社区
学习
工具库
AI工具
休闲
搜索
简体中文
首页 php教程 PHP源码 PHP写的oauth认证服务端

PHP写的oauth认证服务端

PHP中文网
PHP中文网
May 25, 2016 pm 05:04 PM

适用于Kohana3.x                       

1. [文件]     oauth.zip 

PHP写的oauth认证服务端oauth.zip

2. [文件]     oauth.php 

class Controller_OAuth extends Controller {

        public function action_index() {
                $result = array('status' => '400');
                $this->sendQuery($result);
        }

        // 获取未授权的Request Token 
        public function action_request() {
                $result = array('status' => '400');
                $provider = new OAuth_Provider();
                $provider->setRequestTokenQuery();
                try {
                        $provider->checkRequest();
                        $token = $provider->generateRequestToken();

                        $result['status'] = 200;
                        $result = Arr::merge($result, $token);
                } catch (Exception $e) {
                        $result['code'] = $e->getCode();
                        $result['message'] = $e->getMessage();
                }
                $this->sendQuery($result);
        }

        // 获取用户授权的Request Token 
        public function action_authorize() {
                $result = array('status' => '400');
                try {

                        $oauth_token = Arr::get($_REQUEST, 'oauth_token');
                        if (!$oauth_token) {
                                throw new Exception('缺少 oauth_token');
                        }
                        $request_token = OAuth_Token::findByToken($oauth_token);

                        if(!is_object($request_token) || !$request_token->isRequest()){
                                throw new Exception('oauth_token 错误');
                        }
                        $username = Arr::get($_REQUEST, 'username');
                        $password = Arr::get($_REQUEST, 'password');

                        if (Auth::instance()->login($username, $password) !== TRUE) {
                                throw new Exception('用户名或密码错误');
                        }
                        $request_token->setVerifier(OAuth_Provider::generateVerifier());
                        $request_token->setUserId(Auth::instance()->instance()->get_user()->id);

                        $result['status'] = 200;
                        $result['message'] = '授权成功';
                        $result['callback'] = $request_token->getCallback();
                        $result['oauth_token'] = $oauth_token;
                        $result['oauth_verifier'] = $request_token->getVerifier();
                } catch (Exception $e) {
                        $result['message'] = $e->getMessage();
                }
                $this->sendQuery($result);
        }

        // 使用授权后的Request Token换取Access Toke
        public function action_access() {
                $result = array('status' => '400');
                // xauth
                $x_auth_mode = Arr::get($_REQUEST, 'x_auth_mode');
                if ($x_auth_mode == 'client_auth') {
                        $username = Arr::get($_REQUEST, 'x_auth_username');
                        $password = Arr::get($_REQUEST, 'x_auth_password');
                        if (Auth::instance()->login($username, $password) !== TRUE) {
                                throw new Exception('用户名或密码错误');
                        }

                        $userid = Auth::instance()->instance()->get_user()->id;

                        try {
                                // 生成request token
                                $provider = new OAuth_Provider();
                                $provider->setRequestTokenQuery();
                                $provider->checkRequest();
                                $consumer = $provider->getConsumer();
                                if ($consumer->getType() !== 1) {
                                        throw new Exception('请申请XAuth认证');
                                }

                                $token = sha1(OAuthProvider::generateToken(20, true));
                                $secret = sha1(OAuthProvider::generateToken(20, true));
                                $oauth_token = ORM::factory('oauth_token');
                                $oauth_token->type = 2;
                                $oauth_token->consumer_id = $consumer->getId();
                                $oauth_token->token = $token;
                                $oauth_token->token_secret = $secret;
                                $oauth_token->callback_url = ''; 
                                $oauth_token->user_id = $userid;
                                $oauth_token->verifier = ''; 
                                $oauth_token->save();

                                $result = array('status' => 200, 'oauth_token' => $token, 'oauth_token_secret' => $secret);
                        } catch (Exception $e) {
                                $result['code'] = $e->getCode();
                                $result['message'] = $e->getMessage();
                        }
                        $this->sendQuery($result);
                } else {
                        $provider = new OAuth_Provider();
                        try {
                                $provider->checkRequest();
                                $token = $provider->generateAccessToken();
                                $result['status'] = 200;
                                $result = Arr::merge($result, $token);
                        } catch (Exception $e) {
                                $result['code'] = $e->getCode();
                                $result['message'] = $e->getMessage();
                        }

                        $this->sendQuery($result);
                }
        }

        public function action_test() {
                $result = array('status' => '400');
                $provider = new OAuth_Provider();
                try {
                        $provider->checkRequest();
                        $userid = $provider->getUserId();
                        $result['status'] = 200;
                        $result['message'] = '';
                        $result['userid'] = $userid;
                } catch (Exception $e) {
                        $result['message'] = $e->getMessage();
                }

                $this->sendQuery($result);
        }

		// 输出JSON
        public function sendQuery($result, $header = TRUE) {
                $body = is_array($result) ? http_build_query($result) : $result;
                $this->sendBody($body);
        }

        // 输出
        public function sendBody($body) {
                $this->response->body($body);
                echo $this->response->send_headers()->body();
                exit;
        }
}
登录后复制

3. [文件] provider.php

<?php defined(&#39;SYSPATH&#39;) or die(&#39;No direct script access.&#39;);

/**
 * @author     zhuzongxin dreamsxin@qq.com
 */
class OAuth_Provider {

	private $oauth;
	private $consumer;
	private $user_id;
	private $authentification_url;

	public static function createConsumer() {
		$key = sha1(OAuthProvider::generateToken(20, true));
		$secret = sha1(OAuthProvider::generateToken(20, true));
		return OAuth_Consumer::create($key, $secret);
	}

	public function __construct() {
		$config = Kohana::$config->load(&#39;oauth&#39;);
		$this->authentification_url = URL::base(TRUE).Arr::get($config, &#39;authentification_url&#39;);
		/* create our instance */
		$this->oauth = new OAuthProvider();

