forked from GNUsocial/gnu-social
		
	
		
			
	
	
		
			208 lines
		
	
	
		
			6.4 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
		
		
			
		
	
	
			208 lines
		
	
	
		
			6.4 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
|   | <?php | ||
|  | 
 | ||
|  | /** | ||
|  |  * This file supplies a memcached store backend for OpenID servers and | ||
|  |  * consumers. | ||
|  |  * | ||
|  |  * PHP versions 4 and 5 | ||
|  |  * | ||
|  |  * LICENSE: See the COPYING file included in this distribution. | ||
|  |  * | ||
|  |  * @package OpenID | ||
|  |  * @author Artemy Tregubenko <me@arty.name> | ||
|  |  * @copyright 2008 JanRain, Inc. | ||
|  |  * @license http://www.apache.org/licenses/LICENSE-2.0 Apache | ||
|  |  * Contributed by Open Web Technologies <http://openwebtech.ru/> | ||
|  |  */ | ||
|  | 
 | ||
|  | /** | ||
|  |  * Import the interface for creating a new store class. | ||
|  |  */ | ||
|  | require_once 'Auth/OpenID/Interface.php'; | ||
|  | 
 | ||
|  | /** | ||
|  |  * This is a memcached-based store for OpenID associations and | ||
|  |  * nonces.  | ||
|  |  *  | ||
|  |  * As memcache has limit of 250 chars for key length,  | ||
|  |  * server_url, handle and salt are hashed with sha1().  | ||
|  |  * | ||
|  |  * Most of the methods of this class are implementation details. | ||
|  |  * People wishing to just use this store need only pay attention to | ||
|  |  * the constructor. | ||
|  |  * | ||
|  |  * @package OpenID | ||
|  |  */ | ||
|  | class Auth_OpenID_MemcachedStore extends Auth_OpenID_OpenIDStore { | ||
|  | 
 | ||
|  |     /** | ||
|  |      * Initializes a new {@link Auth_OpenID_MemcachedStore} instance. | ||
|  |      * Just saves memcached object as property. | ||
|  |      * | ||
|  |      * @param resource connection Memcache connection resourse | ||
|  |      */ | ||
|  |     function Auth_OpenID_MemcachedStore($connection, $compress = false) | ||
|  |     { | ||
|  |         $this->connection = $connection; | ||
|  |         $this->compress = $compress ? MEMCACHE_COMPRESSED : 0; | ||
|  |     } | ||
|  | 
 | ||
|  |     /** | ||
|  |      * Store association until its expiration time in memcached.  | ||
|  |      * Overwrites any existing association with same server_url and  | ||
|  |      * handle. Handles list of associations for every server.  | ||
|  |      */ | ||
|  |     function storeAssociation($server_url, $association) | ||
|  |     { | ||
|  |         // create memcached keys for association itself 
 | ||
|  |         // and list of associations for this server
 | ||
|  |         $associationKey = $this->associationKey($server_url,  | ||
|  |             $association->handle); | ||
|  |         $serverKey = $this->associationServerKey($server_url); | ||
|  |          | ||
|  |         // get list of associations 
 | ||
|  |         $serverAssociations = $this->connection->get($serverKey); | ||
|  |          | ||
|  |         // if no such list, initialize it with empty array
 | ||
|  |         if (!$serverAssociations) { | ||
|  |             $serverAssociations = array(); | ||
|  |         } | ||
|  |         // and store given association key in it
 | ||
|  |         $serverAssociations[$association->issued] = $associationKey; | ||
|  |          | ||
|  |         // save associations' keys list 
 | ||
|  |         $this->connection->set( | ||
|  |             $serverKey, | ||
|  |             $serverAssociations, | ||
|  |             $this->compress | ||
|  |         ); | ||
|  |         // save association itself
 | ||
|  |         $this->connection->set( | ||
|  |             $associationKey, | ||
|  |             $association,  | ||
|  |             $this->compress,  | ||
|  |             $association->issued + $association->lifetime); | ||
|  |     } | ||
|  | 
 | ||
|  |     /** | ||
|  |      * Read association from memcached. If no handle given  | ||
|  |      * and multiple associations found, returns latest issued | ||
|  |      */ | ||
|  |     function getAssociation($server_url, $handle = null) | ||
|  |     { | ||
|  |         // simple case: handle given
 | ||
|  |         if ($handle !== null) { | ||
|  |             // get association, return null if failed
 | ||
|  |             $association = $this->connection->get( | ||
|  |                 $this->associationKey($server_url, $handle)); | ||
|  |             return $association ? $association : null; | ||
|  |         } | ||
