class OpenIDConnectStateToken in OpenID Connect / OAuth client 8

Creates and validates state tokens.

@package Drupal\openid_connect

Hierarchy

• class \Drupal\openid_connect\OpenIDConnectStateToken implements OpenIDConnectStateTokenInterface

1 file declares its use of OpenIDConnectStateToken

OpenIDConnectStateTokenTest.php in tests/src/Unit/OpenIDConnectStateTokenTest.php

1 string reference to 'OpenIDConnectStateToken'

openid_connect.services.yml in ./openid_connect.services.yml

openid_connect.services.yml

1 service uses OpenIDConnectStateToken

openid_connect.state_token in ./openid_connect.services.yml

Drupal\openid_connect\OpenIDConnectStateToken

File

src/OpenIDConnectStateToken.php, line 12

Namespace

Drupal\openid_connect

class OpenIDConnectStateToken implements OpenIDConnectStateTokenInterface {

  /**
   * {@inheritdoc}
   */
  public static function create() {
    $state = Crypt::randomBytesBase64();
    $_SESSION['openid_connect_state'] = $state;
    return $state;
  }

  /**
   * {@inheritdoc}
   */
  public static function confirm($state_token) {
    return isset($_SESSION['openid_connect_state']) && $state_token == $_SESSION['openid_connect_state'];
  }

}

Members

Name	Modifiers	Type	Description	Overrides
OpenIDConnectStateToken::confirm	public static	function	Confirms anti-forgery state token. Overrides OpenIDConnectStateTokenInterface::confirm
OpenIDConnectStateToken::create	public static	function	Creates a state token and stores it in the session for later validation. Overrides OpenIDConnectStateTokenInterface::create