forked from GNUsocial/gnu-social
		
	
		
			
				
	
	
		
			175 lines
		
	
	
		
			4.9 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
			
		
		
	
	
			175 lines
		
	
	
		
			4.9 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
<?php
 | 
						|
 | 
						|
/**
 | 
						|
 * This module contains the HTTP fetcher interface
 | 
						|
 *
 | 
						|
 * PHP versions 4 and 5
 | 
						|
 *
 | 
						|
 * LICENSE: See the COPYING file included in this distribution.
 | 
						|
 *
 | 
						|
 * @package OpenID
 | 
						|
 * @author JanRain, Inc. <openid@janrain.com>
 | 
						|
 * @copyright 2005-2008 Janrain, Inc.
 | 
						|
 * @license http://www.apache.org/licenses/LICENSE-2.0 Apache
 | 
						|
 */
 | 
						|
 | 
						|
/**
 | 
						|
 * Require logging functionality
 | 
						|
 */
 | 
						|
require_once "Auth/OpenID.php";
 | 
						|
 | 
						|
define('Auth_OpenID_FETCHER_MAX_RESPONSE_KB', 1024);
 | 
						|
define('Auth_OpenID_USER_AGENT', 
 | 
						|
       'php-openid/'.Auth_OpenID_VERSION.' (php/'.phpversion().')');
 | 
						|
 | 
						|
class Auth_Yadis_HTTPResponse {
 | 
						|
    function Auth_Yadis_HTTPResponse($final_url = null, $status = null,
 | 
						|
                                         $headers = null, $body = null)
 | 
						|
    {
 | 
						|
        $this->final_url = $final_url;
 | 
						|
        $this->status = $status;
 | 
						|
        $this->headers = $headers;
 | 
						|
        $this->body = $body;
 | 
						|
    }
 | 
						|
}
 | 
						|
 | 
						|
/**
 | 
						|
 * This class is the interface for HTTP fetchers the Yadis library
 | 
						|
 * uses.  This interface is only important if you need to write a new
 | 
						|
 * fetcher for some reason.
 | 
						|
 *
 | 
						|
 * @access private
 | 
						|
 * @package OpenID
 | 
						|
 */
 | 
						|
class Auth_Yadis_HTTPFetcher {
 | 
						|
 | 
						|
    var $timeout = 20; // timeout in seconds.
 | 
						|
 | 
						|
    /**
 | 
						|
     * Return whether a URL can be fetched.  Returns false if the URL
 | 
						|
     * scheme is not allowed or is not supported by this fetcher
 | 
						|
     * implementation; returns true otherwise.
 | 
						|
     *
 | 
						|
     * @return bool
 | 
						|
     */
 | 
						|
    function canFetchURL($url)
 | 
						|
    {
 | 
						|
        if ($this->isHTTPS($url) && !$this->supportsSSL()) {
 | 
						|
            Auth_OpenID::log("HTTPS URL unsupported fetching %s",
 | 
						|
                             $url);
 | 
						|
            return false;
 | 
						|
        }
 | 
						|
 | 
						|
        if (!$this->allowedURL($url)) {
 | 
						|
            Auth_OpenID::log("URL fetching not allowed for '%s'",
 | 
						|
                             $url);
 | 
						|
            return false;
 | 
						|
        }
 | 
						|
 | 
						|
        return true;
 | 
						|
    }
 | 
						|
 | 
						|
    /**
 | 
						|
     * Return whether a URL should be allowed. Override this method to
 | 
						|
     * conform to your local policy.
 | 
						|
     *
 | 
						|
     * By default, will attempt to fetch any http or https URL.
 | 
						|
     */
 | 
						|
    function allowedURL($url)
 | 
						|
    {
 | 
						|
        return $this->URLHasAllowedScheme($url);
 | 
						|
    }
 | 
						|
 | 
						|
    /**
 | 
						|
     * Does this fetcher implementation (and runtime) support fetching
 | 
						|
     * HTTPS URLs?  May inspect the runtime environment.
 | 
						|
     *
 | 
						|
     * @return bool $support True if this fetcher supports HTTPS
 | 
						|
     * fetching; false if not.
 | 
						|
     */
