Authorization Code Grant Type

in /home/spyros/work/p3/start/client/src/OAuth2Demo/Client/Storage/Connection.php line 79
at PDOStatement->execute(array('email' => 'spyrostsiko@punct.ro', 'password' => '9P6NWcis9oBCRdfgZgu/ARRAmP6929RHZbvAxRiUNpThyEJny9kR57O2VDDRKufCGPuNLPoUeE2g+tbIcQBbGg==', 'firstName' => 'Spyors', 'lastName' => 'Tsiko', 'coopUserId' => null, 'coopAccessToken' => null, 'coopAccessExpiresAt' => '', 'coopRefreshToken' => null, 'facebookUserId' => null)) in /home/spyros/work/p3/start/client/src/OAuth2Demo/Client/Storage/Connection.php line 79
at Connection->saveUser(object(User), true) in /home/spyros/work/p3/start/client/src/OAuth2Demo/Client/Storage/Connection.php line 99
at Connection->createUser('spyrostsiko@punct.ro', '9P6NWcis9oBCRdfgZgu/ARRAmP6929RHZbvAxRiUNpThyEJny9kR57O2VDDRKufCGPuNLPoUeE2g+tbIcQBbGg==', 'Spyors', 'Tsiko') in /home/spyros/work/p3/start/client/src/OAuth2Demo/Client/Controllers/UserManagement.php line 58
at UserManagement->registerHandle(object(Application), object(Request))
at call_user_func_array(array(object(UserManagement), 'registerHandle'), array(object(Application), object(Request))) in /home/spyros/work/p3/start/client/vendor/symfony/http-kernel/Symfony/Component/HttpKernel/HttpKernel.php line 126
at HttpKernel->handleRaw(object(Request), '1') in /home/spyros/work/p3/start/client/vendor/symfony/http-kernel/Symfony/Component/HttpKernel/HttpKernel.php line 66
at HttpKernel->handle(object(Request), '1', true) in /home/spyros/work/p3/start/client/vendor/silex/silex/src/Silex/Application.php line 516
at Application->handle(object(Request)) in /home/spyros/work/p3/start/client/vendor/silex/silex/src/Silex/Application.php line 493
at Application->run(object(Request)) in /home/spyros/work/p3/start/client/web/index.php line 27

i got this error why this happend when i register ?
I didnt change anything from that script.

Not sure why, but I had to edit 2 files in vendor to make the server not to err for the authorization request:

server/vendor/bshaffer/oauth2-server-php/src/OAuth2/Server.php:51:
protected $responseTypes;  ==> protected $responseTypes = [];

server/vendor/bshaffer/oauth2-server-httpfoundation-bridge/src/OAuth2/HttpFoundationBridge/Response:57:
count ==> strlen

In both cases the author counted uncountable things...

What is the reason the scoped Symfony HTTP Client discards 'auth_bearer' options? I created scoped client with 'base_uri' 'http://coop.apps.symfonycas...'. Then added 'auth_bearer' option with `access_token` while calling '/api/me' endpoint. Some debugging shows that 'auth_bearer' options consumed by HTTP Client but Wireshark displays no 'Authorization' header in the actual request. What is the explanation of this phenomena?

Is coop still be working in 2020? I am going out of my mind trying to follow this tutorial and i am doing it using the new HttpClient and I cant get it to work and I am starting to wonder if the issue is with Coop (no idea if its still maintained) because i started getting some weird 400 errors too. I have this and it keeps telling me i need an access token (but if i post to pick eggs that works fine):

` $httpClient = HttpClient::create();

    $response = $httpClient->request('POST', 'http://coop.apps.knpuniversity.com/token', [
        'body' => [
            'client_id' => 'tsdfdsfdsf',
            'client_secret' => 'secretgoeshere',
            'grant_type' => 'client_credentials',

            ]
    ]);

    $statusCode = $response->getStatusCode();
    $responseBody = $response->toArray();

    $accessToken = $responseBody['access_token'];
    $expiresIn = $responseBody['expires_in'];

   //var_dump($responseBody);

    $response = $httpClient->request('GET', 'http://coop.apps.knpuniversity.com/api/me', [
        'headers' => [
           
            'Authorization' => 'Bearer '.$accessToken
        ]
    ]);

    $statusCode = $response->getStatusCode();
    $content = $response->getContent();

    try {
        $contentArr = $response->toArray();
        var_dump($contentArr);
    } catch (\Exception $e) {
        //$output->writeln($e->getMessage());
    }

    var_dump($content);

`
I always get string(75) "{"error":"access_denied","error_description":"an access token is required"}"

I checked all the permission boxes on coop for this app to rule that out. I do get a token from the /token and am passing it with Bearer.

EDIT: i just tried with the latest guzzle and still its telling me "access token is required"

`var_dump($accessToken);

    $client = new Client(['base_uri' => 'http://coop.apps.knpuniversity.com/']);

    $headers = [
        'Authorization' => 'Bearer ' . $accessToken,
     //   'Accept'        => 'application/json',
    ];

    $response = $client->request('GET', '/api/me', [
        'headers' => $headers
    ]);

    $output->writeln($response->getStatusCode());
    $output->writeln($response->getBody());`

Hey Folks thanks for this tutorial!
I've seen the composer get broken by version incompatibility while versions climbs higher... The easiest way around this, is to go fix the version numbers.
In composer.json adjust every version according to this pattern: "1.2.3"
So remove every "~"-sign and if the the version is composed out of two parts (major and minor), then add a third part (the build) ".0" to it. So for example you get from "~1.5" to "1.5.0".
Safe the file, do 'composer update' and your good to go.

