ce12d3cb89
upgraded laravel version from 5.0 to 5.2. Changed ORM from eloquent to Doctrine to support better inheritance handling basically eloquent does not suppor the inheritance model used by Silverstripe which makes dificult to implement write apis on model hierarchies defined with SS schema. Refactoring. Change-Id: I802e171c8b95e81dc21578543ddb6a02003985e5
93 lines
4.8 KiB
PHP
93 lines
4.8 KiB
PHP
<?php namespace libs\oauth2;
|
|
|
|
/**
|
|
* Copyright 2015 OpenStack Foundation
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
**/
|
|
|
|
class OAuth2Protocol
|
|
{
|
|
|
|
const OAuth2Protocol_GrantType_AuthCode = 'authorization_code';
|
|
const OAuth2Protocol_GrantType_Implicit = 'implicit';
|
|
const OAuth2Protocol_GrantType_ResourceOwner_Password = 'password';
|
|
const OAuth2Protocol_GrantType_ClientCredentials = 'client_credentials';
|
|
const OAuth2Protocol_GrantType_RefreshToken = 'refresh_token';
|
|
const OAuth2Protocol_ResponseType_Code = 'code';
|
|
const OAuth2Protocol_ResponseType_Token = 'token';
|
|
const OAuth2Protocol_ResponseType = 'response_type';
|
|
const OAuth2Protocol_ClientId = 'client_id';
|
|
const OAuth2Protocol_UserId = 'user_id';
|
|
const OAuth2Protocol_ClientSecret = 'client_secret';
|
|
const OAuth2Protocol_Token = 'token';
|
|
const OAuth2Protocol_TokenType = 'token_type';
|
|
//http://tools.ietf.org/html/rfc7009#section-2.1
|
|
const OAuth2Protocol_TokenType_Hint = 'token_type_hint';
|
|
const OAuth2Protocol_AccessToken_ExpiresIn = 'expires_in';
|
|
const OAuth2Protocol_RefreshToken = 'refresh_token';
|
|
const OAuth2Protocol_AccessToken = 'access_token';
|
|
const OAuth2Protocol_RedirectUri = 'redirect_uri';
|
|
const OAuth2Protocol_Scope = 'scope';
|
|
const OAuth2Protocol_Audience = 'audience';
|
|
const OAuth2Protocol_State = 'state';
|
|
/**
|
|
* Indicates whether the user should be re-prompted for consent. The default is auto,
|
|
* so a given user should only see the consent page for a given set of scopes the first time
|
|
* through the sequence. If the value is force, then the user sees a consent page even if they
|
|
* previously gave consent to your application for a given set of scopes.
|
|
*/
|
|
const OAuth2Protocol_Approval_Prompt = 'approval_prompt';
|
|
const OAuth2Protocol_Approval_Prompt_Force = 'force';
|
|
const OAuth2Protocol_Approval_Prompt_Auto = 'auto';
|
|
|
|
/**
|
|
* Indicates whether your application needs to access an API when the user is not present at
|
|
* the browser. This parameter defaults to online. If your application needs to refresh access tokens
|
|
* when the user is not present at the browser, then use offline. This will result in your application
|
|
* obtaining a refresh token the first time your application exchanges an authorization code for a user.
|
|
*/
|
|
const OAuth2Protocol_AccessType = 'access_type';
|
|
const OAuth2Protocol_AccessType_Online = 'online';
|
|
const OAuth2Protocol_AccessType_Offline = 'offline';
|
|
|
|
const OAuth2Protocol_GrantType = 'grant_type';
|
|
const OAuth2Protocol_Error = 'error';
|
|
const OAuth2Protocol_ErrorDescription = 'error_description';
|
|
const OAuth2Protocol_ErrorUri = 'error_uri';
|
|
const OAuth2Protocol_Error_InvalidRequest = 'invalid_request';
|
|
const OAuth2Protocol_Error_UnauthorizedClient = 'unauthorized_client';
|
|
const OAuth2Protocol_Error_AccessDenied = 'access_denied';
|
|
const OAuth2Protocol_Error_UnsupportedResponseType = 'unsupported_response_type';
|
|
const OAuth2Protocol_Error_InvalidScope = 'invalid_scope';
|
|
const OAuth2Protocol_Error_UnsupportedGrantType = 'unsupported_grant_type';
|
|
const OAuth2Protocol_Error_InvalidGrant = 'invalid_grant';
|
|
//error codes definitions http://tools.ietf.org/html/rfc6749#section-4.1.2.1
|
|
const OAuth2Protocol_Error_ServerError = 'server_error';
|
|
const OAuth2Protocol_Error_TemporallyUnavailable = 'temporally_unavailable';
|
|
//http://tools.ietf.org/html/rfc7009#section-2.2.1
|
|
const OAuth2Protocol_Error_Unsupported_TokenType = ' unsupported_token_type';
|
|
//http://tools.ietf.org/html/rfc6750#section-3-1
|
|
const OAuth2Protocol_Error_InvalidToken = 'invalid_token';
|
|
const OAuth2Protocol_Error_InsufficientScope = 'insufficient_scope';
|
|
|
|
public static $valid_responses_types = array(
|
|
self::OAuth2Protocol_ResponseType_Code => self::OAuth2Protocol_ResponseType_Code,
|
|
self::OAuth2Protocol_ResponseType_Token => self::OAuth2Protocol_ResponseType_Token
|
|
);
|
|
public static $protocol_definition = array(
|
|
self::OAuth2Protocol_ResponseType => self::OAuth2Protocol_ResponseType,
|
|
self::OAuth2Protocol_ClientId => self::OAuth2Protocol_ClientId,
|
|
self::OAuth2Protocol_RedirectUri => self::OAuth2Protocol_RedirectUri,
|
|
self::OAuth2Protocol_Scope => self::OAuth2Protocol_Scope,
|
|
self::OAuth2Protocol_State => self::OAuth2Protocol_State
|
|
);
|
|
|
|
} |