You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
119 lines
3.4 KiB
119 lines
3.4 KiB
<?php
|
|
use Symfony\Component\HttpFoundation\Request;
|
|
use Symfony\Component\HttpFoundation\Response;
|
|
|
|
class Token {
|
|
|
|
public $http;
|
|
private $_pretty = false;
|
|
|
|
public function __construct() {
|
|
$this->http = new p3k\HTTP();
|
|
}
|
|
|
|
public function token(Request $request, Response $response) {
|
|
|
|
if($request->get('pretty')) {
|
|
$this->_pretty = true;
|
|
}
|
|
|
|
$source = $request->get('source');
|
|
$code = $request->get('code');
|
|
|
|
if(!$source) {
|
|
return $this->respond($response, 400, [
|
|
'error' => 'invalid_request',
|
|
'error_description' => 'Provide a source URL'
|
|
]);
|
|
}
|
|
|
|
if(!$code) {
|
|
return $this->respond($response, 400, [
|
|
'error' => 'invalid_request',
|
|
'error_description' => 'Provide an authorization code'
|
|
]);
|
|
}
|
|
|
|
$scheme = parse_url($source, PHP_URL_SCHEME);
|
|
if(!in_array($scheme, ['http','https'])) {
|
|
return $this->respond($response, 400, [
|
|
'error' => 'invalid_url',
|
|
'error_description' => 'Only http and https URLs are supported'
|
|
]);
|
|
}
|
|
|
|
// First try to discover the token endpoint
|
|
$head = $this->http->head($source);
|
|
|
|
if(!array_key_exists('Link', $head['headers'])) {
|
|
return $this->respond($response, 200, [
|
|
'error' => 'no_token_endpoint',
|
|
'error_description' => 'No Link headers were returned'
|
|
]);
|
|
}
|
|
|
|
if(is_string($head['headers']['Link']))
|
|
$head['headers']['Link'] = [$head['headers']['Link']];
|
|
|
|
$rels = $head['rels'];
|
|
|
|
$endpoint = false;
|
|
if(array_key_exists('token_endpoint', $rels)) {
|
|
$endpoint = $rels['token_endpoint'][0];
|
|
} elseif(array_key_exists('oauth2-token', $rels)) {
|
|
$endpoint = $rels['oauth2-token'][0];
|
|
}
|
|
|
|
if(!$endpoint) {
|
|
return $this->respond($response, 200, [
|
|
'error' => 'no_token_endpoint',
|
|
'error_description' => 'No token endpoint was found in the headers'
|
|
]);
|
|
}
|
|
|
|
// Resolve the endpoint URL relative to the source URL
|
|
$endpoint = \mf2\resolveUrl($source, $endpoint);
|
|
|
|
// Now exchange the code for a token
|
|
$token = $this->http->post($endpoint, [
|
|
'grant_type' => 'authorization_code',
|
|
'code' => $code
|
|
]);
|
|
|
|
// Catch HTTP errors here such as timeouts
|
|
if($token['error']) {
|
|
return $this->respond($response, 200, [
|
|
'error' => $token['error'],
|
|
'error_description' => $token['error_description'] ?: 'An unknown error occurred trying to fetch the token'
|
|
]);
|
|
}
|
|
|
|
// Otherwise pass through the response from the token endpoint
|
|
$body = @json_decode($token['body']);
|
|
|
|
// Pass through the content type if we were not able to decode the response as JSON
|
|
$headers = [];
|
|
if(!$body && isset($token['headers']['Content-Type'])) {
|
|
$headers['Content-Type'] = $token['headers']['Content-Type'];
|
|
}
|
|
|
|
return $this->respond($response, 200, $body ?: $token['body'], $headers);
|
|
}
|
|
|
|
private function respond(Response $response, $code, $params, $headers=[]) {
|
|
$response->setStatusCode($code);
|
|
foreach($headers as $k=>$v) {
|
|
$response->headers->set($k, $v);
|
|
}
|
|
if(is_array($params) || is_object($params)) {
|
|
$response->headers->set('Content-Type', 'application/json');
|
|
$opts = JSON_UNESCAPED_SLASHES;
|
|
if($this->_pretty) $opts += JSON_PRETTY_PRINT;
|
|
$response->setContent(json_encode($params, $opts)."\n");
|
|
} else {
|
|
$response->setContent($params);
|
|
}
|
|
return $response;
|
|
}
|
|
|
|
}
|