerChannel()
No description
__construct(AuthorizationServer $oauthServer, EntityManagerInterface $entityManager, ServerRequestInterface $request, Session $session, Token $token, Repository $config, User $user = null)
No description
ResponseInterface
token()
Handle authorization
protected
validateScopesAgainstClient(Client $client, array $scopes)
Returns true if a) all scopes are allowed by the client or b) the scopes passed in the request are included in the allowed list of client scopes
ResponseInterface|Response
authorize()
Route handler that deals with authorization
Response|RedirectResponse
handleLogin(AuthorizationRequest $request)
Handle the login portion of an authorization request This method renders a view for login that handles either email or username based login
Response|RedirectResponse
handleAuthorizeClient(AuthorizationRequest $request)
Handle the scope authorization portion of an authorization request This method renders a view that outputs a list of scopes and asks the user to verify that they want to give the client the access that is being requested.
private
pruneTokens()
Prune old authentication tokens
private
pruneResults($results)
Loop over a list of results and prune them
private
clearTokenBuffer(array $buffer)
Remove items in a buffer from the entity manager
private AuthorizationRequest
getAuthorizationRequest()
No description
private int
getConsentType(AuthorizationRequest $request)
Get the consent type associated with the current request
private
storeRequest(AuthorizationRequest $request)
Store a request against session
private AuthorizationRequest|null
restoreRequest(array $data)
Restore a real request from the passed data
private
clearRequest(AuthorizationRequest $request)
Remove all session data related to this flow
private object|null
inflateType(int|string|null $identifier, string $type = Scope::class)
Inflate an identifier into a specific type
private int
determineStep(AuthorizationRequest $request)
Figure out what step we should be rendering based on the active authorization request This method should handle verifying authorization and login
private View
createLoginView(array $data)
Create a new authorize login view with the given data in scope