Password Grant

Author: JeffreyVerreckt

.env.dist

@@ -15,3 +15,9 @@ APP_SECRET=cc3d4aecd8aa414ca1cfc969839807f4
 # Configure your db driver and server_version in config/packages/doctrine.yaml
 DATABASE_URL=mysql://db_user:[email protected]:3306/db_name
 ###< doctrine/doctrine-bundle ###
+
+###> oAuth2 Server ###
+OAUTH2_PRIVATE_KEY=/application/private.key
+OAUTH2_PUBLIC_KEY=/application/public.key
+OAUTH2_ENCRYPTION_KEY=
+###< oAuth2 Server ###

composer.json

@@ -12,8 +12,10 @@
         "symfony/flex": "^1.1",
         "symfony/framework-bundle": "*",
         "symfony/orm-pack": "^1.0",
+        "symfony/psr-http-message-bridge": "^1.1",
         "symfony/security-bundle": "*",
-        "symfony/yaml": "*"
+        "symfony/yaml": "*",
+        "zendframework/zend-diactoros": "^2.0"
     },
     "require-dev": {
         "symfony/dotenv": "*"

composer.lock

@@ -28,3 +28,21 @@ services:
 
     # add more service definitions when explicit configuration is needed
     # please note that last definitions always *replace* previous ones
+
+    League\OAuth2\Server\AuthorizationServer:
+        arguments:
+            $clientRepository: '@App\Infrastructure\oAuth2Server\Bridge\ClientRepository'
+            $accessTokenRepository: '@App\Infrastructure\oAuth2Server\Bridge\AccessTokenRepository'
+            $scopeRepository: '@App\Infrastructure\oAuth2Server\Bridge\ScopeRepository'
+            $privateKey: '%env(OAUTH2_PRIVATE_KEY)%'
+            $encryptionKey: '%env(OAUTH2_ENCRYPTION_KEY)%'
+
+    League\OAuth2\Server\Grant\PasswordGrant:
+        arguments:
+            $userRepository: '@App\Infrastructure\oAuth2Server\Bridge\UserRepository'
+            $refreshTokenRepository: '@App\Infrastructure\oAuth2Server\Bridge\RefreshTokenRepository'
+
+    League\OAuth2\Server\ResourceServer:
+        arguments:
+            $accessTokenRepository: '@App\Infrastructure\oAuth2Server\Bridge\AccessTokenRepository'
+            $publicKey: '%env(OAUTH2_PUBLIC_KEY)%'

config/services.yaml

@@ -0,0 +1,105 @@
+<?php
+
+namespace App\Application\EventSubscriber;
+
+use App\Presentation\Api\Rest\Controller\TokenAuthenticatedController;
+use League\OAuth2\Server\Exception\OAuthServerException;
+use League\OAuth2\Server\ResourceServer;
+use Psr\Http\Message\ServerRequestInterface;
+use Symfony\Bridge\PsrHttpMessage\Factory\DiactorosFactory;
+use Symfony\Component\EventDispatcher\EventSubscriberInterface;
+use Symfony\Component\HttpFoundation\JsonResponse;
+use Symfony\Component\HttpFoundation\Request;
+use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\HttpKernel\Event\FilterControllerEvent;
+use Symfony\Component\HttpKernel\Event\GetResponseForExceptionEvent;
+use Symfony\Component\HttpKernel\KernelEvents;
+
+final class TokenSubscriber implements EventSubscriberInterface
+{
+    /**
+     * @var ResourceServer
+     */
+    private $resourceServer;
+
+    /**
+     * TokenSubscriber constructor.
+     * @param ResourceServer $resourceServer
+     */
+    public function __construct(ResourceServer $resourceServer)
+    {
+        $this->resourceServer = $resourceServer;
+    }
+
+    /**
+     * @return array
+     */
+    public static function getSubscribedEvents(): array
+    {
+       return [
+           KernelEvents::CONTROLLER => 'onKernelController',
+           KernelEvents::EXCEPTION => 'onKernelException'
+       ];
+    }
+
+    /**
+     * @param FilterControllerEvent $event
+     * @throws OAuthServerException
+     */
+    public function onKernelController(FilterControllerEvent $event): void
+    {
+        $controller = $event->getController();
+
+        /*
+         * $controller passed can be either a class or a Closure.
+         * This is not usual in Symfony but it may happen.
+         * If it is a class, it comes in array format
+         */
+        if (!\is_array($controller)) {
+            return;
+        }
+
+        if ($controller[0] instanceof TokenAuthenticatedController) {
+            $request = $event->getRequest();
+            $psrRequest = (new DiactorosFactory)->createRequest($request);
+            try {
+                $psrRequest = $this->resourceServer->validateAuthenticatedRequest($psrRequest);
+            } catch (OAuthServerException $exception) {
+                throw $exception;
+            } catch (\Exception $exception) {
+                throw new OAuthServerException($exception->getMessage(), 0, 'unknown_error', Response::HTTP_INTERNAL_SERVER_ERROR);
+            }
+
+            $this->enrichSymfonyRequestWithAuthData($request, $psrRequest);
+        }
+    }
+
+    /**
+     * @param Request $request
+     * @param ServerRequestInterface $psrRequest
+     */
+    private function enrichSymfonyRequestWithAuthData(Request $request, ServerRequestInterface $psrRequest): void
+    {
+        $request = $request->request;
+        $requestArray = $request->all();
+        $requestArray['oauth_user_id'] = $psrRequest->getAttribute('oauth_user_id');
+        $requestArray['oauth_access_token_id'] =  $psrRequest->getAttribute('oauth_access_token_id');
+        $requestArray['oauth_client_id'] =  $psrRequest->getAttribute('oauth_client_id');
+        $request->replace($requestArray);
+    }
+
+    /**
+     * @param GetResponseForExceptionEvent $event
+     */
+    public function onKernelException(GetResponseForExceptionEvent $event): void
+    {
+        $exception = $event->getException();
+
+        if (!($exception instanceof OAuthServerException)) {
+            return;
+        }
+
+        $response = new JsonResponse(['error' => $exception->getMessage()], $exception->getHttpStatusCode());
+        $event->setResponse($response);
+    }
+}

src/Application/EventSubscriber/TokenSubscriber.php

@@ -3,11 +3,11 @@
 namespace App\Application\Repository\Doctrine;
 
 use App\Domain\Model\RefreshToken;
-use App\Domain\Repository\AccessTokenRepositoryInterface;
+use App\Domain\Repository\RefreshTokenRepositoryInterface;
 use Doctrine\Common\Persistence\ObjectRepository;
 use Doctrine\ORM\EntityManagerInterface;
 
-final class RefreshTokenRepository implements AccessTokenRepositoryInterface
+final class RefreshTokenRepository implements RefreshTokenRepositoryInterface
 {
     private const ENTITY = RefreshToken::class;