OAuth2 — IO7 Framework

$server = \IO\Auth\OAuth2Server::init([
    'issuer' => 'io7-sso',
    'token_manager' => [
        'secret_key' => 'my-secret-key',
        'access_ttl' => 3600,
        'refresh_ttl' => 2592000,
    ],
    'auth_code_ttl' => 600,
]);

$server->registerClient(
    'client-abc',
    'client-secret',
    ['https://example.com/callback', 'https://app.example.com/callback']
);

$authUrl = $server->getAuthorizationUrl(
    'client-abc',
    'https://example.com/callback',
    ['read', 'write'],
    'random-state-string'
);
header('Location: ' . $authUrl);

$code = $server->createAuthCode(
    'user-123',
    'client-abc',
    ['read', 'write'],
    'https://example.com/callback'
);

$tokens = $server->exchangeCode('auth-code-123', 'client-abc', 'client-secret');
$accessToken = $tokens['access_token'];

$tokens = $server->refreshToken('refresh-token-123', 'client-abc', 'client-secret');

$payload = $server->validateToken($accessToken);
if ($payload !== null) {
    $userId = $payload['sub'];
    $scopes = $payload['scopes'];
}

$client = new \IO\Auth\OAuth2Client(
    'client-id',
    'client-secret',
    'https://sso.example.com/authorize',
    'https://sso.example.com/token',
    'https://sso.example.com/userinfo'
);

$url = $client->getAuthorizationUrl('https://example.com/callback', ['openid', 'profile']);
header('Location: ' . $url);

$token = $client->exchangeCode('auth_code', 'https://example.com/callback');

$newToken = $client->refreshToken('refresh_token_value');

$userInfo = $client->getUserInfo('access_token_value');

$revoked = $client->revokeToken('token_to_revoke');

if ($client->isAuthenticated()) {
    // Пользователь авторизован
}

// 1. Создание клиента
$client = new \IO\Auth\OAuth2Client(
    getenv('OAUTH2_CLIENT_ID'),
    getenv('OAUTH2_CLIENT_SECRET'),
    'https://sso.example.com/authorize',
    'https://sso.example.com/token',
    'https://sso.example.com/userinfo'
);

// 2. Получение URL для авторизации
$url = $client->getAuthorizationUrl(
    'https://myapp.example.com/callback',
    ['openid', 'profile', 'email']
);
header('Location: ' . $url);

// 3. Обработка callback (после редиректа)
$code = $_GET['code'];
$token = $client->exchangeCode($code, 'https://myapp.example.com/callback');
$client->storeToken($token);

// 4. Получение информации о пользователе
$user = $client->getUserInfo($token['access_token']);

// 5. Обновление токена
$newToken = $client->refreshToken($token['refresh_token']);

// Инициализация сервера
$server = \IO\Auth\OAuth2Server::init([
    'issuer' => 'io7-sso',
    'token_manager' => [
        'secret_key' => getenv('JWT_SECRET'),
    ],
]);

// Регистрация клиента
$server->registerClient('my-app', 'app-secret', ['https://myapp.example.com/callback']);

// Получение URL авторизации
$authUrl = $server->getAuthorizationUrl('my-app', 'https://myapp.example.com/callback', ['read']);

// Обмен кода на токены (после авторизации пользователя)
$tokens = $server->exchangeCode($code, 'my-app', 'app-secret');

// Обновление токена
$newTokens = $server->refreshToken($refreshToken, 'my-app', 'app-secret');

// Валидация токена
$payload = $server->validateToken($accessToken);