comparing 2e9bf2cc3f443008990e12d721ace1cad5630221 and main on veryroundbird.house/smallbird-social

+57 -55

index.php

···

       182
       182
        
       });

     

       183
       183
        
       

     

       184
       184
        
       Flight::route('/login', function(): void {

     

       185
       185
       +
         if (isset($_GET['username'])) {

     

       185
       186
        
         $username = $_GET['username'];

     

       186
       186
       -
         $bskyToucher = new BskyToucher();

     

       187
       187
       -
         $userInfo = $bskyToucher->getUserInfo($username);

     

       188
       188
       -
         if (!$userInfo) die(1);

     

       189
       189
       -
         $pds = $userInfo->pds;

     

       190
       190
       -
         $options = new OAuthOptions([

     

       191
       191
       -
         	'key'          => 'https://'.SITE_DOMAIN.CLIENT_ID,

     

       192
       192
       -
         	'secret'       => CLIENT_SECRET,

     

       193
       193
       -
         	'callbackURL'  => 'https://'.SITE_DOMAIN.'/login',

     

       194
       194
       -
         	'sessionStart' => true,

     

       195
       195
       -
           'sessionStorageVar' => 'sbs_'.SITE_DOMAIN

     

       196
       196
       -
         ]);

     

       197
       197
       -
         $storage = new SessionStorage($options);

     

       198
       198
       -
         $connector = new React\Socket\Connector([

     

       199
       199
       -
           'dns' => '1.1.1.1'

     

       200
       200
       -
         ]);

     

       201
       201
       -
         $http = new React\Http\Browser($connector);

     

       202
       202
       -
         $httpFactory = new HttpFactory();

     

       203
       203
       -
         $token_builder = Builder::new(new JoseEncoder(), ChainedFormatter::default());

     

       204
       204
       -
         $algorithm    = new Sha256();

     

       205
       205
       -
         $signing_key   = InMemory::file(CERT_PATH);

     

       206
       206
       -
         $now   = new DateTimeImmutable();

     

       207
       207
       -
         $token = $token_builder

     

       208
       208
       -
           ->withHeader('alg', 'ES256')

     

       209
       209
       -
           ->withHeader('typ', 'JWT')

     

       210
       210
       -
           ->withHeader('kid', 'ocwgKj_O7H9at1sL6yWf9ZZ82NOM7D0xlN8HGIyWH6M')

     

       211
       211
       -
           ->issuedBy('https://'.SITE_DOMAIN.CLIENT_ID)

     

       212
       212
       -
           ->identifiedBy(uniqid())

     

       213
       213
       -
           ->relatedTo('https://'.SITE_DOMAIN.CLIENT_ID)

     

       214
       214
       -
           ->permittedFor($pds)

     

       215
       215
       -
           ->issuedAt($now->modify('-5 seconds'))

     

       216
       216
       -
           ->getToken($algorithm, $signing_key);

     

       217
       217
       -
         $client = new GuzzleHttp\Client([

     

       218
       218
       -
           'verify' => true,

     

       219
       219
       -
           'headers' => [

     

       220
       220
       -
             'User-Agent' => USER_AGENT_STR,

     

       221
       221
       -
             'Authorization' => 'Bearer: '.$token->toString()

     

       222
       222
       -
           ]

     

       223
       223
       -
         ]);

     

       224
       224
       -
         $provider = new BskyProvider($options, $client, $httpFactory, $httpFactory, $httpFactory);

     

       225
       225
       -
         $provider->setPds($pds);

     

       226
       226
       -
         $name = $provider->getName();

     

       227
       227
       -
         if (isset($_GET['login']) && $_GET['login'] === $name) {

     

       228
       228
       -
           $auth_url = $provider->getAuthorizationUrl([

     

       229
       229
       -
             'client_assertion_type' => 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer',

     

       230
       230
       -
             'client_assertion' => $token->toString()

     

       187
       187
       +
           $bskyToucher = new BskyToucher();

     

       188
       188
       +
           $userInfo = $bskyToucher->getUserInfo($username);

     

       189
       189
       +
           if (!$userInfo) die(1);

     

       190
       190
       +
           $pds = $userInfo->pds;

     

       191
       191
       +
           $options = new OAuthOptions([

     

       192
       192
       +
             'key'          => 'https://'.SITE_DOMAIN.CLIENT_ID,

     

       193
       193
       +
             'secret'       => CLIENT_SECRET,

     

       194
       194
       +
             'callbackURL'  => 'https://'.SITE_DOMAIN.'/login',

     

       195
       195
       +
             'sessionStart' => true,

     

       196
       196
       +
             'sessionStorageVar' => 'sbs_'.SITE_DOMAIN

     

       231
       197
        
           ]);

     

       232
       232
       -
           Flight::redirect($auth_url);

     

       233
       233
       -
           die(1);

     

       234
       234
       -
         } else if (isset($_GET['code'], $_GET['iss'])) {

