root/apps/php/trunk/OpenAuth-php/index.php @ 753

<?php

$endpoint           = getEnvVar('endpoint');
$wrap_client_id     = getEnvVar('wrap_client_id');
$wrap_client_secret = getEnvVar('wrap_client_secret');
$wlevel             = getEnvVar('wlevel');
$wduration          = getEnvVar('wduration');

$wrap_verification_code = getEnvVar('wrap_verification_code');
$wrap_client_state      = getEnvVar('wrap_client_state');
$wrap_refresh_token     = getEnvVar('wrap_refresh_token');
$wrap_access_token_expires_in = null;

$action = getEnvVar('action');

function getEnvVar( $keyname ) {
        if (array_key_exists($keyname, $_GET)) {
                return $_GET[$keyname];
        }
        elseif (array_key_exists($keyname, $_POST)) {
                return $_POST[$keyname];
        }
        else {
                return null;
        }
}

# Load the config file
$config = parse_ini_file("oauth-config.ini", true);

# Make a database connection
$mysqli = new mysqli(
        $config['database']['host'    ],
        $config['database']['username'],
        $config['database']['password'],
        $config['database']['db'      ]
);

function createEntryId ($mysqli) {
        
        $select_last  = $mysqli->prepare('SELECT MAX(id) FROM access');
        $create_entry = $mysqli->prepare('INSERT INTO access SET id=?');
        
        $select_last->execute();
        $select_last->bind_result($last_id);
        $select_last->fetch();
        $select_last->close();
        
        $last_id ? 0 : $last_id; # $last_id ||= 0;
        $last_id += 1;

        # There shouldn't be much, if any, time between the previous query
        # and this statement.. (famous last words)
        $create_entry->bind_param('i', $last_id);
        $create_entry->execute();
        $create_entry->close();
        
        return $last_id;
}

function getEndpoint ($mysqli, $endpoint = null) {
        
        if (!$endpoint) {
                die("No endpoint specified");
                return null;
        }
        
        $result= $mysqli->query('SELECT id, endpoint FROM endpoints WHERE endpoint="'.$endpoint.'"');
        $endpoint = $result->fetch_object();
        
        return $endpoint;
}

function createEndpoint ($mysqli, $endpoint = null) {

        if (!$endpoint) {
                die("No endpoint specified");
                return null;
        }

        $mysqli->query('INSERT INTO endpoints SET endpoint="'.$endpoint.'"');
        return getEndpoint($mysqli, $endpoint);
}

function addEntry ($mysqli, $endpoint, $client_id, $client_level, $client_duration, $client_secret) {
        
        $id = createEntryId($mysqli);

        $endpointrec = getEndpoint($mysqli, $endpoint);
        if (!$endpointrec) {
                $endpointrec = createEndpoint($mysqli, $endpoint);
        }

        $query = $mysqli->prepare('UPDATE access SET endpoint=?, client_id=?, client_level=?, client_duration=?, client_secret=? WHERE id=?');
        $query->bind_param('issssi', $endpointrec->id, $client_id, $client_level, $client_duration, $client_secret, $id);

        $query->execute();
        
        return $id;
}

function deleteEntry ($mysqli, $id) {
        $mysqli->query("DELETE FROM access WHERE id=$id");
}

function getEntry ($mysqli, $id) {
        
        if (!$id) {
                die("No id specified");
                return null;
        }
        
        $result = $mysqli->query("SELECT access.*, endpoints.id as endpoint_id, endpoints.endpoint FROM access LEFT JOIN endpoints ON (access.endpoint=endpoints.id) WHERE access.id=$id");
        $entry = $result->fetch_object();
        
        return $entry;
}

function setAccessToken ($mysqli, $id, $token) {

        $query = $mysqli->prepare("UPDATE access SET access_token=? WHERE access.id=?");
        $query->bind_param('si', $token, $id);
        $query->execute();
}

function setRefreshToken ($mysqli, $id, $token) {

        $query = $mysqli->prepare("UPDATE access SET refresh_token=? WHERE access.id=?");
        $query->bind_param('si', $token, $id);
        $query->execute();
}

function curPageURL() {
        
        $pageURL = 'http';
        
        if (array_key_exists("HTTPS", $_SERVER)) {
                if ($_SERVER["HTTPS"] == "on") {
                        $pageURL .= "s";
                }
        }
        
