oCIS PHP SDK

// find all users with a specific surname
$users = $ocis->getUsers("einstein")[0];

// get all drives of type project
$drives = $ocis->getMyDrives(
    DriveOrder::NAME,
    OrderDirection::ASC,
    DriveType::PROJECT
);

// get the drive named 'game'
foreach ($drives as $drive) {
    if ($drive->getName() === 'game') {
        $gameDrive = $drive;
        break;
    }
}

// get all roles that are possible for that drive
$driveRoles = $gameDrive->getRoles();

// get the role that is allowed to view, download, upload, edit, add, delete and manage members
foreach ($driveRoles as $role) {
    if ($role->getDisplayName() === 'Manager') {
        $managerRole = $role;
        break;
    }
}

// invite user einstein on project drive 'game' with manager permission
$gameDrive->invite($users, $managerRole);

composer require facile-it/php-openid-client
composer require nyholm/psr7

<?php

require __DIR__ . '/path/to/vendor/autoload.php';

use Facile\OpenIDClient\Client\ClientBuilder;
use Facile\OpenIDClient\Issuer\IssuerBuilder;
use Facile\OpenIDClient\Client\Metadata\ClientMetadata;
use Facile\OpenIDClient\Service\Builder\AuthorizationServiceBuilder;
use Nyholm\Psr7\ServerRequest;

$issuer = (new IssuerBuilder())
    ->build('https://example.ocis.com');

$clientMetadata = ClientMetadata::fromArray([
    'client_id' => 'client_id',
    'client_secret' => 'client_secret',
    'redirect_uris' => [
        'http://url-of-this-file',
    ],
]);
$client = (new ClientBuilder())
    ->setIssuer($issuer)
    ->setClientMetadata($clientMetadata)
    ->build();

$authorizationService = (new AuthorizationServiceBuilder())->build();
$redirectAuthorizationUri = $authorizationService->getAuthorizationUri(
    $client,
    ['scope' => 'openid profile email offline_access']
);

if (!isset($_REQUEST["code"])) {
    header('Location: ' . $redirectAuthorizationUri);
} else {
    $serverRequest = new ServerRequest('GET', $_SERVER['REQUEST_URI']);

    $callbackParams = $authorizationService->getCallbackParams($serverRequest, $client);

    $tokenSet = $authorizationService->callback($client, $callbackParams);

    // store access and refresh token in database
    $accessToken = $tokenSet->getAccessToken();
    echo 'AccessToken : ' . $accessToken;
    echo '<hr>';

    $refreshToken = $tokenSet->getRefreshToken();
    echo 'RefreshToken : ' . $refreshToken;
    echo '<hr>';

    // use this code to get a new access token when expired
    $tokenSet = $authorizationService->refresh($client, $refreshToken);
    $accessToken = $tokenSet->getAccessToken();
    echo 'NewAccessToken : ' . $accessToken;
}

<?php
// ...
use Facile\OpenIDClient\Issuer\Metadata\Provider\MetadataProviderBuilder;
use Facile\JoseVerifier\JWK\JwksProviderBuilder;
use Symfony\Component\HttpClient\Psr18Client;
use Symfony\Component\HttpClient\CurlHttpClient;

$symHttpClient = new CurlHttpClient([
    'verify_peer' => false,
    'verify_host' => false
]);
$httpClient = new Psr18Client($symHttpClient);

$metadataProviderBuilder = (new MetadataProviderBuilder())
    ->setHttpClient($httpClient);
$jwksProviderBuilder = (new JwksProviderBuilder())
    ->setHttpClient($httpClient);
$issuer = (new IssuerBuilder())
    ->setMetadataProviderBuilder($metadataProviderBuilder)
    ->setJwksProviderBuilder($jwksProviderBuilder)
    ->build('https://example.ocis.com');
// ...
$client = (new ClientBuilder())
    ->setHttpClient($httpClient)
    ->setIssuer($issuer)
    ->setClientMetadata($clientMetadata)
    ->build();

$authorizationService = (new AuthorizationServiceBuilder())
    ->setHttpClient($httpClient)
    ->build();
// ...