public function OpenIDConnectStateToken::generateToken in OpenID Connect / OAuth client 2.x

Creates a state token and stores it in the session for later validation.

Return value

string A state token that later can be validated to prevent request forgery.

Overrides OpenIDConnectStateTokenInterface::generateToken

File

src/OpenIDConnectStateToken.php, line 45

Class

OpenIDConnectStateToken

Creates and validates state tokens.

Namespace

Drupal\openid_connect

Code

public function generateToken() : string {
  $state = Crypt::randomBytesBase64();
  $this->session
    ->saveStateToken($state);
  return $state;
}