Update src/Module/OAuth/Token.php

[friendica.git] / src / Module / OAuth / Revoke.php

diff --git a/src/Module/OAuth/Revoke.php b/src/Module/OAuth/Revoke.php
index b38133570f3bb391ee56b588e2b4a2821840fc9f..519e79db015f449d60543541bbc85128595faf55 100644 (file)
--- a/src/Module/OAuth/Revoke.php
+++ b/src/Module/OAuth/Revoke.php
@@ -21,15 +21,33 @@
 
 namespace Friendica\Module\OAuth;
 
+use Friendica\Core\Logger;
+use Friendica\Core\System;
+use Friendica\Database\DBA;
+use Friendica\DI;
 use Friendica\Module\BaseApi;
 
 /**
- * Dummy class for all currently unimplemented endpoints
+ * @see https://docs.joinmastodon.org/spec/oauth/
  */
 class Revoke extends BaseApi
 {
        public static function post(array $parameters = [])
        {
-               self::unsupported('post');
+               $request = self::getRequest([
+                       'client_id'     => '', // Client ID, obtained during app registration
+                       'client_secret' => '', // Client secret, obtained during app registration
+                       'token'         => '', // The previously obtained token, to be invalidated
+               ]);
+
+               $condition = ['client_id' => $request['client_id'], 'client_secret' => $request['client_secret'], 'access_token' => $request['token']];
+               $token = DBA::selectFirst('application-view', ['id'], $condition);
+               if (empty($token['id'])) {
+                       Logger::warning('Token not found', $condition);
+                       DI::mstdnError()->Unauthorized();
+               }
+
+               DBA::delete('application-token', ['application-id' => $token['id']]);
+               System::jsonExit([]);
        }
 }