HostedDomainException adjustments

- Use static constructor to preserve default constructors
- Don't include user's hd/domain incase it contains XSS'able data

Author: pradtke

src/Exception/HostedDomainException.php

@@ -7,37 +7,9 @@
  */
 class HostedDomainException extends \Exception
 {
-    private $hostedDomainConfigured;
 
-    private $hostedDomainOfUser;
-
-    /**
-     * HostedDomainException constructor.
-     * @param string $hostedDomainConfigured
-     * @param string|null $hostedDomainOfUser
-     */
-    public function __construct($hostedDomainConfigured, $hostedDomainOfUser)
-    {
-        parent::__construct("Hosted domain mismatch '$hostedDomainOfUser' !== '$hostedDomainConfigured'");
-        $this->hostedDomainConfigured = $hostedDomainConfigured;
-        $this->hostedDomainOfUser = $hostedDomainOfUser;
-    }
-
-    /**
-     * The hosted domain configured for this provider.
-     * @return string
-     */
-    public function getHostedDomainConfigured()
-    {
-        return $this->hostedDomainConfigured;
-    }
-
-    /**
-     * The hosted domain of the user. Non G-Suite users do not have hosted domains
-     * @return string|null
-     */
-    public function getHostedDomainOfUser()
+    public static function notMatchingDomain($configuredDomain)
     {
-        return $this->hostedDomainOfUser;
+        return new static("User is not part of domain '$configuredDomain''");
     }
 }

src/Provider/Google.php

@@ -127,10 +127,10 @@ protected function createResourceOwner(array $response, AccessToken $token)
         // Validate hosted domain incase the user edited the initial authorization code grant request
         if ($this->hostedDomain === '*') {
             if (empty($user->getHostedDomain())) {
-                throw new HostedDomainException($this->hostedDomain, $user->getHostedDomain());
+                throw HostedDomainException::notMatchingDomain($this->hostedDomain);
             }
         } elseif (!empty($this->hostedDomain) && $this->hostedDomain !== $user->getHostedDomain()) {
-            throw new HostedDomainException($this->hostedDomain, $user->getHostedDomain());
+            throw HostedDomainException::notMatchingDomain($this->hostedDomain);
         }
 
         return $user;