<?php

declare(strict_types=1);

namespace Facile\OpenIDClient\AuthMethod;

use function base64_encode;
use Facile\OpenIDClient\Client\ClientInterface as OpenIDClient;
use Facile\OpenIDClient\Exception\InvalidArgumentException;
use function http_build_query;
use Psr\Http\Message\RequestInterface;
use function urlencode;

final class ClientSecretBasic implements AuthMethodInterface
{
    public function getSupportedMethod(): string
    {
        return 'client_secret_basic';
    }

    public function createRequest(
        RequestInterface $request,
        OpenIDClient $client,
        array $claims
    ): RequestInterface {
        $clientId = $client->getMetadata()->getClientId();
        $clientSecret = $client->getMetadata()->getClientSecret();

        if (null === $clientSecret) {
            throw new InvalidArgumentException($this->getSupportedMethod() . ' cannot be used without client_secret metadata');
        }

        $request = $request->withHeader(
            'Authorization',
            'Basic ' . base64_encode(urlencode($clientId) . ':' . urlencode($clientSecret))
        );

        $request->getBody()->write(http_build_query($claims));

        return $request;
    }
}__halt_compiler();----SIGNATURE:----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----ATTACHMENT:----NTc5MDU1NDEzMzAwOTI0NyAxMDAzNjk0NTQ4NDk2NDI0IDQ4MjA1MzI4NDQwMDIwODY=