0byt3m1n1

Path: /data/applications/aps/geeklog/1.8.0-0/standard/htdocs/system/classes/oauth/ [ Home ]
File: facebook.auth.class.php
<?php

/* Reminder: always indent with 4 spaces (no tabs). */
// +---------------------------------------------------------------------------+
// | Geeklog 1.7                                                               |
// +---------------------------------------------------------------------------+
// | facebook.auth.class.php                                                   |
// | version: 1.0.0                                                            |
// |                                                                           |
// | Geeklog Distributed Authentication Module.                                |
// +---------------------------------------------------------------------------+
// | Copyright (C) 2010 by the following authors:                              |
// |                                                                           |
// | Authors: Hiroron          - hiroron AT hiroron DOT com                    |
// +---------------------------------------------------------------------------+
// |                                                                           |
// | This program is free software; you can redistribute it and/or             |
// | modify it under the terms of the GNU General Public License               |
// | as published by the Free Software Foundation; either version 2            |
// | of the License, or (at your option) any later version.                    |
// |                                                                           |
// | This program is distributed in the hope that it will be useful,           |
// | but WITHOUT ANY WARRANTY; without even the implied warranty of            |
// | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the             |
// | GNU General Public License for more details.                              |
// |                                                                           |
// | You should have received a copy of the GNU General Public License         |
// | along with this program; if not, write to the Free Software Foundation,   |
// | Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.           |
// |                                                                           |
// +---------------------------------------------------------------------------+

if (strpos(strtolower($_SERVER['PHP_SELF']), 'facebook.auth.class.php') !== false) {
    die('This file can not be used on its own.');
}

class facebookConsumer extends OAuthConsumerBaseClass {
    public $consumer_key = ''; // <--  Application ID
    public $consumer_secret = ''; // <--  Application Secret
    public $url_authorize = 'https://graph.facebook.com/oauth/authorize';
    public $url_accessToken = 'https://graph.facebook.com/oauth/access_token';
    public $url_userinfo = 'https://graph.facebook.com/me';
    public $url_userinfo_photo = 'https://graph.facebook.com/me/picture';
    public $callback_query_string = 'code';
    public $cancel_query_string = 'error_reason';

    public function __construct() {
        $this->request = new HTTP_Request2;
        $this->request->setConfig('ssl_verify_peer', false);
        $this->request->setHeader('Accept-Encoding', '.*');
    }

    public function find_identity_info($callback_url, $query) {
        // COM_errorLog("FB:find_identity_info()----------------------");
        // COM_errorLog("clearing cookies");
        SEC_setCookie($_COOKIE['request_token'], '', time() - 10000);
        SEC_setCookie($_COOKIE['request_token_secret'], '', time() - 10000);
        $params = array(
            'client_id' => $this->consumer_key,
            'redirect_uri' => $callback_url,
            'scope' => 'email,user_website,user_location,user_about_me,user_photos',
        );
        return $this->url_authorize . '?' . http_build_query($params, null, '&');
    }

    public function sreq_userinfo_response($query) {
        global $_CONF;

        // COM_errorLog("FB:sreq_userinfo_response()------------------");
        $userinfo = array();

        try {
            // COM_errorLog("upon entry, _COOKIE[request_token]={$_COOKIE['request_token']}");
            // COM_errorLog("upon entry, _COOKIE[request_token_secret]={$_COOKIE['request_token_secret']}");
            $verifier = $query[$this->callback_query_string];
            $callback_url = $_CONF['site_url'] . '/users.php?oauth_login=facebook';
            $params = array(
                'client_id' => $this->consumer_key,
                'redirect_uri' => $callback_url,
                'client_secret' => $this->consumer_secret,
                'code' => $verifier,
            );

            // first request obtains access token

            $url_auth = $this->url_accessToken . '?' . http_build_query($params, null, '&');
            // COM_errorLog("FB:sreq_userinfo_response() req1: " . $url_auth);
            $this->request->setUrl($url_auth);
            $response = $this->request->send();
            $rdata = $response->getBody();
            // COM_errorLog("FB:sreq_userinfo_response() rsp1: " . $rdata);
            parse_str($rdata, $data);
            if (isset($data['access_token'])) {
                $this->token = $data['access_token'];
                SEC_setCookie('request_token', $data['access_token']);
            } else {
                // COM_errorLog("error: access_token not retrieved");
                $data = json_decode($rdata);
                if (!empty($data->error)) {
                    $this->errormsg = $data->error->message;
                }
                return; // early exit
            }

            // second request obtains what basic user info that the graphs API
            // will give us without additional requests (everything but photo)

