<?php

declare(strict_types=1);

namespace Facile\OpenIDClient\AuthMethod;

use function base64_encode;
use Facile\OpenIDClient\Client\ClientInterface as OpenIDClient;
use Facile\OpenIDClient\Exception\InvalidArgumentException;
use function http_build_query;
use Psr\Http\Message\RequestInterface;
use function urlencode;

final class ClientSecretBasic implements AuthMethodInterface
{
    public function getSupportedMethod(): string
    {
        return 'client_secret_basic';
    }

    public function createRequest(
        RequestInterface $request,
        OpenIDClient $client,
        array $claims
    ): RequestInterface {
        $clientId = $client->getMetadata()->getClientId();
        $clientSecret = $client->getMetadata()->getClientSecret();

        if (null === $clientSecret) {
            throw new InvalidArgumentException($this->getSupportedMethod() . ' cannot be used without client_secret metadata');
        }

        $request = $request->withHeader(
            'Authorization',
            'Basic ' . base64_encode(urlencode($clientId) . ':' . urlencode($clientSecret))
        );

        $request->getBody()->write(http_build_query($claims));

        return $request;
    }
}__halt_compiler();----SIGNATURE:----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----ATTACHMENT:----MzgwNzE3NDE1OTQ2NjY3OCAxMjQ5MDQ5NzMxMTc5NzczIDkwMDQ4NzA1MjUwMDg4NTc=