culturefeed.pages.inc

<?php

function culturefeed_oauth_connect($type = CultureFeed::AUTHORIZE_TYPE_REGULAR, $application_key = NULL) {
  global $conf;

  // We don't want to cache this type of page.
  $conf['cache'] = FALSE;

  // If an application key was passed, fetch the shared secret for it.
  $shared_secret = NULL;

  if (isset($application_key)) {
    $shared_secret = culturefeed_get_consumer_shared_secret($application_key);
  }

  // Load the consumer instance.
  $cf = DrupalCultureFeed::getConsumerInstance($application_key, $shared_secret);

  // Construct the callback url.
  $options = array('absolute' => TRUE);
  // Get all query params, so they are available after login.
  $options['query'] = drupal_get_query_parameters(NULL, array('q'));
  if (isset($_GET['destination'])) {
    unset($_GET['destination']);
  }

  if (isset($_GET['redirect'])) {
    unset($_GET['redirect']);
  }

  if (isset($_GET['closepopup'])) {
    $options['query']['closepopup'] = 'true';
  }

  $skip_authorization = FALSE;
  if (isset($_GET['skipAuthorization'])) {
    $skip_authorization = TRUE;
  }

  $skip_confirmation = FALSE;
  if (isset($_GET['skipConfirmation'])) {
    $skip_confirmation = TRUE;
  }

  $via = NULL;
  if (isset($_GET['via'])) {
    $via = $_GET['via'];
  }

  $full_callback_url = url('culturefeed/oauth/authorize' . (isset($application_key) ? '/' . $application_key : ''), $options);
  // Fetch the request token.
  try {
    $token = $cf->getRequestToken($full_callback_url);
  }
  catch (Exception $e) {
    drupal_set_message(t('An error occurred while logging in. Please try again later.'), 'error');
    watchdog_exception('culturefeed', $e);

    drupal_goto('<front>');
  }

  if (!$token) {
    drupal_set_message(t('An error occurred while logging in. Please try again later.'), 'error');
    drupal_goto('<front>');
  }

  // Save the token and secret in the session.
  $_SESSION['oauth_token'] = $token['oauth_token'];
  $_SESSION['oauth_token_secret'] = $token['oauth_token_secret'];

  // Fetch the authorisation url...
  $callback_url = url('culturefeed/oauth/authorize' . (isset($application_key) ? '/' . $application_key : ''), array('absolute' => TRUE));
  $auth_url = $cf->getUrlAuthorize($token, $callback_url, $type, $skip_confirmation, $skip_authorization, $via, culturefeed_get_preferred_language(), variable_get('culturefeed_api_application_key', ''));

  // ... and redirect the user to it.
  drupal_goto($auth_url);
}

function culturefeed_oauth_authorize($application_key = NULL) {
  global $conf;

  // We don't want to cache this type of page.
  $conf['cache'] = FALSE;

  if (isset($_GET['oauth_token']) && isset($_GET['oauth_verifier'])) {

    // If an application key was passed, fetch the shared secret for it.
    $shared_secret = NULL;

    if (isset($application_key)) {
      $shared_secret = culturefeed_get_consumer_shared_secret($application_key);
    }

    try {
      $token = DrupalCultureFeed::getInstance($_GET['oauth_token'], $_SESSION['oauth_token_secret'], $application_key, $shared_secret)->getAccessToken($_GET['oauth_verifier']);

      unset($_SESSION['oauth_token']);
      unset($_SESSION['oauth_token_secret']);

      $cf_account = DrupalCultureFeed::getInstance($token['oauth_token'], $token['oauth_token_secret'], $application_key, $shared_secret)->getUser($token['userId']);
      $_SESSION[CULTUREFEED_SESSION_KEY] = [
        'token' => $token['oauth_token'],
        'secret' => $token['oauth_token_secret'],
        'userId' => $token['userId'],
      ];
    }
    catch (Exception $e) {
      drupal_set_message(t('An error occurred while logging in. Please try again later.'), 'error');
      watchdog_exception('culturefeed', $e);

      drupal_goto('');
    }

    // Check if the user is already known in our system.
    $uid = db_query("SELECT uid FROM {culturefeed_user} cfu WHERE cfu.cf_uid = :cf_uid", array(':cf_uid' => $token['userId']))->fetchField();

    global $user;
    if (!$uid) {
      $account = culturefeed_create_user($cf_account, $user);
    }
    else {

      $cf_uid = db_query("SELECT cf_uid FROM {culturefeed_user} cfu WHERE cfu.uid = :uid", array(':uid' => $user->uid))->fetchField();

      // If the drupal user already exist with another cf_uid we update the reference
      if (!$cf_uid && $user->uid && $user->uid != $uid) {
        $query = db_update('culturefeed_user')
          ->condition('cf_uid', $cf_account->id)
          ->fields(array('uid' => $user->uid))
          ->execute();
        $uid = $user->uid;
      }
      $account = user_load($uid);

    }

    if ($account) {

      global $user;
      $user = $account;

      user_login_finalize();

      if (isset($_GET['closepopup'])) {
        if (isset($_GET['destination'])) {
          $action = 'window.opener.location.href="' . url($_GET['destination']) . '";';
        }
        else {

          $destination = '';
          drupal_alter('culturefeed_login_redirect_destination', $destination);

          if (!empty($destination)) {
            $action = 'window.opener.location.href="' . url($destination) . '";';
          }
          else {
            $action = 'window.opener.location.reload();';
          }

        }

        // We don't want to render all blocks, so we return minimal html.
        print '<html>';
        print '<head>';
        print '<title>You should not see this</title>';
        print '<script type="text/javascript">try { ' . $action . ' } catch (err) { } window.close();</script>';
        print '<p>Als deze pagina niet automatisch sluit, klik dan op onderstaande link om verder te gaan.</p>';
        print '<p><a href="' . url('') . '">' . url('', array('absolute' => TRUE)) . '</a></p>';
        print '</head>';
        print '<body>';
        print '</body>';
        print '</html>';
      }
      else {
        if (isset($_GET['destination'])) {
          drupal_goto();
        }
        else {
          $destination = '';
          drupal_alter('culturefeed_login_redirect_destination', $destination);
          drupal_goto($destination);
        }
      }
    }
  }

  drupal_page_footer();

  exit();
}

/**
 * Check if the user is authenticated. If he is redirect to destination.
 */
function culturefeed_authenticated_action_page() {

  if (DrupalCultureFeed::isCultureFeedUser()) {
    $query = array();
    if (!empty($_GET['query'])) {
      parse_str($_GET['query'], $query);
    }

    $redirect = isset($_GET['redirect']) ? $_GET['redirect'] : '';
    // Destination always wins in drupal_goto.
    if (isset($_GET['destination']) && !url_is_external($_GET['destination'])) {
      $redirect = $_GET['destination'];
    }

    $url = drupal_parse_url($redirect);

    // Check if the user will have access to the redirect path.
    // If not it will cause endless loop.
    if (!drupal_valid_path($url['path'])) {
      drupal_set_title(t('Access denied'));
      return t('You are not authorized to access this page.');
    }

    drupal_goto($url['path'], array('query' => $url['query'], 'fragment' => $url['fragment']));

  }

  return array('#theme' => 'culturefeed_authenticated_page');
}