        $pageURL .= "://";
        
        if ($_SERVER["SERVER_PORT"] != "80") {
                $pageURL .= $_SERVER["SERVER_NAME"].":".$_SERVER["SERVER_PORT"].$_SERVER["SCRIPT_NAME"];
        }
        else {
                $pageURL .= $_SERVER["SERVER_NAME"].$_SERVER["SCRIPT_NAME"];
        }
        
        return $pageURL;
}

function do_post_request($url, $data = array()) {
        $params = array(
                'http' => array(
                        'method' => 'POST',
                        'content' => $data
                )
        );
        
        $ctx = stream_context_create($params);
        $fp = @fopen($url, 'rb', false, $ctx);
        
        if (!$fp) {
                echo "<!--\n";
                print_r($params);
                echo "-->\n";
                die("Problem accessing $url");
        }
        
        $response = @stream_get_contents($fp);
        
        if ($response === false) {
                //throw new Exception("Problem reading data from $url, $php_errormsg");
                die("Problem reading data from $url");
        }
        
        return $response;
}

function redirect ($url) {
        header("HTTP/1.1 303 See Other");
        header("Location: $url");
        exit;
}

if ($endpoint && $wrap_client_id && $wrap_client_secret && $wlevel && $wduration) {
        
        $wrap_client_state = addEntry(
                $mysqli,
                $endpoint,
                $wrap_client_id,
                $wlevel,
                $wduration,
                $wrap_client_secret
        );
        
        # Make auth request
        $request_params = array(
                'wrap_client_id'    => $wrap_client_id,
                'wrap_client_state' => $wrap_client_state,
                'wrap_callback'     => curPageURL(),
                'wrap_scope'        => $wlevel.'/'.$wduration,
        );
        
        redirect("https://$endpoint/g2/auth_login.action?".http_build_query($request_params));
}
elseif ($wrap_verification_code) {
        # We made a request and have a token.
        # Store the token, and allow us to request access
        
        # Need endpoint from DB
        $entry = getEntry($mysqli, $wrap_client_state);
        $endpoint = "https://".$entry->endpoint."/oauth/request_access_token";
        
        # Forget the link above. We need to POST the info to the endpoint.
        $data = array(
                'wrap_client_id'         => $entry->client_id,
                'wrap_client_secret'     => $entry->client_secret,
                'wrap_callback'          => curPageURL(),
                'wrap_verification_code' => $wrap_verification_code,
        );
        
        $result = do_post_request($endpoint, http_build_query($data));
        
        if ($result) {
                preg_replace("/[\f\n\r]+$/si", null, $result);
                $lines = preg_split("/[\f\n\r]+/", $result);
                $details = array();
                
                foreach ($lines as $line) {
                        preg_replace("/[\f\n\r]*$/si", null, $line);
                        if ($line) {
                                $values = preg_split("/:\ /", $line);
                                $details[$values[0]] = $values[1];
                        }
                }
                
                # Save the details to the DB..
                setAccessToken ($mysqli, $wrap_client_state, $details['wrap_access_token' ]);
                setRefreshToken($mysqli, $wrap_client_state, $details['wrap_refresh_token']);
                
                $wrap_access_token_expires_in = $details['wrap_access_token_expires_in'];
        }
        else {
                print '<div style="color: red">Error from server</div>';
                
                print_r($result);
        }
        
}
elseif ($action) {
        if ($action == 'refresh') {
                
                # Need endpoint from DB 
                $entry = getEntry($mysqli, $wrap_client_state);
                $endpoint = "https://".$entry->endpoint."/oauth/refresh_access_token";
                
                # Forget the link above. We need to POST the info to the endpoint.
                $data = array(
                        'wrap_client_id'     => $entry->client_id,
                        'wrap_client_secret' => $entry->client_secret,
                        'wrap_refresh_token' => $wrap_refresh_token,
                );
                
                $result = do_post_request($endpoint, http_build_query($data));
                
                if ($result) {
                        
                        preg_replace("/[\f\n\r]+$/", null, $result);
                        $lines = preg_split("/[\f\n\r]+/", $result);
                        $details = array();
                        
                        foreach ($lines as $line) {
                                preg_replace("/[\f\n\r]*$/", null, $line);
                                if ($line) {
                                        $values = preg_split("/:\ /", $line);
                                        $details[$values[0]] = $values[1];
                                }
                        }
                        
