Commit 47175d16 authored by Thomas Persohn's avatar Thomas Persohn

Merge branch 'master' of code.libcast.net:libcast/oauth2-authot

parents 86b24b9a cbd5df1e
# Authôt Provider for OAuth 2.0 Client
This package provides Authôt OAuth 2.0 support for the PHP League's [OAuth 2.0 Client](https://github.com/thephpleague/oauth2-client).
## Installation
To install, use composer:
```
composer require libcast/oauth2-authot
```
## Usage
Usage is the same as The League's OAuth client, using `\Libcast\OAuth2\Client\Provider\Authot` as the provider.
### Authorization Code Flow
```php
$provider = new Libcast\OAuth2\Client\Provider\Authot([
'clientId' => '{authot-client-id}',
'clientSecret' => '{authot-client-secret}',
'redirectUri' => 'https://example.com/callback-url',
]);
if (!isset($_GET['code'])) {
// If we don't have an authorization code then get one
$authUrl = $provider->getAuthorizationUrl();
$_SESSION['oauth2state'] = $provider->getState();
header('Location: '.$authUrl);
exit;
// Check given state against previously stored one to mitigate CSRF attack
} elseif (empty($_GET['state']) || ($_GET['state'] !== $_SESSION['oauth2state'])) {
unset($_SESSION['oauth2state']);
exit('Invalid state');
} else {
// Try to get an access token (using the authorization code grant)
$token = $provider->getAccessToken('authorization_code', [
'code' => $_GET['code']
]);
// Use this to interact with an API on the users behalf
echo $token->getToken();
}
```
## Testing
``` bash
$ ./vendor/bin/phpunit
```
## License
The MIT License (MIT). Please see [License File](https://github.com/thephpleague/oauth2-github/blob/master/LICENSE) for more information.
\ No newline at end of file
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment