57 lines
1.6 KiB
PHP
57 lines
1.6 KiB
PHP
|
<?php namespace SokoWeb\OAuth;
|
||
|
|
|
||
|
|
use SokoWeb\Interfaces\Http\IRequest;
|
||
|
|
|
||
|
|
class GoogleOAuth
|
||
|
|
{
|
||
|
|
private static string $dialogUrlBase = 'https://accounts.google.com/o/oauth2/v2/auth';
|
||
|
|
|
||
|
|
private static string $tokenUrlBase = 'https://oauth2.googleapis.com/token';
|
||
|
|
|
||
|
|
private IRequest $request;
|
||
|
|
|
||
|
|
public function __construct(IRequest $request)
|
||
|
|
{
|
||
|
|
$this->request = $request;
|
||
|
|
}
|
||
|
|
|
||
|
|
public function getDialogUrl(string $state, string $redirectUrl, ?string $nonce = null, ?string $loginHint = null): string
|
||
|
|
{
|
||
|
|
$oauthParams = [
|
||
|
|
'response_type' => 'code',
|
||
|
|
'client_id' => $_ENV['GOOGLE_OAUTH_CLIENT_ID'],
|
||
|
|
'scope' => 'openid email',
|
||
|
|
'redirect_uri' => $redirectUrl,
|
||
|
|
'state' => $state,
|
||
|
|
];
|
||
|
|
|
||
|
|
if ($nonce !== null) {
|
||
|
|
$oauthParams['nonce'] = $nonce;
|
||
|
|
}
|
||
|
|
|
||
|
|
if ($loginHint !== null) {
|
||
|
|
$oauthParams['login_hint'] = $loginHint;
|
||
|
|
}
|
||
|
|
|
||
|
|
return self::$dialogUrlBase . '?' . http_build_query($oauthParams);
|
||
|
|
}
|
||
|
|
|
||
|
|
public function getToken(string $code, string $redirectUrl): array
|
||
|
|
{
|
||
|
|
$tokenParams = [
|
||
|
|
'code' => $code,
|
||
|
|
'client_id' => $_ENV['GOOGLE_OAUTH_CLIENT_ID'],
|
||
|
|
'client_secret' => $_ENV['GOOGLE_OAUTH_CLIENT_SECRET'],
|
||
|
|
'redirect_uri' => $redirectUrl,
|
||
|
|
'grant_type' => 'authorization_code',
|
||
|
|
];
|
||
|
|
|
||
|
|
$this->request->setUrl(self::$tokenUrlBase);
|
||
|
|
$this->request->setMethod(IRequest::HTTP_POST);
|
||
|
|
$this->request->setQuery($tokenParams);
|
||
|
|
$response = $this->request->send();
|
||
|
|
|
||
|
|
return json_decode($response->getBody(), true);
|
||
|
|
}
|
||
|
|
}
|