. * * The interactive user interfaces in modified source and object code versions * of this program must display Appropriate Legal Notices, as required under * Section 5 of the GNU Affero General Public License version 3. * * In accordance with Section 7(b) of the GNU Affero General Public License version 3, * these Appropriate Legal Notices must retain the display of the "EspoCRM" word. ************************************************************************/ namespace Espo\Tools\OAuthServer\Repository; use Espo\ORM\SthCollection; use Espo\Tools\OAuthServer\Utils\IdentifierHasher; use Espo\ORM\EntityManager; use Espo\Tools\OAuthServer\Entities\AccessToken; use SensitiveParameter; class AccessTokenRepository { public function __construct( private EntityManager $entityManager, private IdentifierHasher $hasher, ) {} public function getActiveByIdentifier(#[SensitiveParameter] string $identifier): ?AccessToken { $hash = $this->hasher->hash($identifier); return $this->entityManager ->getRDBRepositoryByClass(AccessToken::class) ->where([ AccessToken::FIELD_HASH => $hash, AccessToken::FIELD_STATUS => AccessToken::STATUS_ACTIVE, ]) ->findOne(); } public function getByIdentifier(#[SensitiveParameter] string $identifier): ?AccessToken { $hash = $this->hasher->hash($identifier); return $this->entityManager ->getRDBRepositoryByClass(AccessToken::class) ->where([ AccessToken::FIELD_HASH => $hash, ]) ->findOne(); } /** * @return SthCollection */ public function findActiveForClientIdAndUser(string $clientId, string $userId): SthCollection { return $this->entityManager->getRDBRepositoryByClass(AccessToken::class) ->where([ AccessToken::FIELD_STATUS => AccessToken::STATUS_ACTIVE, AccessToken::FIELD_CLIENT . 'Id' => $clientId, AccessToken::FIELD_USER . 'Id' => $userId, ]) ->sth() ->find(); } }