6d5e93b07c
* Internal error conditions now raise IndieAuthException * Bubbled unknown exceptions converted to generic IndieAuthException * Exceptions passed to overridable handler, turned into response * Wrote many more tests, fixed a variety of problems
130 lines
3.9 KiB
PHP
130 lines
3.9 KiB
PHP
<?php
|
||
|
||
namespace Taproot\IndieAuth;
|
||
|
||
use Exception;
|
||
use IndieAuth\Client;
|
||
use Psr\Http\Message\ServerRequestInterface;
|
||
use Psr\Log\LoggerAwareInterface;
|
||
use Psr\Log\LoggerInterface;
|
||
|
||
use function BarnabyWalters\Mf2\parseUrl;
|
||
|
||
// From https://github.com/indieweb/indieauth-client-php/blob/main/src/IndieAuth/Client.php, thanks aaronpk.
|
||
function generateRandomString($numBytes) {
|
||
if (function_exists('random_bytes')) {
|
||
$bytes = random_bytes($numBytes);
|
||
} elseif (function_exists('openssl_random_pseudo_bytes')){
|
||
$bytes = openssl_random_pseudo_bytes($numBytes);
|
||
} else {
|
||
$bytes = '';
|
||
for($i=0, $bytes=''; $i < $numBytes; $i++) {
|
||
$bytes .= chr(mt_rand(0, 255));
|
||
}
|
||
}
|
||
return bin2hex($bytes);
|
||
}
|
||
|
||
function hashAuthorizationRequestParameters(ServerRequestInterface $request, string $secret, ?string $algo=null, ?array $hashedParameters=null): ?string {
|
||
$hashedParameters = $hashedParameters ?? ['client_id', 'redirect_uri', 'code_challenge', 'code_challenge_method'];
|
||
$algo = $algo ?? 'sha256';
|
||
|
||
$queryParams = $request->getQueryParams();
|
||
$data = '';
|
||
foreach ($hashedParameters as $key) {
|
||
if (!array_key_exists($key, $queryParams)) {
|
||
return null;
|
||
}
|
||
$data .= $queryParams[$key];
|
||
}
|
||
return hash_hmac($algo, $data, $secret);
|
||
}
|
||
|
||
function isIndieAuthAuthorizationCodeRedeemingRequest(ServerRequestInterface $request) {
|
||
return strtolower($request->getMethod()) == 'post'
|
||
&& array_key_exists('grant_type', $request->getParsedBody())
|
||
&& $request->getParsedBody()['grant_type'] == 'authorization_code';
|
||
}
|
||
|
||
function isIndieAuthAuthorizationRequest(ServerRequestInterface $request, $permittedMethods=['get']) {
|
||
return in_array(strtolower($request->getMethod()), array_map('strtolower', $permittedMethods))
|
||
&& array_key_exists('response_type', $request->getQueryParams())
|
||
&& $request->getQueryParams()['response_type'] == 'code';
|
||
}
|
||
|
||
function isAuthorizationApprovalRequest(ServerRequestInterface $request) {
|
||
return strtolower($request->getMethod()) == 'post'
|
||
&& array_key_exists('taproot_indieauth_action', $request->getParsedBody())
|
||
&& $request->getParsedBody()[Server::APPROVE_ACTION_KEY] == Server::APPROVE_ACTION_VALUE;
|
||
}
|
||
|
||
function buildQueryString(array $parameters) {
|
||
$qs = [];
|
||
foreach ($parameters as $k => $v) {
|
||
$qs[] = urlencode($k) . '=' . urlencode($v);
|
||
}
|
||
return join('&', $qs);
|
||
}
|
||
|
||
function urlComponentsMatch($url1, $url2, ?array $components=null): bool {
|
||
$validComponents = [PHP_URL_HOST, PHP_URL_PASS, PHP_URL_PATH, PHP_URL_PORT, PHP_URL_USER, PHP_URL_QUERY, PHP_URL_SCHEME, PHP_URL_FRAGMENT];
|
||
$components = $components ?? $validComponents;
|
||
|
||
foreach ($components as $cmp) {
|
||
if (!in_array($cmp, $validComponents)) {
|
||
throw new Exception("Invalid parse_url() component passed: $cmp");
|
||
}
|
||
|
||
if (parse_url($url1, $cmp) !== parse_url($url2, $cmp)) {
|
||
return false;
|
||
}
|
||
}
|
||
|
||
return true;
|
||
}
|
||
|
||
/**
|
||
* Append Query Parameters
|
||
*
|
||
* Converts `$queryParams` into a query string, then checks `$uri` for an
|
||
* existing query string. Then appends the newly generated query string
|
||
* with either ? or & as appropriate.
|
||
*/
|
||
function appendQueryParams(string $uri, array $queryParams) {
|
||
if (empty($queryParams)) {
|
||
return $uri;
|
||
}
|
||
|
||
$queryString = buildQueryString($queryParams);
|
||
$separator = parse_url($uri, \PHP_URL_QUERY) ? '&' : '?';
|
||
$uri = rtrim($uri, '?&');
|
||
return "{$uri}{$separator}{$queryString}";
|
||
}
|
||
|
||
/**
|
||
* Try setLogger
|
||
*
|
||
* If `$target` implements `LoggerAwareInterface`, set it’s logger
|
||
* to `$logger`. Returns `$target`.
|
||
*/
|
||
function trySetLogger($target, LoggerInterface $logger) {
|
||
if ($target instanceof LoggerAwareInterface) {
|
||
$target->setLogger($logger);
|
||
}
|
||
return $target;
|
||
}
|
||
|
||
function renderTemplate(string $template, array $context=[]) {
|
||
$render = function ($__template, $__templateData) {
|
||
$render = function ($template, $data){
|
||
return renderTemplate($template, $data);
|
||
};
|
||
ob_start();
|
||
extract($__templateData);
|
||
unset($__templateData);
|
||
include $__template;
|
||
return ob_get_clean();
|
||
};
|
||
return $render($template, $context);
|
||
}
|