oauth_callback.php

<?php
/**
 * OAuth callback script used by all modules that subclass OAuthModule
 */
require_once(__DIR__.'/global.php');
require_once(__DIR__.'/classes/User.php');

$current_user = User::get();

$oauth_user_id = null;

try
{
    if (!array_key_exists('module', $_GET)) {
        throw new StartupAPIException('module not specified');
    }

    if (!array_key_exists('oauth_token', $_GET) || !array_key_exists('oauth_verifier', $_GET)) {
        throw new StartupAPIException('oauth_token & oauth_varifier required');
    }

    $module = AuthenticationModule::get($_GET['module']);

    $storage = new MrClay_CookieStorage(array(
        'secret' => UserConfig::$SESSION_SECRET,
        'mode' => MrClay_CookieStorage::MODE_ENCRYPT,
        'path' => UserConfig::$SITEROOTURL,
        'httponly' => true
    ));

    $oauth_user_id = $storage->fetch(UserConfig::$oauth_user_id_key);
    $storage->delete(UserConfig::$oauth_user_id_key);

    if (is_null($oauth_user_id)) {
        throw new StartupAPIException("can't determine OAuth User ID");
    }

    try
    {
        $module->getAccessToken($oauth_user_id);
    }
    catch (OAuthException2 $e)
    {
        throw new StartupAPIException('problem getting access token: '.$e->getMessage());
    }

    try
    {
        $identity = $module->getIdentity($oauth_user_id);
    }
    catch (OAuthException2 $e)
    {
        throw new StartupAPIException('problem getting user identity: '.$e->getMessage());
    }

    if (is_null($identity)) {
        throw new StartupAPIException('no identity returned');
    }

    #error_log(
    #	'$identity = '.var_export($identity, true).
    #	'$oauth_user_id = '.$oauth_user_id
    #);

    $user = $module->getUserByOAuthIdentity($identity, $oauth_user_id);

    if (is_null($current_user)) {
        // if user is not logged in yet, it means we're logging them in
        if (is_null($user)) {
            // This user doesn't exist yet, registering them
            $new_user = User::createNewWithoutCredentials(
                $module,
                $identity['name'],
                array_key_exists('email', $identity) ? $identity['email'] : null
            );

            $module->addUserOAuthIdentity($new_user, $identity, $oauth_user_id);

            $new_user->setSession(true);
            $module->recordRegistrationActivity($new_user);
        } else {
            $user->setSession(true);
            $module->recordLoginActivity($user);
        }
    } else {
        // otherwise, we're adding their credential to an existing user
        if (!is_null($user)) {
            throw new StartupAPIException('another user is already connected with this account');
        }

        $module->addUserOAuthIdentity($current_user, $identity, $oauth_user_id);

        $module->recordAddActivity($current_user);
    }
} catch (Exception $e) {
    error_log($e->getMessage());

    // we should delete temporary OAuth User ID
    if (!is_null($oauth_user_id)) {
        $module->deleteOAuthUser($oauth_user_id);
    }

    if (is_null($current_user)) {
        header('Location: '.UserConfig::$USERSROOTURL.'/login.php?'.
            (array_key_exists('module', $_GET) ? 'module='.$_GET['module'].'&' : '').
            'error=failed');
    } else {
        header('Location: '.UserConfig::$USERSROOTURL.'/edit.php?'.
            (array_key_exists('module', $_GET) ? 'module='.$_GET['module'].'&' : '').
            'error=failed');
    }
    exit;
}

$return = User::getReturn();
User::clearReturn();

if (is_null($return) && !is_null($current_user)) {
    $return = UserConfig::$USERSROOTURL.'/edit.php' . (array_key_exists('module', $_GET) ? '?module='.$_GET['module'] : '');
}

if (!is_null($return))
{
    header('Location: '.$return);
}
else
{
    header('Location: '.UserConfig::$DEFAULTLOGINRETURN);
}