TokenManagementController
class TokenManagementController
Methods
Create the token revocation and introspection endpoints.
Describe a live credential to its owner or an authorized resource server.
Authenticate a form request before examining its target credential.
Verify and locate a credential without applying its current authorization policy.
Return only the metadata this authenticated client may inspect.
Details
at line 32
__construct(ClientAuthenticator $authenticator, AccessTokenRepository $tokens, ServerFactory $servers, AuthorizationResponse $responses)
Create the token revocation and introspection endpoints.
at line 43
Response
revoke(Request $request, ServerRequestInterface $psrRequest)
Revoke a credential without revealing whether it belongs to another client.
at line 72
Response
introspect(Request $request, ServerRequestInterface $psrRequest)
Describe a live credential to its owner or an authorized resource server.
at line 95
protected array
authenticate(Request $request, ServerRequestInterface $psrRequest)
Authenticate a form request before examining its target credential.
at line 113
protected array|null
findCredential(string $value)
Verify and locate a credential without applying its current authorization policy.
at line 150
protected array
metadata(Client $client, Token|RefreshToken $token, array $claims)
Return only the metadata this authenticated client may inspect.