社群
學習
工具庫
AI工具
休閒
搜尋
繁体中文
首頁 php教程 PHP源码 PHP写的oauth认证服务端

PHP写的oauth认证服务端

PHP中文网
PHP中文网
May 25, 2016 pm 05:04 PM

适用于Kohana3.x                       

1. [文件]     oauth.zip 

PHP写的oauth认证服务端oauth.zip

2. [文件]     oauth.php 

class Controller_OAuth extends Controller {

        public function action_index() {
                $result = array('status' => '400');
                $this->sendQuery($result);
        }

        // 获取未授权的Request Token 
        public function action_request() {
                $result = array('status' => '400');
                $provider = new OAuth_Provider();
                $provider->setRequestTokenQuery();
                try {
                        $provider->checkRequest();
                        $token = $provider->generateRequestToken();

                        $result['status'] = 200;
                        $result = Arr::merge($result, $token);
                } catch (Exception $e) {
                        $result['code'] = $e->getCode();
                        $result['message'] = $e->getMessage();
                }
                $this->sendQuery($result);
        }

        // 获取用户授权的Request Token 
        public function action_authorize() {
                $result = array('status' => '400');
                try {

                        $oauth_token = Arr::get($_REQUEST, 'oauth_token');
                        if (!$oauth_token) {
                                throw new Exception('缺少 oauth_token');
                        }
                        $request_token = OAuth_Token::findByToken($oauth_token);

                        if(!is_object($request_token) || !$request_token->isRequest()){
                                throw new Exception('oauth_token 错误');
                        }
                        $username = Arr::get($_REQUEST, 'username');
                        $password = Arr::get($_REQUEST, 'password');

                        if (Auth::instance()->login($username, $password) !== TRUE) {
                                throw new Exception('用户名或密码错误');
                        }
                        $request_token->setVerifier(OAuth_Provider::generateVerifier());
                        $request_token->setUserId(Auth::instance()->instance()->get_user()->id);

                        $result['status'] = 200;
                        $result['message'] = '授权成功';
                        $result['callback'] = $request_token->getCallback();
                        $result['oauth_token'] = $oauth_token;
                        $result['oauth_verifier'] = $request_token->getVerifier();
                } catch (Exception $e) {
                        $result['message'] = $e->getMessage();
                }
                $this->sendQuery($result);
        }

        // 使用授权后的Request Token换取Access Toke
        public function action_access() {
                $result = array('status' => '400');
                // xauth
                $x_auth_mode = Arr::get($_REQUEST, 'x_auth_mode');
                if ($x_auth_mode == 'client_auth') {
                        $username = Arr::get($_REQUEST, 'x_auth_username');
                        $password = Arr::get($_REQUEST, 'x_auth_password');
                        if (Auth::instance()->login($username, $password) !== TRUE) {
                                throw new Exception('用户名或密码错误');
                        }

                        $userid = Auth::instance()->instance()->get_user()->id;

                        try {
                                // 生成request token
                                $provider = new OAuth_Provider();
                                $provider->setRequestTokenQuery();
                                $provider->checkRequest();
                                $consumer = $provider->getConsumer();
                                if ($consumer->getType() !== 1) {
                                        throw new Exception('请申请XAuth认证');
                                }

                                $token = sha1(OAuthProvider::generateToken(20, true));
                                $secret = sha1(OAuthProvider::generateToken(20, true));
                                $oauth_token = ORM::factory('oauth_token');
                                $oauth_token->type = 2;
                                $oauth_token->consumer_id = $consumer->getId();
                                $oauth_token->token = $token;
                                $oauth_token->token_secret = $secret;
                                $oauth_token->callback_url = ''; 
                                $oauth_token->user_id = $userid;
                                $oauth_token->verifier = ''; 
                                $oauth_token->save();

                                $result = array('status' => 200, 'oauth_token' => $token, 'oauth_token_secret' => $secret);
                        } catch (Exception $e) {
                                $result['code'] = $e->getCode();
                                $result['message'] = $e->getMessage();
                        }
                        $this->sendQuery($result);
                } else {
                        $provider = new OAuth_Provider();
                        try {
                                $provider->checkRequest();
                                $token = $provider->generateAccessToken();
                                $result['status'] = 200;
                                $result = Arr::merge($result, $token);
                        } catch (Exception $e) {
                                $result['code'] = $e->getCode();
                                $result['message'] = $e->getMessage();
                        }

                        $this->sendQuery($result);
                }
        }

        public function action_test() {
                $result = array('status' => '400');
                $provider = new OAuth_Provider();
                try {
                        $provider->checkRequest();
                        $userid = $provider->getUserId();
                        $result['status'] = 200;
                        $result['message'] = '';
                        $result['userid'] = $userid;
                } catch (Exception $e) {
                        $result['message'] = $e->getMessage();
                }

                $this->sendQuery($result);
        }

		// 输出JSON
        public function sendQuery($result, $header = TRUE) {
                $body = is_array($result) ? http_build_query($result) : $result;
                $this->sendBody($body);
        }

        // 输出
        public function sendBody($body) {
                $this->response->body($body);
                echo $this->response->send_headers()->body();
                exit;
        }
}
登入後複製

3. [文件] provider.php

<?php defined(&#39;SYSPATH&#39;) or die(&#39;No direct script access.&#39;);

/**
 * @author     zhuzongxin dreamsxin@qq.com
 */
class OAuth_Provider {

	private $oauth;
	private $consumer;
	private $user_id;
	private $authentification_url;

	public static function createConsumer() {
		$key = sha1(OAuthProvider::generateToken(20, true));
		$secret = sha1(OAuthProvider::generateToken(20, true));
		return OAuth_Consumer::create($key, $secret);
	}

	public function __construct() {
		$config = Kohana::$config->load(&#39;oauth&#39;);
		$this->authentification_url = URL::base(TRUE).Arr::get($config, &#39;authentification_url&#39;);
		/* create our instance */
		$this->oauth = new OAuthProvider();

