I have a issue with oauth. When I first use it, it works fine. But when I revoke t

oAuth fails at second time about github-api HOT 2 CLOSED

milo commented on August 23, 2024

oAuth fails at second time

from github-api.

Comments (2)

milo commented on August 23, 2024

It is because the old token is still in session. I'm solving it in application, catching the Milo\Github\UnauthorizedException and forcing new token. It looks like:

try {
    $api->decode(...);
} catch (UnauthorizedException $e) {
    Location("....?force=1");
    die();
}

# Force new OAuth token
if (isset($_GET['force'])) {
    $login->dropToken();
}

# Token obtaining
if ($login->hasToken()) {
    $token = $login->getToken();
} else {
    if (isset($_GET['back'])) {
        $token = $login->obtainToken($_GET['code'], $_GET['state']);
        header("Location: $appUrl");  # drop the 'code' and 'state' from URL
        die();
    } else {
        # Performs redirect to Github page
        $login->askPermissions("$appUrl?back=1");
    }
}

There is no automatic reaction, because it depends on application, how it wants to behave.

The way how to solve it automatically is to register own onResponse() callback like:

$api = new Github\Api;
$api->setToken($token);
$api->getClient()->onResponse(function (Milo\Github\Http\Response $response) use ($appUrl) {
    if ($response->isCode($response::S401_UNAUTHORIZED)) {
        header("Location: $appUrl?force=1");
        die();
    }
});