IDP.php

Go to the documentation of this file.

<?php
 
namespace ZitadelPhpClient\User;
 
use Exception;
 
class IDP
{
    private array $settings;
    private int $userid;
    private string $idpId;
    private string $idpToken;
    private string $idpIntentId;
    private string $successUrl;
    private string $failureUrl;
    private string $authUrl;
    private string $idpUserId;
    private string $idpUserName;
    private string $idpAccessToken;
    private string $idpRawInformation;
    private string $idpEmail;
    private bool $isIdpEmailVerified;
    private string $idpPicture;
    private string $idpProfile;
 
    public function __construct(array $settings) {
        $this->settings = $settings;
    }
 
    public function setUserId(int $userid) {
        $this->userid = $userid;
    }
 
    public function setIdpId(string $idpId) {
        $this->idpId = $idpId;
    }
 
    public function setIdpUserId(string $idpUserId) {
        $this->idpUserId = $idpUserId;
    }
 
    public function setIdpIntentId(string $idpIntentId) {
        $this->idpIntentId = $idpIntentId;
    }
 
    public function setIdpToken(string $idpToken) {
        $this->idpToken = $idpToken;
    }
 
    public function setSuccessUrl(string $successUrl) {
        $this->successUrl = $successUrl;
    }
 
    public function setFailureUrl(string $failureUrl) {
        $this->failureUrl = $failureUrl;
    }
 
    public function getAuthUrl(): string {
        return $this->authUrl;
    }
 
    public function getAccessToken(): string {
        return $this->idpAccessToken;
    }
 
    public function getIdpUserId(): string {
        return $this->idpUserId;
    }
 
    public function getIdpUserName(): string {
        return $this->idpUserName;
    }
 
    public function getIdpRawInformation(): string {
        return $this->idpRawInformation;
    }
 
    public function getIdpEmail(): string {
        return $this->idpEmail;
    }
 
    public function isIdpEmailVerified(): bool {
        return $this->isIdpEmailVerified;
    }
 
    public function getIdpPicture(): string {
        return $this->idpPicture;
    }
 
    public function getIdpProfile(): string {
        return $this->idpProfile;
    }
 
    public function startFlow() {
        $token = $this->settings["userToken"];
        $curl = curl_init();
        $request = array(
            "idpId" => $this->idpId,
            "urls" => array(
                "successUrl" => $this->successUrl,
                "failureUrl" => $this->failureUrl
            )
        );
        curl_setopt_array($curl, array(
            CURLOPT_URL => $this->settings["domain"] . "/v2beta/idp_intents",
            CURLOPT_RETURNTRANSFER => true,
            CURLOPT_ENCODING => '',
            CURLOPT_MAXREDIRS => 10,
            CURLOPT_TIMEOUT => 0,
            CURLOPT_FOLLOWLOCATION => true,
            CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
            CURLOPT_CUSTOMREQUEST => 'POST',
            CURLOPT_POSTFIELDS => json_encode($request),
            CURLOPT_HTTPHEADER => array(
                "Content-Type: application/json",
                "Accept: application/json",
                "Authorization: Bearer $token"
            ),
        ));
 
        $response = json_decode(curl_exec($curl));
        if(isset($response->code)) {
            throw new Exception("Error-Code: " . $response->code . " Message: " . $response->message);
        } else {
            $this->authUrl = $response->authUrl;
        }
        curl_close($curl);
    }
 
    public function fetchIdpData() {
        $token = $this->settings["userToken"];
        $curl = curl_init();
        curl_setopt_array($curl, array(
            CURLOPT_URL => $this->settings["domain"] . "/v2beta/idp_intents/$this->idpIntentId",
            CURLOPT_RETURNTRANSFER => true,
            CURLOPT_ENCODING => '',
            CURLOPT_MAXREDIRS => 10,
            CURLOPT_TIMEOUT => 0,
            CURLOPT_FOLLOWLOCATION => true,
            CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
            CURLOPT_CUSTOMREQUEST => 'POST',
            CURLOPT_POSTFIELDS => "{
                \"idpIntentToken\": \"$this->idpToken\"
            }",
            CURLOPT_HTTPHEADER => array(
                "Content-Type: application/json",
                "Accept: application/json",
                "Authorization: Bearer $token"
            ),
        ));
 
        $response = json_decode(curl_exec($curl));
        if(isset($response->code)) {
            throw new Exception("Error-Code: " . $response->code . " Message: " . $response->message);
        } else {
            $this->idpAccessToken = $response->idpInformation->oauth->accessToken;
            $this->idpUserId = $response->idpInformation->userId;
            $this->idpUserName = $response->idpInformation->userName;
            $this->idpEmail = $response->idpInformation->rawInformation->email;
            $this->isIdpEmailVerified = $response->idpInformation->rawInformation->email_verified;
            $this->idpPicture = $response->idpInformation->rawInformation->picture;
            $this->idpProfile = $response->idpInformation->rawInformation->profile;
            $this->idpRawInformation = json_encode($response->idpInformation->rawInformation);
        }
        curl_close($curl);
    }
 
    public function linkIdpToUser() {
        $token = $this->settings["serviceUserToken"];
        $request = array(
            "idpLink" => array(
                "idpId" => $this->idpId,
                "userId" => $this->idpUserId,
                "userName" => $this->idpUserName
            )
        );
        $curl = curl_init();
        curl_setopt_array($curl, array(
            CURLOPT_URL => $this->settings["domain"] . "/v2beta/users/$this->userid/links",
            CURLOPT_RETURNTRANSFER => true,
            CURLOPT_ENCODING => '',
            CURLOPT_MAXREDIRS => 10,
            CURLOPT_TIMEOUT => 0,
            CURLOPT_FOLLOWLOCATION => true,
            CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
            CURLOPT_CUSTOMREQUEST => 'POST',
            CURLOPT_POSTFIELDS => json_encode($request),
            CURLOPT_HTTPHEADER => array(
                "Content-Type: application/json",
                "Accept: application/json",
                "Authorization: Bearer $token"
            ),
        ));
 
        $response = json_decode(curl_exec($curl));
        if(isset($response->code)) {
            throw new Exception("Error-Code: " . $response->code . " Message: " . $response->message);
        }
        curl_close($curl);
    }
}