|
|
@ -4,6 +4,7 @@ namespace App\Http\Controllers; |
|
|
|
|
|
|
|
|
use Laravel\Lumen\Routing\Controller as BaseController; |
|
|
use Laravel\Lumen\Routing\Controller as BaseController; |
|
|
use Illuminate\Http\Request; |
|
|
use Illuminate\Http\Request; |
|
|
|
|
|
use GuzzleHttp; |
|
|
|
|
|
|
|
|
class IndieAuth extends BaseController |
|
|
class IndieAuth extends BaseController |
|
|
{ |
|
|
{ |
|
|
@ -17,23 +18,36 @@ class IndieAuth extends BaseController |
|
|
return view('auth/error', ['error' => 'Invalid URL']); |
|
|
return view('auth/error', ['error' => 'Invalid URL']); |
|
|
} |
|
|
} |
|
|
|
|
|
|
|
|
$authorizationEndpoint = \IndieAuth\Client::discoverAuthorizationEndpoint($me); |
|
|
|
|
|
$tokenEndpoint = \IndieAuth\Client::discoverTokenEndpoint($me); |
|
|
|
|
|
|
|
|
|
|
|
$state = \IndieAuth\Client::generateStateParameter(); |
|
|
$state = \IndieAuth\Client::generateStateParameter(); |
|
|
session([ |
|
|
|
|
|
'auth_state' => $state, |
|
|
|
|
|
'attempted_me' => $me, |
|
|
|
|
|
'authorization_endpoint' => $authorizationEndpoint, |
|
|
|
|
|
'token_endpoint' => $tokenEndpoint |
|
|
|
|
|
]); |
|
|
|
|
|
|
|
|
|
|
|
// If the user specified only an authorization endpoint, use that
|
|
|
|
|
|
if(!$authorizationEndpoint) { |
|
|
|
|
|
// Otherwise, fall back to indieauth.com
|
|
|
|
|
|
$authorizationEndpoint = env('DEFAULT_AUTH_ENDPOINT'); |
|
|
|
|
|
|
|
|
if(preg_match('/https?:\/\/github\.com\/[^ \/]+/', $me)) { |
|
|
|
|
|
$authorizationURL = 'https://github.com/login/oauth/authorize' |
|
|
|
|
|
. '?client_id=' . env('GITHUB_ID') |
|
|
|
|
|
. '&state=' . $state; |
|
|
|
|
|
|
|
|
|
|
|
session([ |
|
|
|
|
|
'auth_state' => $state, |
|
|
|
|
|
'attempted_me' => $me, |
|
|
|
|
|
]); |
|
|
|
|
|
|
|
|
|
|
|
} else { |
|
|
|
|
|
$authorizationEndpoint = \IndieAuth\Client::discoverAuthorizationEndpoint($me); |
|
|
|
|
|
$tokenEndpoint = \IndieAuth\Client::discoverTokenEndpoint($me); |
|
|
|
|
|
|
|
|
|
|
|
session([ |
|
|
|
|
|
'auth_state' => $state, |
|
|
|
|
|
'attempted_me' => $me, |
|
|
|
|
|
'authorization_endpoint' => $authorizationEndpoint, |
|
|
|
|
|
'token_endpoint' => $tokenEndpoint |
|
|
|
|
|
]); |
|
|
|
|
|
|
|
|
|
|
|
// If the user specified only an authorization endpoint, use that
|
|
|
|
|
|
if(!$authorizationEndpoint) { |
|
|
|
|
|
// Otherwise, fall back to indieauth.com
|
|
|
|
|
|
$authorizationEndpoint = env('DEFAULT_AUTH_ENDPOINT'); |
|
|
|
|
|
} |
|
|
|
|
|
$authorizationURL = \IndieAuth\Client::buildAuthorizationURL($authorizationEndpoint, $me, $this->_redirectURI(), env('BASE_URL'), $state); |
|
|
} |
|
|
} |
|
|
$authorizationURL = \IndieAuth\Client::buildAuthorizationURL($authorizationEndpoint, $me, $this->_redirectURI(), env('BASE_URL'), $state); |
|
|
|
|
|
|
|
|
|
|
|
return redirect($authorizationURL); |
|
|
return redirect($authorizationURL); |
|
|
} |
|
|
} |
|
|
@ -73,6 +87,77 @@ class IndieAuth extends BaseController |
|
|
return redirect('/'); |
|
|
return redirect('/'); |
|
|
} |
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
public function github(Request $request) { |
