Configurable OAuth2 client to request authorization and store token. More...

Inheritance diagram for core_badges\oauth2\client:

Public Member Functions
	__construct (\core\oauth2\issuer $issuer, $returnurl='', $additionalscopes='', $backpack=null)
	client constructor. More...

	base64url_encode ($plaintext)
	Generate base64url encode. More...

	build_post_data ($params)
	Given an array of name value pairs - build a valid HTTP POST application/x-www-form-urlencoded string. More...

	cleanopt ()
	Reset http method.

	code_challenge ()
	Generate code challenge. More...

	code_verifier ()
	Get code verifier. More...

	delete ($url, $param=array(), $options=array())
	HTTP DELETE method. More...

	download ($requests, $options=array())
	Download multiple files in parallel. More...

	download_one ($url, $params, $options=array())
	Downloads one file and writes it to the specified file handler. More...

	get ($url, $params=array(), $options=array())
	HTTP GET method. More...

	get_accesstoken ()
	Get access token. More...

	get_additional_login_parameters ()
	Override to append additional params to a authentication request. More...

	get_clientid ()
	Get the client ID. More...

	get_clientsecret ()
	Get the client secret. More...

	get_errno ()
	Get curl error code. More...

	get_info ()
	Get curl information. More...

	get_issuer ()
	Get the oauth2 issuer for this client. More...

	get_login_url ()
	Get login url. More...

	get_raw_response ()
	Get raw HTTP Response Headers. More...

	get_refresh_token ()
	Get a refresh token!!! More...

	get_security ()
	Returns the current curl security helper. More...

	get_userinfo ()
	Fetch the user info from the user info endpoint and map all the fields back into moodle fields. More...

	getResponse ()
	Get HTTP Response Headers. More...

	head ($url, $options=array())
	HTTP HEAD method. More...

	is_logged_in ()
	Check and refresh token to keep login on backpack site. More...

	log_out ()
	Logs out of a oauth request, clearing any stored tokens. More...

	options ($url, $options=array())
	HTTP OPTIONS method. More...

	patch ($url, $params='', $options=array())
	HTTP PATCH method. More...

	post ($url, $params='', $options=array())
	HTTP POST method. More...

	put ($url, $params=array(), $options=array())
	HTTP PUT method. More...

	resetcookie ()
	Reset Cookie.

	resetHeader ()
	Resets the HTTP Request headers (to prepare for the new request)

	resetopt ()
	Resets the CURL options that have already been set.

	set_security ($securityobject)
	Sets the curl security helper. More...

	setHeader ($header)
	Set HTTP Request Header. More...

	setopt ($options=array())
	Set curl options. More...

	trace ($url, $options=array())
	HTTP TRACE method. More...

	upgrade_refresh_token (system_account $systemaccount)
	Upgrade a refresh token from oauth 2.0 to an access token. More...

	upgrade_token ($code)
	Upgrade a authorization token from oauth 2.0 to an access token. More...

	upgrade_token ($code, $granttype='authorization_code')
	Request new token. More...

Static Public Member Functions
static	callback_url ()
	Callback url where the request is returned to. More...

static	get_cacert ()
	Get the location of ca certificates. More...

static	mock_response ($response)
	For use only in unit tests - we can pre-set the next curl response. More...

static	strip_double_headers ($input)
	When using a proxy, an additional HTTP response code may appear at the start of the header. More...

Public Attributes
string null	$backpack = ''
	backpack object

bool	$cache = false
	Caches http request contents.

bool	$emulateredirects = null
	Perform redirects at PHP level instead of relying on native cURL functionality. More...

int	$errno
	error code

string	$error
	error

array	$header = array()
	http header

string	$info
	cURL information

bool	$proxy = null
	Uses proxy, null means automatic based on URL.

array	$rawresponse = array()
	Raw response headers, needed for BC in download_file_content().

array	$response = array()
	http's response

string	$version = '0.4 dev'
	library version

Protected Member Functions
	auth_url ()
	Returns the auth url for OAuth 2.0 request. More...

