fix: ResourceServer::isOwn checking

Change-Id: I9ee576f0fa8fc705af6fd6176f27c784fdecc8b0

Author: smarcet

app/Models/OAuth2/ResourceServer.php

@@ -14,6 +14,8 @@
 use App\Models\Utils\BaseEntity;
 use Doctrine\Common\Collections\ArrayCollection;
 use Doctrine\ORM\Mapping AS ORM;
+use Illuminate\Support\Facades\Log;
+
 /**
  * @package Models\OAuth2
  */
@@ -63,9 +65,22 @@ class ResourceServer extends BaseEntity
      * @return bool
      */
     public function isOwn($ip)
-    {
-        $ips = explode(',',  $this->ips);
-        return in_array($ip, $ips);
+    {   $provided_ips = array_map('trim', explode(',', $ip));
+        $own_ips = array_map('trim', explode(',', $this->ips));
+        Log::debug
+        (
+            sprintf
+            (
+                "ResourceServer::isOwn resource server %s checking if %s is in %s",
+                $this->id,
+                $ip,
+                $this->ips
+            )
+        );
+        foreach ($provided_ips as $provided_ip){
+            if(in_array($provided_ip, $own_ips)) return true;
+        }
+        return false;
     }
 
     /**

app/Repositories/DoctrineResourceServerRepository.php

@@ -59,15 +59,20 @@ public function getByHost(string $host):?ResourceServer
     public function getByIp(string $ip):?ResourceServer
     {
         Log::debug(sprintf("DoctrineResourceServerRepository::getByIp ip %s", $ip));
-        return $this->getEntityManager()
-            ->createQueryBuilder()
-            ->select("r")
-            ->from($this->getBaseEntity(), "r")
-            ->where("r.ips like :ip")
-            ->setParameter("ip", '%'.trim($ip).'%')
-            ->setMaxResults(1)
-            ->getQuery()
-            ->getOneOrNullResult();
+        $provided_ips = array_map('trim', explode(',', $ip));
+        foreach ($provided_ips as $provided_ip) {
+            $res = $this->getEntityManager()
+                ->createQueryBuilder()
+                ->select("r")
+                ->from($this->getBaseEntity(), "r")
+                ->where("r.ips like :ip")
+                ->setParameter("ip", '%' . trim($provided_ip) . '%')
+                ->setMaxResults(1)
+                ->getQuery()
+                ->getOneOrNullResult();
+            if ($res instanceof ResourceServer) return $res;
+        }
+        return null;
     }
 
     /**