89 lines
2.9 KiB
PHP
89 lines
2.9 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
namespace app\controller;
|
||
|
|
|
||
|
|
use support\Request;
|
||
|
|
use support\Db;
|
||
|
|
use Firebase\JWT\JWT;
|
||
|
|
use Firebase\JWT\Key;
|
||
|
|
|
||
|
|
class OAuth
|
||
|
|
{
|
||
|
|
public function authorize(Request $request)
|
||
|
|
{
|
||
|
|
$appid=$request->get('client_id','null');
|
||
|
|
if($appid=='null'){
|
||
|
|
return view('404');
|
||
|
|
}
|
||
|
|
$appquery= Db::table('App')->where('oauthid', $appid);
|
||
|
|
if($appquery->doesntExist()){
|
||
|
|
return view('404');
|
||
|
|
}
|
||
|
|
$app=$appquery->first();
|
||
|
|
$provider= Db::table('Provider')->where('ID', $app->provider)->first();
|
||
|
|
$redirect=$request->get('redirect_uri','null');
|
||
|
|
if($redirect=='null'){
|
||
|
|
$redirect=$app->redirect;
|
||
|
|
}
|
||
|
|
return redirect($redirect.'?code=123456&state='.$request->get('state',''));
|
||
|
|
#return view('auth', ['app'=>$app,'provider'=>$provider]);
|
||
|
|
}
|
||
|
|
|
||
|
|
public function configfile(Request $request)
|
||
|
|
{
|
||
|
|
|
||
|
|
return json([
|
||
|
|
"issuer" => 'https://'.getenv('weburl').'/',
|
||
|
|
"authorization_endpoint" => 'https://'.getenv('weburl').'/auth/oauth/authorize',
|
||
|
|
"token_endpoint" => 'https://'.getenv('weburl').'/auth/oauth/token',
|
||
|
|
"userinfo_endpoint" => 'https://'.getenv('weburl').'/auth/oauth/userinfo',
|
||
|
|
"response_types_supported" => ["code"],
|
||
|
|
"subject_types_supported" => ["public"],
|
||
|
|
"id_token_signing_alg_values_supported" => ["RS256"],
|
||
|
|
"scopes_supported" => ["openid", "profile", "email", "phone"],
|
||
|
|
"token_endpoint_auth_methods_supported" => ["client_secret_basic"],
|
||
|
|
"claims_supported" => ["sub", "iss", "name", "email", "phone"],
|
||
|
|
"code_challenge_methods_supported" => ["plain", "S256"],
|
||
|
|
"grant_types_supported" => ["authorization_code", "refresh_token"],
|
||
|
|
]);
|
||
|
|
}
|
||
|
|
|
||
|
|
public function token(Request $request)
|
||
|
|
{
|
||
|
|
$key = 'b662c3012510ef3105e557b7b1db0805fb012911';
|
||
|
|
$payload = [
|
||
|
|
'iss' => 'https://auth.laysense.cn/',
|
||
|
|
'aud' => 'laysensegit',
|
||
|
|
'sub' => 'ywnsya',
|
||
|
|
'iat' => time(),
|
||
|
|
'nbf' => time()+7200,
|
||
|
|
'exp' => time()+7200,
|
||
|
|
'LaysenseRole' => 'Member',
|
||
|
|
];
|
||
|
|
$jwt = JWT::encode($payload, $key, 'HS256');
|
||
|
|
|
||
|
|
return json([
|
||
|
|
"access_token" => 'x48KsWYMGBNU3RVSs2vBkjFKTZQZF5vTMiMmyTUiZ0dvXTuodZzWUXIAt2CllbGKHob_ALaE',
|
||
|
|
"id_token" => $jwt,
|
||
|
|
"token_type" => 'Bearer',
|
||
|
|
"expires_in" => 7200,
|
||
|
|
"scope"=>"openid profile email photo"
|
||
|
|
])->withHeaders([
|
||
|
|
'Cache-Control' => 'no-store',
|
||
|
|
'Pragma' => 'no-cache',
|
||
|
|
]);
|
||
|
|
|
||
|
|
}
|
||
|
|
public function userinfo(Request $request)
|
||
|
|
{
|
||
|
|
return json([
|
||
|
|
"sub" => 'ywnsya',
|
||
|
|
"name" => 'LaySense',
|
||
|
|
"email" => 'ywnsya@126.com',
|
||
|
|
"phone" => '18018526850',
|
||
|
|
"LaysenseRole" => 'Member',
|
||
|
|
]);
|
||
|
|
}
|
||
|
|
|
||
|
|
}
|