                        # Save the details to the DB..
                        setAccessToken($mysqli, $wrap_client_state, $details['wrap_access_token']);
                        
                        $wrap_access_token_expires_in = $details['wrap_access_token_expires_in'];
                }
                else {
                        print '<div style="color: red">Error with server</div>';
                        print_r($result);
                }
        }
        elseif ($action == 'delete') {
                
                deleteEntry($mysqli, $wrap_client_state);
                print '<div style="color: green">Entry #'.$wrap_client_state.' deleted</div>';
        }
}

if ($endpoint) {
        $endpoint = preg_replace("{^https://(.+?)/.*$}", "\\1", $endpoint);
}

?>

<html>
        <head>
                <title>Telnic PHP OpenAuth Tester</title>
                <style type="text/css">
                
                body {
                        width: 1200px;
                        margin: 0 auto;
                        padding: 0;
                        font-family: "trebuchet ms", arial, sans;
                        font-size: 13px;
                }

                div#tel-logo {
                        background:url("tel-logo.png") no-repeat scroll 0 0 transparent;
                        float:right;
                        height:90px;
                        left:-700px;
                        position:relative;
                        top:148px;
                        width:90px;
                }
                
                div.title {
                        font-size: 26px;
                }
                
                ul.form-group {
                        display:block;
                        list-style-type:none;
                }
                
                li.form-head {
                        color: black;
                        float: left;
                        width: 160px;
                }
                
                ul.entry {
                        border: 1px solid #5D29A4;
                        padding: 10px;
                        margin-left: 40px;
                        width: 1016px;
                }
                
                ul.entry, ul.entry ul {
                        display:block;
                        list-style-type:none;
                }
                
                ul.entry ul {
                        clear: both;
                        padding-left: 0;
                }
                
                ul.entry ul li.entry-head {
                        color: #5D29A4;
                        float: left;
                        width: 120px;
                }
                
                ul.entry ul li.entry-data {
                }
                
                .mono {
                        font-family: courier;
                        font-size: 11px;
                }
                
                </style>
        </head>
        <body>
                <div class="title">Telnic OpenAuth Tester</div>
                <div id="tel-logo"></div>
                <form method="POST" action="<?= curPageURL() ?>">
                        <ul class="form-group">
                                <li class="form-head">NSP Endpoint</li>
                                <li class="form-data"><input name="endpoint"<? if ($endpoint) { ?> value="<?= $endpoint ?>"<? } ?>></li>
                        </ul>
                        <ul class="form-group">
                                <li class="form-head">Wrap Client ID</li>
                                <li class="form-data"><input name="wrap_client_id"<? if ($wrap_client_id) { ?> value="<?= $wrap_client_id ?>"<? } ?>></li>
                        </ul>
                        <ul class="form-group">
                                <li class="form-head">Wrap Client Secret</li>
                                <li class="form-data"><input name="wrap_client_secret"<? if ($wrap_client_secret) { ?> value="<?= $wrap_client_secret ?>"<? } ?>></li>
                        </ul>
                        <ul class="form-group">
                                <li class="form-head">Wrap Client Access Level</li>
                                <li class="form-data">
                                        <select name="wlevel">
                                                <option value="backup"<?= $wlevel=="backup"?' selected':''?>>Backup</option>
                                                <option value="profiles"<?= $wlevel=="profiles"?' selected':''?>>Profiles</option>
                                                <option value="records"<?= $wlevel=="records"?' selected':''?>>Records</option>
                                                <option value="complete"<?= $wlevel=="complete"?' selected':''?>>Complete</option>
                                        </select>
                                </li>
                        </ul>
                        <ul class="form-group">
                                <li class="form-head">Wrap Access Duration</li>
                                <li class="form-data">
                                        <select name="wduration">
                                                <option value="oneday"<?= $wduration=="oneday"?' selected':''?>>One day</option>
                                                <option value="forever"<?= $wduration=="forever"?' selected':''?>>Forever</option>
                                        </select>
                                </li>
                        </ul>
                        <ul class="form-group">
                                <li><input type="submit" value="Request Token"></input></li>
                        </ul>
                </form>
<? if ($wrap_access_token_expires_in) { ?>
        <div class="expiry">Token expiration: <?= $wrap_access_token_expires_in ?></div>
<? } ?>
<? include "entries.php" ?>
        </body>
</html>