	get_login_scopes ()
	Override to change the scopes requested with an authentiction request. More...

	get_scopes ()
	Get scopes granted. More...

	get_stored_token ()
	Get token of current user. More...

	get_tokenname ()
	We want a unique key for each issuer / and a different key for system vs user oauth. More...

	get_userinfo_mapping ()
	Get a list of the mapping user fields in an associative array. More...

	multi ($requests, $options=array())
	Multiple HTTP Requests This function could run multi-requests in parallel. More...

	request ($url, $options=array())
	Single HTTP Request. More...

	request ($url, $options=array(), $acceptheader='application/json')
	Make a HTTP request, adding the access token we have. More...

	reset_request_state_vars ()
	Helper function to reset the request state vars. More...

	store_token ($token)
	Store a token to verify for send request. More...

	token_url ()
	Returns the token url for OAuth 2.0 request. More...

	use_http_get ()
	Should HTTP GET be used instead of POST? Some APIs do not support POST and want oauth to use GET instead (with the auth_token passed as a GET param). More...

Protected Attributes
stdClass	$accesstoken = null
	$accesstoken access token object

bool	$basicauth = true
	basicauth

string	$grantscope = ''
	$grantscope

string	$refreshtoken = ''
	$refreshtoken refresh token string

string	$scope = ''
	$scope

bool	$system = false
	$system

Detailed Description

Configurable OAuth2 client to request authorization and store token.

Use the PKCE method to verifier authorization.

Copyright: 2020 Tung Thai

License: http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later

Author: Tung Thai Tung..nosp@m.Thai.nosp@m.Duc@n.nosp@m.asht.nosp@m.echgl.nosp@m.obal.nosp@m..com

Constructor & Destructor Documentation

◆ __construct()

core_badges\oauth2\client::__construct	(	\core\oauth2\issuer	$issuer,
			$returnurl = `''`,
			$additionalscopes = `''`,
			$backpack = `null`
	)

client constructor.

Parameters

issuer	$issuer	oauth2 service.
string	$returnurl	return url after login
string	$additionalscopes	the scopes has been granted
null	$backpack	backpack object.

Exceptions

coding_exception error message.

Member Function Documentation

◆ auth_url()

core\oauth2\client::auth_url ( )

protectedinherited

Returns the auth url for OAuth 2.0 request.

Return values

string the auth url

Reimplemented from oauth2_client.

◆ base64url_encode()

core_badges\oauth2\client::base64url_encode ( $plaintext )

Generate base64url encode.

Parameters

string $plaintext text to convert.

Return values

string

◆ build_post_data()

oauth2_client::build_post_data ( $params )

inherited

Given an array of name value pairs - build a valid HTTP POST application/x-www-form-urlencoded string.

Parameters

array $params Name / value pairs.

Return values

string POST data.

◆ callback_url()

static core_badges\oauth2\client::callback_url ( )

static

Callback url where the request is returned to.

Return values

moodle_url url of callback

Reimplemented from oauth2_client.

◆ code_challenge()

core_badges\oauth2\client::code_challenge ( )

Generate code challenge.

Return values

string

◆ code_verifier()

core_badges\oauth2\client::code_verifier ( )

Get code verifier.

Return values

bool

◆ delete()

curl::delete	(	$url,
		$param = `array()`,
		$options = `array()`
	)

inherited

HTTP DELETE method.

Parameters

string	$url
array	$param
array	$options

Return values

bool

◆ download()

curl::download	(	$requests,
		$options = `array()`
	)

inherited

Download multiple files in parallel.

Calls multi() with specific download headers

$c = new curl(); $file1 = fopen('a', 'wb'); $file2 = fopen('b', 'wb'); $c->download(array( array('url'=>'http://localhost/', 'file'=>$file1), array('url'=>'http://localhost/20/', 'file'=>$file2) )); fclose($file1); fclose($file2);

or

$c = new curl(); $c->download(array( array('url'=>'http://localhost/', 'filepath'=>'/tmp/file1.tmp'), array('url'=>'http://localhost/20/', 'filepath'=>'/tmp/file2.tmp') ));

Parameters

array	$requests	An array of files to request { url => url to download the file [required] file => file handler, or filepath => file path } If 'file' and 'filepath' parameters are both specified in one request, the open file handle in the 'file' parameter will take precedence and 'filepath' will be ignored.
array	$options	An array of options to set

Return values

array An array of results

◆ download_one()

curl::download_one	(	$url,
		$params,
		$options = `array()`
	)

inherited

Downloads one file and writes it to the specified file handler.