 | 
						|
    function supportsSSL()
 | 
						|
    {
 | 
						|
        trigger_error("not implemented", E_USER_ERROR);
 | 
						|
    }
 | 
						|
 | 
						|
    /**
 | 
						|
     * Is this an https URL?
 | 
						|
     *
 | 
						|
     * @access private
 | 
						|
     */
 | 
						|
    function isHTTPS($url)
 | 
						|
    {
 | 
						|
        return (bool)preg_match('/^https:\/\//i', $url);
 | 
						|
    }
 | 
						|
 | 
						|
    /**
 | 
						|
     * Is this an http or https URL?
 | 
						|
     *
 | 
						|
     * @access private
 | 
						|
     */
 | 
						|
    function URLHasAllowedScheme($url)
 | 
						|
    {
 | 
						|
        return (bool)preg_match('/^https?:\/\//i', $url);
 | 
						|
    }
 | 
						|
 | 
						|
    /**
 | 
						|
     * @access private
 | 
						|
     */
 | 
						|
    function _findRedirect($headers, $url)
 | 
						|
    {
 | 
						|
        foreach ($headers as $line) {
 | 
						|
            if (strpos(strtolower($line), "location: ") === 0) {
 | 
						|
                $parts = explode(" ", $line, 2);
 | 
						|
                $loc = $parts[1];
 | 
						|
                $ppos = strpos($loc, "://");
 | 
						|
                if ($ppos === false || $ppos > strpos($loc, "/")) {
 | 
						|
                  /* no host; add it */
 | 
						|
                  $hpos = strpos($url, "://");
 | 
						|
                  $prt = substr($url, 0, $hpos+3);
 | 
						|
                  $url = substr($url, $hpos+3);
 | 
						|
                  if (substr($loc, 0, 1) == "/") {
 | 
						|
                    /* absolute path */
 | 
						|
                    $fspos = strpos($url, "/");
 | 
						|
                    if ($fspos) $loc = $prt.substr($url, 0, $fspos).$loc;
 | 
						|
                    else $loc = $prt.$url.$loc;
 | 
						|
                  } else {
 | 
						|
                    /* relative path */
 | 
						|
                    $pp = $prt;
 | 
						|
                    while (1) {
 | 
						|
                      $xpos = strpos($url, "/");
 | 
						|
                      if ($xpos === false) break;
 | 
						|
                      $apos = strpos($url, "?");
 | 
						|
                      if ($apos !== false && $apos < $xpos) break;
 | 
						|
                      $apos = strpos($url, "&");
 | 
						|
                      if ($apos !== false && $apos < $xpos) break;
 | 
						|
                      $pp .= substr($url, 0, $xpos+1);
 | 
						|
                      $url = substr($url, $xpos+1);
 | 
						|
                    }
 | 
						|
                    $loc = $pp.$loc;
 | 
						|
                  }
 | 
						|
                }
 | 
						|
                return $loc;
 | 
						|
            }
 | 
						|
        }
 | 
						|
        return null;
 | 
						|
    }
 | 
						|
 | 
						|
    /**
 | 
						|
     * Fetches the specified URL using optional extra headers and
 | 
						|
     * returns the server's response.
 | 
						|
     *
 | 
						|
     * @param string $url The URL to be fetched.
 | 
						|
     * @param array $extra_headers An array of header strings
 | 
						|
     * (e.g. "Accept: text/html").
 | 
						|
     * @return mixed $result An array of ($code, $url, $headers,
 | 
						|
     * $body) if the URL could be fetched; null if the URL does not
 | 
						|
     * pass the URLHasAllowedScheme check or if the server's response
 | 
						|
     * is malformed.
 | 
						|
     */
 | 
						|
    function get($url, $headers = null)
 | 
						|
    {
 | 
						|
        trigger_error("not implemented", E_USER_ERROR);
 | 
						|
    }
 | 
						|
}
 | 
						|
 |