Fix OAuth token validation vulnerabilities and add comprehensive test coverage

src/Providers/Alipay.php

@@ -110,6 +110,10 @@ public function tokenFromCode(string $code): array
             throw new Exceptions\BadRequestException((string) $responseInstance->getBody());
         }
 
+        if (empty($response['alipay_system_oauth_token_response'])) {
+            throw new Exceptions\AuthorizeFailedException('Authorization failed: missing alipay_system_oauth_token_response in response', $response);
+        }
+
         return $this->normalizeAccessTokenResponse($response['alipay_system_oauth_token_response']);
     }
 

src/Providers/DingTalk.php

@@ -114,10 +114,14 @@ public function userFromCode(string $code): Contracts\UserInterface
             throw new Exceptions\BadRequestException((string) $responseInstance->getBody());
         }
 
+        if (empty($response['user_info'])) {
+            throw new Exceptions\AuthorizeFailedException('Authorization failed: missing user_info in response', $response);
+        }
+
         return new User([
-            Contracts\ABNF_NAME => $response['user_info']['nick'],
-            Contracts\ABNF_NICKNAME => $response['user_info']['nick'],
-            Contracts\ABNF_ID => $response['user_info'][Contracts\ABNF_OPEN_ID],
+            Contracts\ABNF_NAME => $response['user_info']['nick'] ?? null,
+            Contracts\ABNF_NICKNAME => $response['user_info']['nick'] ?? null,
+            Contracts\ABNF_ID => $response['user_info'][Contracts\ABNF_OPEN_ID] ?? null,
         ]);
     }
 }

src/Providers/DouYin.php

@@ -66,6 +66,10 @@ public function tokenFromCode(string $code): array
             throw new Exceptions\AuthorizeFailedException('Invalid token response', $body);
         }
 
+        if (empty($body['data'][Contracts\ABNF_OPEN_ID] ?? null)) {
+            throw new Exceptions\AuthorizeFailedException('Authorization failed: missing open_id in token response', $body);
+        }
+
         $this->withOpenId($body['data'][Contracts\ABNF_OPEN_ID]);
 
         return $this->normalizeAccessTokenResponse($body['data']);

src/Providers/OpenWeWork.php

@@ -85,6 +85,9 @@ public function userFromCode(string $code): Contracts\UserInterface
         $user = $this->getUser($this->getSuiteAccessToken(), $code);
 
         if ($this->detailed) {
+            if (empty($user['user_ticket'])) {
+                throw new Exceptions\AuthorizeFailedException('Authorization failed: missing user_ticket in response', $user);
+            }
             $user = \array_merge($user, $this->getUserByTicket($user['user_ticket']));
         }
 

src/Providers/QQ.php

@@ -77,6 +77,10 @@
 
         $me = $this->fromJsonBody($response);
 
+        if (empty($me['openid'])) {
+            throw new AuthorizeFailedException('Authorization failed: missing openid in token response', $me);
+        }
+
         $response = $this->getHttpClient()->get($this->baseUrl.'/user/get_user_info', [
             'query' => [
                 Contracts\RFC6749_ABNF_ACCESS_TOKEN => $token,
@@ -94,7 +98,7 @@
 
         return $user + [
             'unionid' => $me['unionid'] ?? null,
             'openid' => $me['openid'] ?? null,
         ];
     }
 

src/Providers/WeWork.php

@@ -48,6 +48,9 @@ public function userFromCode(string $code): Contracts\UserInterface
         $user = $this->getUser($token, $code);
 
         if ($this->detailed) {
+            if (empty($user['UserId'])) {
+                throw new Exceptions\AuthorizeFailedException('Authorization failed: missing UserId in user response', $user);
+            }
             $user = $this->getUserById($user['UserId']);
         }
 
@@ -203,6 +206,10 @@ protected function requestApiAccessToken(): string
             throw new Exceptions\AuthorizeFailedException((string) $responseInstance->getBody(), $response);
         }
 
+        if (empty($response[Contracts\RFC6749_ABNF_ACCESS_TOKEN])) {
+            throw new Exceptions\AuthorizeFailedException('Authorization failed: missing access_token in response', $response);
+        }
+
         return $response[Contracts\RFC6749_ABNF_ACCESS_TOKEN];
     }