comparing ae1d95bfe6ff3a39390309504d54dc18b96d5814 and main on veryroundbird.house/smallbird-social

+73 -72

index.php

···

       19
        
       use Matrix\Async;

     

       20
        
       use GuzzleHttp\Psr7\HttpFactory;

     

       21
        
       use chillerlan\OAuth\OAuthOptions;

     

       0
        
       
     

       22
        
       use DateTimeImmutable;

     

       23
        
       use Lcobucci\JWT\Token\Builder;

     

       24
        
       use Lcobucci\JWT\Encoding\ChainedFormatter;

     
···

       27
        
       use Lcobucci\JWT\Signer\Ecdsa\Sha256;

     

       28
        
       use Smallnest\Bsky\BskyProvider;

     

       29
        
       

     

       0
        
       
     

       30
        
       $bskyToucher = new BskyToucher();

     

       31
        
       

     

       32
        
       $favoriteFeeds = array_map(function ($feed) use ($bskyToucher) {

     
···

       65
        
       Flight::set('publicApi', PUBLIC_API);

     

       66
        
       Flight::set('frontpageFeed', FRONTPAGE_FEED);

     

       67
        
       Flight::set('defaultRelay', DEFAULT_RELAY);

     

       68
       -
       Flight::set('userAuth', null);

     

       0
        
       
     

       0
        
       
     

       69
        
       Flight::set('flight.log_errors', false);

     

       70
        
       Flight::set('flight.handle_errors', false);

     

       71
        
       Flight::set('flight.content_length', false);

     
···

       77
        
         'setTheme' => array_key_exists('sbs_theme', $_COOKIE) ? $_COOKIE['sbs_theme'] : DEFAULT_THEME,

     

       78
        
         'setFont' => array_key_exists('sbs_font', $_COOKIE) ? $_COOKIE['sbs_font'] : DEFAULT_FONT,

     

       79
        
         'userAuth' => Flight::get('userAuth'),

     

       0
        
       
     

       0
        
       
     

       80
        
         'favFeeds' => $favoriteFeeds,

     

       81
        
         'pages' => PAGES,

     

       82
        
         'links' => LINKS,

     
···

       176
        
       });

     

       177
        
       

     

       178
        
       Flight::route('/login', function(): void {

     

       179
       -
         if (!array_key_exists('username', $_GET)) {

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       180
        
           $latte = new Latte\Engine;

     

       181
        
           $latte->render('./templates/login.latte', array_merge(Flight::get('standardParams'), [

     

       182
        
             'mainClass' => 'form',

     
···

       185
        
             'ogimage' => '',

     

       186
        
             'ogurl' => 'https://'.SITE_DOMAIN.'/login'

     

       187
        
           ]));

     

       188
       -
           die(1);

     

       189
        
         }

     

       190
       -
         $username = $_GET['username'];

     

       191
       -
         $bskyToucher = new BskyToucher();

     

       192
       -
         $userInfo = $bskyToucher->getUserInfo($username);

     

       193
       -
         if (!$userInfo) die(1);

     

       194
       -
         $pds = $userInfo->pds;

     

       195
       -
         $options = new OAuthOptions([

     

       196
       -
         	'key'          => 'https://'.SITE_DOMAIN.CLIENT_ID,

     

       197
       -
         	'secret'       => CLIENT_SECRET,

     

       198
       -
         	'callbackURL'  => 'http://127.0.0.1/login',

     

       199
       -
         	'sessionStart' => true,

     

       200
       -
         ]);

     

       201
       -
         $connector = new React\Socket\Connector([

     

       202
       -
           'dns' => '1.1.1.1'

     

       203
       -
         ]);

     

       204
       -
         $http = new React\Http\Browser($connector);

     

       205
       -
         $httpFactory = new HttpFactory();

     

       206
       -
         $token_builder = Builder::new(new JoseEncoder(), ChainedFormatter::default());

     

       207
       -
         $algorithm    = new Sha256();

     

       208
       -
         $signing_key   = InMemory::file(CERT_PATH);

     

       209
       -
         $now   = new DateTimeImmutable();

     

       210
       -
         $token = $token_builder

     

       211
       -
           ->withHeader('alg', 'ES256')

     

       212
       -
           ->withHeader('typ', 'JWT')

     

       213
       -
           ->issuedBy($userInfo->did)

     

       214
       -
           ->relatedTo('https://'.SITE_DOMAIN.CLIENT_ID)

     

       215
       -
           ->permittedFor('did:web:'.str_replace("/", "", str_replace("https://", "", $pds)))

     

       216
       -
           ->issuedAt($now)

     

       217
       -
           ->getToken($algorithm, $signing_key);

     

       218
       -
         $client = new GuzzleHttp\Client([

     

       219
       -
           'verify' => true,

     

       220
       -
           'headers' => [

     

       221
       -
             'User-Agent' => USER_AGENT_STR,

     

       222
       -
             'Authorization' => 'Bearer: '.$token->toString()

     

       223
       -
           ]

     

       224
       -
         ]);

     

       225
       -
         $provider = new BskyProvider($options, $client, $httpFactory, $httpFactory, $httpFactory);

     

       226
       -
         $provider->setPds($pds);

     

       227
       -
         $name = $provider->getName();

     

       228
       -
         

     

       229
       -
         if (isset($_GET['login']) && $_GET['login'] === $name) {

     

       230
       -
           $auth_url = $provider->getAuthorizationUrl([

     

       231
       -
             'client_assertion_type' => 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer',

     

       232
       -
             'client_assertion' => $token->toString()

     

       233
       -
           ]);

     

       234
       -
           header('Location: '.$auth_url);

     

       235
       -
           die(1);

     

       236
       -
         } else if (isset($_GET['code'], $_GET['state'])) {

     

       237
       -
           $token = $provider->getAccessToken($_GET['code'], $_GET['state']);

     

       238
        
       

     

       239
       -
         	// save the token in a permanent storage

     

       240
       -
         	// [...]

     

       241
       -
       

     

       242
       -
         	// access granted, redirect

     

       243
       -
         	header('Location: ?granted='.$name);

     

       244
       -
           die(1);

     

       245
       -
         } else if (isset($_GET['granted']) && $_GET['granted'] === $name) {

     

       246
       -
           die(1);

     

       247
       -
         } else if (isset($_GET['error'])) {

     

       248
       -
           die(1);

     

       249
       -
         }

     

       250
       -
         $latte = new Latte\Engine;

     

       251
       -
         $latte->render('./templates/login.latte', array_merge(Flight::get('standardParams'), [

     

       252
       -
           'mainClass' => 'form',

     

       253
       -
           'ogtitle' => SITE_TITLE." | login",

     

       254
       -
           'ogdesc' => SITE_DESC,

     

       255
       -
           'ogimage' => '',

     

       256
       -
           'ogurl' => 'https://'.SITE_DOMAIN.'/login'

     

       257
       -
         ]));

     

       258
        
       });

     

       259
       -
       

     

       260
       -
       // https://shimaenaga.veryroundbird.house/oauth/authorize?client_id=https%3A%2F%2Ftangled.org%2Foauth%2Fclient-metadata.json&request_uri=urn%3Aietf%3Aparams%3Aoauth%3Arequest_uri%3Areq-2399ff42af66498132ebf8de809254b7

     

       261
        
       

     

       262
        
       Flight::route('/createaccount', function(): void {

     

       263
        
         $latte = new Latte\Engine;

···

       19
        
       use Matrix\Async;

     

       20
        
       use GuzzleHttp\Psr7\HttpFactory;

     

       21
        
       use chillerlan\OAuth\OAuthOptions;

     

       22
       +
       use chillerlan\OAuth\Storage\SessionStorage;

     

       23
        
       use DateTimeImmutable;

     

       24
        
       use Lcobucci\JWT\Token\Builder;

     

       25
        
       use Lcobucci\JWT\Encoding\ChainedFormatter;

     
···

       28
        
       use Lcobucci\JWT\Signer\Ecdsa\Sha256;

     

       29
        
       use Smallnest\Bsky\BskyProvider;

     

       30
        
       

     

       31
       +
       session_start();

     

       32
        
       $bskyToucher = new BskyToucher();

     

       33
        
       

     

       34
        
       $favoriteFeeds = array_map(function ($feed) use ($bskyToucher) {

     
···

       67
        
       Flight::set('publicApi', PUBLIC_API);

     

       68
        
       Flight::set('frontpageFeed', FRONTPAGE_FEED);

     

       69
        
       Flight::set('defaultRelay', DEFAULT_RELAY);

     

       70
       +
       Flight::set('userAuth', array_key_exists('sbs_'.SITE_DOMAIN, $_SESSION) ? $_SESSION['sbs_'.SITE_DOMAIN] : null);

     

       71
       +
       Flight::set('userPds', array_key_exists('sbs_'.SITE_DOMAIN.'_pds', $_SESSION) ? $_SESSION['sbs_'.SITE_DOMAIN.'_pds'] : null);

     

       72
       +
       Flight::set('userInfo', array_key_exists('sbs_'.SITE_DOMAIN.'_userinfo', $_SESSION) ? $_SESSION['sbs_'.SITE_DOMAIN.'_userinfo'] : null);

     

       73
        
       Flight::set('flight.log_errors', false);

     

       74
        
       Flight::set('flight.handle_errors', false);

     

       75
        
       Flight::set('flight.content_length', false);

     
···

       81
        
         'setTheme' => array_key_exists('sbs_theme', $_COOKIE) ? $_COOKIE['sbs_theme'] : DEFAULT_THEME,

     

       82
        
         'setFont' => array_key_exists('sbs_font', $_COOKIE) ? $_COOKIE['sbs_font'] : DEFAULT_FONT,

     

       83
        
         'userAuth' => Flight::get('userAuth'),

     

       84
       +
         'userPds' => Flight::get('userPds'),

     

       85
       +
         'userInfo' => Flight::Get('userInfo'),

     

       86
        
         'favFeeds' => $favoriteFeeds,

     

       87
        
         'pages' => PAGES,

     

       88
        
         'links' => LINKS,

     
···

       182
        
       });

     

       183
        
       

     

       184
        
       Flight::route('/login', function(): void {

     

       185
       +
         if (isset($_GET['username'])) {

     

       186
       +
         $username = $_GET['username'];

     

       187
       +
           $bskyToucher = new BskyToucher();

     

       188
       +
           $userInfo = $bskyToucher->getUserInfo($username);

     

       189
       +
           if (!$userInfo) die(1);

     

       190
       +
           $pds = $userInfo->pds;

     

       191
       +
           $options = new OAuthOptions([

     

       192
       +
             'key'          => 'https://'.SITE_DOMAIN.CLIENT_ID,

     

       193
       +
             'secret'       => CLIENT_SECRET,

     

       194
       +
             'callbackURL'  => 'https://'.SITE_DOMAIN.'/login',

     

       195
       +
             'sessionStart' => true,

     

       196
       +
             'sessionStorageVar' => 'sbs_'.SITE_DOMAIN

     

       197
       +
           ]);

     

       198
       +
           $storage = new SessionStorage($options);

     

       199
       +
           $connector = new React\Socket\Connector([

     

       200
       +
             'dns' => '1.1.1.1'

     

       201
       +
           ]);

     

       202
       +
           $http = new React\Http\Browser($connector);

     

       203
       +
           $httpFactory = new HttpFactory();

     

       204
       +
           $token_builder = Builder::new(new JoseEncoder(), ChainedFormatter::default());

     

       205
       +
           $algorithm    = new Sha256();

     

       206
       +
           $signing_key   = InMemory::file(CERT_PATH);

     

       207
       +
           $now   = new DateTimeImmutable();

     

       208
       +
           $token = $token_builder

     

       209
       +
             ->withHeader('alg', 'ES256')

     

       210
       +
             ->withHeader('typ', 'JWT')

     

       211
       +
             ->withHeader('kid', 'ocwgKj_O7H9at1sL6yWf9ZZ82NOM7D0xlN8HGIyWH6M')

     

       212
       +
             ->issuedBy('https://'.SITE_DOMAIN.CLIENT_ID)

     

       213
       +
             ->identifiedBy(uniqid())

     

       214
       +
             ->relatedTo('https://'.SITE_DOMAIN.CLIENT_ID)

     

       215
       +
             ->permittedFor($pds)

     

       216
       +
             ->issuedAt($now->modify('-5 seconds'))

     

       217
       +
             ->getToken($algorithm, $signing_key);

     

       218
       +
           $client = new GuzzleHttp\Client([

     

       219
       +
             'verify' => true,

     

       220
       +
             'headers' => [

     

       221
       +
               'User-Agent' => USER_AGENT_STR,

     

       222
       +
               'Authorization' => 'Bearer: '.$token->toString()

     

       223
       +
             ]

     

       224
       +
           ]);

     

       225
       +
           $provider = new BskyProvider($options, $client, $httpFactory, $httpFactory, $httpFactory);

     

       226
       +
           $provider->setPds($pds);

     

       227
       +
           $name = $provider->getName();

     

       228
       +
           if (isset($_GET['login']) && $_GET['login'] === $name) {

     

       229
       +
             $auth_url = $provider->getAuthorizationUrl([

     

       230
       +
               'client_assertion_type' => 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer',

     

       231
       +
               'client_assertion' => $token->toString()

     

       232
       +
             ]);

     

       233
       +
             Flight::redirect($auth_url);

     

       234
       +
             die(1);

     

       235
       +
           } else if (isset($_GET['code'], $_GET['iss'])) {

     

       236
       +
             $storage->storeAccessToken($_GET['code'], $name);

     

       237
       +
             $_SESSION['sbs_'.SITE_DOMAIN.'_pds'] = $_GET['iss'];

     

       238
       +
             $_SESSION['sbs_'.SITE_DOMAIN.'_userinfo'] = $bskyToucher->getUserInfo();

     

       239
       +
             Flight::redirect('/');

     

       240
       +
             die(1);

     

       241
       +
           } else if (isset($_GET['error'])) {

     

       242
       +
             die(1);

     

       243
       +
           }

     

       244
       +
         } else {

     

       245
        
           $latte = new Latte\Engine;

     

       246
        
           $latte->render('./templates/login.latte', array_merge(Flight::get('standardParams'), [

     

       247
        
             'mainClass' => 'form',

     
···

       250
        
             'ogimage' => '',

     

       251
        
             'ogurl' => 'https://'.SITE_DOMAIN.'/login'

     

       252
        
           ]));

     

       0
        
       
     

       253
        
         }

     

       254
       +
       });

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       255
        
       

     

       256
       +
       Flight::route('/logout', function(): void {

     

       257
       +
         unset($_SESSION['sbs_'.SITE_DOMAIN]);

     

       258
       +
         unset($_SESSION['sbs_'.SITE_DOMAIN.'_pds']);

     

       259
       +
         unset($_SESSION['sbs_'.SITE_DOMAIN.'_userinfo']);

     

       260
       +
         Flight::redirect('/');

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       261
        
       });

     

       0
        
       
     

       0
        
       
     

       262
        
       

     

       263
        
       Flight::route('/createaccount', function(): void {

     

       264
        
         $latte = new Latte\Engine;

+40 -2

lib/bskyProvider.php

···

       6
        
       

     

       7
        
       use chillerlan\OAuth\Core\OAuth2Interface;

     

       8
        
       use chillerlan\OAuth\Core\OAuth2Provider;

     

       9
       -
       use chillerlan\OAuth\Core\PARTrait;

     

       10
        
       use chillerlan\OAuth\Core\PKCETrait;

     

       11
        
       use chillerlan\OAuth\OAuthOptions;

     

       12
        
       use chillerlan\OAuth\Storage\SessionStorage;

