Subversion Repositories SmartDukaan

<?php
/**
 * OAuth2 Provider
 *
 * @package    CodeIgniter/OAuth2
 * @category   Provider
 * @author     Phil Sturgeon
 * @copyright  (c) 2012 HappyNinjas Ltd
 * @license    http://philsturgeon.co.uk/code/dbad-license
 */

abstract class OAuth2_Provider
{
        /**
         * @var  string  provider name
         */
        public $name;

        /**
         * @var  string  uid key name
         */
        public $uid_key = 'uid';

        /**
         * @var  string  additional request parameters to be used for remote requests
         */
        public $callback;

        /**
         * @var  array  additional request parameters to be used for remote requests
         */
        protected $params = array();

        /**
         * @var  string  the method to use when requesting tokens
         */
        protected $method = 'GET';

        /**
         * @var  string  default scope (useful if a scope is required for user info)
         */
        protected $scope;

        /**
         * @var  string  scope separator, most use "," but some like Google are spaces
         */
        protected $scope_seperator = ',';

        /**
         * Overloads default class properties from the options.
         *
         * Any of the provider options can be set here, such as app_id or secret.
         *
         * @param   array   provider options
         * @return  void
         */
        public function __construct(array $options = array())
        {
                if ( ! $this->name)
                {

                        // Attempt to guess the name from the class name
                        $this->name = strtolower(substr(get_class($this), strlen('OAuth2_Provider_')));

                }

                if (empty($options['id']))
                {

                        throw new Exception('Required option not provided: id');
                }

                $this->client_id = $options['id'];
                
                isset($options['callback']) and $this->callback = $options['callback'];
                isset($options['secret']) and $this->client_secret = $options['secret'];
                isset($options['scope']) and $this->scope = $options['scope'];

                $this->redirect_uri = base_url(get_instance()->uri->uri_string());
                //echo $this->redirect_uri;
        }

        /**
         * Return the value of any protected class variable.
         *
         *     // Get the provider signature
         *     $signature = $provider->signature;
         *
         * @param   string  variable name
         * @return  mixed
         */
        public function __get($key)
        {
                return $this->$key;
        }

        /**
         * Returns the authorization URL for the provider.
         *
         *     $url = $provider->url_authorize();
         *
         * @return  string
         */
        abstract public function url_authorize();

        /**
         * Returns the access token endpoint for the provider.
         *
         *     $url = $provider->url_access_token();
         *
         * @return  string
         */
        abstract public function url_access_token();

        /*
        * Get an authorization code from Facebook.  Redirects to Facebook, which this redirects back to the app using the redirect address you've set.
        */      
        public function authorize($options = array())
        {

                $state = md5(uniqid(rand(), TRUE));
                get_instance()->session->set_userdata('state', $state);


                $params = array(
                        'client_id'             => $this->client_id,
                        'redirect_uri'          => isset($options['redirect_uri']) ? $options['redirect_uri'] : $this->redirect_uri,
                        'state'                         => $state,
                        'scope'                         => is_array($this->scope) ? implode($this->scope_seperator, $this->scope) : $this->scope,
                        'response_type'         => 'code',
                        'approval_prompt'   => 'force' // - google force-recheck
                );
                //print_r($params);
                
                return $this->url_authorize().'?'.http_build_query($params);
        }

        /*
        * Get access to the API
        *
        * @param        string  The access code
        * @return       object  Success or failure along with the response details
        */      
        public function access($code, $options = array())
        {
                $params = array(
                        'client_id'     => $this->client_id,
                        'client_secret' => $this->client_secret,
                        'grant_type'    => isset($options['grant_type']) ? $options['grant_type'] : 'authorization_code',
                );

                switch ($params['grant_type'])
                {
                        case 'authorization_code':
                                $params['code'] = $code;
                                $params['redirect_uri'] = isset($options['redirect_uri']) ? $options['redirect_uri'] : $this->redirect_uri;
                        break;

                        case 'refresh_token':
                                $params['refresh_token'] = $code;
                        break;
                }


                $response = null;       
                $url = $this->url_access_token();

                switch ($this->method)
                {
                        case 'GET':

                                // Need to switch to Request library, but need to test it on one that works
                                $url .= '?'.http_build_query($params);
                                $ch = curl_init($url);                                                                      
                                curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "GET");                                                                   
                                curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
                                curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);                                                                       
                                $response = curl_exec($ch);
                                parse_str($response, $return);

                        break;

                        case 'POST':

                                $postdata = http_build_query($params);
                                // $opts = array(
                                //      'http' => array(
                                //              'method'  => 'POST',
                                //              'header'  => 'Content-type: application/x-www-form-urlencoded',
                                //              'content' => $postdata
                                //      )
                                // );
                                $ch = curl_init($url);                                                                      
                                curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "POST");                                                                     
                                curl_setopt($ch, CURLOPT_POSTFIELDS, $postdata);                                                                  
                                curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
                                curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);                                                                      
                                curl_setopt($ch, CURLOPT_HTTPHEADER, array('Content-Type: application/x-www-form-urlencoded'));                                                                                                                   
                                $response = curl_exec($ch);
                                //$context  = stream_context_create($opts);
                                //$response = file_get_contents($url, false, $context);

                                $return = get_object_vars(json_decode($response));

                        break;

                        default:
                                throw new OutOfBoundsException("Method '{$this->method}' must be either GET or POST");
                }

                if ( ! empty($return['error']))
                {
                        throw new OAuth2_Exception($return);
                }
                
                return OAuth2_Token::factory('access', $return);
        }

}