|
|
|
|
|
if(!session('auth_state') || !session('attempted_me')) { |
|
|
|
|
|
return view('auth/error', ['error' => 'Missing state information. Start over.']); |
|
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
if($request->input('error')) { |
|
|
|
|
|
return view('auth/error', ['error' => $request->input('error')]); |
|
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
if(session('auth_state') != $request->input('state')) { |
|
|
|
|
|
return view('auth/error', ['error' => 'State did not match. Start over.']); |
|
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
if(!$request->input('code')) { |
|
|
|
|
|
return view('auth/error', ['error' => 'An unknown error occurred']); |
|
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
$client = new GuzzleHttp\Client([ |
|
|
|
|
|
'http_errors' => false |
|
|
|
|
|
]); |
|
|
|
|
|
$res = $client->post('https://github.com/login/oauth/access_token', [ |
|
|
|
|
|
'form_params' => [ |
|
|
|
|
|
'client_id' => env('GITHUB_ID'), |
|
|
|
|
|
'client_secret' => env('GITHUB_SECRET'), |
|
|
|
|
|
// 'redirect_uri' => env('BASE_URL') . 'auth/github',
|
|
|
|
|
|
'code' => $request->input('code'), |
|
|
|
|
|
'state' => session('auth_state') |
|
|
|
|
|
], |
|
|
|
|
|
'headers' => [ |
|
|
|
|
|
'Accept' => 'application/json' |
|
|
|
|
|
] |
|
|
|
|
|
]); |
|
|
|
|
|
if($res->getStatusCode() == 200) { |
|
|
|
|
|
$body = $res->getBody(); |
|
|
|
|
|
$data = json_decode($body); |
|
|
|
|
|
if($data) { |
|
|
|
|
|
if(property_exists($data, 'access_token')) { |
|
|
|
|
|
|
|
|
|
|
|
// Now check the username of the user that just logged in
|
|
|
|
|
|
$res = $client->get('https://api.github.com/user', [ |
|
|
|
|
|
'headers' => [ |
|
|
|
|
|
'Authorization' => 'token ' . $data->access_token |
|
|
|
|
|
] |
|
|
|
|
|
]); |
|
|
|
|
|
if($res->getStatusCode() == 200) { |
|
|
|
|
|
$data = json_decode($res->getBody()); |
|
|
|
|
|
if(property_exists($data, 'login')) { |
|
|
|
|
|
session()->flush(); |
|
|
|
|
|
session(['me' => 'https://github.com/' . $data->login]); |
|
|
|
|
|
return redirect('/'); |
|
|
|
|
|
} else { |
|
|
|
|
|
return view('auth/error', ['error' => 'Login failed']); |
|
|
|
|
|
} |
|
|
|
|
|
} else { |
|
|
|
|
|
return view('auth/error', ['error' => 'Login failed']); |
|
|
|
|
|
} |
|
|
|
|
|
} else { |
|
|
|
|
|
$err = ''; |
|
|
|
|
|
if(property_exists($data, 'error_description')) { |
|
|
|
|
|
$err = ': ' . $data->error_description; |
|
|
|
|
|
} |
|
|
|
|
|
return view('auth/error', ['error' => 'Login failed' . $err]); |
|
|
|
|
|
} |
|
|
|
|
|
} else { |
|
|
|
|
|
return view('auth/error', ['error' => 'Error parsing response body from GitHub']); |
|
|
|
|
|
} |
|
|
|
|
|
} else { |
|
|
|
|
|
return view('auth/error', ['error' => 'Could not verify login from GitHub: ' . $res->getBody()]); |
|
|
|
|
|
} |
|
|
|
|
|
} |
|
|
|
|
|
|
|
|
public function logout(Request $request) { |
|
|
public function logout(Request $request) { |
|
|
session()->flush(); |
|
|
session()->flush(); |
|
|
return redirect('/'); |
|
|
return redirect('/'); |
|
|
|
