? ???????? OAuth2 ??? ?? ???? ??? ????, ?? ?? ???? ?? ??? ???? ?? ??????? ??? ???? ????? ??? ? ????. ThinkPHP6? ?? ??? ??????? ??? ??? ???? PHP ?????? OAuth2 ??? ???? ???? ?? ??? ??? ?????. ? ????? ThinkPHP6? ???? OAuth2 ??? ???? ??? ???????.

1??: ThinkPHP6 ??

ThinkPHP6 ??? ????? ?? ?? ??? Composer? ???? ???. ???? ?????? ????? ??? ?? ?? ?? ??? ?????:

composer create-project topthink/think oauth2

??? ?? ???? ????? oauth2?? ? ????? ???? ?? ????? ??? ?? ThinkPHP6 ?? ??? ?????.

2??: PHP-JWT ??

ThinkPHP6 OAuth2 ??? JWT(JSON ? ??)? ???? ???? ?? PHP ?????? PHP-JWT? ?????. ? ?? ?? PHP-JWT ?????? ???? ???. ??? ?? ??? ??? ?? ??? ?????.

composer require firebase/php-jwt

3??: OAuth2 ??? ??? ???

OAuth2 ??? ???? ???? ?? ??????? ??? ?? ??? ???? ???? ? ????. ThinkPHP6??? OAuth2 ??? ???? ?? ??? thinkoauthproviderAbstractProvider? ???? ?????. OAuth2 ??? ???? ???? ?? ???? ???? ???.

• getClientId(): OAuth2 ????? ID? ?????.
• getClientSecret(): OAuth2 ????? ????? ?????.
• getAuthorizationUrl(): ?? URL? ?????.
• validateAuthorizationCode () : ?? ?? ??
• refreshToken() : ??? ?? ?? ??

??? ??? OAuth2 ??? ??? ????.

<?php

namespace appoauthprovider;

use FirebaseJWTJWT;
use thinkoauthproviderAbstractProvider;

class SampleProvider extends AbstractProvider
{
    public function getClientId(): string
    {
        return 'YOUR_CLIENT_ID';
    }

    public function getClientSecret(): string
    {
        return 'YOUR_CLIENT_SECRET';
    }

    public function getAuthorizationUrl(): string
    {
        $authUrl = 'https://your.auth.server/auth?' .
            'client_id=' . $this->getClientId() .
            '&redirect_uri=' . urlencode($this->getRedirectUri()) .
            '&response_type=code';

        return $authUrl;
    }

    public function validateAuthorizationCode(string $code): ?array
    {
        $payload = JWT::decode($code, $this->getClientSecret(), array('HS256'));

        // Check if payload is valid

        return $payload;
    }

    public function refreshToken(string $refreshToken): ?array
    {
        // Implement refresh token logic

        return null;
    }
}

4??: OAuth2 ?? ???? ??

?? ?????? OAuth2?? ?? ???? ???. ?? ????. ThinkPHP6?? ????? ?? ??? thinkmiddlewareMiddleware ? thinksessionSessionManager? ???? ?????. ????? ???? ?? ???? ???? ???.

• handle(hinkRequest $request, Closure $next): HTTP ?? ??

??? ??? OAuth2 ?? ???? ????.

<?php

namespace appmiddleware;

use appoauthproviderSampleProvider;
use FirebaseJWTJWT;

class OAuth2Middleware
{
    public function handle(    hinkRequest $request, Closure $next)
    {
        $provider = new SampleProvider();

        // Check if access token exists

        $accessToken = $request->header('Authorization');

        if (!$accessToken) {
            // Redirect to auth server

            $authUrl = $provider->getAuthorizationUrl();
            return redirect($authUrl);
        }

        // Verify access token

        $jwtSecret = $provider->getClientSecret();
        $verify = JWT::decode($accessToken, $jwtSecret, array('HS256'));

        // Check if token is valid

        if (!$verify) {
            return json(array(
                'error' => 'Invalid token',
            ));
        }

        // Set user in session

        $session =     hinkacadeSession::get('user');
        $session['id'] = $verify['id'];
            hinkacadeSession::set('user', $session);

        // Go to next middleware

        return $next($request);
    }
}

?? ???? ?? ??? ??? ????.

• ?? OAuth2 ??? ???? ????????.
• HTTP ??? ??? ??? ??? ?????.
• ?? ?? ???? OAuth2 ?? ??? ?????? ??? ??? ????.
• ?? ?? ??? ??? ???? ?????.
• ??? ???? ?? ?? ?? ??? ?????.
• ??? ???? ??????? ??? ??? ???? ?? ????? ?? ?????.

5??: OAuth2 ?? ???? ??

?? OAuth2 ?? ????? ??????? ??? ????? ???? ???. configmiddleware.php ??? ?? ??? ?????:

<?php

return [
    'oauth2' => ppmiddlewareOAuth2Middleware::class,
];

?? ThinkPHP6? ???? OAuth2 ??? ???? ?? ??? ??????. ???????? OAuth2 ?? ????? ???? ??? ???? ?? ???? ??? ?? ?? ???? ??? ??? ? ????. OAuth2 ?? ????? ???? ?? ?? ?? ????? ???? ??? ???? ??? API ?????? ??? ? ????. ThinkPHP6? ???? ?? ???? ??? ??? ???? ??? ??? ? ??????? ?????.

? ??? ThinkPHP6? ???? OAuth2 ??? ???? ??? ?? ?????. ??? ??? PHP ??? ????? ?? ?? ??? ?????!