You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
This repo is archived. You can view files and clone it, but cannot push or open issues/pull-requests.
oauth-account/ExternalAccount/OAuthExternalAccountProvide...

142 lines
4.4 KiB

<?php
/**
* Authserver, an OAuth2-based single-signon authentication provider written in PHP.
*
* Copyright (C) $today.date Lars Vierbergen
*
* his program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
namespace vierbergenlars\AuthserverOAuthAccountBundle\ExternalAccount;
use HWI\Bundle\OAuthBundle\Security\OAuthUtils;
use HWI\Bundle\OAuthBundle\Security\Core\Authentication\Token\OAuthToken;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
use Symfony\Component\Security\Core\Exception\AccessDeniedException;
use vierbergenlars\AuthserverExternalAccountBundle\Entity\ExternalUser;
use vierbergenlars\AuthserverExternalAccountBundle\ExternalAccount\ExternalAccountProviderInterface;
use vierbergenlars\AuthserverExternalAccountBundle\ValueObject\Button;
use vierbergenlars\AuthserverOAuthAccountBundle\ResourceOwner\ResourceOwnerMap;
use vierbergenlars\AuthserverOAuthAccountBundle\Security\Core\User\OAuthUserProvider;
class OAuthExternalAccountProvider implements ExternalAccountProviderInterface
{
/**
*
* @var ResourceOwnerConfig
*/
private $resourceOwnerConfig;
/**
*
* @var
*/
private $name;
/**
*
* @var OAuthUtils
*/
private $OAuthUtils;
/**
*
* @var OAuthUserProvider
*/
private $userProvider;
/**
*
* @var TokenStorageInterface
*/
private $tokenStorage;
/**
*
* @var \HWI\Bundle\OAuthBundle\Security\Http\ResourceOwnerMap
*/
private $hwiResourceOwnerMap;
public function __construct($name, ResourceOwnerMap $resourceOwnerMap, OAuthUtils $OAuthUtils, OAuthUserProvider $userProvider, TokenStorageInterface $tokenStorage, \HWI\Bundle\OAuthBundle\Security\Http\ResourceOwnerMap $hwiResourceOwnerMap)
{
$this->resourceOwnerConfig = $resourceOwnerMap[$name];
$this->name = $name;
$this->OAuthUtils = $OAuthUtils;
$this->userProvider = $userProvider;
$this->tokenStorage = $tokenStorage;
$this->hwiResourceOwnerMap = $hwiResourceOwnerMap;
}
public function getName()
{
return 'oauth_' . $this->name;
}
public function getServiceName()
{
return $this->resourceOwnerConfig->getServiceName();
}
public function getIcon()
{
return $this->resourceOwnerConfig->getIcon();
}
public function getLoginButton()
{
return new Button($this->resourceOwnerConfig->getLoginButton() + [
'url' => $this->OAuthUtils->getLoginUrl(new Request(), $this->name)
]);
}
public function getConnectButton()
{
return new Button($this->resourceOwnerConfig->getConnectButton() + [
'url' => $this->OAuthUtils->getLoginUrl(new Request(), $this->name)
]);
}
public function hasConnect()
{
return true;
}
public function hasDisconnect()
{
return true;
}
public function disconnect(ExternalUser $externalUser)
{
$token = $this->tokenStorage->getToken();
if ($token instanceof OAuthToken) {
if ('oauth_' . $token->getResourceOwnerName() === $externalUser->getProvider()) {
$resourceOwner = $this->hwiResourceOwnerMap->getResourceOwnerByName($token->getResourceOwnerName());
$userInfo = $resourceOwner->getUserInformation($token->getRawToken());
if ($userInfo->getUsername() == $externalUser->getProviderRef()) {
throw new AccessDeniedException('You can not disconnect the external user you are currently authenticated with.');
}
}
}
$this->userProvider->disconnect($externalUser);
}
public function supports($externalProviderData)
{
return true;
}
}