对接AliGenie天猫精灵服务器控制智能硬件esp8266② 全面认识第三方授权机制 oauth2.0 协议，如何在 php ...

<?php namespace OAuth2; use OAuth2\Controller\ResourceControllerInterface; use OAuth2\Controller\ResourceController; use OAuth2\OpenID\Controller\UserInfoControllerInterface; use OAuth2\OpenID\Controller\UserInfoController; use OAuth2\OpenID\Controller\AuthorizeController as OpenIDAuthorizeController; use OAuth2\OpenID\ResponseType\AuthorizationCode as OpenIDAuthorizationCodeResponseType; use OAuth2\OpenID\Storage\AuthorizationCodeInterface as OpenIDAuthorizationCodeInterface; use OAuth2\OpenID\GrantType\AuthorizationCode as OpenIDAuthorizationCodeGrantType; use OAuth2\Controller\AuthorizeControllerInterface; use OAuth2\Controller\AuthorizeController; use OAuth2\Controller\TokenControllerInterface; use OAuth2\Controller\TokenController; use OAuth2\ClientAssertionType\ClientAssertionTypeInterface; use OAuth2\ClientAssertionType\HttpBasic; use OAuth2\ResponseType\ResponseTypeInterface; use OAuth2\ResponseType\AuthorizationCode as AuthorizationCodeResponseType; use OAuth2\ResponseType\AccessToken; use OAuth2\ResponseType\JwtAccessToken; use OAuth2\OpenID\ResponseType\CodeIdToken; use OAuth2\OpenID\ResponseType\IdToken; use OAuth2\OpenID\ResponseType\IdTokenToken; use OAuth2\TokenType\TokenTypeInterface; use OAuth2\TokenType\Bearer; use OAuth2\GrantType\GrantTypeInterface; use OAuth2\GrantType\UserCredentials; use OAuth2\GrantType\ClientCredentials; use OAuth2\GrantType\RefreshToken; use OAuth2\GrantType\AuthorizationCode; use OAuth2\Storage\ClientCredentialsInterface; use OAuth2\Storage\ClientInterface; use OAuth2\Storage\JwtAccessToken as JwtAccessTokenStorage; use OAuth2\Storage\JwtAccessTokenInterface; use InvalidArgumentException; use LogicException; /** * Server class for OAuth2 * This class serves as a convience class which wraps the other Controller classes * * @see \OAuth2\Controller\ResourceController * @see \OAuth2\Controller\AuthorizeController * @see \OAuth2\Controller\TokenController */ class Server implements ResourceControllerInterface, AuthorizeControllerInterface, TokenControllerInterface, UserInfoControllerInterface { /** * @var ResponseInterface */ protected $response; /** * @var array */ protected $config; /** * @var array */ protected $storages; /** * @var AuthorizeControllerInterface */ protected $authorizeController; /** * @var TokenControllerInterface */ protected $tokenController; /** * @var ResourceControllerInterface */ protected $resourceController; /** * @var UserInfoControllerInterface */ protected $userInfoController; /** * @var array */ protected $grantTypes = array(); /** * @var array */ protected $responseTypes = array(); /** * @var TokenTypeInterface */ protected $tokenType; /** * @var ScopeInterface */ protected $scopeUtil; /** * @var ClientAssertionTypeInterface */ protected $clientAssertionType; /** * @var array */ protected $storageMap = array( 'access_token' => 'OAuth2\Storage\AccessTokenInterface', 'authorization_code' => 'OAuth2\Storage\AuthorizationCodeInterface', 'client_credentials' => 'OAuth2\Storage\ClientCredentialsInterface', 'client' => 'OAuth2\Storage\ClientInterface', 'refresh_token' => 'OAuth2\Storage\RefreshTokenInterface', 'user_credentials' => 'OAuth2\Storage\UserCredentialsInterface', 'user_claims' => 'OAuth2\OpenID\Storage\UserClaimsInterface', 'public_key' => 'OAuth2\Storage\PublicKeyInterface', 'jwt_bearer' => 'OAuth2\Storage\JWTBearerInterface', 'scope' => 'OAuth2\Storage\ScopeInterface', ); /** * @var array */ protected $responseTypeMap = array( 'token' => 'OAuth2\ResponseType\AccessTokenInterface', 'code' => 'OAuth2\ResponseType\AuthorizationCodeInterface', 'id_token' => 'OAuth2\OpenID\ResponseType\IdTokenInterface', 'id_token token' => 'OAuth2\OpenID\ResponseType\IdTokenTokenInterface', 'code id_token' => 'OAuth2\OpenID\ResponseType\CodeIdTokenInterface', ); /** * @param mixed $storage (array or OAuth2\Storage) - single object or array of objects implementing the * required storage types (ClientCredentialsInterface and AccessTokenInterface as a minimum) * @param array $config specify a different token lifetime, token header name, etc * @param array $grantTypes An array of OAuth2\GrantType\GrantTypeInterface to use for granting access tokens * @param array $responseTypes Response types to use. array keys should be "code" and "token" for * Access Token and Authorization Code response types * @param TokenTypeInterface $tokenType The token type object to use. Valid token types are "bearer" and "mac" * @param ScopeInterface $scopeUtil The scope utility class to use to validate scope * @param ClientAssertionTypeInterface $clientAssertionType The method in which to verify the client identity. Default is HttpBasic * * @ingroup oauth2_section_7 */ public function __construct($storage = array(), array $config = array(), array $grantTypes = array(), array $responseTypes = array(), TokenTypeInterface $tokenType = null, ScopeInterface $scopeUtil = null, ClientAssertionTypeInterface $clientAssertionType = null) { $storage = is_array($storage) ? $storage : array($storage); $this->storages = array(); foreach ($storage as $key => $service) { $this->addStorage($service, $key); } // merge all config values. These get passed to our controller objects $this->config = array_merge(array( 'use_jwt_access_tokens' => false, 'jwt_extra_payload_callable' => null, 'store_encrypted_token_string' => true, 'use_openid_connect' => false, 'id_lifetime' => 3600, 'access_lifetime' => 3600, 'www_realm' => 'Service', 'token_param_name' => 'access_token', 'token_bearer_header_name' => 'Bearer', 'enforce_state' => true, 'require_exact_redirect_uri' => false, 'allow_implicit' => false, 'allow_credentials_in_request_body' => true, 'allow_public_clients' => true, 'always_issue_new_refresh_token' => false, 'unset_refresh_token_after_use' => true, ), $config); foreach ($grantTypes as $key => $grantType) { $this->addGrantType($grantType, $key); } foreach ($responseTypes as $key => $responseType) { $this->addResponseType($responseType, $key); } $this->tokenType = $tokenType; $this->scopeUtil = $scopeUtil; $this->clientAssertionType = $clientAssertionType; if ($this->config['use_openid_connect']) { $this->validateOpenIdConnect(); } } /** * @return AuthorizeControllerInterface */ public function getAuthorizeController() { if (is_null($this->authorizeController)) { $this->authorizeController = $this->createDefaultAuthorizeController(); } return $this->authorizeController; } /** * @return TokenController */ public function getTokenController() { if (is_null($this->tokenController)) { $this->tokenController = $this->createDefaultTokenController(); } return $this->tokenController; } /** * @return