Files
WPS3Media/vendor/Aws3/Aws/Token/SsoToken.php
Malin 3248cbb029 feat: add S3-compatible storage provider (MinIO, Ceph, R2, etc.)
Adds a new 'S3-Compatible Storage' provider that works with any
S3-API-compatible object storage service, including MinIO, Ceph,
Cloudflare R2, Backblaze B2, and others.

Changes:
- New provider class: classes/providers/storage/s3-compatible-provider.php
  - Provider key: s3compatible
  - Reads user-configured endpoint URL from settings
  - Uses path-style URL access (required by most S3-compatible services)
  - Supports credentials via AS3CF_S3COMPAT_ACCESS_KEY_ID /
    AS3CF_S3COMPAT_SECRET_ACCESS_KEY wp-config.php constants
  - Disables AWS-specific features (Block Public Access, Object Ownership)
- New provider SVG icons (s3compatible.svg, -link.svg, -round.svg)
- Registered provider in main plugin class with endpoint setting support
- Updated StorageProviderSubPage to show endpoint URL input for S3-compatible
- Built pro settings bundle with rollup (Svelte 4.2.19)
- Added package.json and updated rollup.config.mjs for pro-only builds
2026-03-03 12:30:18 +01:00

103 lines
3.4 KiB
PHP

<?php
namespace DeliciousBrains\WP_Offload_Media\Aws3\Aws\Token;
/**
* Token that comes from the SSO provider
*/
class SsoToken extends Token
{
private $refreshToken;
private $clientId;
private $clientSecret;
private $registrationExpiresAt;
private $region;
private $startUrl;
/**
* Constructs a new SSO token object, with the specified AWS
* token
*
* @param string $token Security token to use
* @param int $expires UNIX timestamp for when the token expires
* @param int $refreshToken An opaque string returned by the sso-oidc service
* @param int $clientId The client ID generated when performing the registration portion of the OIDC authorization flow
* @param int $clientSecret The client secret generated when performing the registration portion of the OIDC authorization flow
* @param int $registrationExpiresAt The expiration time of the client registration (clientId and clientSecret)
* @param int $region The configured sso_region for the profile that credentials are being resolved for
* @param int $startUrl The configured sso_start_url for the profile that credentials are being resolved for
*/
public function __construct($token, $expires, $refreshToken = null, $clientId = null, $clientSecret = null, $registrationExpiresAt = null, $region = null, $startUrl = null)
{
parent::__construct($token, $expires);
$this->refreshToken = $refreshToken;
$this->clientId = $clientId;
$this->clientSecret = $clientSecret;
$this->registrationExpiresAt = $registrationExpiresAt;
$this->region = $region;
$this->startUrl = $startUrl;
}
/**
* @return bool
*/
public function isExpired()
{
if (isset($this->registrationExpiresAt) && \time() >= $this->registrationExpiresAt) {
return \false;
}
return $this->expires !== null && \time() >= $this->expires;
}
/**
* @return string|null
*/
public function getRefreshToken()
{
return $this->refreshToken;
}
/**
* @return string|null
*/
public function getClientId()
{
return $this->clientId;
}
/**
* @return string|null
*/
public function getClientSecret()
{
return $this->clientSecret;
}
/**
* @return int|null
*/
public function getRegistrationExpiresAt()
{
return $this->registrationExpiresAt;
}
/**
* @return string|null
*/
public function getRegion()
{
return $this->region;
}
/**
* @return string|null
*/
public function getStartUrl()
{
return $this->startUrl;
}
/**
* Creates an instance of SsoToken from a token data.
*
* @param $tokenData
*
* @return SsoToken
*/
public static function fromTokenData($tokenData) : SsoToken
{
return new SsoToken($tokenData['accessToken'], \strtotime($tokenData['expiresAt']), isset($tokenData['refreshToken']) ? $tokenData['refreshToken'] : null, isset($tokenData['clientId']) ? $tokenData['clientId'] : null, isset($tokenData['clientSecret']) ? $tokenData['clientSecret'] : null, isset($tokenData['registrationExpiresAt']) ? $tokenData['registrationExpiresAt'] : null, isset($tokenData['region']) ? $tokenData['region'] : null, isset($tokenData['startUrl']) ? $tokenData['startUrl'] : null);
}
}