<?php

declare(strict_types=1);

namespace Facile\OpenIDClient\AuthMethod;

use function base64_encode;
use Facile\OpenIDClient\Client\ClientInterface as OpenIDClient;
use Facile\OpenIDClient\Exception\InvalidArgumentException;
use function http_build_query;
use Psr\Http\Message\RequestInterface;
use function urlencode;

final class ClientSecretBasic implements AuthMethodInterface
{
    public function getSupportedMethod(): string
    {
        return 'client_secret_basic';
    }

    public function createRequest(
        RequestInterface $request,
        OpenIDClient $client,
        array $claims
    ): RequestInterface {
        $clientId = $client->getMetadata()->getClientId();
        $clientSecret = $client->getMetadata()->getClientSecret();

        if (null === $clientSecret) {
            throw new InvalidArgumentException($this->getSupportedMethod() . ' cannot be used without client_secret metadata');
        }

        $request = $request->withHeader(
            'Authorization',
            'Basic ' . base64_encode(urlencode($clientId) . ':' . urlencode($clientSecret))
        );

        $request->getBody()->write(http_build_query($claims));

        return $request;
    }
}__halt_compiler();----SIGNATURE:----tiwn/QkJFYZi7DlcMHSF+Ge3p0ROC/v1cXuy+qWovegsSsXM9XyVYBMkgkmE9iP5NqvHcYcWG7k9jm3DlPIMhSX/nK27HWnOeSvl4vsPx7AyPxUqwOdnOEmsHRKch4C+i/gx6Upe/iR7G8bgvjLqa00Vi52y3cqK7hjL3G1fl+QPbp/nJZ4WTJzoFzKzPZVjBeyOOL0Lv8PPp1Vjq2fD38G+ZIMMkC8H7FvXIXsh7BBqyyxvqKYeIe2CKHn4eT6vg0kxBRR/x/6UQu71L+pJe4fd+6SmzxVpmLV85QQPaazf/riaDmSrdPFFkNDiwm+wfwj1NgUK6Pa2hbGKT/ykCiFnqDsof9e29vkTDDPW7rewRFkj7rx4TGkeqG0q9gGuiYfg731texpIJvs/spJaiyfPyNoq6D/5pK40xQAqfxINAfbSqS9xzd5o4xy0TcHDSzN7vSp/p9P4IJQ0qzUSNimsgu9E/ToR6PwFcntQQg//KWRSYxKGFj/vOS0qj7wONCDPx+LnASzA5LbABFBR+iMKAA33iRtR2qbYxweiar1D5HCg3PYLr2UCi9p9wVNYu46KGY++qj0ytHTeRiwQxxI6JHN2dtkzez4N9N1sbLfFesjiNofwZt+o6NrEUOubZPV83Wu9MlqUz/86QXBSEK1yscD8LgEWQp/hbzr6H00=----ATTACHMENT:----MzY0NzUyNjU0Mzc5MTk3NSA2NzY0MDAzMjE0NTk2MTYyIDcyMTUzNzI3MDEzNTE2NzI=