91 lines
2.5 KiB
PHP
91 lines
2.5 KiB
PHP
<?php
|
|
|
|
@require_once('include/zot.php');
|
|
|
|
function magic_init(&$a) {
|
|
|
|
$url = ((x($_REQUEST,'url')) ? $_REQUEST['url'] : '');
|
|
$addr = ((x($_REQUEST,'addr')) ? $_REQUEST['addr'] : '');
|
|
$hash = ((x($_REQUEST,'hash')) ? $_REQUEST['hash'] : '');
|
|
$dest = ((x($_REQUEST,'dest')) ? $_REQUEST['dest'] : '');
|
|
|
|
|
|
if(local_user()) {
|
|
|
|
if($hash) {
|
|
$x = q("select xchan.xchan_url, hubloc.* from xchan left join hubloc on xchan_hash = hubloc_hash
|
|
where hublock_hash = '%s' and (hubloc_flags & %d) limit 1",
|
|
intval(HUBLOC_FLAGS_PRIMARY)
|
|
);
|
|
}
|
|
elseif($addr) {
|
|
$x = q("select hubloc.* from xchan left join hubloc on xchan_hash = hubloc_hash
|
|
where xchan_addr = '%s' and (hubloc_flags & %d) limit 1",
|
|
dbesc($addr),
|
|
intval(HUBLOC_FLAGS_PRIMARY)
|
|
);
|
|
}
|
|
|
|
if(! $x) {
|
|
notice( t('Channel not found.') . EOL);
|
|
return;
|
|
}
|
|
|
|
if($x[0]['hubloc_url'] === z_root()) {
|
|
$webbie = substr($x[0]['hubloc_addr'],0,strpos('@',$x[0]['hubloc_addr']));
|
|
switch($dest) {
|
|
case 'channel':
|
|
$desturl = z_root() . '/channel/' . $webbie;
|
|
break;
|
|
case 'photos':
|
|
$desturl = z_root() . '/photos/' . $webbie;
|
|
break;
|
|
case 'profile':
|
|
$desturl = z_root() . '/profile/' . $webbie;
|
|
break;
|
|
default:
|
|
$desturl = $dest;
|
|
break;
|
|
}
|
|
// We are already authenticated on this site and a registered observer.
|
|
// Just redirect.
|
|
goaway($desturl);
|
|
}
|
|
|
|
$token = random_string();
|
|
|
|
$recip = array(array('guid' => $x[0]['hubloc_guid'],'guid_sig' => $x[0]['hubloc_guid_sig']));
|
|
$channel = $a->get_channel();
|
|
$hash = random_string();
|
|
|
|
$r = q("insert into verify ( type, channel, token, meta, created) values ('%s','%d','%s','%s','%s')",
|
|
dbesc('auth'),
|
|
intval($channel['channel_id']),
|
|
dbesc($token),
|
|
dbesc($hubloc['hubloc_hash']),
|
|
dbesc(datetime_convert())
|
|
);
|
|
|
|
$packet = zot_build_packet($channel,'auth',$recip,$x[0]['hubloc_sitekey'],$hash);
|
|
$result = zot_zot($x[0]['hubloc_callback'],$packet);
|
|
if($result['success']) {
|
|
$j = json_decode($result['body'],true);
|
|
if($j['iv']) {
|
|
$y = aes_unencapsulate($j,$channel['prvkey']);
|
|
$j = json_decode($y,true);
|
|
}
|
|
if($j['token'] && $j['ticket'] && $j['token'] === $token) {
|
|
$r = q("delete from verify where token = '%s' and type = '%s' and channel = %d limit 1",
|
|
dbesc($token),
|
|
dbesc('auth'),
|
|
intval($channel['channel_id'])
|
|
);
|
|
goaway($x[0]['callback'] . '?f=&ticket=' . $ticket . '&dest=' . $dest);
|
|
}
|
|
}
|
|
goaway($dest);
|
|
}
|
|
|
|
goaway(z_root());
|
|
}
|