$c = new curl(); $file = fopen('savepath', 'w'); $result = $c->download_one('http://localhost/', null, array('file' => $file, 'timeout' => 5, 'followlocation' => true, 'maxredirs' => 3)); fclose($file); $download_info = $c->get_info(); if ($result === true) { // file downloaded successfully } else { $error_text = $result; $error_code = $c->get_errno(); }

$c = new curl(); $result = $c->download_one('http://localhost/', null, array('filepath' => 'savepath', 'timeout' => 5, 'followlocation' => true, 'maxredirs' => 3)); // ... see above, no need to close handle and remove file if unsuccessful

Parameters

string	$url
array \| null	$params	key-value pairs to be added to $url as query string
array	$options	request options. Must include either 'file' or 'filepath'

Return values

bool|string true on success or error string on failure

◆ get()

curl::get	(	$url,
		$params = `array()`,
		$options = `array()`
	)

inherited

HTTP GET method.

Parameters

string	$url
array	$params
array	$options

Return values

bool

◆ get_accesstoken()

oauth2_client::get_accesstoken ( )

inherited

Get access token.

This is just a getter to read the private property.

Return values

string

◆ get_additional_login_parameters()

core\oauth2\client::get_additional_login_parameters ( )

inherited

Override to append additional params to a authentication request.

Return values

array (name value pairs).

Reimplemented from oauth2_client.

◆ get_cacert()

static curl::get_cacert ( )

staticinherited

Get the location of ca certificates.

Return values

string absolute file path or empty if default used

◆ get_clientid()

oauth2_client::get_clientid ( )

inherited

Get the client ID.

This is just a getter to read the private property.

Return values

string

◆ get_clientsecret()

oauth2_client::get_clientsecret ( )

inherited

Get the client secret.

This is just a getter to read the private property.

Return values

string

◆ get_errno()

curl::get_errno ( )

inherited

Get curl error code.

Return values

int

◆ get_info()

curl::get_info ( )

inherited

Get curl information.

Return values

string

◆ get_issuer()

core\oauth2\client::get_issuer ( )

inherited

Get the oauth2 issuer for this client.

Return values

core::oauth2::issuer Issuer

◆ get_login_scopes()

core\oauth2\client::get_login_scopes ( )

protectedinherited

Override to change the scopes requested with an authentiction request.

Return values

string

◆ get_login_url()

core_badges\oauth2\client::get_login_url ( )

Get login url.

Return values

moodle_url

Exceptions

coding_exception
moodle_exception

Reimplemented from oauth2_client.

◆ get_raw_response()

curl::get_raw_response ( )

inherited

Get raw HTTP Response Headers.

Return values

array of strings

◆ get_refresh_token()

oauth2_client::get_refresh_token ( )

inherited

Get a refresh token!!!

Return values

string

◆ get_scopes()

core_badges\oauth2\client::get_scopes ( )

protected

Get scopes granted.

Return values

null|string

◆ get_security()

curl::get_security ( )

inherited

Returns the current curl security helper.

Return values

core::files::curl_security_helper instance.

◆ get_stored_token()

core_badges\oauth2\client::get_stored_token ( )

protected

Get token of current user.

Return values

stdClass|null token object

Reimplemented from core\oauth2\client.

◆ get_tokenname()

core\oauth2\client::get_tokenname ( )

protectedinherited

We want a unique key for each issuer / and a different key for system vs user oauth.

Return values

string The unique key for the session value.

Reimplemented from oauth2_client.

◆ get_userinfo()

core\oauth2\client::get_userinfo ( )

inherited

Fetch the user info from the user info endpoint and map all the fields back into moodle fields.

