-
Notifications
You must be signed in to change notification settings - Fork 61
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
4 changed files
with
208 additions
and
2 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,143 @@ | ||
| <?php | ||
|
|
||
| namespace App\Providers\Socialite; | ||
|
|
||
| use Laravel\Socialite\Two\AbstractProvider; | ||
| use Laravel\Socialite\Two\ProviderInterface; | ||
| use GuzzleHttp\Exception\GuzzleException; | ||
| use Laravel\Socialite\Two\User; | ||
| use Log; | ||
|
|
||
| /** | ||
| * Generic OpenId Connect provider for Socialite. | ||
| */ | ||
| class GenericSocialiteProvider extends AbstractProvider implements ProviderInterface | ||
| { | ||
|
|
||
| /** | ||
| * Unique Provider Identifier. | ||
| */ | ||
| public const IDENTIFIER = 'OIDC'; | ||
|
|
||
| /** | ||
| * Scope definitions. | ||
| */ | ||
| public const SCOPE_EMAIL = 'email'; | ||
| public const SCOPE_OPENID = 'openid'; | ||
| public const SCOPE_PROFILE = 'profile'; | ||
|
|
||
| /** | ||
| * Adjust the available read / write attributes in cognito client app. | ||
| * | ||
| * {@inheritdoc} | ||
| */ | ||
| protected $scopes = [ | ||
| self::SCOPE_OPENID, | ||
| self::SCOPE_PROFILE, | ||
| self::SCOPE_EMAIL, | ||
| ]; | ||
|
|
||
| /** | ||
| * {@inheritdoc} | ||
| */ | ||
| protected $scopeSeparator = ' '; | ||
|
|
||
| /** | ||
| * Return provider Url. | ||
| * @return string | ||
| */ | ||
| public function getOIDCUrl() | ||
| { | ||
| return rtrim(config('services.oidc.host'), '/').'/oauth2'; | ||
| } | ||
|
|
||
| /** | ||
| * @param string $state | ||
| * | ||
| * @return string | ||
| */ | ||
| protected function getAuthUrl($state) | ||
| { | ||
| $base_url = $this->getOIDCUrl().'/authorize'; | ||
| // If authorize endpoint set, use it instead | ||
| if (config('services.oidc.authorize_endpoint')){ | ||
| $base_url = config('services.oidc.authorize_endpoint'); | ||
| } | ||
| Log::debug('Buiild auth url from base : '.$base_url); | ||
| return $this->buildAuthUrlFromBase($base_url, $state); | ||
| } | ||
|
|
||
| /** | ||
| * @return string | ||
| */ | ||
| protected function getTokenUrl() | ||
| { | ||
| // If token endpoint set, use it instead | ||
| if (config('services.oidc.token_endpoint')){ | ||
| return config('services.oidc.token_endpoint'); | ||
| } | ||
| return $this->getOIDCUrl() . '/token'; | ||
| } | ||
|
|
||
| /** | ||
| * @param string $token | ||
| * | ||
| * @throws GuzzleException | ||
| * | ||
| * @return array|mixed | ||
| */ | ||
| protected function getUserByToken($token) | ||
| { | ||
| $base_url = $this->getOIDCUrl() . '/userinfo'; | ||
| // If userinfo endpoint set, use it instead | ||
| if (config('services.oidc.userinfo_endpoint')){ | ||
| $base_url = config('services.oidc.userinfo_endpoint'); | ||
| } | ||
|
|
||
| Log::debug('Get user info from '.$base_url); | ||
| $response = $this->getHttpClient()->post($base_url, [ | ||
| 'headers' => [ | ||
| 'cache-control' => 'no-cache', | ||
| 'Authorization' => 'Bearer ' . $token, | ||
| 'Content-Type' => 'application/x-www-form-urlencoded', | ||
| ], | ||
| ]); | ||
|
|
||
| return json_decode($response->getBody()->getContents(), true); | ||
| } | ||
|
|
||
| /** | ||
| * @return User | ||
| */ | ||
| protected function mapUserToObject(array $user) | ||
| { | ||
| Log::debug('Provider return user :'.var_export($user, true)); | ||
| $socialite_user = []; | ||
| foreach(config('services.oidc.map_user_attr') as $socialite_attr => $provider_attr){ | ||
| if ( ! array_key_exists($provider_attr, $user)){ | ||
| Log::debug("'$provider_attr' not provided"); | ||
| continue; | ||
| } | ||
| Log::debug("Map socialite_user['$socialite_attr']=".$user[$provider_attr]); | ||
| $socialite_user[$socialite_attr] = $user[$provider_attr]; | ||
| } | ||
| return (new User())->setRaw($user)->map($socialite_user); | ||
| } | ||
|
|
||
| /** | ||
| * {@inheritdoc} | ||
| */ | ||
| public static function additionalConfigKeys(): array | ||
| { | ||
| return [ | ||
| 'client_id', | ||
| 'host', | ||
| 'logout_uri', | ||
| 'redirect', | ||
| 'authorize_endpoint', | ||
| 'userinfo_endpoint', | ||
| 'token_endpoint', | ||
| 'map_user_attr', | ||
| ]; | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters