···
use GuzzleHttp\Psr7\HttpFactory;
use chillerlan\OAuth\OAuthOptions;
22
+
use chillerlan\OAuth\Storage\SessionStorage;
use Lcobucci\JWT\Token\Builder;
use Lcobucci\JWT\Encoding\ChainedFormatter;
···
use Lcobucci\JWT\Signer\Ecdsa\Sha256;
use Smallnest\Bsky\BskyProvider;
$bskyToucher = new BskyToucher();
$favoriteFeeds = array_map(function ($feed) use ($bskyToucher) {
···
Flight::set('publicApi', PUBLIC_API);
Flight::set('frontpageFeed', FRONTPAGE_FEED);
Flight::set('defaultRelay', DEFAULT_RELAY);
68
-
Flight::set('userAuth', null);
70
+
Flight::set('userAuth', array_key_exists('sbs_'.SITE_DOMAIN, $_SESSION) ? $_SESSION['sbs_'.SITE_DOMAIN] : null);
71
+
Flight::set('userPds', array_key_exists('sbs_'.SITE_DOMAIN.'_pds', $_SESSION) ? $_SESSION['sbs_'.SITE_DOMAIN.'_pds'] : null);
72
+
Flight::set('userInfo', array_key_exists('sbs_'.SITE_DOMAIN.'_userinfo', $_SESSION) ? $_SESSION['sbs_'.SITE_DOMAIN.'_userinfo'] : null);
Flight::set('flight.log_errors', false);
Flight::set('flight.handle_errors', false);
Flight::set('flight.content_length', false);
···
'setTheme' => array_key_exists('sbs_theme', $_COOKIE) ? $_COOKIE['sbs_theme'] : DEFAULT_THEME,
'setFont' => array_key_exists('sbs_font', $_COOKIE) ? $_COOKIE['sbs_font'] : DEFAULT_FONT,
'userAuth' => Flight::get('userAuth'),
84
+
'userPds' => Flight::get('userPds'),
85
+
'userInfo' => Flight::Get('userInfo'),
'favFeeds' => $favoriteFeeds,
···
Flight::route('/login', function(): void {
179
-
if (!array_key_exists('username', $_GET)) {
185
+
if (isset($_GET['username'])) {
186
+
$username = $_GET['username'];
187
+
$bskyToucher = new BskyToucher();
188
+
$userInfo = $bskyToucher->getUserInfo($username);
189
+
if (!$userInfo) die(1);
190
+
$pds = $userInfo->pds;
191
+
$options = new OAuthOptions([
192
+
'key' => 'https://'.SITE_DOMAIN.CLIENT_ID,
193
+
'secret' => CLIENT_SECRET,
194
+
'callbackURL' => 'https://'.SITE_DOMAIN.'/login',
195
+
'sessionStart' => true,
196
+
'sessionStorageVar' => 'sbs_'.SITE_DOMAIN
198
+
$storage = new SessionStorage($options);
199
+
$connector = new React\Socket\Connector([
202
+
$http = new React\Http\Browser($connector);
203
+
$httpFactory = new HttpFactory();
204
+
$token_builder = Builder::new(new JoseEncoder(), ChainedFormatter::default());
205
+
$algorithm = new Sha256();
206
+
$signing_key = InMemory::file(CERT_PATH);
207
+
$now = new DateTimeImmutable();
208
+
$token = $token_builder
209
+
->withHeader('alg', 'ES256')
210
+
->withHeader('typ', 'JWT')
211
+
->withHeader('kid', 'ocwgKj_O7H9at1sL6yWf9ZZ82NOM7D0xlN8HGIyWH6M')
212
+
->issuedBy('https://'.SITE_DOMAIN.CLIENT_ID)
213
+
->identifiedBy(uniqid())
214
+
->relatedTo('https://'.SITE_DOMAIN.CLIENT_ID)
215
+
->permittedFor($pds)
216
+
->issuedAt($now->modify('-5 seconds'))
217
+
->getToken($algorithm, $signing_key);
218
+
$client = new GuzzleHttp\Client([
221
+
'User-Agent' => USER_AGENT_STR,
222
+
'Authorization' => 'Bearer: '.$token->toString()
225
+
$provider = new BskyProvider($options, $client, $httpFactory, $httpFactory, $httpFactory);
226
+
$provider->setPds($pds);
227
+
$name = $provider->getName();
228
+
if (isset($_GET['login']) && $_GET['login'] === $name) {
229
+
$auth_url = $provider->getAuthorizationUrl([
230
+
'client_assertion_type' => 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer',
231
+
'client_assertion' => $token->toString()
233
+
Flight::redirect($auth_url);
235
+
} else if (isset($_GET['code'], $_GET['iss'])) {
236
+
$storage->storeAccessToken($_GET['code'], $name);
237
+
$_SESSION['sbs_'.SITE_DOMAIN.'_pds'] = $_GET['iss'];
238
+
$_SESSION['sbs_'.SITE_DOMAIN.'_userinfo'] = $bskyToucher->getUserInfo();
239
+
Flight::redirect('/');
241
+
} else if (isset($_GET['error'])) {
$latte = new Latte\Engine;
$latte->render('./templates/login.latte', array_merge(Flight::get('standardParams'), [
···
'ogurl' => 'https://'.SITE_DOMAIN.'/login'
190
-
$username = $_GET['username'];
191
-
$bskyToucher = new BskyToucher();
192
-
$userInfo = $bskyToucher->getUserInfo($username);
193
-
if (!$userInfo) die(1);
194
-
$pds = $userInfo->pds;
195
-
$options = new OAuthOptions([
196
-
'key' => 'https://'.SITE_DOMAIN.CLIENT_ID,
197
-
'secret' => CLIENT_SECRET,
198
-
'callbackURL' => 'http://127.0.0.1/login',
199
-
'sessionStart' => true,
201
-
$connector = new React\Socket\Connector([
204
-
$http = new React\Http\Browser($connector);
205
-
$httpFactory = new HttpFactory();
206
-
$token_builder = Builder::new(new JoseEncoder(), ChainedFormatter::default());
207
-
$algorithm = new Sha256();
208
-
$signing_key = InMemory::file(CERT_PATH);
209
-
$now = new DateTimeImmutable();
210
-
$token = $token_builder
211
-
->withHeader('alg', 'ES256')
212
-
->withHeader('typ', 'JWT')
213
-
->issuedBy($userInfo->did)
214
-
->relatedTo('https://'.SITE_DOMAIN.CLIENT_ID)
215
-
->permittedFor('did:web:'.str_replace("/", "", str_replace("https://", "", $pds)))
217
-
->getToken($algorithm, $signing_key);
218
-
$client = new GuzzleHttp\Client([
221
-
'User-Agent' => USER_AGENT_STR,
222
-
'Authorization' => 'Bearer: '.$token->toString()
225
-
$provider = new BskyProvider($options, $client, $httpFactory, $httpFactory, $httpFactory);
226
-
$provider->setPds($pds);
227
-
$name = $provider->getName();
229
-
if (isset($_GET['login']) && $_GET['login'] === $name) {
230
-
$auth_url = $provider->getAuthorizationUrl([
231
-
'client_assertion_type' => 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer',
232
-
'client_assertion' => $token->toString()
234
-
header('Location: '.$auth_url);
236
-
} else if (isset($_GET['code'], $_GET['state'])) {
237
-
$token = $provider->getAccessToken($_GET['code'], $_GET['state']);
239
-
// save the token in a permanent storage
242
-
// access granted, redirect
243
-
header('Location: ?granted='.$name);
245
-
} else if (isset($_GET['granted']) && $_GET['granted'] === $name) {
247
-
} else if (isset($_GET['error'])) {
250
-
$latte = new Latte\Engine;
251
-
$latte->render('./templates/login.latte', array_merge(Flight::get('standardParams'), [
252
-
'mainClass' => 'form',
253
-
'ogtitle' => SITE_TITLE." | login",
254
-
'ogdesc' => SITE_DESC,
256
-
'ogurl' => 'https://'.SITE_DOMAIN.'/login'
256
+
Flight::route('/logout', function(): void {
257
+
unset($_SESSION['sbs_'.SITE_DOMAIN]);
258
+
unset($_SESSION['sbs_'.SITE_DOMAIN.'_pds']);
259
+
unset($_SESSION['sbs_'.SITE_DOMAIN.'_userinfo']);
260
+
Flight::redirect('/');
260
-
// https://shimaenaga.veryroundbird.house/oauth/authorize?client_id=https%3A%2F%2Ftangled.org%2Foauth%2Fclient-metadata.json&request_uri=urn%3Aietf%3Aparams%3Aoauth%3Arequest_uri%3Areq-2399ff42af66498132ebf8de809254b7
Flight::route('/createaccount', function(): void {
$latte = new Latte\Engine;
veryroundbird.house