joomla-oauth-server/com_oauthserver/site/src/Repository/RefreshTokenRepository.php

<?php
/**
 * @package         Joomla.Site
 * @subpackage      com_oauthserver
 *
 * @copyright   (c) 2024. Webmasterskaya. <https://webmasterskaya.xyz>
 * @license         MIT; see LICENSE.txt
 **/

namespace Webmasterskaya\Component\OauthServer\Site\Repository;

use League\OAuth2\Server\Entities\RefreshTokenEntityInterface;
use League\OAuth2\Server\Exception\UniqueTokenIdentifierConstraintViolationException;
use League\OAuth2\Server\Repositories\RefreshTokenRepositoryInterface;
use Webmasterskaya\Component\OauthServer\Administrator\Model\AccessTokenModel;
use Webmasterskaya\Component\OauthServer\Administrator\Model\RefreshTokenModel;
use Webmasterskaya\Component\OauthServer\Site\Entity\RefreshToken;

\defined('_JEXEC') or die;

class RefreshTokenRepository implements RefreshTokenRepositoryInterface
{

    private RefreshTokenModel $refreshTokenModel;

    private AccessTokenModel $accessTokenModel;

    /**
     * @param   RefreshTokenModel  $refreshTokenModel
     * @param   AccessTokenModel   $accessTokenModel
     *
     * @since version
     */
    public function __construct(RefreshTokenModel $refreshTokenModel, AccessTokenModel $accessTokenModel)
    {
        $this->refreshTokenModel = $refreshTokenModel;
        $this->accessTokenModel  = $accessTokenModel;
    }


    public function getNewRefreshToken(): RefreshToken
    {
        return new RefreshToken();
    }

    public function persistNewRefreshToken(RefreshTokenEntityInterface $refreshTokenEntity)
    {
        $found = false;
        try
        {
            $refreshToken = $this->refreshTokenModel->getItemByIdentifier($refreshTokenEntity->getIdentifier());

            if ($refreshToken->id > 0)
            {
                $found = true;
            }
        }
        catch (\Exception $e)
        {
        }

        if ($found)
        {
            throw UniqueTokenIdentifierConstraintViolationException::create();
        }

        $data = $refreshTokenEntity->getData();

        $accessToken = $this->accessTokenModel->getItemByIdentifier($refreshTokenEntity->getAccessToken()->getIdentifier());

        unset($data['access_token_identifier']);
        $data['access_token_id'] = $accessToken->id;

        $this->refreshTokenModel->save($data);
    }

    public function revokeRefreshToken($tokenId): void
    {
        $this->refreshTokenModel->revoke($tokenId);
    }

    public function isRefreshTokenRevoked($tokenId): bool
    {
        $refreshToken = $this->refreshTokenModel->getItemByIdentifier($tokenId);

        if (empty($refreshToken->id))
        {
            return true;
        }

        return !!$refreshToken->revoked;
    }
}