[smarcet] - #5020 - Basic Client Flow (with authorization code)

app/libs/oauth2/OAuth2Protocol.php

@@ -5,18 +5,55 @@ namespace oauth2;
 use oauth2\requests\OAuth2Request;
 use oauth2\endpoints\AuthorizationEndpoint;
 use oauth2\endpoints\TokenEndpoint;
+use oauth2\exceptions\InvalidOAuth2Request;
+use oauth2\exceptions\InvalidClientException;
+use oauth2\exceptions\UriNotAllowedException;
+use oauth2\exceptions\ScopeNotAllowedException;
+use oauth2\responses\OAuth2ErrorResponse;
+use oauth2\exceptions\UnsupportedResponseTypeException;
+use oauth2\exceptions\UnAuthorizedClientException;
+use utils\services\ILogService;
 
 class OAuth2Protocol implements  IOAuth2Protocol{
 
+    private $log_service;
+    public function __construct(ILogService $log_service){
+        $this->log_service = $log_service;
+        $this->authorize_endpoint = new AuthorizationEndpoint;
+        $this->token_endpoint     = new TokenEndpoint;
+    }
+
     private $authorize_endpoint;
     private $token_endpoint;
 
+    const OAuth2Protocol_GrantType_AuthCode               = 'authorization_code';
+    const OAuth2Protocol_GrantType_Implicit               = 'implicit';
+    const OAuth2Protocol_GrantType_ResourceOwner_Password = 'password';
+    const OAuth2Protocol_GrantType_ClientCredentials      = 'client_credentials';
+
+    const OAuth2Protocol_ResponseType_Code  = 'code';
+    const OAuth2Protocol_ResponseType_Token = 'token';
+
+    public static $valid_responses_types = array(
+        self::OAuth2Protocol_ResponseType_Code =>self::OAuth2Protocol_ResponseType_Code,
+        self::OAuth2Protocol_ResponseType_Token => self::OAuth2Protocol_ResponseType_Token
+    );
 
     const OAuth2Protocol_ResponseType  = "response_type";
     const OAuth2Protocol_ClientId      = "client_id";
     const OAuth2Protocol_RedirectUri   = "redirect_uri";
     const OAuth2Protocol_Scope         = "scope";
     const OAuth2Protocol_State         = "state";
+    const OAuth2Protocol_Error         = "error";
+    const OAuth2Protocol_ErrorDescription = "error_description";
+    const OAuth2Protocol_ErrorUri = "error_uri";
+    const OAuth2Protocol_Error_InvalidRequest = "invalid_request";
+    const OAuth2Protocol_Error_UnauthorizedClient = "unauthorized_client";
+    const OAuth2Protocol_Error_AccessDenied = "access_denied";
+    const OAuth2Protocol_Error_UnsupportedResponseType = "unsupported_response_type";
+    const OAuth2Protocol_Error_InvalidScope = "invalid_scope";
+    const OAuth2Protocol_Error_ServerError = "server_error";
+    const OAuth2Protocol_Error_TemporallyUnavailable = "temporally_unavailable";
 
     public static $protocol_definition = array(
         self::OAuth2Protocol_ResponseType => self::OAuth2Protocol_ResponseType,
@@ -26,14 +63,47 @@ class OAuth2Protocol implements  IOAuth2Protocol{
         self::OAuth2Protocol_State        => self::OAuth2Protocol_State
     );
 
-    public function __construct(){
-        $this->authorize_endpoint = new AuthorizationEndpoint;
-        $this->token_endpoint     = new TokenEndpoint;
-    }
 
+    /**
+     * @param OAuth2Request $request
+     * @return mixed|OAuth2ErrorResponse
+     * @throws \Exception
+     * @throws exceptions\UriNotAllowedException
+     */
     public function authorize(OAuth2Request $request)
     {
-        return $this->authorize_endpoint->handle($request);
+        try{
+            if (is_null($request) || !$request->isValid())
+                throw new InvalidOAuth2Request;
+            return $this->authorize_endpoint->handle($request);
+        }
+        catch(InvalidOAuth2Request $ex1){
+            $this->log_service->error($ex1);
+            return new OAuth2ErrorResponse(OAuth2Protocol::OAuth2Protocol_Error_InvalidRequest);
+        }
+        catch(UnsupportedResponseTypeException $ex2){
+            $this->log_service->error($ex2);
+            return new OAuth2ErrorResponse(OAuth2Protocol::OAuth2Protocol_Error_UnsupportedResponseType);
+        }
+        catch(InvalidClientException $ex3){
+            $this->log_service->error($ex3);
+            return new OAuth2ErrorResponse(OAuth2Protocol::OAuth2Protocol_Error_UnauthorizedClient);
+        }
+        catch(UriNotAllowedException $ex4){
+            $this->log_service->error($ex4);
+            throw $ex4;
+        }
+        catch(ScopeNotAllowedException $ex5){
+            $this->log_service->error($ex5);
+            return new OAuth2ErrorResponse(OAuth2Protocol::OAuth2Protocol_Error_InvalidScope);
+        }
+        catch(UnAuthorizedClientException $ex6){
+            $this->log_service->error($ex6);
+            return new OAuth2ErrorResponse(OAuth2Protocol::OAuth2Protocol_Error_UnauthorizedClient);
+        }
+        catch(\Exception $ex){
+            return new OAuth2ErrorResponse(OAuth2Protocol::OAuth2Protocol_Error_ServerError);
+        }
     }
 
     public function token(OAuth2Request $request)