| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216 |
- <?php
- namespace OAuth\OAuth2\Service;
- use OAuth\OAuth2\Token\StdOAuth2Token;
- use OAuth\Common\Http\Exception\TokenResponseException;
- use OAuth\Common\Http\Uri\Uri;
- use OAuth\Common\Consumer\CredentialsInterface;
- use OAuth\Common\Http\Client\ClientInterface;
- use OAuth\Common\Storage\TokenStorageInterface;
- use OAuth\Common\Http\Uri\UriInterface;
- class GitHub extends AbstractService
- {
- /**
- * Defined scopes, see http://developer.github.com/v3/oauth/ for definitions.
- */
- /**
- * Public read-only access (includes public user profile info, public repo info, and gists)
- */
- const SCOPE_READONLY = '';
- /**
- * Read/write access to profile info only.
- *
- * Includes SCOPE_USER_EMAIL and SCOPE_USER_FOLLOW.
- */
- const SCOPE_USER = 'user';
- /**
- * Read access to a user’s email addresses.
- */
- const SCOPE_USER_EMAIL = 'user:email';
- /**
- * Access to follow or unfollow other users.
- */
- const SCOPE_USER_FOLLOW = 'user:follow';
- /**
- * Read/write access to public repos and organizations.
- */
- const SCOPE_PUBLIC_REPO = 'public_repo';
- /**
- * Read/write access to public and private repos and organizations.
- *
- * Includes SCOPE_REPO_STATUS.
- */
- const SCOPE_REPO = 'repo';
- /**
- * Grants access to deployment statuses for public and private repositories.
- * This scope is only necessary to grant other users or services access to deployment statuses,
- * without granting access to the code.
- */
- const SCOPE_REPO_DEPLOYMENT = 'repo_deployment';
- /**
- * Read/write access to public and private repository commit statuses. This scope is only necessary to grant other
- * users or services access to private repository commit statuses without granting access to the code. The repo and
- * public_repo scopes already include access to commit status for private and public repositories, respectively.
- */
- const SCOPE_REPO_STATUS = 'repo:status';
- /**
- * Delete access to adminable repositories.
- */
- const SCOPE_DELETE_REPO = 'delete_repo';
- /**
- * Read access to a user’s notifications. repo is accepted too.
- */
- const SCOPE_NOTIFICATIONS = 'notifications';
- /**
- * Write access to gists.
- */
- const SCOPE_GIST = 'gist';
- /**
- * Grants read and ping access to hooks in public or private repositories.
- */
- const SCOPE_HOOKS_READ = 'read:repo_hook';
- /**
- * Grants read, write, and ping access to hooks in public or private repositories.
- */
- const SCOPE_HOOKS_WRITE = 'write:repo_hook';
- /**
- * Grants read, write, ping, and delete access to hooks in public or private repositories.
- */
- const SCOPE_HOOKS_ADMIN = 'admin:repo_hook';
- /**
- * Read-only access to organization, teams, and membership.
- */
- const SCOPE_ORG_READ = 'read:org';
- /**
- * Publicize and unpublicize organization membership.
- */
- const SCOPE_ORG_WRITE = 'write:org';
- /**
- * Fully manage organization, teams, and memberships.
- */
- const SCOPE_ORG_ADMIN = 'admin:org';
- /**
- * List and view details for public keys.
- */
- const SCOPE_PUBLIC_KEY_READ = 'read:public_key';
- /**
- * Create, list, and view details for public keys.
- */
- const SCOPE_PUBLIC_KEY_WRITE = 'write:public_key';
- /**
- * Fully manage public keys.
- */
- const SCOPE_PUBLIC_KEY_ADMIN = 'admin:public_key';
- public function __construct(
- CredentialsInterface $credentials,
- ClientInterface $httpClient,
- TokenStorageInterface $storage,
- $scopes = array(),
- UriInterface $baseApiUri = null
- ) {
- parent::__construct($credentials, $httpClient, $storage, $scopes, $baseApiUri);
- if (null === $baseApiUri) {
- $this->baseApiUri = new Uri('https://api.github.com/');
- }
- }
- /**
- * {@inheritdoc}
- */
- public function getAuthorizationEndpoint()
- {
- return new Uri('https://github.com/login/oauth/authorize');
- }
- /**
- * {@inheritdoc}
- */
- public function getAccessTokenEndpoint()
- {
- return new Uri('https://github.com/login/oauth/access_token');
- }
- /**
- * {@inheritdoc}
- */
- protected function getAuthorizationMethod()
- {
- return static::AUTHORIZATION_METHOD_QUERY_STRING;
- }
- /**
- * {@inheritdoc}
- */
- protected function parseAccessTokenResponse($responseBody)
- {
- $data = json_decode($responseBody, true);
- if (null === $data || !is_array($data)) {
- throw new TokenResponseException('Unable to parse response.');
- } elseif (isset($data['error'])) {
- throw new TokenResponseException('Error in retrieving token: "' . $data['error'] . '"');
- }
- $token = new StdOAuth2Token();
- $token->setAccessToken($data['access_token']);
- // Github tokens evidently never expire...
- $token->setEndOfLife(StdOAuth2Token::EOL_NEVER_EXPIRES);
- unset($data['access_token']);
- $token->setExtraParams($data);
- return $token;
- }
- /**
- * Used to configure response type -- we want JSON from github, default is query string format
- *
- * @return array
- */
- protected function getExtraOAuthHeaders()
- {
- return array('Accept' => 'application/json');
- }
- /**
- * Required for GitHub API calls.
- *
- * @return array
- */
- protected function getExtraApiHeaders()
- {
- return array('Accept' => 'application/vnd.github.beta+json');
- }
- /**
- * {@inheritdoc}
- */
- protected function getScopesDelimiter()
- {
- return ',';
- }
- }
|