2024-07-19 23:51:55 +00:00
|
|
|
<?php
|
|
|
|
|
namespace Oatmeal;
|
|
|
|
|
|
2024-07-20 00:26:16 +00:00
|
|
|
use Index\Http\Routing\{HttpGet,HttpPost,RouteHandler};
|
|
|
|
|
use Index\Security\CSRFP;
|
2024-07-19 23:51:55 +00:00
|
|
|
|
|
|
|
|
final class RefreshTokenRoutes extends RouteHandler {
|
2024-07-20 00:26:16 +00:00
|
|
|
public function __construct(
|
|
|
|
|
private CSRFP $csrfp
|
|
|
|
|
) {}
|
|
|
|
|
|
2024-07-19 23:51:55 +00:00
|
|
|
#[HttpGet('/refresh_token')]
|
2024-07-20 00:26:16 +00:00
|
|
|
public function getRefreshToken(): string {
|
|
|
|
|
return <<<HTML
|
|
|
|
|
<!doctype html>
|
|
|
|
|
<meta charset=utf-8>
|
|
|
|
|
<title>Oatmeal / Refresh token</title>
|
|
|
|
|
<style>
|
|
|
|
|
div { margin: .5em 0; }
|
|
|
|
|
span { display: inline-block; min-width: 200px; text-align: right; }
|
|
|
|
|
input[type=text], input[type=url], input[type=password] { min-width: 500px; }
|
|
|
|
|
</style>
|
|
|
|
|
<h1>Oatmeal / Refresh token</h1>
|
|
|
|
|
<p>
|
|
|
|
|
Enter the refresh token you obtained through the <a href=/authorization_code>authorisation code flow</a> to obtain a new access token.
|
|
|
|
|
</p>
|
|
|
|
|
<form method=post action=/refresh_token>
|
|
|
|
|
<input type=hidden name=csrfp value="{$this->csrfp->createToken()}">
|
|
|
|
|
<div>
|
|
|
|
|
<label>
|
|
|
|
|
<span>Token URI (POST):</span>
|
|
|
|
|
<input type=url name=token_uri required>
|
|
|
|
|
</label>
|
|
|
|
|
</div>
|
|
|
|
|
<div>
|
|
|
|
|
<label>
|
|
|
|
|
<span>Refresh token:</span>
|
|
|
|
|
<input type=text name=refresh_token>
|
|
|
|
|
</label>
|
|
|
|
|
</div>
|
|
|
|
|
<div>
|
|
|
|
|
<label>
|
|
|
|
|
<span>Client ID:</span>
|
|
|
|
|
<input type=text name=client_id required>
|
|
|
|
|
</label>
|
|
|
|
|
</div>
|
|
|
|
|
<div>
|
|
|
|
|
<label>
|
|
|
|
|
<span>Client secret (optional):</span>
|
|
|
|
|
<input type=password name=client_secret>
|
|
|
|
|
</label>
|
|
|
|
|
</div>
|
|
|
|
|
<div>
|
|
|
|
|
<span>Authentication:</span>
|
|
|
|
|
<label>
|
|
|
|
|
<input type=radio name=auth value=random checked>
|
|
|
|
|
Random
|
|
|
|
|
</label>
|
|
|
|
|
<label>
|
|
|
|
|
<input type=radio name=auth value=header>
|
|
|
|
|
Authorization header
|
|
|
|
|
</label>
|
|
|
|
|
<label>
|
|
|
|
|
<input type=radio name=auth value=body>
|
|
|
|
|
Request body
|
|
|
|
|
</label>
|
|
|
|
|
</div>
|
|
|
|
|
<div>
|
|
|
|
|
<button>Submit</button>
|
|
|
|
|
<button type=reset>Reset</button>
|
|
|
|
|
</div>
|
|
|
|
|
</form>
|
|
|
|
|
<a href=/>Return</a>
|
|
|
|
|
HTML;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[HttpPost('/refresh_token')]
|
|
|
|
|
public function postRefreshToken($response, $request): string {
|
|
|
|
|
if(!$request->isFormContent())
|
|
|
|
|
return 400;
|
|
|
|
|
$content = $request->getContent();
|
|
|
|
|
|
|
|
|
|
$csrfp = (string)$content->getParam('csrfp');
|
|
|
|
|
if(!$this->csrfp->verifyToken($csrfp))
|
|
|
|
|
return 403;
|
|
|
|
|
|
|
|
|
|
$tokenUri = (string)$content->getParam('token_uri');
|
|
|
|
|
if(filter_var($tokenUri, FILTER_VALIDATE_URL) === false) {
|
|
|
|
|
$response->setStatusCode(400);
|
|
|
|
|
return <<<HTML
|
|
|
|
|
<!doctype html>
|
|
|
|
|
<meta charset=utf-8>
|
|
|
|
