Skip to content

Commit

Permalink
Support attach via API
Browse files Browse the repository at this point in the history
  • Loading branch information
@adarmanto
adarmanto committed Jan 29, 2020
1 parent e5a431e commit 95ec280
Showing 1 changed file with 49 additions and 56 deletions.
105 changes: 49 additions & 56 deletions src/Broker.php
View file
Original file line number Diff line number Diff line change
Expand Up @@ -37,13 +37,13 @@ class Broker
* User info recieved from the server.
* @var array
*/
protected $userinfo;
protected $userInfo;

/**
* Cookie lifetime
* @var int
*/
protected $cookie_lifetime;
protected $cookieLifetime;

/**
* Class constructor
Expand All @@ -52,7 +52,7 @@ class Broker
* @param string $broker My identifier, given by SSO provider.
* @param string $secret My secret word, given by SSO provider.
*/
public function __construct($url, $broker, $secret, $cookie_lifetime = 3600)
public function __construct($url, $broker, $secret, $cookieLifetime = 3600)
{
if (!$url) throw new \InvalidArgumentException("SSO server URL not specified");
if (!$broker) throw new \InvalidArgumentException("SSO broker id not specified");
Expand All @@ -61,15 +61,11 @@ public function __construct($url, $broker, $secret, $cookie_lifetime = 3600)
$this->url = $url;
$this->broker = $broker;
$this->secret = $secret;
$this->cookie_lifetime = $cookie_lifetime;
$this->cookieLifetime = $cookieLifetime;

if (isset($_COOKIE[$this->getCookieName()])) {
$this->token = $_COOKIE[$this->getCookieName()];
}

if (isset($_COOKIE[$this->getCookieName().'_user'])) {
$this->userinfo = json_decode($this->decrypt($_COOKIE[$this->getCookieName().'_user']), true);
}
}

/**
Expand Down Expand Up @@ -106,7 +102,7 @@ public function generateToken()
if (isset($this->token)) return;

$this->token = base_convert(md5(uniqid(rand(), true)), 16, 36);
setcookie($this->getCookieName(), $this->token, time() + $this->cookie_lifetime, '/');
setcookie($this->getCookieName(), $this->token, time() + $this->cookieLifetime, '/');
}

/**
Expand Down Expand Up @@ -151,23 +147,33 @@ public function getAttachUrl($params = [])
/**
* Attach our session to the user's session on the SSO server.
*
* @param string|true $returnUrl The URL the client should be returned to after attaching
* @param array|true $returnUrl The URL the client should be returned to after attaching
*/
public function attach($returnUrl = null)
{
if ($this->isAttached()) return;
if ($this->isAttached()) {
return true;
}

if ($returnUrl === true) {
$protocol = !empty($_SERVER['HTTPS']) ? 'https://' : 'http://';
$returnUrl = $protocol . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];
$params = ['return_url' => $returnUrl];
$url = $this->getAttachUrl($params);

header("Location: $url", true, 307);
echo "You're redirected to <a href='$url'>$url</a>";
exit();
} else {
$data = $this->request('get', 'attach');
if (isset($data['error'])) {
throw new Exception($data['error']);
} elseif (!isset($data['success'])) {
throw new Exception('Error: '.print_r($data, 1));
}

return $data;
}

$params = ['return_url' => $returnUrl];
$url = $this->getAttachUrl($params);

header("Location: $url", true, 307);
echo "You're redirected to <a href='$url'>$url</a>";
exit();
}

/**
Expand All @@ -193,32 +199,41 @@ protected function getRequestUrl($command, $params = [])
*/
protected function request($method, $command, $data = null)
{
if (!$this->isAttached()) {
throw new NotAttachedException('No token');
}

if ($data && is_string($data)) {
$key = $data;
$data = [];
$data[$key] = 1;
}

$data['access_token'] = $this->getSessionID();
$data['referer_url'] = (!empty($_SERVER['HTTPS']) ? 'https://' : 'http://') . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];
$data['referer_ip'] = isset($_SERVER['SERVER_ADDR']) ? $_SERVER['SERVER_ADDR'] : $_SERVER['REMOTE_ADDR'];
$url = $this->getRequestUrl($command, !$data || $method === 'POST' ? [] : $data);

$headers = ['Accept: application/json'];

if ($command == 'attach') {
$url = $this->getAttachUrl();
} else {
if (!$this->isAttached()) {
throw new NotAttachedException('No token');
}

// Set access_token
$data['access_token'] = $this->getSessionID();
$headers[] = 'Authorization: Bearer '. $data['access_token'];

$data['referer_url'] = (!empty($_SERVER['HTTPS']) ? 'https://' : 'http://') . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];
$data['referer_ip'] = isset($_SERVER['SERVER_ADDR']) ? $_SERVER['SERVER_ADDR'] : $_SERVER['REMOTE_ADDR'];
$url = $this->getRequestUrl($command, !$data || $method === 'POST' ? [] : $data);
}

$ch = curl_init($url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method);
curl_setopt($ch, CURLOPT_HTTPHEADER, ['Accept: application/json', 'Authorization: Bearer '. $data['access_token']]);
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);

if ($method === 'POST' && !empty($data)) {
$post = is_string($data) ? $data : http_build_query($data);
curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
}

$response = curl_exec($ch);
$response = curl_exec($ch);
if (curl_errno($ch) != 0) {
$message = 'Server request failed: ' . curl_error($ch);
throw new Exception($message);
Expand Down Expand Up @@ -246,24 +261,6 @@ protected function request($method, $command, $data = null)
return $data;
}

/**
* Encrypt the data
* @param string $value
* @return string
*/
protected function encrypt($value) {
return openssl_encrypt($value, 'AES-128-ECB', $this->token);
}

/**
* Decrypt the data
* @param string $value
* @return string
*/
protected function decrypt($value) {
return openssl_decrypt($value, 'AES-128-ECB', $this->token);
}

/**
* Log the client in at the SSO server.
*
Expand All @@ -281,18 +278,16 @@ public function login($username = null, $password = null)
if (!isset($password) && isset($_POST['password'])) $password = $_POST['password'];

$result = $this->request('POST', 'login', compact('username', 'password'));
$this->userinfo = $result;
$this->userInfo = $result;

return $this->userinfo;
return $this->userInfo;
}

/**
* Logout at sso server.
*/
public function logout()
{
// Clear userInfo cookie
setcookie($this->getCookieName().'_user', null, 1, '/');
// Send logout request
$this->request('POST', 'logout', 'logout');
}
Expand All @@ -304,13 +299,11 @@ public function logout()
*/
public function getUserInfo()
{
if (!isset($this->userinfo)) {
$this->userinfo = $this->request('GET', 'userInfo');
// Store in cookie for optimization
setcookie($this->getCookieName().'_user', $this->encrypt(json_encode($this->userinfo)), time() + $this->cookie_lifetime, '/');
if (empty($this->userInfo)) {
$this->userInfo = $this->request('GET', 'userInfo');
}

return $this->userinfo;
return $this->userInfo;
}

/**
Expand Down

0 comments on commit 95ec280

Please sign in to comment.