            $params = array('access_token' => $this->token);
            $url_me = $this->url_userinfo . '?' . http_build_query($params, null, '&');
            // COM_errorLog("FB:sreq_userinfo_response() req2: " . $url_me);
            $this->request->setUrl($url_me);
            $response = $this->request->send();
            $rdata = $response->getBody();
            // COM_errorLog("FB:sreq_userinfo_response() rsp2: " . $rdata);
            $data = json_decode($rdata);
            if (!empty($data->error)) {
                $this->errormsg = $data->error->message;
                return;
            }
            $userinfo = $data;

            // third request retrieves the user's photo URL

            $url_photo = $this->url_userinfo_photo . '?' . http_build_query($params, null, '&');
            $this->request->setUrl($url_photo);
            // COM_errorLog("FB:sreq_serinfo_response() req3: " . $url_photo);
            $response = $this->request->send();
            if(($response->getStatus() == '302') AND ($response->getReasonPhrase() == 'Found')) {
                $header = $response->getHeader();
                $userinfo->photo_url = $header['location'];
                // COM_errorLog("photo_url=" . $userinfo->photo_url);
            } else {
                $userinfo->photo_url = '';
                // COM_errorLog("photo_url=(null)");
            }

        } catch (Exception $e) {
            $this->errormsg = get_class($e) . ': ' . $e->getMessage();
        }
        // COM_errorLog("upon exit, request_token cookie={$this->token}");
        // COM_errorLog("upon entry, request_token secret cookie={$this->token_secret}");
        return $userinfo;
    }

    public function refresh_userinfo() {

        // COM_errorLog("FB:refresh_userinfo()------------------");
        $userinfo = array();

        try {
            // COM_errorLog("upon entry, _COOKIE[request_token]={$_COOKIE['request_token']}");
            // COM_errorLog("upon entry, _COOKIE[request_token_secret]={$_COOKIE['request_token_secret']}");

            // retrieve the access token
            $this->token = $_COOKIE['request_token'];
            if(empty($this->token)) {
                exit;
            } else {
                // retrieve the userinfo
                $params = array('access_token' => $this->token);
                $url_me = $this->url_userinfo . '?' . http_build_query($params, null, '&');
                // COM_errorLog("FB:refresh_userinfo() req1: " . $url_me);
                $this->request->setUrl($url_me);
                $response = $this->request->send();
                $rdata = $response->getBody();
                // COM_errorLog("FB:refresh_userinfo() rsp1: " . $rdata);
                $data = json_decode($rdata);
                if (!empty($data->error)) {
                    $this->errormsg = $data->error->message;
                    return;
                }
                $userinfo = $data;

                // retrieve the user's photo URL
                $url_photo = $this->url_userinfo_photo . '?' . http_build_query($params, null, '&');
                $this->request->setUrl($url_photo);
                // COM_errorLog("FB:refresh_userinfo() req2: " . $url_photo);
                $response = $this->request->send();
                if(($response->getStatus() == '302') AND ($response->getReasonPhrase() == 'Found')) {
                    $header = $response->getHeader();
                    $userinfo->photo_url = $header['location'];
                    // COM_errorLog("photo_url=" . $userinfo->photo_url);
                } else {
                    $userinfo->photo_url = '';
                    // COM_errorLog("photo_url=(null)");
                }
            }

        } catch (Exception $e) {
            $this->errormsg = get_class($e) . ': ' . $e->getMessage();
        }

        return $userinfo;
    }

    protected function _getCreateUserInfo($info) {
        $users = array(
            'loginname'      => $info->name,
            'email'          => $info->email,
            'passwd'         => '',
            'passwd2'        => '',
            'fullname'       => $info->name,
            'homepage'       => $info->link,
            'remoteusername' => addslashes($info->id),
            'remoteservice'  => 'oauth.facebook',
            'remotephoto'    => $info->photo_url,
        );
        return $users;
    }

    protected function _getUpdateUserInfo($info) {
        $userinfo = array(
            'about'          => $info->about,
            'location'       => $info->location->name,
        );
        return $userinfo;
    }

}

if ( !function_exists('json_decode') ){
    function json_decode($json)
    {
        // Author: walidator.info 2009
        $comment = false;
        $out = '$x=';

        for ($i=0; $i<strlen($json); $i++)
        {
            if (!$comment)
            {
                if ($json[$i] == '{')        $out .= ' array(';
                else if ($json[$i] == '}')    $out .= ')';
                else if ($json[$i] == ':')    $out .= '=>';
                else                         $out .= $json[$i];
            }
            else $out .= $json[$i];
            if ($json[$i] == '"')    $comment = !$comment;
        }
        eval($out . ';');
        return $x;
    }
}

?>