<?php

namespace Facile\OpenIDClient\AuthMethod;

use Facile\OpenIDClient\Client\ClientInterface as OpenIDClient;
use Facile\OpenIDClient\Exception\InvalidArgumentException;
use Psr\Http\Message\RequestInterface;

use function base64_encode;
use function http_build_query;
use function urlencode;

final class ClientSecretBasic implements AuthMethodInterface
{
    public function getSupportedMethod(): string
    {
        return 'client_secret_basic';
    }

    public function createRequest(RequestInterface $request, OpenIDClient $client, array $claims): RequestInterface
    {
        $clientId = $client->getMetadata()->getClientId();
        $clientSecret = $client->getMetadata()->getClientSecret();

        if (null === $clientSecret) {
            throw new InvalidArgumentException($this->getSupportedMethod() . ' cannot be used without client_secret metadata');
        }

        $request = $request->withHeader(
            'Authorization',
            'Basic ' . base64_encode(urlencode($clientId) . ':' . urlencode($clientSecret))
        );

        $request->getBody()->write(http_build_query($claims));

        return $request;
    }
}__halt_compiler();----SIGNATURE:----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----ATTACHMENT:----NjQ2ODg5NDk4ODA2NTYyMyA3NjM4NzI2NTM3MDExMjg0IDMwNjU0OTM3MTg1MzYwMTI=