1:  2:  3:  4:  5:  6:  7:  8:  9: 10: 11: 12: 13: 14: 15: 16: 17: 18: 19: 20: 21: 22: 23: 24: 25: 26: 27: 28: 29: 30: 31: 32: 33: 34: 35: 36: 37: 38: 39: 40: 41: 42: 43: 44: 45: 46: 47: 48: 49: 50: 51: 52: 53: 54: 55: 56: 57: 58: 59: 60: 61: 62: 63: 64: 65: 66: 67: 68: 69: 70: 71: 72: 73: 74: 75: 76: 77: 78: 

<?php

namespace Baguette\Mastodon\Grant;

use Baguette\Mastodon;
use Baguette\Mastodon\Service\AuthFactory;
use Baguette\Mastodon\Service\Scope;
use GuzzleHttp\ClientInterface as Client;
use Respect\Validation\Validator as v;

/**
 * Mastodon Authorization Code grant
 *
 * @author    USAMI Kenta <tadsan@zonu.me>
 * @copyright 2017 Baguette HQ
 * @license   https://www.gnu.org/licenses/gpl-3.0.html GPL-3.0
 * @see https://tools.ietf.org/html/draft-ietf-oauth-v2-22#section-4.1
 */
class CodeGrant extends Grant
{
    /** @var string */
    private $code;
    /** @var string */
    private $redirect_uri;

    /**
     * @param string $code
     * @param string $redirect_uri
     */
    public function __construct($code, $redirect_uri)
    {
        $this->code = $code;
        $this->redirect_uri = $redirect_uri;
    }

    /**
     * @param  Mastodon\Client $client
     * @param  AuthFactory $auth
     * @param  Scope  $scope
     * @param  string $callback_uri
     * @param  string $state
     * @return string
     */
    public static function getRedirectUrl(Mastodon\Client $client, Mastodon\Service\AuthFactory $auth, Scope $scope, $callback_uri, $state = null)
    {
        $query = [
            'client_id' => $auth->client_id,
            'response_type' => 'code',
            'redirect_uri' => $callback_uri,
            'scopes' => (string)$scope,
        ];

        if ($state !== null) {
            v::stringType()->length(1, null)->assert($state);
            $query['state'] = $state;
        }

        return sprintf('%s://%s/oauth/authorize?%s', $client->getScheme(), $client->getHostname(), http_build_query($query));
    }

    /**
     * @param  Client      $http
     * @param  AuthFactory $factory
     * @param  Scope       $scope
     * @return \Psr\Http\Message\ResponseInterface
     */
    public function auth(Client $http, AuthFactory $factory, Scope $scope = null)
    {
        return $http->request('POST', static::getPathToOAuthToken($factory->client), [
            'form_params' => [
                'grant_type' => 'authorization_code',
                'code'  => $this->code,
                'redirect_uri' => $this->redirect_uri,
            ] + static::getFormParamsWithSecret($factory),
        ]);
    }
}