jonny/jonnybarnes.uk
1
0
Fork 0
Code Issues 8 Pull requests Projects Releases 5 Packages Wiki Activity Actions

Rework indieauth checking in token endpoint

Browse source 
We know the me value, it is our app
This commit is contained in:
Jonny Barnes 2022-09-24 19:05:45 +01:00
parent b8608a3f57
commit c3c395c659
Signed by: jonny
SSH key fingerprint: SHA256:CTuSlns5U7qlD9jqHvtnVmfYV3Zwl2Z7WnJ4/dqOaL8
4 changed files with 19 additions and 64 deletions
Download patch file Download diff file Expand all files Collapse all files

20
app/Http/Controllers/TokenEndpointController.php
View file

@ -53,24 +53,9 @@ class TokenEndpointController extends Controller
*/
public function create(Request $request): JsonResponse
{
if (empty($request->input('me'))) {
return response()->json([
'error' => 'Missing {me} param from input',
], 400);
}
$authorizationEndpoint = $this->client::discoverAuthorizationEndpoint(normalize_url($request->input('me')));
if (empty($authorizationEndpoint)) {
return response()->json([
'error' => sprintf('Could not discover the authorization endpoint for %s', $request->input('me')),
], 400);
}
$auth = $this->verifyIndieAuthCode(
$authorizationEndpoint,
config('app.authorization_endpoint'),
$request->input('code'),
$request->input('me'),
$request->input('redirect_uri'),
$request->input('client_id'),
);
@ -100,7 +85,6 @@ class TokenEndpointController extends Controller
protected function verifyIndieAuthCode(
string $authorizationEndpoint,
string $code,
string $me,
string $redirectUri,
string $clientId
): ?array {
@ -111,7 +95,7 @@ class TokenEndpointController extends Controller
],
'form_params' => [
'code' => $code,
'me' => $me,
'me' => config('app.url'),
'redirect_uri' => $redirectUri,
'client_id' => $clientId,
],