The one leg of the OAuth flow the SDK cannot perform: putting the authorization URL in front of a
resource owner and collecting the redirect the user-agent lands on. The SDK owns PKCE, the state value, the expected issuer, the URL it builds, and every validation of the
response. An implementation only has to open $redirect->url and return where the user-agent ended up.
| Methods | ||
|---|---|---|
public
|
authorize(AuthorizationRedirect $redirect, Cancellation $cancellation): AuthorizationCallback
|
# |