Return values

array|false Moodle user fields for the logged in user (or false if request failed)

◆ get_userinfo_mapping()

core\oauth2\client::get_userinfo_mapping ( )

protectedinherited

Get a list of the mapping user fields in an associative array.

Return values

array

◆ getResponse()

curl::getResponse ( )

inherited

Get HTTP Response Headers.

Return values

array of arrays

◆ head()

curl::head	(	$url,
		$options = `array()`
	)

inherited

HTTP HEAD method.

See also: request()

Parameters

string	$url
array	$options

Return values

bool

◆ is_logged_in()

core_badges\oauth2\client::is_logged_in ( )

Check and refresh token to keep login on backpack site.

Return values

bool

Exceptions

coding_exception
moodle_exception

Reimplemented from oauth2_client.

◆ log_out()

oauth2_client::log_out ( )

inherited

Logs out of a oauth request, clearing any stored tokens.

Reimplemented in boxnet_client.

◆ mock_response()

static curl::mock_response ( $response )

staticinherited

For use only in unit tests - we can pre-set the next curl response.

This is useful for unit testing APIs that call external systems.

Parameters

string $response

◆ multi()

oauth2_client::multi	(	$requests,
		$options = `array()`
	)

protectedinherited

Multiple HTTP Requests This function could run multi-requests in parallel.

Parameters

array	$requests	An array of files to request
array	$options	An array of options to set

Return values

array An array of results

Reimplemented from curl.

◆ options()

curl::options	(	$url,
		$options = `array()`
	)

inherited

HTTP OPTIONS method.

Parameters

string	$url
array	$options

Return values

bool

◆ patch()

curl::patch	(	$url,
		$params = `''`,
		$options = `array()`
	)

inherited

HTTP PATCH method.

Parameters

string	$url
array \| string	$params
array	$options

Return values

bool

◆ post()

curl::post	(	$url,
		$params = `''`,
		$options = `array()`
	)

inherited

HTTP POST method.

Parameters

string	$url
array \| string	$params
array	$options

Return values

bool

Reimplemented in microsoft_skydrive.

◆ put()

curl::put	(	$url,
		$params = `array()`,
		$options = `array()`
	)

inherited

HTTP PUT method.

Parameters

string	$url
array	$params
array	$options

Return values

bool

◆ request() [1/2]

curl::request	(	$url,
		$options = `array()`
	)

protectedinherited

Single HTTP Request.

Parameters

string	$url	The URL to request
array	$options

Return values

bool

◆ request() [2/2]

oauth2_client::request	(	$url,
		$options = `array()`,
		$acceptheader = `'application/json'`
	)

protectedinherited

Make a HTTP request, adding the access token we have.

Parameters

string	$url	The URL to request
array	$options
mixed	$acceptheader	mimetype (as string) or false to skip sending an accept header.

Return values

bool

Reimplemented in google_oauth.

◆ reset_request_state_vars()

curl::reset_request_state_vars ( )

protectedinherited

Helper function to reset the request state vars.

Return values

void.

◆ set_security()

curl::set_security ( $securityobject )

inherited

Sets the curl security helper.

Parameters

core::files::curl_security_helper $securityobject instance/subclass of the base curl_security_helper class.

Return values

bool	true if the security helper could be set, false otherwise.

◆ setHeader()

curl::setHeader ( $header )

inherited

Set HTTP Request Header.

Parameters

array $header

◆ setopt()

curl::setopt ( $options = array() )

inherited

Set curl options.

Do not use the curl constants to define the options, pass a string corresponding to that constant. Ie. to set CURLOPT_MAXREDIRS, pass array('CURLOPT_MAXREDIRS' => 10) or array('maxredirs' => 10) to this method.

Parameters

array $options If array is null, this function will reset the options to default value.

Return values

void

Exceptions

coding_exception If an option uses constant value instead of option name.

◆ store_token()

core_badges\oauth2\client::store_token ( $token )

protected

Store a token to verify for send request.

Parameters

null | stdClass $token

Reimplemented from core\oauth2\client.

