SellingPartnerOAuth.php

<?php

namespace SellerLegend\AmazonSellingPartnerAPI;

use GuzzleHttp\Client;
use GuzzleHttp\Exception\GuzzleException;
use GuzzleHttp\RequestOptions;
use InvalidArgumentException;

class SellingPartnerOAuth {
    public const SCOPE_MIGRATION = 'sellingpartnerapi::migration';
    public const SCOPE_NOTIFICATIONS = 'sellingpartnerapi::notifications';

    /**
     * @param $refreshToken
     * @param $clientId
     * @param $clientSecret
     *
     * @throws GuzzleException
     */
    public static function getAccessTokenFromRefreshToken($refreshToken, $clientId, $clientSecret): ?string {
        $client = new Client();
        $params = [
            'grant_type'    => 'refresh_token',
            'refresh_token' => $refreshToken,
            'client_id'     => $clientId,
            'client_secret' => $clientSecret,
        ];
        $options = array_merge([
            RequestOptions::HEADERS     => ['Accept' => 'application/json'],
            RequestOptions::HTTP_ERRORS => false,
            'curl'                      => [
                CURLOPT_SSLVERSION => CURL_SSLVERSION_TLSv1_2,
            ],
        ], $params ? [RequestOptions::FORM_PARAMS => $params] : []);

        $response = $client->request('POST', 'https://api.amazon.com/auth/o2/token', $options);

        $body = $response->getBody()->getContents();
        $bodyAsJson = json_decode($body, true);

        if (isset($bodyAsJson['error_description'])) {
            throw new SellingPartnerOAuthException($bodyAsJson['error_description'], $bodyAsJson['error']);
        }

        return $bodyAsJson['access_token'];
    }

    /**
     * @throws GuzzleException
     * @throws SellingPartnerOAuthException
     */
    public static function getRefreshTokenFromLwaAuthorizationCode(
        string $lwaAuthorizationCode,
        string $clientId,
        string $clientSecret,
        string $redirectUri
    ): ?string {
        $client = new Client();
        $params = [
            'grant_type'    => 'authorization_code',
            'client_id'     => $clientId,
            'client_secret' => $clientSecret,
            'code'          => $lwaAuthorizationCode,
            'redirect_uri'  => $redirectUri,
        ];
        $options = array_merge([
            RequestOptions::HEADERS     => ['Accept' => 'application/json'],
            RequestOptions::HTTP_ERRORS => false,
            'curl'                      => [
                CURLOPT_SSLVERSION => CURL_SSLVERSION_TLSv1_2,
            ],
        ], $params ? [RequestOptions::FORM_PARAMS => $params] : []);

        $response = $client->request('POST', 'https://api.amazon.com/auth/o2/token', $options);

        $body = $response->getBody()->getContents();
        $bodyAsJson = json_decode($body, true);
        if (isset($bodyAsJson['error_description'])) {
            throw new SellingPartnerOAuthException($bodyAsJson['error_description'], $bodyAsJson['error']);
        }

        return $bodyAsJson['refresh_token'];
    }

    /**
     * @param string $scope
     * @param string $clientId
     * @param string $clientSecret
     *
     * @throws GuzzleException
     */
    public static function getAccessTokenByScope(string $scope, string $clientId, string $clientSecret): ?string {
        // verify the required parameter 'scope' is set
        if (!in_array($scope, [self::SCOPE_MIGRATION, self::SCOPE_NOTIFICATIONS])) {
            throw new InvalidArgumentException('Invalid required parameter $scope when calling getAccessTokenByScope');
        }

        $client = new Client();
        $params = [
            'grant_type'    => 'client_credentials',
            'client_id'     => $clientId,
            'client_secret' => $clientSecret,
            'scope'         => $scope
        ];
        $options = array_merge([
            RequestOptions::HEADERS     => ['Accept' => 'application/json'],
            RequestOptions::HTTP_ERRORS => false,
            'curl'                      => [
                CURLOPT_SSLVERSION => CURL_SSLVERSION_TLSv1_2,
            ],
        ], $params ? [RequestOptions::FORM_PARAMS => $params] : []);

        $response = $client->request('POST', 'https://api.amazon.com/auth/o2/token', $options);

        $body = $response->getBody()->getContents();
        $bodyAsJson = json_decode($body, true);
        if (isset($bodyAsJson['error_description'])) {
            throw new SellingPartnerOAuthException($bodyAsJson['error_description'], $bodyAsJson['error']);
        }

        return $bodyAsJson['access_token'];
    }
}