I had to add downgrade to Symfony2 by adding the following line:
`
"require": {

    "symfony/symfony": "2.*",
    ...

`
to <b>client/composer.json</b> in order to follow this tutorial. Otherwise you'll get errors due to deprecation and removal errors.

Hi,
I can find the download button

I'm running nginx, and have created the conf file for this 'client' site, I'm using a port rather than socket for php-fpm in nginx conf file for 'client' site i.e. 127.0.0.1:9000, and added it server name to local hosts file.

I get the home page but all the css & js not found, i.e. {{ app.request.basePath }}/css/bootstrap.css }} doesn't resolve properly.

I've done the composer install, is there anything else I'm missing?

If you are getting a pdodriver not found exception you may have to install sqlite and php5-sqlite. I am running on vagrant box ubuntu 14.04.

Here are the commands if you are ubuntu flavored linux

sudo apt-get install sqlite
sudo apt-get install php5-sqlite

In <strong>server/composer.json</strong> I see the following two components
<br />"require": {<br />...<br />"bshaffer/oauth2-server-php": "dev-develop",<br />"bshaffer/oauth2-server-httpfoundation-bridge": "dev-master",<br />...<br />}<br />
I need to implement an OAuth2 server. Would you recommend to use these libraries for my purposes, or are there better alternatives. I'm not done with this course and haven't done much research yet, that's why I wanted to ask your suggestion.
Thanks,

In the "Authorization Code Grant Type" video, where we are "Exchanging the Authorization Code for an Access Token",

I can't get the $responseBody to var_dump in the receiveAuthorizationCode() function (copied below). Instead of the expected $responseBody, I see the "Hello World" string that my redirect_uri file /web/handle.php prints out.

Because I couldn't get the following code to work on my test site:

$redirectUrl = $this->generateUrl('coop_authorize_redirect', array(), true);

I hard-coded my redirect_uri like so:

public function redirectToAuthorization(Request $request)
    {
      $url = 'http://coop.apps.knpuniversity.com/authorize?'.http_build_query(array(
        'response_type' => 'code',
        'client_id' => 'Debra\'s Other Test App',
        'redirect_uri' => 'http://localhost:9000/handle.php',
        'scope' => 'eggs-count profile'
    ));
      return $this->redirect($url);

Could that be why my receiveAuthorizationCode() isn't working?

And, in any case, how could the receiveAuthorizationCode() even run if COOP is redirecting to /web/handle.php and the function that needs to fire is inside /src/OAuth2Demo/Client/Controllers/CoopOAuthController.php?

What have I done wrong?

Also, I'm wondering if I need to replace this line with more standard PHP since the course says that that function is customized for the tutorial's app. (although I'm not sure what standard PHP redirect code is).

      return $this->redirect($url);

Thanks in advance for your help.

public function receiveAuthorizationCode(Application $app, Request $request)
    {
        // equivalent to $_GET['code']
        $code = $request->get('code');

        $http = new Client('http://coop.apps.knpuniversity.com', array(
          'request.options' => array(
          'exceptions' => false,
          )
        ));

        /* 1. Get the Access Token */
        $request = $http->post('/token', null, array(
            'client_id'     => 'Debra\'s Other Test App',
            'client_secret' => '9713c486bdab888ee840b9ee31962946',
            'grant_type'    => 'authorization_code',
        ));

        // make a request to the token url
        $response = $request->send();
        $responseBody = $response->getBody(true);
        var_dump($responseBody);die;
    }

Question on the course payment ($12). Is that for the entire OAuth course, the complete 8 steps, or just this step? Thanks.

Thank you for the tutorial. I've been staring at the RPC spec docs for 3 weeks and my eyes were sore.

Near the end of video "Authorization Code Grant Type", I first receive the access token and then use that access token to connect to the /api/me endpoint with an "Authorization" header. I get the proper json response including my Coop user_id and then try to save to my local db which fails. I've stepped through the code with Xdebug to verify this and it appears to try and create a new user in the sqlite db instead of updating. My code is below. Thank you for your help:

/coop/start/client/src/OAuth2Demo/Client/Controllers/CoopOAuthController.php

public function receiveAuthorizationCode(Application $app, Request $request)
// ...

$response = $request->send();
$responseBody = $response->getBody(true);
$responseArr = json_decode($responseBody, true);
$accessToken = $responseArr['access_token'];
$expiresIn = $responseArr['expires_in'];
$expiresAt = new \DateTime('+' . $expiresIn . ' seconds');

$request = $http->get('/api/me');
$request->addHeader('Authorization', 'Bearer ' . $accessToken);
$response = $request->send();
$json = json_decode($response->getBody(), true);

$user = $this->getLoggedInUser();
$this->coopAccessToken = $accessToken;
$this->coopUserId = $json['id'];
$this->coopAccessExpiresAt = $expiresAt;
if ($this->saveUser($user)) // This part fails and $json['id'] is not saved
{
echo $response->getBody(); die;
}
die('Save failed');

very usefull