128 lines
4.3 KiB
PHP
128 lines
4.3 KiB
PHP
<?php
|
|
|
|
declare(strict_types = 1);
|
|
|
|
// {{{ License
|
|
// This file is part of GNU social - https://www.gnu.org/software/social
|
|
//
|
|
// GNU social is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU Affero General Public License as published by
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
// (at your option) any later version.
|
|
//
|
|
// GNU social is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU Affero General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU Affero General Public License
|
|
// along with GNU social. If not, see <http://www.gnu.org/licenses/>.
|
|
// }}}
|
|
|
|
/**
|
|
* ActivityPub implementation for GNU social
|
|
*
|
|
* @package GNUsocial
|
|
* @category API
|
|
*
|
|
* @author Diogo Peralta Cordeiro <@diogo.site>
|
|
* @copyright 2021 Free Software Foundation, Inc http://www.fsf.org
|
|
* @license https://www.gnu.org/licenses/agpl.html GNU AGPL v3 or later
|
|
*/
|
|
|
|
namespace Plugin\OAuth2;
|
|
|
|
use App\Core\Event;
|
|
use App\Core\Modules\Plugin;
|
|
use App\Core\Router\RouteLoader;
|
|
use App\Core\Router\Router;
|
|
use App\Util\Common;
|
|
use App\Util\Exception\NoLoggedInUser;
|
|
use Nyholm\Psr7\Response;
|
|
use Plugin\OAuth2\Controller\Apps;
|
|
use Symfony\Component\EventDispatcher\EventSubscriberInterface;
|
|
use Trikoder\Bundle\OAuth2Bundle\Event\AuthorizationRequestResolveEvent;
|
|
use Trikoder\Bundle\OAuth2Bundle\Event\UserResolveEvent;
|
|
use Trikoder\Bundle\OAuth2Bundle\Model\Grant;
|
|
use Trikoder\Bundle\OAuth2Bundle\OAuth2Events;
|
|
use XML_XRD_Element_Link;
|
|
|
|
/**
|
|
* Adds OAuth2 support to GNU social when enabled
|
|
*
|
|
* @copyright 2021 Free Software Foundation, Inc http://www.fsf.org
|
|
* @license https://www.gnu.org/licenses/agpl.html GNU AGPL v3 or later
|
|
*/
|
|
class OAuth2 extends Plugin implements EventSubscriberInterface
|
|
{
|
|
public const OAUTH_ACCESS_TOKEN_REL = 'http://apinamespace.org/oauth/access_token';
|
|
public const OAUTH_REQUEST_TOKEN_REL = 'http://apinamespace.org/oauth/request_token';
|
|
public const OAUTH_AUTHORIZE_REL = 'http://apinamespace.org/oauth/authorize';
|
|
|
|
public function version(): string
|
|
{
|
|
return '3.0.0';
|
|
}
|
|
|
|
/**
|
|
* This code executes when GNU social creates the page routing, and we hook
|
|
* on this event to add our Inbox and Outbox handler for ActivityPub.
|
|
*
|
|
* @param RouteLoader $r the router that was initialized
|
|
*/
|
|
public function onAddRoute(RouteLoader $r): bool
|
|
{
|
|
$r->connect(
|
|
'oauth2_apps',
|
|
'/api/v1/apps',
|
|
Apps::class,
|
|
['http-methods' => ['POST']],
|
|
);
|
|
return Event::next;
|
|
}
|
|
|
|
public function onEndHostMetaLinks(array &$links): bool
|
|
{
|
|
$links[] = new XML_XRD_Element_link(self::OAUTH_REQUEST_TOKEN_REL, Router::url('oauth2_apps', type: Router::ABSOLUTE_URL));
|
|
$links[] = new XML_XRD_Element_link(self::OAUTH_AUTHORIZE_REL, Router::url('oauth2_authorize', type: Router::ABSOLUTE_URL));
|
|
$links[] = new XML_XRD_Element_link(self::OAUTH_ACCESS_TOKEN_REL, Router::url('oauth2_token', type: Router::ABSOLUTE_URL));
|
|
return Event::next;
|
|
}
|
|
|
|
public function userResolve(UserResolveEvent $event): void
|
|
{
|
|
$user = Common::user();
|
|
|
|
if (\is_null($user)) {
|
|
return;
|
|
}
|
|
|
|
$event->setUser($user);
|
|
}
|
|
|
|
public function authorizeRequestResolve(AuthorizationRequestResolveEvent $event): void
|
|
{
|
|
$request = Common::getRequest();
|
|
try {
|
|
$user = Common::ensureLoggedIn();
|
|
$event->setUser($user);
|
|
$event->resolveAuthorization(AuthorizationRequestResolveEvent::AUTHORIZATION_APPROVED);
|
|
$event->getClient()->setGrants(new Grant('client_credentials'), new Grant('authorization_code'));
|
|
} catch (NoLoggedInUser) {
|
|
$event->setResponse(new Response(302, [
|
|
'Location' => Router::url('security_login', [
|
|
'returnUrl' => $request->getUri(),
|
|
]),
|
|
]));
|
|
}
|
|
}
|
|
|
|
public static function getSubscribedEvents(): array
|
|
{
|
|
return [
|
|
OAuth2Events::USER_RESOLVE => 'userResolve',
|
|
OAuth2Events::AUTHORIZATION_REQUEST_RESOLVE => 'authorizeRequestResolve',
|
|
];
|
|
}
|
|
}
|