|
<title>Oatmeal / Refresh token</title>
|
|
|
|
|
<h1>Oatmeal / Refresh token</h1>
|
|
|
|
|
<p>Provided Token URI was not a valid absolute URI.</p>
|
|
|
|
|
<a href="javascript:history.back();">Return</a>
|
|
|
|
|
HTML;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
$clientId = (string)$content->getParam('client_id');
|
|
|
|
|
$clientSecret = (string)$content->getParam('client_secret');
|
|
|
|
|
$refreshToken = (string)$content->getParam('refresh_token');
|
|
|
|
|
$auth = (string)$content->getParam('auth');
|
|
|
|
|
|
|
|
|
|
$headers = [];
|
|
|
|
|
$body = [
|
|
|
|
|
'grant_type' => 'refresh_token',
|
|
|
|
|
'refresh_token' => $refreshToken,
|
|
|
|
|
];
|
|
|
|
|
|
|
|
|
|
if($clientSecret === '')
|
|
|
|
|
$body['client_id'] = $clientId;
|
|
|
|
|
elseif($auth === 'body' || ($auth !== 'header' && mt_rand(0, 10) > 5)) {
|
|
|
|
|
$body['client_id'] = $clientId;
|
|
|
|
|
$body['client_secret'] = $clientSecret;
|
|
|
|
|
} else
|
|
|
|
|
$headers[] = sprintf('Authorization: Basic %s', base64_encode(sprintf('%s:%s', $clientId, $clientSecret)));
|
|
|
|
|
|
|
|
|
|
$body = Tools::shuffleArray($body);
|
|
|
|
|
$response = Tools::fetch($tokenUri, headers: $headers, body: $body);
|
|
|
|
|
|
|
|
|
|
$tokenUri = htmlspecialchars($tokenUri);
|
|
|
|
|
$headers = htmlspecialchars(json_encode($headers, JSON_PRETTY_PRINT));
|
|
|
|
|
$body = htmlspecialchars(json_encode($body, JSON_PRETTY_PRINT));
|
|
|
|
|
|
|
|
|
|
$decoded = json_decode($response);
|
|
|
|
|
if($decoded !== null)
|
|
|
|
|
$response = json_encode($decoded, JSON_PRETTY_PRINT);
|
|
|
|
|
|
|
|
|
|
$response = htmlspecialchars($response);
|
|
|
|
|
|
|
|
|
|
return <<<HTML
|
|
|
|
|
<!doctype html>
|
|
|
|
|
<meta charset=utf-8>
|
|
|
|
|
<title>Oatmeal / Refresh token</title>
|
|
|
|
|
<style>
|
|
|
|
|
div { margin: .5em 0; }
|
|
|
|
|
span { display: inline-block; min-width: 200px; text-align: right; }
|
|
|
|
|
input[type=text] { min-width: 500px; }
|
|
|
|
|
textarea { min-width: 100%; max-width: 100%; min-height: 200px; box-sizing: border-box; }
|
|
|
|
|
</style>
|
|
|
|
|
<h1>Oatmeal / Refresh token</h1>
|
|
|
|
|
<p>Below is the request and response data from your request token result. If the response contains a refresh_token field, you can restart the <a href=/refresh_token>Refresh token flow</a> again and again and again and again!</p>
|
|
|
|
|
<div>
|
|
|
|
|
<label>
|
|
|
|
|
<span>Token URI (POST):</span>
|
|
|
|
|
<input type=text value="{$tokenUri}">
|
|
|
|
|
</label>
|
|
|
|
|
</div>
|
|
|
|
|
<div>
|
|
|
|
|
<label>
|
|
|
|
|
<span>Headers:</span><br>
|
|
|
|
|
<textarea readonly>{$headers}</textarea>
|
|
|
|
|
</label>
|
|
|
|
|
</div>
|
|
|
|
|
<div>
|
|
|
|
|
<label>
|
|
|
|
|
<span>Request body (sent as application/x-www-form-urlencoded, presented as JSON for consistency):</span><br>
|
|
|
|
|
<textarea readonly>{$body}</textarea>
|
|
|
|
|
</label>
|
|
|
|
|
</div>
|
|
|
|
|
<div>
|
|
|
|
|
<label>
|
|
|
|
|
<span>Response body:</span><br>
|
|
|
|
|
<textarea readonly>{$response}</textarea>
|
|
|
|
|
</label>
|
|
|
|
|
</div>
|
|
|
|
|
<a href=/refresh_token>Return</a>
|
|
|
|
|
HTML;
|
2024-07-19 23:51:55 +00:00
|
|
|
}
|
|
|
|
|
}
|
