140 lines
3.5 KiB
PHP
140 lines
3.5 KiB
PHP
<?php
|
|
|
|
@require_once('include/zot.php');
|
|
|
|
function magic_init(&$a) {
|
|
|
|
$ret = array('success' => false, 'url' => '', 'message' => '');
|
|
logger('mod_magic: invoked', LOGGER_DEBUG);
|
|
|
|
logger('mod_magic: args: ' . print_r($_REQUEST,true),LOGGER_DATA);
|
|
|
|
$addr = ((x($_REQUEST,'addr')) ? $_REQUEST['addr'] : '');
|
|
$hash = ((x($_REQUEST,'hash')) ? $_REQUEST['hash'] : '');
|
|
$dest = ((x($_REQUEST,'dest')) ? $_REQUEST['dest'] : '');
|
|
$test = ((x($_REQUEST,'test')) ? intval($_REQUEST['test']) : 0);
|
|
$rev = ((x($_REQUEST,'rev')) ? intval($_REQUEST['rev']) : 0);
|
|
|
|
|
|
$parsed = parse_url($dest);
|
|
if(! $parsed) {
|
|
if($test) {
|
|
$ret['message'] .= 'could not parse ' . $dest . EOL;
|
|
return($ret);
|
|
}
|
|
goaway($dest);
|
|
}
|
|
|
|
$basepath = $parsed['scheme'] . '://' . $parsed['host'] . (($parsed['port']) ? ':' . $parsed['port'] : '');
|
|
|
|
$x = q("select * from hubloc where hubloc_url = '%s' order by hubloc_connected desc limit 1",
|
|
dbesc($basepath)
|
|
);
|
|
|
|
if(! $x) {
|
|
|
|
// Somebody new? Finger them if they've never been seen here before
|
|
|
|
if($addr) {
|
|
$ret = zot_finger($addr,null);
|
|
if($ret['success']) {
|
|
$j = json_decode($ret['body'],true);
|
|
if($j)
|
|
import_xchan($j);
|
|
|
|
// Now try again
|
|
|
|
$x = q("select * from hubloc where hubloc_url = '%s' order by hubloc_connected desc limit 1",
|
|
dbesc($basepath)
|
|
);
|
|
}
|
|
}
|
|
}
|
|
|
|
if(! $x) {
|
|
if($rev)
|
|
goaway($dest);
|
|
else {
|
|
logger('mod_magic: no channels found for requested hub.' . print_r($_REQUEST,true));
|
|
if($test) {
|
|
$ret['message'] .= 'This site has no previous connections with ' . $basepath . EOL;
|
|
return $ret;
|
|
}
|
|
notice( t('Hub not found.') . EOL);
|
|
return;
|
|
}
|
|
}
|
|
|
|
// This is ready-made for a plugin that provides a blacklist or "ask me" before blindly authenticating.
|
|
// By default, we'll proceed without asking.
|
|
|
|
$arr = array(
|
|
'channel_id' => local_user(),
|
|
'xchan' => $x[0],
|
|
'destination' => $dest,
|
|
'proceed' => true
|
|
);
|
|
|
|
call_hooks('magic_auth',$arr);
|
|
$dest = $arr['destination'];
|
|
if(! $arr['proceed']) {
|
|
if($test) {
|
|
$ret['message'] .= 'cancelled by plugin.' . EOL;
|
|
return $ret;
|
|
}
|
|
goaway($dest);
|
|
}
|
|
|
|
if((get_observer_hash()) && ($x[0]['hubloc_url'] === z_root())) {
|
|
// We are already authenticated on this site and a registered observer.
|
|
// Just redirect.
|
|
if($test) {
|
|
$ret['success'] = true;
|
|
$ret['message'] .= 'Local site - you are already authenticated.' . EOL;
|
|
return $ret;
|
|
}
|
|
goaway($dest);
|
|
}
|
|
|
|
if(local_user()) {
|
|
$channel = $a->get_channel();
|
|
|
|
$token = random_string();
|
|
$token_sig = base64url_encode(rsa_sign($token,$channel['channel_prvkey']));
|
|
|
|
$channel['token'] = $token;
|
|
$channel['token_sig'] = $token_sig;
|
|
|
|
$r = q("insert into verify ( type, channel, token, meta, created) values ('%s','%d','%s','%s','%s')",
|
|
dbesc('auth'),
|
|
intval($channel['channel_id']),
|
|
dbesc($token),
|
|
dbesc($x[0]['hubloc_url']),
|
|
dbesc(datetime_convert())
|
|
);
|
|
|
|
$target_url = $x[0]['hubloc_callback'] . '/?f=&auth=' . urlencode($channel['channel_address'] . '@' . $a->get_hostname())
|
|
. '&sec=' . $token . '&dest=' . urlencode($dest) . '&version=' . ZOT_REVISION;
|
|
|
|
logger('mod_magic: redirecting to: ' . $target_url, LOGGER_DEBUG);
|
|
|
|
if($test) {
|
|
$ret['success'] = true;
|
|
$ret['url'] = $target_url;
|
|
$ret['message'] = 'token ' . $token . ' created for channel ' . $channel['channel_id'] . ' for url ' . $x[0]['hubloc_url'] . EOL;
|
|
return $ret;
|
|
}
|
|
|
|
goaway($target_url);
|
|
|
|
}
|
|
|
|
if($test) {
|
|
$ret['message'] = 'Not authenticated or invalid arguments to mod_magic' . EOL;
|
|
return $ret;
|
|
}
|
|
|
|
goaway($dest);
|
|
|
|
}
|