◆ strip_double_headers()

static curl::strip_double_headers ( $input )

staticinherited

When using a proxy, an additional HTTP response code may appear at the start of the header.

For example, when using https over a proxy there may be 'HTTP/1.0 200 Connection Established'. Other codes are also possible and some may come with their own headers.

If using the return value containing all headers, this function can be called to remove unwanted doubles.

Note that it is not possible to distinguish this situation from valid data unless you know the actual response part (below the headers) will not be included in this string, or else will not 'look like' HTTP headers. As a result it is not safe to call this function for general data.

Parameters

string $input Input HTTP response

Return values

string HTTP response with additional headers stripped if any

◆ token_url()

core\oauth2\client::token_url ( )

protectedinherited

Returns the token url for OAuth 2.0 request.

We are overriding the parent function so we get this from the configured endpoint.

Return values

string the auth url

Reimplemented from oauth2_client.

◆ trace()

curl::trace	(	$url,
		$options = `array()`
	)

inherited

HTTP TRACE method.

Parameters

string	$url
array	$options

Return values

bool

◆ upgrade_refresh_token()

core\oauth2\client::upgrade_refresh_token ( system_account $systemaccount )

inherited

Upgrade a refresh token from oauth 2.0 to an access token.

Parameters

core::oauth2::system_account $systemaccount

Return values

boolean true if token is upgraded succesfully

Exceptions

moodle_exception Request for token upgrade failed for technical reasons

◆ upgrade_token() [1/2]

oauth2_client::upgrade_token ( $code )

inherited

Upgrade a authorization token from oauth 2.0 to an access token.

Parameters

string $code the code returned from the oauth authenticaiton

Return values

boolean true if token is upgraded succesfully

◆ upgrade_token() [2/2]

core_badges\oauth2\client::upgrade_token	(	$code,
		$granttype = `'authorization_code'`
	)

Request new token.

Parameters

string	$code	code verify from Auth site.
string	$granttype	grant type.

Return values

bool

Exceptions

moodle_exception

◆ use_http_get()

oauth2_client::use_http_get ( )

protectedinherited

Should HTTP GET be used instead of POST? Some APIs do not support POST and want oauth to use GET instead (with the auth_token passed as a GET param).

Return values

bool	true if GET should be used

Member Data Documentation

◆ $emulateredirects

bool curl::$emulateredirects = null

inherited

Perform redirects at PHP level instead of relying on native cURL functionality.

Always true now.

The documentation for this class was generated from the following file:

badges/classes/oauth2/client.php

Public Member Functions

Static Public Member Functions

Public Attributes

Protected Member Functions

Protected Attributes

Detailed Description

Constructor & Destructor Documentation

◆ __construct()

Member Function Documentation

◆ auth_url()

◆ base64url_encode()

◆ build_post_data()

◆ callback_url()

◆ code_challenge()

◆ code_verifier()

◆ delete()

◆ download()

◆ download_one()

◆ get()

◆ get_accesstoken()

◆ get_additional_login_parameters()

◆ get_cacert()

◆ get_clientid()

◆ get_clientsecret()

◆ get_errno()

◆ get_info()

◆ get_issuer()

◆ get_login_scopes()

◆ get_login_url()

◆ get_raw_response()

◆ get_refresh_token()

◆ get_scopes()

◆ get_security()

◆ get_stored_token()

◆ get_tokenname()

◆ get_userinfo()

◆ get_userinfo_mapping()

◆ getResponse()

◆ head()

◆ is_logged_in()

◆ log_out()

◆ mock_response()

◆ multi()

◆ options()

◆ patch()

◆ post()

◆ put()

◆ request() [1/2]

◆ request() [2/2]

◆ reset_request_state_vars()

◆ set_security()

◆ setHeader()

◆ setopt()

◆ store_token()

◆ strip_double_headers()

◆ token_url()

◆ trace()

◆ upgrade_refresh_token()

◆ upgrade_token() [1/2]

◆ upgrade_token() [2/2]

◆ use_http_get()

Member Data Documentation

◆ $emulateredirects