openstackid/app/libs/oauth2/responses/OAuth2AccessTokenValidationResponse.php
Sebastian Marcet 8c15d9888d Added Origin checking for implicit clients (JS)
* Added origin checking at resource server
* Added to instrospection endpoint allowed origin/return uris info

Change-Id: I85086408a981c4f003503cf03f9e32542a8698ab
2015-03-24 17:01:03 -03:00

33 lines
1.3 KiB
PHP

<?php
namespace oauth2\responses;
use oauth2\OAuth2Protocol;
class OAuth2AccessTokenValidationResponse extends OAuth2DirectResponse {
public function __construct($access_token,$scope, $audience,$client_id,$expires_in, $user_id = null, $allowed_urls = array(), $allowed_origins = array())
{
// Successful Responses: A server receiving a valid request MUST send a
// response with an HTTP status code of 200.
parent::__construct(self::HttpOkResponse, self::DirectResponseContentType);
$this[OAuth2Protocol::OAuth2Protocol_AccessToken] = $access_token;
$this[OAuth2Protocol::OAuth2Protocol_ClientId] = $client_id;
$this[OAuth2Protocol::OAuth2Protocol_TokenType] = 'Bearer';
$this[OAuth2Protocol::OAuth2Protocol_Scope] = $scope;
$this[OAuth2Protocol::OAuth2Protocol_Audience] = $audience;
$this[OAuth2Protocol::OAuth2Protocol_AccessToken_ExpiresIn] = $expires_in;
if(!is_null($user_id)){
$this[OAuth2Protocol::OAuth2Protocol_UserId] = $user_id;
}
if(count($allowed_urls)){
$this['allowed_return_uris'] = implode(' ', $allowed_urls);
}
if(count($allowed_origins)){
$this['allowed_origins'] = implode(' ', $allowed_origins);
}
}
}