     

       235
       235
       -
           $storage->storeAccessToken($_GET['code'], $name);

     

       236
       236
       -
           $_SESSION['sbs_'.SITE_DOMAIN.'_pds'] = $_GET['iss'];

     

       237
       237
       -
           $_SESSION['sbs_'.SITE_DOMAIN.'_userinfo'] = $bskyToucher->getUserInfo()

     

       238
       238
       -
           Flight::redirect('/');

     

       239
       239
       -
           die(1);

     

       240
       240
       -
         } else if (isset($_GET['error'])) {

     

       241
       241
       -
           die(1);

     

       198
       198
       +
           $storage = new SessionStorage($options);

     

       199
       199
       +
           $connector = new React\Socket\Connector([

     

       200
       200
       +
             'dns' => '1.1.1.1'

     

       201
       201
       +
           ]);

     

       202
       202
       +
           $http = new React\Http\Browser($connector);

     

       203
       203
       +
           $httpFactory = new HttpFactory();

     

       204
       204
       +
           $token_builder = Builder::new(new JoseEncoder(), ChainedFormatter::default());

     

       205
       205
       +
           $algorithm    = new Sha256();

     

       206
       206
       +
           $signing_key   = InMemory::file(CERT_PATH);

     

       207
       207
       +
           $now   = new DateTimeImmutable();

     

       208
       208
       +
           $token = $token_builder

     

       209
       209
       +
             ->withHeader('alg', 'ES256')

     

       210
       210
       +
             ->withHeader('typ', 'JWT')

     

       211
       211
       +
             ->withHeader('kid', 'ocwgKj_O7H9at1sL6yWf9ZZ82NOM7D0xlN8HGIyWH6M')

     

       212
       212
       +
             ->issuedBy('https://'.SITE_DOMAIN.CLIENT_ID)

     

       213
       213
       +
             ->identifiedBy(uniqid())

     

       214
       214
       +
             ->relatedTo('https://'.SITE_DOMAIN.CLIENT_ID)

     

       215
       215
       +
             ->permittedFor($pds)

     

       216
       216
       +
             ->issuedAt($now->modify('-5 seconds'))

     

       217
       217
       +
             ->getToken($algorithm, $signing_key);

     

       218
       218
       +
           $client = new GuzzleHttp\Client([

     

       219
       219
       +
             'verify' => true,

     

       220
       220
       +
             'headers' => [

     

       221
       221
       +
               'User-Agent' => USER_AGENT_STR,

     

       222
       222
       +
               'Authorization' => 'Bearer: '.$token->toString()

     

       223
       223
       +
             ]

     

       224
       224
       +
           ]);

     

       225
       225
       +
           $provider = new BskyProvider($options, $client, $httpFactory, $httpFactory, $httpFactory);

     

       226
       226
       +
           $provider->setPds($pds);

     

       227
       227
       +
           $name = $provider->getName();

     

       228
       228
       +
           if (isset($_GET['login']) && $_GET['login'] === $name) {

     

       229
       229
       +
             $auth_url = $provider->getAuthorizationUrl([

     

       230
       230
       +
               'client_assertion_type' => 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer',

     

       231
       231
       +
               'client_assertion' => $token->toString()

     

       232
       232
       +
             ]);

     

       233
       233
       +
             Flight::redirect($auth_url);

     

       234
       234
       +
             die(1);

     

       235
       235
       +
           } else if (isset($_GET['code'], $_GET['iss'])) {

     

       236
       236
       +
             $storage->storeAccessToken($_GET['code'], $name);

     

       237
       237
       +
             $_SESSION['sbs_'.SITE_DOMAIN.'_pds'] = $_GET['iss'];

     

       238
       238
       +
             $_SESSION['sbs_'.SITE_DOMAIN.'_userinfo'] = $bskyToucher->getUserInfo();

     

       239
       239
       +
             Flight::redirect('/');

     

       240
       240
       +
             die(1);

     

       241
       241
       +
           } else if (isset($_GET['error'])) {

     

       242
       242
       +
             die(1);

     

       243
       243
       +
           }

     

       242
       244
        
         } else {

     

       243
       245
        
           $latte = new Latte\Engine;

     

       244
       246
        
           $latte->render('./templates/login.latte', array_merge(Flight::get('standardParams'), [

templates/layout.latte

···

       24
       24
        
           data-theme="{$setTheme}"

     

       25
       25
        
           data-font="{$setFont}"

     

       26
       26
        
         >

     

       27
       27
       +
           <!--

     

       28
       28
       +
             {print_r($_SESSION)}

     

       29
       29
       +
             {print_r(PHP_SESSION_DISABLED)}

     

       30
       30
       +
           -->

     

       27
       31
        
           <div id="page">

     

       28
       32
        
             <header>

     

       29
       33
        
               <h1><a href="/">{include '_partials/logo.latte'}{$siteTitle}</a></h1>

Compare changes