OAuthDestinationPolicy
class OAuthDestinationPolicy extends PublicDestinationPolicy
Constants
| protected DISALLOWED_NETWORKS |
|
| LOCALHOSTS |
|
Methods
Create a new public destination policy instance.
Resolve and authorize one outbound destination within the given time budget.
Validate a destination URL without resolving it, such as before storing one a user entered.
Return an approved proxy for the destination.
Allow local OAuth development without trusting arbitrary private DNS targets.
Resolve hostnames through AuthServerDiscovery::resolveHostsUsing() when a callback is set.
Resolve one address family within its share of the request budget.
Details
in
PublicDestinationPolicy at line 48
__construct(array $allowedNetworks = [])
Create a new public destination policy instance.
in
PublicDestinationPolicy at line 60
ResolvedDestination
resolve(string $url, float $timeoutSeconds)
Resolve and authorize one outbound destination within the given time budget.
in
PublicDestinationPolicy at line 107
void
validate(string $url)
Validate a destination URL without resolving it, such as before storing one a user entered.
A host given as an address literal is authorized now. A hostname is not resolved, so its addresses are checked when a request resolves them.
in
PublicDestinationPolicy at line 125
protected string|null
proxyFor(UriInterface $uri)
Return an approved proxy for the destination.
Applications that require trusted egress proxies may extend this policy and select an absolute URL from a bounded operator-configured set. The policy then vets and pins only the proxy: hostname targets are resolved by the proxy, so it must enforce the same destination rules itself.
at line 18
protected bool
allowsAddress(UriInterface $uri, string $address)
Allow local OAuth development without trusting arbitrary private DNS targets.
at line 29
protected array
resolveHost(string $host, float $timeoutSeconds)
Resolve hostnames through AuthServerDiscovery::resolveHostsUsing() when a callback is set.
in
PublicDestinationPolicy at line 185
protected array|false
resolveAddressFamily(string $host, int $family, float $timeoutSeconds)
Resolve one address family within its share of the request budget.