Fix scoper issues for WP specifically

Author: brianjaustin

.gitignore

@@ -120,3 +120,10 @@ fabric.properties
 /build/
 
 # End of https://www.toptal.com/developers/gitignore/api/composer,phpcodesniffer,phpstorm+all,phpunit
+
+# Build files
+WP_OIDC_Login_*.zip
+wp-oidc-login/
+
+# Potential secrets
+.env

composer.json

@@ -29,7 +29,8 @@
     "require": {
         "php": "^8.2",
         "jumbojett/openid-connect-php": "^1.0",
-        "phpseclib/bcmath_compat": "^2.0"
+        "phpseclib/bcmath_compat": "^2.0",
+        "sniccowp/php-scoper-wordpress-excludes": "^6.9"
     },
     "require-dev": {
         "lkrms/pretty-php": "^0.4.94",

composer.lock

@@ -1,17 +1,28 @@
-<?php
-
-declare(strict_types=1);
+<?php declare(strict_types=1);
 
 use Isolated\Symfony\Component\Finder\Finder;
 
-return [
-    'prefix' => 'OTWSystems\\WpOidcLogin\\Vendor',
+function getWpExcludedSymbols(string $fileName): array
+{
+    $filePath = __DIR__ . '/vendor/sniccowp/php-scoper-wordpress-excludes/generated/' . $fileName;
+
+    return json_decode(
+        file_get_contents($filePath),
+        true,
+    );
+}
 
+$wpConstants = getWpExcludedSymbols('exclude-wordpress-constants.json');
+$wpClasses = getWpExcludedSymbols('exclude-wordpress-classes.json');
+$wpFunctions = getWpExcludedSymbols('exclude-wordpress-functions.json');
+
+return [
+    'prefix' => 'OTWSystems\WpOidcLogin\Vendor',
     'finders' => [
         Finder::create()
             ->files()
             ->ignoreVCS(true)
-            ->notName('/.*\\.dist|Makefile|scoper.inc.php|build.sh|public-signing-key.pub|composer.json|composer.lock/')
+            ->notName('/.*\.dist|Makefile|scoper.inc.php|build.sh|public-signing-key.pub|composer.json|composer.lock/')
             ->exclude([
                 'doc',
                 'test',
@@ -20,28 +31,25 @@
                 'Tests',
                 'vendor-bin',
             ])
-			->in(['vendor', '.']),
-
+            ->in(['vendor', '.']),
         Finder::create()->append([
             'composer.json',
         ]),
     ],
-
-    'exclude-constants' => [
+    'exclude-constants' => array_merge([
         'ABSPATH',
         'WP_OIDC_LOGIN_VERSION',
-    ],
-
+    ], $wpConstants),
+    'exclude-classes' => $wpClasses,
+    'exclude-functions' => $wpFunctions,
     'exclude-namespaces' => [
         '/^OTWSystems\\\\WpOidcLogin\\\\/',
         '/^OTWSystems\\\\WpOidcLogin/',
-        '/^Psr\\\/',
+        '/^Psr\\\\/',
     ],
-
-	'expose-global-constants' => false,
-	'expose-global-classes'   => false,
-	'expose-global-functions' => false,
-
+    'expose-global-constants' => false,
+    'expose-global-classes' => false,
+    'expose-global-functions' => false,
     'patchers' => [
         static function (string $filePath, string $prefix, string $content): string {
             // Fix the string reference of a scoped dependency in the Math lib
@@ -51,15 +59,15 @@ static function (string $filePath, string $prefix, string $content): string {
                 str_ends_with($filePath, 'vendor/phpseclib/phpseclib/phpseclib/Math/BigInteger/Engines/Engine.php')
             ) {
                 $content = str_replace(
-                    'phpseclib3\\Math\\BigInteger\\Engines\\\\',
+                    'phpseclib3\Math\BigInteger\Engines\\\\',
                     "{$escapedPrefix}\\\\phpseclib3\\\\Math\\\\BigInteger\\\\Engines\\\\",
                     $content
                 );
             }
 
             if (str_ends_with($filePath, 'vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/AsymmetricKey.php')) {
                 $content = str_replace(
-                    'phpseclib3\\Crypt\\\\',
+                    'phpseclib3\Crypt\\\\',
                     "{$escapedPrefix}\\\\phpseclib3\\\\Crypt\\\\",
                     $content
                 );

scoper.inc.php

@@ -84,6 +84,7 @@ public function getSdk(): OpenIDConnectClient
             $clientId = $this->getOptionString('client', 'id');
             $clientSecret = $this->getOptionString('client', 'secret');
             $this->sdk = new OpenIDConnectClient($endpoint, $clientId, $clientSecret);
+            $this->sdk->setHttpUpgradeInsecureRequests(false);
             $this->sdk->addScope(['email', 'profile', 'groups']);
         }