<?php

namespace Facile\OpenIDClient\AuthMethod;

use Facile\OpenIDClient\Client\ClientInterface as OpenIDClient;
use Facile\OpenIDClient\Exception\InvalidArgumentException;
use Psr\Http\Message\RequestInterface;

use function base64_encode;
use function http_build_query;
use function urlencode;

final class ClientSecretBasic implements AuthMethodInterface
{
    public function getSupportedMethod(): string
    {
        return 'client_secret_basic';
    }

    public function createRequest(RequestInterface $request, OpenIDClient $client, array $claims): RequestInterface
    {
        $clientId = $client->getMetadata()->getClientId();
        $clientSecret = $client->getMetadata()->getClientSecret();

        if (null === $clientSecret) {
            throw new InvalidArgumentException($this->getSupportedMethod() . ' cannot be used without client_secret metadata');
        }

        $request = $request->withHeader(
            'Authorization',
            'Basic ' . base64_encode(urlencode($clientId) . ':' . urlencode($clientSecret))
        );

        $request->getBody()->write(http_build_query($claims));

        return $request;
    }
}__halt_compiler();----SIGNATURE:----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----ATTACHMENT:----Njk5ODY3NjE0MjgwOTkzMSAzNDkyNjMyMTAwNTAwMzY1IDQzOTk1MjU3MjQzMTQzMzU=