riskiofr / oauth2-auth0 Goto Github PK

knpu_oauth2_client:
    clients:
        auth0:
            type: auth0
            client_id: '%auth0_client_id%' (in parameters.yml)
            client_secret: '%auth0_client_secret%' (in parameters.yml)
            redirect_route: connect_auth0_check
            redirect_params: {}

    /**
     * @Route("/connect/auth0")
     *
     * @return \Symfony\Component\HttpFoundation\RedirectResponse
     * @throws \InvalidArgumentException
     */
    public function connectAction()
    {
        return $this->get('oauth2.registry')
            ->getClient('auth0')
            ->redirect();
    }

    /**
     * @Route("/connect/auth0/check", name="connect_auth0_check")
     *
     * @param Request $request
     * @throws \InvalidArgumentException
     */
    public function connectCheckAction(Request $request)
    {
        $client = $this->get('oauth2.registry')
            ->getClient('auth0');

        try {
            $user = $client->fetchUser();
            var_dump($user->getName());
        } catch (IdentityProviderException $e) {
            var_dump($e->getMessage());die;
        }
    }

composer require riskio/oauth2-auth0
Using version ^0.1.0 for riskio/oauth2-auth0
./composer.json has been updated
Loading composer repositories with package information
Updating dependencies (including require-dev)
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - Installation request for riskio/oauth2-auth0 ^0.1.0 -> satisfiable by riskio/oauth2-auth0[v0.1.0].
    - Conclusion: remove league/oauth2-client 2.2.1
    - Conclusion: don't install league/oauth2-client 2.2.1
    - riskio/oauth2-auth0 v0.1.0 requires league/oauth2-client ~0.10 -> satisfiable by league/oauth2-client[0.10.0, 0.10.1, 0.11.0, 0.12.0, 0.12.1].
    - Can only install one of: league/oauth2-client[0.10.0, 2.2.1].
    - Can only install one of: league/oauth2-client[0.10.1, 2.2.1].
    - Can only install one of: league/oauth2-client[0.11.0, 2.2.1].
    - Can only install one of: league/oauth2-client[0.12.0, 2.2.1].
    - Can only install one of: league/oauth2-client[0.12.1, 2.2.1].
    - Installation request for league/oauth2-client (locked at 2.2.1) -> satisfiable by league/oauth2-client[2.2.1].

$token = $provider->getAccessToken('authorization_code', [
        'code' => $_GET['code']
    ]

$provider = new Riskio\OAuth2\Client\Provider\Auth0([
    'region'       => '{region}',
    'account'      => '{account}',
    'clientId'     => '{auth0-client-id}',
    'clientSecret' => '{auth0-client-secret}',
    'redirectUri'  => 'https://example.com/callback-url'
]);

new Riskio\OAuth2\Client\Provider\Auth0([
    'region'        => Riskio\OAuth2\Client\Provider\Auth0::REGION_US,
    'account'           => 'php oauth test',
    'clientId'          => 'jXXXXXXXXXXXXy',
    'clientSecret'      => 'zXXXXXXXXXXXXXXXXXXXXXXXXXXX4',
    'redirectUri'       => $redirectUrl,
])

$auth0 = new Auth0([
  'domain' => 'dev-y-wc5m4m.auth0.com',
  'client_id' => 'jXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXoy',
  'client_secret' => 'YOUR_CLIENT_SECRET',
  'redirect_uri' => 'https://featherstester.site/phpTest/index.php',
  'persist_id_token' => true,
  'persist_access_token' => true,
  'persist_refresh_token' => true,
]);

<?php

require 'vendor/autoload.php';  // for php composer

session_start();   // added!

$provider = new Riskio\OAuth2\Client\Provider\Auth0([
        'region'                => Riskio\OAuth2\Client\Provider\Auth0::REGION_US,
        'account'               => 'deXXXXXXm',
        'clientId'              => '0XXXXXXXXXXXXXXXXXXXX4',
        'clientSecret'          => 'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXn',
        'redirectUri'  => 'https://MYDOMAIN.com/auth0/auth0.php'
]);

if (!isset($_GET['code'])) {

    // If we don't have an authorization code then get one
    $authUrl = $provider->getAuthorizationUrl();
    $_SESSION['oauth2state'] = $provider->getState(); //$_SESSION['oauth2state'] = $provider->state;
    header('Location: ' . $authUrl);
    exit;

// Check given state against previously stored one to mitigate CSRF attack
} elseif (empty($_GET['state']) || ($_GET['state'] !== $_SESSION['oauth2state'])) {
    unset($_SESSION['oauth2state']);
    exit('Invalid state');

} else {
    // Try to get an access token (using the authorization code grant)
    $token = $provider->getAccessToken('authorization_code', [
        'code' => $_GET['code']
    ]);

    // Optional: Now you have a token you can look up a users profile data
    try {
        // We got an access token, let's now get the user's details
        $user = $provider->getResourceOwner($token);

        // Use these details to create a new profile
        printf('Hello %s!', $user->getName());

    } catch (Exception $e) {

        // Failed to get user details
        exit('Oh dear...');
    }
    // Use this to interact with an API on the users behalf
    echo $token->getToken();

    public function getId()
    {
        return $this->getValueByKey($this->response, 'user_id');
    }