FilesExpand file tree

main

/

AccessToken.php

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

91 lines (79 loc) · 2.46 KB

main

/

AccessToken.php

Copy path

Top

File metadata and controls

• Code
• Blame

91 lines (79 loc) · 2.46 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

<?php

/*

* This file is part of the official PHP MCP SDK.

*

* A collaboration between Symfony and the PHP Foundation.

*

* For the full copyright and license information, please view the LICENSE

* file that was distributed with this source code.

*/

namespace Mcp\Server\Authorization;

/**

* The validated access token a request was authorized with.

*

* The HTTP transports read it from the PSR-7 request attribute `AccessToken::class`

* and expose it to handlers through {@see \Mcp\Server\RequestContext::getAccessToken()}.

* {@see \Mcp\Server\Transport\Http\Middleware\AuthorizationMiddleware} sets that attribute;

* an application authenticating requests itself sets it instead. It only lives for the

* request it arrived with: it is never written to a session store, so a

* request without a token never inherits an earlier one.

*

* @author Christopher Hertel <mail@christopher-hertel.de>

*/

final class AccessToken implements \JsonSerializable

{

/**

* @param list<string> $scopes scopes granted to the token

* @param array<string, mixed> $claims claims of the token, e.g. a JWT payload or an introspection response

*/

public function __construct(

private readonly array $scopes = [],

private readonly array $claims = [],

) {

}

/**

* @return list<string>

*/

public function getScopes(): array

{

return $this->scopes;

}

public function hasScope(string $scope): bool

{

return \in_array($scope, $this->scopes, true);

}

/**

* @return array<string, mixed>

*/

public function getClaims(): array

{

return $this->claims;

}

public function getClaim(string $name): mixed

{

return $this->claims[$name] ?? null;

}

/**

* The resource owner the token was issued for (`sub`).

*/

public function getSubject(): ?string

{

$subject = $this->claims['sub'] ?? null;

return \is_string($subject) ? $subject : null;

}

/**

* The client the token was issued to: `client_id` (RFC 9068), falling back to `azp` (OpenID Connect).

*/

public function getClientId(): ?string

{

$clientId = $this->claims['client_id'] ?? $this->claims['azp'] ?? null;

return \is_string($clientId) ? $clientId : null;

}

/**

* Never serialized: the token must not outlive its request in a session store.

*/

public function jsonSerialize(): mixed

{

return null;

}

}