Wallogit.com
2017 © Pedro Peláez
Oauth2Server plugin for CakePHP
, (*1)
This plugin is intended to be an easy way to build an Oauth2 Server using thephpleague/oauth2-server, (*2)
!!Attention!! This plugin does not support refresh token repository yet. Access tokens are usable without any expiration date. use at your own risk!, (*3)
PRs are more than welcome, (*4)
You can install this plugin into your CakePHP application using composer., (*5)
composer require suhaboncukcu/oauth2server
! Create openSSL and encryption keys. I usually use a composer snippet to handle these tasks as below:
... "create-keys": [ "openssl genrsa -out private.key 2048", "openssl rsa -in private.key -pubout -out public.key" ], "create-encryption-key": [ "./vendor/bin/generate-defuse-key" ], ..., (*6)
Plugin::load('Oauth2Server', ['bootstrap' => true, 'routes' => false]);
!!Attention!!, (*7)
You can find example validator classes under vendors\suhaboncukcu\Oauth2Server\src\OauthLogic\Validators.
You should copy and paste them to your desired location., (*8)
Copy & paste vendors\suhaboncukcu\Oauth2Server\config\oauth2.php to your config folder and update it.
After creating your keys, you should set their permissions to 600 or 660, (*9)
// in one of your controllers
// Auth endpoint
public function authorize()
{
$this->autoRender = false;
$this->loadComponent('Oauth2Server.Oauth2');
$response = $this->Oauth2->authorize($this->request, $this->response);
$response = $response->withHeader('Content-Type', 'application/json');
return $response;
}
// callback endpoint
public function code()
{
$this->autoRender = false;
$response = $this->response
->withHeader('Content-Type', 'application/json')
->withStringBody(json_encode([
'code' => urldecode($this->request->getQuery('code'))
]));
return $response;
}
// access token endpoint
public function accessToken()
{
$this->autoRender = false;
$this->loadComponent('Oauth2Server.Oauth2');
$response = $this->Oauth2->accessToken($this->request, $this->response);
$response = $response->withHeader('Content-Type', 'application/json');
return $response;
}
// assuming you have a plugin named Api
//\Api\config\routes
use Cake\Routing\RouteBuilder;
use Cake\Routing\Router;
use Cake\Routing\Route\DashedRoute;
use League\OAuth2\Server\Middleware\ResourceServerMiddleware;
use Oauth2Server\OauthLogic\ServerUtility;
$serverUtility = new ServerUtility();
$server = $serverUtility->getPublicServer();
Router::plugin(
'Api',
['path' => '/api'],
function (RouteBuilder $routes) use ($server) {
$routes->registerMiddleware('resourceServer', new ResourceServerMiddleware($server));
$routes->middlewareGroup('Oauth2Stack', ['resourceServer']);
$routes->applyMiddleware('Oauth2Stack');
$routes->scope('/v1', function ($routes) {
$routes->fallbacks(DashedRoute::class);
});
}
);
$this->request->getAttributes(), (*10)
Oauth2Server plugin for CakePHP
MIT
cakephp auth oauth2 thphpleague suhaboncukcu
Oauth2Server plugin for CakePHP
MIT
cakephp auth oauth2 thphpleague suhaboncukcu
Oauth2Server plugin for CakePHP
MIT
cakephp auth oauth2 thphpleague suhaboncukcu
Oauth2Server plugin for CakePHP
MIT