Policy Enforcer Updates

- Fixed issues related to RPTResponse when response mode is set on RPTRequest
- Permissions are encapsulated in a ResponsePermission class.

src/Provider/Keycloak/PolicyEnforcer.php

@@ -64,7 +64,6 @@ public function isGranted() : ResponseInterface {
         // No permitted resources/permissions returned from keycloak, return 403
         if ($permissions == null) return new EmptyResponse(StatusCodeInterface::STATUS_FORBIDDEN);
 
-        /** @var $permission ResourcePermission */
         foreach ($permissions as $permission) {
             if ($permission->getResourceId() == $kcResourceId) {
                 $this->permission = $permission;
@@ -95,10 +94,15 @@ public function getGrantedKeycloakResourcePermission() : ?ResourcePermission {
     public function getKeycloakPermissions(): ?array
     {
         $RPTRequest = new RequestingPartyTokenRequest($this->Keycloak, $this->bearerToken);
-        $RPTRequest->setAudience($this->Keycloak->getAudienceFromKeycloakConfig())->setResponseMode();
+        $RPTRequest->setAudience($this->Keycloak->getAudienceFromKeycloakConfig())->setResponseMode('permissions');
 
         $RPTResponse = $this->Keycloak->getAuthorizationToken($RPTRequest);
-        return $RPTResponse->getPermissions();
+        $permissions = $RPTResponse->getPermissions();
+        array_walk($permissions, function(&$permission, $i){
+            $permission = new ResourcePermission((array) $permission);
+        });
+
+        return $permissions;
     }
 
     /**

src/Provider/Keycloak/ResourcePermission.php

@@ -5,6 +5,7 @@
 class ResourcePermission
 {
     const SCOPE = "scope";
+    const RESOURCE_SCOPES = "resource_scopes";
     const RESOURCE_ID = "rsid";
     const RESOURCE_NAME = "rsname";
 
@@ -23,10 +24,14 @@ public function getResourceId() : string {
         return $this->permission[self::RESOURCE_ID];
     }
 
-    public function getResourceScopes() : array {
+    public function getScopes() : array {
         return $this->permission[self::SCOPE];
     }
 
+    public function getResourceScopes() : ?array {
+        return $this->permission[self::RESOURCE_SCOPES];
+    }
+
     public function hasScope(string $scope) : bool {
         return in_array($scope, $this->getResourceScopes());
     }