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       13
        
       use GuzzleHttp\Client;

     

       14
        
       use GuzzleHttp\Psr7\HttpFactory;

     

       0
        
       
     

       0
        
       
     

       15
        
       

     

       16
        
       class BskyProvider extends OAuth2Provider implements \chillerlan\OAuth\Core\PAR, \chillerlan\OAuth\Core\PKCE {

     

       17
       -
         use \chillerlan\OAuth\Core\PARTrait;

     

       18
        
         use \chillerlan\OAuth\Core\PKCETrait;

     

       19
        
         

     

       20
        
       	public const IDENTIFIER               = 'BSKYPROVIDER';

     
···

       52
        
           $this->parAuthorizationURL = (string)$pds->withPath('/oauth/par');

     

       53
        
           

     

       54
        
       		return $this;

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       55
        
       	}

     

       56
        
       }

     

       57
        
       ?>

···

       6
        
       

     

       7
        
       use chillerlan\OAuth\Core\OAuth2Interface;

     

       8
        
       use chillerlan\OAuth\Core\OAuth2Provider;

     

       0
        
       
     

       9
        
       use chillerlan\OAuth\Core\PKCETrait;

     

       10
        
       use chillerlan\OAuth\OAuthOptions;

     

       11
        
       use chillerlan\OAuth\Storage\SessionStorage;

     

       12
       +
       use chillerlan\HTTP\Utils\MessageUtil;

     

       13
       +
       use chillerlan\HTTP\Utils\QueryUtil;

     

       14
       +
       use chillerlan\OAuth\Providers\ProviderException;

     

       15
        
       use GuzzleHttp\Client;

     

       16
        
       use GuzzleHttp\Psr7\HttpFactory;

     

       17
       +
       use Psr\Http\Message\UriInterface;

     

       18
       +
       use function sprintf;

     

       19
        
       

     

       20
        
       class BskyProvider extends OAuth2Provider implements \chillerlan\OAuth\Core\PAR, \chillerlan\OAuth\Core\PKCE {

     

       0
        
       
     

       21
        
         use \chillerlan\OAuth\Core\PKCETrait;

     

       22
        
         

     

       23
        
       	public const IDENTIFIER               = 'BSKYPROVIDER';

     
···

       55
        
           $this->parAuthorizationURL = (string)$pds->withPath('/oauth/par');

     

       56
        
           

     

       57
        
       		return $this;

     

       58
       +
       	}

     

       59
       +
         

     

       60
       +
       	public function getParRequestUri(array $body):UriInterface{

     

       61
       +
       		// send the request with the same method and parameters as the token requests

     

       62
       +
       		// @link https://datatracker.ietf.org/doc/html/rfc9126#name-request

     

       63
       +
       		$response = $this->sendAccessTokenRequest($this->parAuthorizationURL, $body);

     

       64
       +
       		$status   = $response->getStatusCode();

     

       65
       +
       		$json     = MessageUtil::decodeJSON($response, true);

     

       66
       +
       

     

       67
       +
       		// something went horribly wrong

     

       68
       +
       		if($status !== 201){

     

       69
       +
       

     

       70
       +
       			// @link https://datatracker.ietf.org/doc/html/rfc9126#section-2.3

     

       71
       +
       			if(isset($json['error'], $json['error_description'])){

     

       72
       +
       				throw new ProviderException(sprintf('PAR error: "%s" (%s)', $json['error'], $json['error_description']));

     

       73
       +
       			}

     

       74
       +
       

     

       75
       +
       			throw new ProviderException(sprintf('PAR request error: (HTTP/%s)', $status)); // @codeCoverageIgnore

     

       76
       +
       		}

     

       77
       +
       

     

       78
       +
       		$url = QueryUtil::merge($this->authorizationURL, $this->getParAuthorizationURLRequestParams($json));

     

       79
       +
       

     

       80
       +
       		return $this->uriFactory->createUri($url);

     

       81
       +
       	}

     

       82
       +
         

     

       83
       +
       	protected function getParAuthorizationURLRequestParams(array $response):array{

