<?php

declare(strict_types=1);

namespace App\OAuth;

use Illuminate\Support\Facades\Cache;
use Laravel\Passport\Bridge\AuthCodeRepository as PassportAuthCodeRepository;
use League\OAuth2\Server\Entities\AuthCodeEntityInterface;

class CustomAuthCodeRepository extends PassportAuthCodeRepository
{
    /**
     * Persist a new authorization code and cache its nonce if present.
     */
    public function persistNewAuthCode(AuthCodeEntityInterface $authCodeEntity): void
    {
        parent::persistNewAuthCode($authCodeEntity);

        $nonce = request()->input('nonce') ?? (request()->hasSession() ? request()->session()->get('oidc_nonce') : null);

        if ($nonce) {
            Cache::put(
                'oidc_nonce_'.$authCodeEntity->getIdentifier(),
                $nonce,
                now()->addMinutes(10)
            );

            if (request()->hasSession()) {
                request()->session()->forget('oidc_nonce');
            }
        }
    }
}