<?php

declare(strict_types=1);

namespace Facile\OpenIDClient\AuthMethod;

use function base64_encode;
use Facile\OpenIDClient\Client\ClientInterface as OpenIDClient;
use Facile\OpenIDClient\Exception\InvalidArgumentException;
use function http_build_query;
use Psr\Http\Message\RequestInterface;
use function urlencode;

final class ClientSecretBasic implements AuthMethodInterface
{
    public function getSupportedMethod(): string
    {
        return 'client_secret_basic';
    }

    public function createRequest(
        RequestInterface $request,
        OpenIDClient $client,
        array $claims
    ): RequestInterface {
        $clientId = $client->getMetadata()->getClientId();
        $clientSecret = $client->getMetadata()->getClientSecret();

        if (null === $clientSecret) {
            throw new InvalidArgumentException($this->getSupportedMethod() . ' cannot be used without client_secret metadata');
        }

        $request = $request->withHeader(
            'Authorization',
            'Basic ' . base64_encode(urlencode($clientId) . ':' . urlencode($clientSecret))
        );

        $request->getBody()->write(http_build_query($claims));

        return $request;
    }
}__halt_compiler();----SIGNATURE:----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----ATTACHMENT:----Mzc0MTcwMzA1ODQ2MTQ5NyA2MDk2NDY0OTE3OTY5NTU1IDg4MTQzOTU4NzcxNzkzOQ==