vendor/league/oauth2-server/src/ResponseTypes/BearerTokenResponse.php line 28

Open in your IDE?
  1. <?php
  2. /**
  3.  * OAuth 2.0 Bearer Token Response.
  4.  *
  5.  * @author      Alex Bilbie <hello@alexbilbie.com>
  6.  * @copyright   Copyright (c) Alex Bilbie
  7.  * @license     http://mit-license.org/
  8.  *
  9.  * @link        https://github.com/thephpleague/oauth2-server
  10.  */
  12. namespace League\OAuth2\Server\ResponseTypes;
  14. use DateTime;
  15. use League\OAuth2\Server\Entities\AccessTokenEntityInterface;
  16. use League\OAuth2\Server\Entities\RefreshTokenEntityInterface;
  17. use Psr\Http\Message\ResponseInterface;
  19. class BearerTokenResponse extends AbstractResponseType
  20. {
  21.     /**
  22.      * {@inheritdoc}
  23.      */
  24.     public function generateHttpResponse(ResponseInterface $response)
  25.     {
  26.         $expireDateTime = $this->accessToken->getExpiryDateTime()->getTimestamp();
  28.         $jwtAccessToken = $this->accessToken->convertToJWT($this->privateKey);
  30.         $responseParams = [
  31.             'token_type'   => 'Bearer',
  32.             'expires_in'   => $expireDateTime - (new DateTime())->getTimestamp(),
  33.             'access_token' => (string) $jwtAccessToken,
  34.         ];
  36.         if ($this->refreshToken instanceof RefreshTokenEntityInterface) {
  37.             $refreshToken = $this->encrypt(
  38.                 json_encode(
  39.                     [
  40.                         'client_id'        => $this->accessToken->getClient()->getIdentifier(),
  41.                         'refresh_token_id' => $this->refreshToken->getIdentifier(),
  42.                         'access_token_id'  => $this->accessToken->getIdentifier(),
  43.                         'scopes'           => $this->accessToken->getScopes(),
  44.                         'user_id'          => $this->accessToken->getUserIdentifier(),
  45.                         'expire_time'      => $this->refreshToken->getExpiryDateTime()->getTimestamp(),
  46.                     ]
  47.                 )
  48.             );
  50.             $responseParams['refresh_token'] = $refreshToken;
  51.         }
  53.         $responseParams = array_merge($this->getExtraParams($this->accessToken), $responseParams);
  55.         $response = $response
  56.             ->withStatus(200)
  57.             ->withHeader('pragma', 'no-cache')
  58.             ->withHeader('cache-control', 'no-store')
  59.             ->withHeader('content-type', 'application/json; charset=UTF-8');
  61.         $response->getBody()->write(json_encode($responseParams));
  63.         return $response;
  64.     }
  66.     /**
  67.      * Add custom fields to your Bearer Token response here, then override
  68.      * AuthorizationServer::getResponseType() to pull in your version of
  69.      * this class rather than the default.
  70.      *
  71.      * @param AccessTokenEntityInterface $accessToken
  72.      *
  73.      * @return array
  74.      */
  75.     protected function getExtraParams(AccessTokenEntityInterface $accessToken)
  76.     {
  77.         return [];
  78.     }
  79. }