OidcCallbackController
in package
FinalYes
Step 2 of "Login with AXIAM" (CONTRACT.md §12.1 `oidc_exchange`): an invokable controller that validates the IdP callback, consumes the single-use stored state, exchanges the authorization code, and redirects (or replies `200 JSON`) on success. All security-critical logic lives in {@see OidcLoginFlow} — see {@see OidcLoginFlow::complete()} for the full 400/401/503 failure mapping.
Table of Contents
Methods
- __construct() : mixed
- __invoke() : Response
- Handles the IdP callback GET request and returns the mapped HTTP response.
Methods
__construct()
public
__construct(OidcLoginFlow $flow) : mixed
Parameters
- $flow : OidcLoginFlow
__invoke()
Handles the IdP callback GET request and returns the mapped HTTP response.
public
__invoke(Request $request) : Response
Parameters
- $request : Request