123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164 |
- <?php
- require_once "lib/common.php";
- require_once "lib/session.php";
- require_once "lib/render.php";
- require_once "lib/render/login.php";
- require_once "lib/render/idpage.php";
- require_once "lib/render/idpXrds.php";
- require_once "lib/render/userXrds.php";
- require_once "Auth/OpenID.php";
- /**
- * Handle a standard OpenID server request
- */
- function action_default()
- {
- header('X-XRDS-Location: '.buildURL('idpXrds'));
- $server = getServer();
- $method = $_SERVER['REQUEST_METHOD'];
- $request = null;
- if ($method == 'GET') {
- $request = $_GET;
- } else {
- $request = $_POST;
- }
- $request = $server->decodeRequest();
- if (!$request) {
- return about_render();
- }
- setRequestInfo($request);
- if (in_array($request->mode,
- array('checkid_immediate', 'checkid_setup'))) {
- if ($request->idSelect()) {
- // Perform IDP-driven identifier selection
- if ($request->mode == 'checkid_immediate') {
- $response = $request->answer(false);
- } else {
- return trust_render($request);
- }
- } else if ((!$request->identity) &&
- (!$request->idSelect())) {
- // No identifier used or desired; display a page saying
- // so.
- return noIdentifier_render();
- } else if ($request->immediate) {
- $response = $request->answer(false, buildURL());
- } else {
- if (!getLoggedInUser()) {
- return login_render();
- }
- return trust_render($request);
- }
- } else {
- $response = $server->handleRequest($request);
- }
- $webresponse = $server->encodeResponse($response);
- if ($webresponse->code != AUTH_OPENID_HTTP_OK) {
- header(sprintf("HTTP/1.1 %d ", $webresponse->code),
- true, $webresponse->code);
- }
- foreach ($webresponse->headers as $k => $v) {
- header("$k: $v");
- }
- header(header_connection_close);
- print $webresponse->body;
- exit(0);
- }
- /**
- * Log out the currently logged in user
- */
- function action_logout()
- {
- setLoggedInUser(null);
- setRequestInfo(null);
- return authCancel(null);
- }
- /**
- * Check the input values for a login request
- */
- function login_checkInput($input)
- {
- $openid_url = false;
- $errors = array();
- if (!isset($input['openid_url'])) {
- $errors[] = 'Enter an OpenID URL to continue';
- }
- if (count($errors) == 0) {
- $openid_url = $input['openid_url'];
- }
- return array($errors, $openid_url);
- }
- /**
- * Log in a user and potentially continue the requested identity approval
- */
- function action_login()
- {
- $method = $_SERVER['REQUEST_METHOD'];
- switch ($method) {
- case 'GET':
- return login_render();
- case 'POST':
- $info = getRequestInfo();
- $fields = $_POST;
- if (isset($fields['cancel'])) {
- return authCancel($info);
- }
- list ($errors, $openid_url) = login_checkInput($fields);
- if (count($errors) || !$openid_url) {
- $needed = $info ? $info->identity : false;
- return login_render($errors, @$fields['openid_url'], $needed);
- } else {
- setLoggedInUser($openid_url);
- return doAuth($info);
- }
- default:
- return login_render(array('Unsupported HTTP method: $method'));
- }
- }
- /**
- * Ask the user whether he wants to trust this site
- */
- function action_trust()
- {
- $info = getRequestInfo();
- $trusted = isset($_POST['trust']);
- return doAuth($info, $trusted, true, @$_POST['idSelect']);
- }
- function action_idpage()
- {
- $identity = $_GET['user'];
- return idpage_render($identity);
- }
- function action_idpXrds()
- {
- return idpXrds_render();
- }
- function action_userXrds()
- {
- $identity = $_GET['user'];
- return userXrds_render($identity);
- }
- ?>
|