35 lines
1 KiB
PHP
35 lines
1 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
namespace App\Auth\Oidc;
|
||
|
|
|
||
|
|
use App\Models\OauthSetting;
|
||
|
|
|
||
|
|
final readonly class OidcConfig
|
||
|
|
{
|
||
|
|
/**
|
||
|
|
* @param array<int, string> $scopes
|
||
|
|
*/
|
||
|
|
public function __construct(
|
||
|
|
public string $issuerUrl,
|
||
|
|
public string $clientId,
|
||
|
|
public string $clientSecret,
|
||
|
|
public string $redirectUri,
|
||
|
|
public array $scopes = ['openid', 'email', 'profile'],
|
||
|
|
public bool $usePkce = true,
|
||
|
|
public int $clockSkewSeconds = 60,
|
||
|
|
) {}
|
||
|
|
|
||
|
|
public static function fromOauthSetting(OauthSetting $setting): self
|
||
|
|
{
|
||
|
|
return new self(
|
||
|
|
issuerUrl: rtrim((string) $setting->base_url, '/'),
|
||
|
|
clientId: (string) $setting->client_id,
|
||
|
|
clientSecret: (string) $setting->client_secret,
|
||
|
|
redirectUri: filled($setting->redirect_uri) ? $setting->redirect_uri : route('auth.callback', 'oidc'),
|
||
|
|
scopes: $setting->scopeList(),
|
||
|
|
usePkce: $setting->use_pkce ?? true,
|
||
|
|
clockSkewSeconds: $setting->clock_skew_seconds ?? 60,
|
||
|
|
);
|
||
|
|
}
|
||
|
|
}
|