     

       84
       +
       

     

       85
       +
       		if(!isset($response['request_uri'])){

     

       86
       +
       			throw new ProviderException('PAR response error: "request_uri" missing');

     

       87
       +
       		}

     

       88
       +
       

     

       89
       +
       		return [

     

       90
       +
       			'client_id'   => $this->options->key,

     

       91
       +
       			'request_uri' => $response['request_uri'],

     

       92
       +
       		];

     

       93
        
       	}

     

       94
        
       }

     

       95
        
       ?>

lib/bskyToucher.php

···

       25
        
       use Psr\Http\Message\RequestInterface;

     

       26
        
       use Psr\Http\Message\ResponseInterface;

     

       27
        
       use Fusonic\OpenGraph\Consumer;

     

       0
        
       
     

       28
        
       

     

       29
        
       class BskyToucher {

     

       30
        
         private $bskyApiBase = 'https://public.api.bsky.app/xrpc/';

···

       25
        
       use Psr\Http\Message\RequestInterface;

     

       26
        
       use Psr\Http\Message\ResponseInterface;

     

       27
        
       use Fusonic\OpenGraph\Consumer;

     

       28
       +
       use chillerlan\OAuth\Storage\SessionStorage;

     

       29
        
       

     

       30
        
       class BskyToucher {

     

       31
        
         private $bskyApiBase = 'https://public.api.bsky.app/xrpc/';

+2 -1

templates/_partials/nav.latte

···

       1
        
       <nav>

     

       2
        
         <ul>

     

       3
        
           {if $userAuth}

     

       0
        
       
     

       4
        
             <li><a href="/settings">settings</a></li>

     

       5
       -
             <li><a href="#">log out</a></li>

     

       6
        
           {else}

     

       7
        
             <li><a href="/createaccount">create</a></li>

     

       8
        
             <li><a href="/login">log in</a></li>

···

       1
        
       <nav>

     

       2
        
         <ul>

     

       3
        
           {if $userAuth}

     

       4
       +
             <li><a href="/u/{$userInfo->handle}">profile</a></li>

     

       5
        
             <li><a href="/settings">settings</a></li>

     

       6
       +
             <li><a href="/logout">log out</a></li>

     

       7
        
           {else}

     

       8
        
             <li><a href="/createaccount">create</a></li>

     

       9
        
             <li><a href="/login">log in</a></li>

templates/layout.latte

···

       24
        
           data-theme="{$setTheme}"

     

       25
        
           data-font="{$setFont}"

     

       26
        
         >

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       27
        
           <div id="page">

     

       28
        
             <header>

     

       29
        
               <h1><a href="/">{include '_partials/logo.latte'}{$siteTitle}</a></h1>

···

       24
        
           data-theme="{$setTheme}"

     

       25
        
           data-font="{$setFont}"

     

       26
        
         >

     

       27
       +
           <!--

     

       28
       +
             {print_r($_SESSION)}

     

       29
       +
             {print_r(PHP_SESSION_DISABLED)}

     

       30
       +
           -->

     

       31
        
           <div id="page">

     

       32
        
             <header>

     

       33
        
               <h1><a href="/">{include '_partials/logo.latte'}{$siteTitle}</a></h1>

vendor/chillerlan/php-oauth/src/Core/PARTrait.php

···

       41
        
       

     

       42
        
       		// something went horribly wrong

     

       43
        
       		if($status !== 200){

     

       0
        
       
     

       44
        
       

     

       45
        
       			// @link https://datatracker.ietf.org/doc/html/rfc9126#section-2.3

     

       46
        
       			if(isset($json['error'], $json['error_description'])){

···

       41
        
       

     

       42
        
       		// something went horribly wrong

     

       43
        
       		if($status !== 200){

     

       44
       +
             print_r($json);

     

       45
        
       

     

       46
        
       			// @link https://datatracker.ietf.org/doc/html/rfc9126#section-2.3

     

       47
        
       			if(isset($json['error'], $json['error_description'])){

Compare changes