From c7c2dc1f4655095724f6872a017f17744124ea22 Mon Sep 17 00:00:00 2001
From: ousid <imo.ossama1@gmail.com>
Date: Tue, 12 Nov 2024 12:41:01 +0400
Subject: [PATCH] add code challenge params

---
 src/MsGraph.php | 24 ++++++++++++++++--------
 1 file changed, 16 insertions(+), 8 deletions(-)

diff --git a/src/MsGraph.php b/src/MsGraph.php
index 070515a..77f38bb 100755
--- a/src/MsGraph.php
+++ b/src/MsGraph.php
@@ -28,32 +28,32 @@ class MsGraph
 {
     public function contacts(): Contacts
     {
-        return new Contacts();
+        return new Contacts;
     }
 
     public function emails(): Emails
     {
-        return new Emails();
+        return new Emails;
     }
 
     public function files(): Files
     {
-        return new Files();
+        return new Files;
     }
 
     public function sites(): Sites
     {
-        return new Sites();
+        return new Sites;
     }
 
     public function tasklists(): TaskLists
     {
-        return new TaskLists();
+        return new TaskLists;
     }
 
     public function tasks(): Tasks
     {
-        return new Tasks();
+        return new Tasks;
     }
 
     protected static string $baseUrl = 'https://graph.microsoft.com/v1.0/';
@@ -83,7 +83,7 @@ public static function setUserModel(string $model): static
     {
         self::$userModel = $model;
 
-        return new static();
+        return new static;
     }
 
     /**
@@ -111,7 +111,15 @@ public function connect(?string $id = null): Redirector|RedirectResponse
         }
 
         if (! request()->has('code') && ! $this->isConnected($id)) {
-            return redirect($provider->getAuthorizationUrl());
+            $codeVerifier = bin2hex(random_bytes(32));
+            $codeChallenge = rtrim(
+                strtr(base64_encode(hash('sha256', $codeVerifier, true)), '+/', '-_'), '='
+            );
+
+            return redirect($provider->getAuthorizationUrl([
+                'code_challenge' => $codeChallenge,
+                'code_challenge_method' => 'S256',
+            ]));
         }
 
         if (request()->has('code')) {