Merge pull request 'use name 'oauth_payload' for data received from oauth authentication request' (!10) from bugfix/fix-conflicting-session-keys into master

Reviewed-on: #10

src/Controller/OAuthLoginController.php

@@ -36,7 +36,7 @@ class OAuthLoginController
             return new HtmlContent('oauth/oauth_error', ['error' => 'An invalid request was made. Please start authentication again.']);
         }
 
-        $this->request->session()->set('oauth_state', [
+        $this->request->session()->set('oauth_payload', [
             'redirect_uri' => $redirectUri,
             'state' => $state,
             'nonce' => $nonce === null ? '' : $nonce
@@ -49,12 +49,12 @@ class OAuthLoginController
 
     public function finishOauth()
     {
-        $oauthState = $this->request->session()->get('oauth_state');
+        $oAuthPayload = $this->request->session()->get('oauth_payload');
-        if ($oauthState === null) {
+        if ($oAuthPayload === null) {
             return new HtmlContent('oauth/oauth_error', ['error' => 'An invalid request was made. Please start authentication again.']);
         }
 
-        $this->request->session()->delete('oauth_state');
+        $this->request->session()->delete('oauth_payload');
 
         /**
          * @var ?User $user
@@ -67,16 +67,16 @@ class OAuthLoginController
         $code = bin2hex(random_bytes(16));
 
         $token = new OAuthToken();
-        $token->setNonce($oauthState['nonce']);
+        $token->setNonce($oAuthPayload['nonce']);
         $token->setUser($user);
         $token->setCode($code);
         $token->setCreatedDate(new DateTime());
         $token->setExpiresDate(new DateTime('+5 minutes'));
         $this->pdm->saveToDb($token);
 
-        $redirectUri = $oauthState['redirect_uri'];
+        $redirectUri = $oAuthPayload['redirect_uri'];
         $additionalUriParams = [
-            'state' => $oauthState['state'],
+            'state' => $oAuthPayload['state'],
             'code' => $code
         ];
         $and = (strpos($redirectUri, '?') !== false) ? '&' : '?';