feat: integrated OAuth2 server

src/Controller/Api/UserinfoController.php

@@ -0,0 +1,74 @@
+<?php
+
+namespace App\Controller\Api;
+
+use App\BusProNet\ApiClient;
+use App\BusProNet\Exception\ApiClientException;
+use App\BusProNet\Model\Notification;
+use App\BusProNet\Model\PersonalData;
+use App\Entity\User;
+use App\Security\Crypt;
+use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
+use Symfony\Component\HttpFoundation\JsonResponse;
+use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\Routing\Attribute\Route;
+use Symfony\Component\Security\Http\Attribute\IsGranted;
+
+#[Route('/api')]
+#[IsGranted('ROLE_OAUTH2_EMAIL')]
+class UserinfoController extends AbstractController
+{
+    public function __construct(private readonly ApiClient $apiClient, private readonly Crypt $crypt)
+    {
+    }
+
+    #[Route('/userinfo', name: 'api_userinfo', methods: ['GET'])]
+    public function index(): JsonResponse
+    {
+        // basic scopes applicable to all authenticated users
+        $scopes = ['email'];
+
+        // extend scopes depending on granted permissions
+        if ($this->isGranted('ROLE_OAUTH2_PROFILE')) {
+            $scopes[] = 'profile';
+        }
+
+        /** @var User $user */
+        $user = $this->getUser();
+        $email = $user->getEmail();
+        $password = $this->crypt->decrypt($user->getPassword());
+
+        try {
+            $data = $this->apiClient->getPersonalData($email, $password);
+
+            if ($data instanceof Notification) {
+                return new JsonResponse(['message' => $data->message, 'code' => $data->code], Response::HTTP_BAD_REQUEST);
+            }
+
+            // extract userdata for resulting claims
+            $userData = $this->getClaims($data, $scopes);
+
+            return $this->json($userData);
+        } catch (ApiClientException $e) {
+            return new JsonResponse(['message' => $e->getMessage()], Response::HTTP_BAD_REQUEST);
+        }
+    }
+
+    private function getClaims(PersonalData $data, array $scopes): array
+    {
+        // get all available claims
+        $allClaims = $data->getClaims();
+        $keys = array_keys($allClaims);
+        $claims = [];
+
+        // filter claims by provided scopes
+        foreach ($scopes as $scope) {
+            if (false === in_array($scope, $keys)) {
+                continue;
+            }
+            $claims[$scope] = $allClaims[$scope];
+        }
+
+        return $claims;
+    }
+}