		/* setup check functions */
		$this->oauth->consumerHandler(array($this, &#39;checkConsumer&#39;));
		$this->oauth->timestampNonceHandler(array($this, &#39;checkNonce&#39;));
		$this->oauth->tokenHandler(array($this, &#39;checkToken&#39;));
	}

	public function checkRequest() {	
		$this->oauth->checkOAuthRequest();
	}

	public function setRequestTokenQuery() {
		$this->oauth->isRequestTokenEndpoint(true);
		//$this->oauth->addRequiredParameter("oauth_callback");
	}

	public function generateRequestToken() {

		$token = sha1(OAuthProvider::generateToken(20, true));
		$token_secret = sha1(OAuthProvider::generateToken(20, true));

		$callback = $this->oauth->callback;

		OAuth_Token::createRequestToken($this->consumer, $token, $token_secret, $callback);	

		return array(&#39;authentification_url&#39; => $this->authentification_url, &#39;oauth_token&#39; => $token, &#39;oauth_token_secret&#39; => $token_secret, &#39;oauth_callback_confirmed&#39; => &#39;true&#39;);
	}

	public function generateAccesstoken() {

		$access_token = sha1(OAuthProvider::generateToken(20, true));
		$secret = sha1(OAuthProvider::generateToken(20, true));

		$token = OAuth_Token::findByToken($this->oauth->token);

		$token->changeToAccessToken($access_token, $secret);
		return array(&#39;oauth_token&#39; => $access_token, &#39;oauth_token_secret&#39; => $secret);
	}

	public static function generateVerifier() {
		$verifier = sha1(OAuthProvider::generateToken(20, true));
		return $verifier;
	}

	public function checkConsumer($provider) {
		$return = OAUTH_CONSUMER_KEY_UNKNOWN;

		$aConsumer = OAuth_Consumer::findByKey($provider->consumer_key);

		if (is_object($aConsumer)) {
			if (!$aConsumer->isActive()) {
				$return = OAUTH_CONSUMER_KEY_REFUSED;
			} else {
				$this->consumer = $aConsumer;
				$provider->consumer_secret = $this->consumer->getSecretKey();
				$return = OAUTH_OK;
			}
		}

		return $return;
	}

	public function checkToken($provider) {
		$token = OAuth_Token::findByToken($provider->token);

		if (is_null($token)) {
			return OAUTH_TOKEN_REJECTED;
		} elseif ($token->getType() == 1) {
			if ($token->getVerifier() != $provider->verifier) {
				return OAUTH_VERIFIER_INVALID;
			} else {
				$provider->token_secret = $token->getSecret();
				return OAUTH_OK;
			}
			
		} elseif ($token->getType() == 2) {
			if ($token->getExpires() > 0 && time() - strtotime($token->getCreated()) > (int)$token->getExpires()) {
				return OAUTH_TOKEN_EXPIRED;
			}
			$this->user_id = $token->getUserId();
			$provider->token_secret = $token->getSecret();
			return OAUTH_OK;
		}
	}

	public function checkNonce($provider) {
		if ($this->oauth->timestamp < time() - 5 * 60) {
			return OAUTH_BAD_TIMESTAMP;
		} elseif ($this->consumer->hasNonce($provider->nonce, $this->oauth->timestamp)) {
			return OAUTH_BAD_NONCE;
		} else {
			$this->consumer->addNonce($this->oauth->nonce);
			return OAUTH_OK;
		}
	}

	public function getUserId() {
		if ($this->user_id) {
			return $this->user_id;
		} else {
			throw new Exception("User not authentificated");
		}
	}

	public function getConsumer() {
		return $this->consumer;
	}

}
登录后复制

                               

                   

本站声明
本文内容由网友自发贡献，版权归原作者所有，本站不承担相应法律责任。如您发现有涉嫌抄袭侵权的内容，请联系admin@php.cn

热AI工具

Undresser.AI Undress

Undresser.AI Undress

人工智能驱动的应用程序，用于创建逼真的裸体照片

AI Clothes Remover

AI Clothes Remover

用于从照片中去除衣服的在线人工智能工具。

Undress AI Tool

Undress AI Tool

免费脱衣服图片

Clothoff.io

Clothoff.io

AI脱衣机

Video Face Swap

Video Face Swap

使用我们完全免费的人工智能换脸工具轻松在任何视频中换脸！

显示更多

热门文章

刺客信条阴影：贝壳谜语解决方案
3 周前 By DDD
Windows 11 KB5054979中的新功能以及如何解决更新问题
2 周前 By DDD
在哪里可以找到原子中的起重机控制钥匙卡
3 周前 By DDD
<🎜>：死铁路 - 如何完成所有挑战
4 周前 By DDD
Atomfall指南：项目位置，任务指南和技巧
4 周前 By DDD
显示更多

热工具

记事本++7.3.1

记事本++7.3.1

好用且免费的代码编辑器

SublimeText3汉化版

SublimeText3汉化版

中文版，非常好用

禅工作室 13.0.1

禅工作室 13.0.1

功能强大的PHP集成开发环境

Dreamweaver CS6

Dreamweaver CS6

视觉化网页开发工具

SublimeText3 Mac版

SublimeText3 Mac版

神级代码编辑软件(SublimeText3)

显示更多

热门话题

gmail邮箱登陆入口在哪里
7651
15
CakePHP 教程
1392
52
steam的账户名称是什么格式
91
11
win11激活密钥永久
73
19
NYT迷你填字游戏答案
36
110
显示更多