src/Infrastructure/Service/AppleHelper.php line 22

Open in your IDE?
  1. <?php
  3. namespace App\Infrastructure\Service;
  5. use Firebase\JWT\JWT;
  6. use GuzzleHttp\Client;
  7. use Symfony\Component\DependencyInjection\ContainerInterface;
  8. use Symfony\Component\Routing\RouterInterface;
  10. class AppleHelper
  11. {
  12.     private ?string $secret;
  13.     private ?string $appId;
  14.     private ?string $signInId;
  15.     private ?string $privateKey;
  16.     private ?string $keyId;
  18.     private RouterInterface $router;
  20.     private const APPLE_LOGIN_URL = 'https://appleid.apple.com/auth/authorize';
  22.     public function __construct(RouterInterface $router, ContainerInterface $container)
  23.     {
  24.         $this->secret = $_ENV['APPLE_SHARED_SECRET'];
  25.         $this->appId = $_ENV['APPLE_APP_ID'];
  26.         $this->signInId = $_ENV['APPLE_SIGN_IN_ID'];
  27.         $this->privateKey = file_get_contents($container->getParameter('kernel.project_dir').'/var/resources/apple_private_key.txt');
  28.         $this->keyId = $_ENV['APPLE_KEY_ID'];
  30.         $this->router = $router;
  31.     }
  33.     public function generateLoginLink()
  34.     {
  35.         return self::APPLE_LOGIN_URL.'?'.http_build_query(
  36.             [
  37.                 'response_type' => 'code',
  38.                 'response_mode' => 'form_post',
  39.                 'client_id' => $this->signInId,
  40.                 'scope' => 'email',
  41.             ]
  42.         ).'&redirect_uri='.$_ENV['APP_HOST'].$this->router->generate('site_apple_sign_in');
  43.     }
  45.     public function getIdentityToken(string $authCode)
  46.     {
  47.         $client = new Client();
  48.         $headers = ['Content-Type' => 'application/x-www-form-urlencoded'];
  49.         $body = [
  50.             'code' => $authCode,
  51.             'client_id' => $this->signInId,
  52.             'client_secret' => $this->createClientSecret(),
  53.             'grant_type' => 'authorization_code',
  54.         ];
  56.         $response = $client->request('POST', 'https://appleid.apple.com/auth/token', [
  57.             'headers' => $headers,
  58.             'form_params' => $body,
  59.         ]);
  61.         return json_decode($response->getBody()->getContents(), true)['id_token'];
  62.     }
  64.     private function createClientSecret()
  65.     {
  66.         return JWT::encode(
  67.             [
  68.                 'iss' => '286VD7A6CN',
  69.                 'iat' => time(),
  70.                 'exp' => time() + 3600,
  71.                 'aud' => 'https://appleid.apple.com',
  72.                 'sub' => $this->signInId,
  73.             ],
  74.             $this->privateKey,
  75.             'ES256'
  76.         );
  77.     }
  78. }