# leadin/11.3.65/public/auth/class-oauth.php

HubSpot All-In-One Marketing – Forms, Popups, Live Chat, version 11.3.65. 72 lines.

- Page: https://pluginprobe.com/plugins/leadin/11.3.65/code/public/auth/class-oauth.php
- Raw: https://pluginprobe.com/plugins/leadin/11.3.65/raw/public/auth/class-oauth.php
- Modified: 2026-07-10T16:14:28+00:00

Line numbers below start at 1. Link to a line or a range by appending a fragment to the
page URL, for example `https://pluginprobe.com/plugins/leadin/11.3.65/code/public/auth/class-oauth.php#L10-L20`.

```php
<?php

namespace Leadin\auth;

use Leadin\data\User;
use Leadin\data\Portal_Options;
use Leadin\auth\OAuthCrypto;
use Leadin\admin\Routing;
use Leadin\admin\MenuConstants;

/**
 * Class managing OAuth2 authorization
 */
class OAuth {

	/**
	 * Authorizes the plugin with given oauth credentials by storing them in the options DB.
	 *
	 * @param string $refresh_token OAuth refresh token to store.
	 */
	public static function authorize( $refresh_token ) {
		$encrypted_refresh_token = OAuthCrypto::encrypt( $refresh_token );
		Portal_Options::set_refresh_token( $encrypted_refresh_token );

		Portal_Options::set_last_authorize_time();
	}

	/**
	 * Deauthorizes the plugin by deleting OAuth credentials from the options DB.
	 */
	public static function deauthorize() {
		Portal_Options::delete_refresh_token();

		Portal_Options::set_last_deauthorize_time();
	}

	/**
	 * Attempts to get and decrypt the refresh token.
	 * Records an error if decryption fails or if the token is invalid.
	 *
	 * Note: WordPress sites that are missing keys and salts will have the refresh token stored in plaintext.
	 * The decrypt function will return the plaintext token in this case.
	 *
	 * @return string The result of decrypt function, or an empty string on failure.
	 */
	public static function get_refresh_token() {
		$encrypted_refresh_token = Portal_Options::get_refresh_token();

		if ( ! self::is_valid_value( $encrypted_refresh_token ) ) {
			return '';
		}

		$refresh_token = OAuthCrypto::decrypt( $encrypted_refresh_token );

		if ( ! self::is_valid_value( $refresh_token ) ) {
			return false;
		}

		return $refresh_token;
	}

	/**
	 * Checks if the provided value is valid (not false, null, or empty).
	 *
	 * @param mixed $value The value to check.
	 * @return bool Whether the value is valid.
	 */
	private static function is_valid_value( $value ) {
		return false !== $value && null !== $value && '' !== $value;
	}
}

```