|  |          | ||
|  |         // no handle given, working with list
 | ||
|  |         // create key for list of associations
 | ||
|  |         $serverKey = $this->associationServerKey($server_url); | ||
|  |          | ||
|  |         // get list of associations
 | ||
|  |         $serverAssociations = $this->connection->get($serverKey); | ||
|  |         // return null if failed or got empty list
 | ||
|  |         if (!$serverAssociations) { | ||
|  |             return null; | ||
|  |         } | ||
|  |          | ||
|  |         // get key of most recently issued association
 | ||
|  |         $keys = array_keys($serverAssociations); | ||
|  |         sort($keys); | ||
|  |         $lastKey = $serverAssociations[array_pop($keys)]; | ||
|  |          | ||
|  |         // get association, return null if failed
 | ||
|  |         $association = $this->connection->get($lastKey); | ||
|  |         return $association ? $association : null; | ||
|  |     } | ||
|  | 
 | ||
|  |     /** | ||
|  |      * Immediately delete association from memcache. | ||
|  |      */ | ||
|  |     function removeAssociation($server_url, $handle) | ||
|  |     { | ||
|  |         // create memcached keys for association itself 
 | ||
|  |         // and list of associations for this server
 | ||
|  |         $serverKey = $this->associationServerKey($server_url); | ||
|  |         $associationKey = $this->associationKey($server_url,  | ||
|  |             $handle); | ||
|  |          | ||
|  |         // get list of associations
 | ||
|  |         $serverAssociations = $this->connection->get($serverKey); | ||
|  |         // return null if failed or got empty list
 | ||
|  |         if (!$serverAssociations) { | ||
|  |             return false; | ||
|  |         } | ||
|  |          | ||
|  |         // ensure that given association key exists in list
 | ||
|  |         $serverAssociations = array_flip($serverAssociations); | ||
|  |         if (!array_key_exists($associationKey, $serverAssociations)) { | ||
|  |             return false; | ||
|  |         } | ||
|  |          | ||
|  |         // remove given association key from list
 | ||
|  |         unset($serverAssociations[$associationKey]); | ||
|  |         $serverAssociations = array_flip($serverAssociations); | ||
|  |          | ||
|  |         // save updated list
 | ||
|  |         $this->connection->set( | ||
|  |             $serverKey, | ||
|  |             $serverAssociations, | ||
|  |             $this->compress | ||
|  |         ); | ||
|  | 
 | ||
|  |         // delete association 
 | ||
|  |         return $this->connection->delete($associationKey); | ||
|  |     } | ||
|  | 
 | ||
|  |     /** | ||
|  |      * Create nonce for server and salt, expiring after  | ||
|  |      * $Auth_OpenID_SKEW seconds. | ||
|  |      */ | ||
|  |     function useNonce($server_url, $timestamp, $salt) | ||
|  |     { | ||
|  |         global $Auth_OpenID_SKEW; | ||
|  |          | ||
|  |         // save one request to memcache when nonce obviously expired 
 | ||
|  |         if (abs($timestamp - time()) > $Auth_OpenID_SKEW) { | ||
|  |             return false; | ||
|  |         } | ||
|  |          | ||
|  |         // returns false when nonce already exists
 | ||
|  |         // otherwise adds nonce
 | ||
|  |         return $this->connection->add( | ||
|  |             'openid_nonce_' . sha1($server_url) . '_' . sha1($salt),  | ||
|  |             1, // any value here 
 | ||
|  |             $this->compress,  | ||
|  |             $Auth_OpenID_SKEW); | ||
|  |     } | ||
|  |      | ||
|  |     /** | ||
|  |      * Memcache key is prefixed with 'openid_association_' string.  | ||
|  |      */ | ||
|  |     function associationKey($server_url, $handle = null)  | ||
|  |     { | ||
|  |         return 'openid_association_' . sha1($server_url) . '_' . sha1($handle); | ||
|  |     } | ||
|  |      | ||
|  |     /** | ||
|  |      * Memcache key is prefixed with 'openid_association_' string.  | ||
|  |      */ | ||
|  |     function associationServerKey($server_url)  | ||
|  |     { | ||
|  |         return 'openid_association_server_' . sha1($server_url); | ||
|  |     } | ||
|  |      | ||
|  |     /** | ||
|  |      * Report that this storage doesn't support cleanup | ||
|  |      */ | ||
|  |     function supportsCleanup() | ||
|  |     { | ||
|  |         return false; | ||
|  |     } | ||
|  | } | ||
|  | 
 |