115 lines
2.7 KiB
PHP
115 lines
2.7 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
function _syslog($msg) {
|
||
|
|
$trace = debug_backtrace();
|
||
|
|
$caller = $trace[1];
|
||
|
|
$parent = $caller['function'];
|
||
|
|
if (isset($caller['class']))
|
||
|
|
$parent = $caller['class'] . '::' . $parent;
|
||
|
|
|
||
|
|
return error_log( "{$parent}: {$msg}" );
|
||
|
|
}
|
||
|
|
|
||
|
|
function unauthorized($text) {
|
||
|
|
header('HTTP/1.1 401 Unauthorized');
|
||
|
|
die($text);
|
||
|
|
}
|
||
|
|
|
||
|
|
function badrequest($text) {
|
||
|
|
header('HTTP/1.1 400 Bad Request');
|
||
|
|
die($text);
|
||
|
|
}
|
||
|
|
|
||
|
|
function httpok($text) {
|
||
|
|
header('HTTP/1.1 200 OK');
|
||
|
|
echo($text);
|
||
|
|
exit(0);
|
||
|
|
}
|
||
|
|
|
||
|
|
function accepted() {
|
||
|
|
header('HTTP/1.1 202 Accepted');
|
||
|
|
#header('Location: {{ site.url }}');
|
||
|
|
exit(0);
|
||
|
|
}
|
||
|
|
|
||
|
|
if (!empty($_GET)) {
|
||
|
|
if ( ! isset($_GET['q']) ) {
|
||
|
|
badrequest('please POST a micropub request');
|
||
|
|
}
|
||
|
|
|
||
|
|
if ( isset($_GET['q']['config']) ) {
|
||
|
|
httpok(json_encode(array('tags' => array())));
|
||
|
|
}
|
||
|
|
|
||
|
|
if(isset($_GET['q']['syndicate-to'])) {
|
||
|
|
httpok(json_encode(array('syndicate-to' => array())));
|
||
|
|
}
|
||
|
|
|
||
|
|
badrequest('please POST a micropub request');
|
||
|
|
}
|
||
|
|
|
||
|
|
$raw = file_get_contents("php://input");
|
||
|
|
print_r($raw);
|
||
|
|
try {
|
||
|
|
$decoded = json_decode($raw, true);
|
||
|
|
} catch (Exception $e) {
|
||
|
|
_syslog('failed to decode JSON, trying decoding form data');
|
||
|
|
try {
|
||
|
|
parse_str($raw, $decoded);
|
||
|
|
}
|
||
|
|
catch (Exception $e) {
|
||
|
|
_syslog('failed to decoding form data as well');
|
||
|
|
badrequest('invalid POST contents');
|
||
|
|
}
|
||
|
|
}
|
||
|
|
print_r($decoded);
|
||
|
|
|
||
|
|
$token = '';
|
||
|
|
if ( isset($decoded['access_token']) ) {
|
||
|
|
$token = $decoded['access_token'];
|
||
|
|
unset($decoded['access_token']);
|
||
|
|
}
|
||
|
|
elseif ( isset($_SERVER['HTTP_AUTHORIZATION']) ) {
|
||
|
|
$token = trim(str_replace('Bearer', '', $_SERVER['HTTP_AUTHORIZATION']));
|
||
|
|
}
|
||
|
|
|
||
|
|
if (empty($token)) {
|
||
|
|
unauthorized('missing token');
|
||
|
|
}
|
||
|
|
|
||
|
|
$request = curl_init();
|
||
|
|
curl_setopt($request, CURLOPT_URL, 'https://tokens.indieauth.com/token');
|
||
|
|
curl_setopt($request, CURLOPT_HTTPHEADER, array(
|
||
|
|
'Content-Type: application/x-www-form-urlencoded',
|
||
|
|
sprintf('Authorization: Bearer %s', $token)
|
||
|
|
));
|
||
|
|
curl_setopt($request, CURLOPT_RETURNTRANSFER, 1);
|
||
|
|
$response = curl_exec($request);
|
||
|
|
curl_close($request);
|
||
|
|
parse_str(urldecode($response), $verification);
|
||
|
|
if (! isset($verification['scope']) ) {
|
||
|
|
unauthorized('missing "scope"');
|
||
|
|
}
|
||
|
|
if (! isset($verification['me']) ) {
|
||
|
|
unauthorized('missing "me"');
|
||
|
|
}
|
||
|
|
if ( ! stristr($verification['me'], '{{ site.url }}') ) {
|
||
|
|
unauthorized('wrong domain');
|
||
|
|
}
|
||
|
|
if ( ! stristr($verification['scope'], 'create') ) {
|
||
|
|
unauthorized('invalid scope');
|
||
|
|
}
|
||
|
|
|
||
|
|
$user = posix_getpwuid(posix_getuid());
|
||
|
|
$now = time();
|
||
|
|
$decoded['mtime'] = $now;
|
||
|
|
$fname = sprintf(
|
||
|
|
'%s/%s/%s.json',
|
||
|
|
$user['dir'],
|
||
|
|
'{{ paths.remotequeue }}',
|
||
|
|
microtime(true)
|
||
|
|
);
|
||
|
|
|
||
|
|
file_put_contents($fname, json_encode($decoded, JSON_PRETTY_PRINT));
|
||
|
|
accepted();
|