		/* setup check functions */
		$this->oauth->consumerHandler(array($this, &#39;checkConsumer&#39;));
		$this->oauth->timestampNonceHandler(array($this, &#39;checkNonce&#39;));
		$this->oauth->tokenHandler(array($this, &#39;checkToken&#39;));
	}

	public function checkRequest() {	
		$this->oauth->checkOAuthRequest();
	}

	public function setRequestTokenQuery() {
		$this->oauth->isRequestTokenEndpoint(true);
		//$this->oauth->addRequiredParameter("oauth_callback");
	}

	public function generateRequestToken() {

		$token = sha1(OAuthProvider::generateToken(20, true));
		$token_secret = sha1(OAuthProvider::generateToken(20, true));

		$callback = $this->oauth->callback;

		OAuth_Token::createRequestToken($this->consumer, $token, $token_secret, $callback);	

		return array(&#39;authentification_url&#39; => $this->authentification_url, &#39;oauth_token&#39; => $token, &#39;oauth_token_secret&#39; => $token_secret, &#39;oauth_callback_confirmed&#39; => &#39;true&#39;);
	}

	public function generateAccesstoken() {

		$access_token = sha1(OAuthProvider::generateToken(20, true));
		$secret = sha1(OAuthProvider::generateToken(20, true));

		$token = OAuth_Token::findByToken($this->oauth->token);

		$token->changeToAccessToken($access_token, $secret);
		return array(&#39;oauth_token&#39; => $access_token, &#39;oauth_token_secret&#39; => $secret);
	}

	public static function generateVerifier() {
		$verifier = sha1(OAuthProvider::generateToken(20, true));
		return $verifier;
	}

	public function checkConsumer($provider) {
		$return = OAUTH_CONSUMER_KEY_UNKNOWN;

		$aConsumer = OAuth_Consumer::findByKey($provider->consumer_key);

		if (is_object($aConsumer)) {
			if (!$aConsumer->isActive()) {
				$return = OAUTH_CONSUMER_KEY_REFUSED;
			} else {
				$this->consumer = $aConsumer;
				$provider->consumer_secret = $this->consumer->getSecretKey();
				$return = OAUTH_OK;
			}
		}

		return $return;
	}

	public function checkToken($provider) {
		$token = OAuth_Token::findByToken($provider->token);

		if (is_null($token)) {
			return OAUTH_TOKEN_REJECTED;
		} elseif ($token->getType() == 1) {
			if ($token->getVerifier() != $provider->verifier) {
				return OAUTH_VERIFIER_INVALID;
			} else {
				$provider->token_secret = $token->getSecret();
				return OAUTH_OK;
			}
			
		} elseif ($token->getType() == 2) {
			if ($token->getExpires() > 0 && time() - strtotime($token->getCreated()) > (int)$token->getExpires()) {
				return OAUTH_TOKEN_EXPIRED;
			}
			$this->user_id = $token->getUserId();
			$provider->token_secret = $token->getSecret();
			return OAUTH_OK;
		}
	}

	public function checkNonce($provider) {
		if ($this->oauth->timestamp < time() - 5 * 60) {
			return OAUTH_BAD_TIMESTAMP;
		} elseif ($this->consumer->hasNonce($provider->nonce, $this->oauth->timestamp)) {
			return OAUTH_BAD_NONCE;
		} else {
			$this->consumer->addNonce($this->oauth->nonce);
			return OAUTH_OK;
		}
	}

	public function getUserId() {
		if ($this->user_id) {
			return $this->user_id;
		} else {
			throw new Exception("User not authentificated");
		}
	}

	public function getConsumer() {
		return $this->consumer;
	}

}
登入後複製

                               

                   

本網站聲明
本文內容由網友自願投稿，版權歸原作者所有。本站不承擔相應的法律責任。如發現涉嫌抄襲或侵權的內容，請聯絡admin@php.cn

熱AI工具

Undresser.AI Undress

Undresser.AI Undress

人工智慧驅動的應用程序，用於創建逼真的裸體照片

AI Clothes Remover

AI Clothes Remover

用於從照片中去除衣服的線上人工智慧工具。

Undress AI Tool

Undress AI Tool

免費脫衣圖片

Clothoff.io

Clothoff.io

AI脫衣器

Video Face Swap

Video Face Swap

使用我們完全免費的人工智慧換臉工具，輕鬆在任何影片中換臉！

顯示更多

熱門文章

<🎜>：種植花園 - 完整的突變指南
3 週前 By DDD
<🎜>：泡泡膠模擬器無窮大 - 如何獲取和使用皇家鑰匙
3 週前 By 尊渡假赌尊渡假赌尊渡假赌
如何修復KB5055612無法在Windows 10中安裝？
3 週前 By DDD
北端：融合系統，解釋
3 週前 By 尊渡假赌尊渡假赌尊渡假赌
藍王子：如何到達地下室
1 個月前 By DDD
顯示更多

熱工具

記事本++7.3.1

記事本++7.3.1

好用且免費的程式碼編輯器

SublimeText3漢化版

SublimeText3漢化版

中文版，非常好用

禪工作室 13.0.1

禪工作室 13.0.1

強大的PHP整合開發環境

Dreamweaver CS6

Dreamweaver CS6

視覺化網頁開發工具

SublimeText3 Mac版

SublimeText3 Mac版

神級程式碼編輯軟體(SublimeText3)

顯示更多

熱門話題

Java教學
1664
14
CakePHP 教程
1423
52
Laravel 教程
1318
25
PHP教程
1268
29
C# 教程
1248
24
顯示更多