Invision Power Services, Inc.
* @copyright (c) Invision Power Services, Inc.
* @license https://www.invisioncommunity.com/legal/standards/
* @package Invision Community
* @since 31 May 2017
*/
use IPS\Http\Url;
use IPS\Http\Url\Internal;
use IPS\Member;
use IPS\Output;
use IPS\Request;
use IPS\Session\Front;
define('REPORT_EXCEPTIONS', TRUE);
require '../../init.php';
Front::i();
if ( isset( Request::i()->state ) and $explodedData = explode( '-', Request::i()->state ) and count( $explodedData ) === 4 and $destination = @base64_decode( $explodedData[1] ) )
{
try
{
$destination = Url::createFromString( $destination )->setQueryString( array(
'_processLogin' => $explodedData[0],
'csrfKey' => $explodedData[2],
'ref' => $explodedData[3],
) );
if ( !( $destination instanceof Internal ) )
{
throw new Exception;
}
if ( isset( Request::i()->error ) )
{
foreach ( array( 'error', 'error_description', 'error_uri' ) as $k )
{
if ( isset( Request::i()->$k ) )
{
$destination = $destination->setQueryString( $k, Request::i()->$k );
}
}
}
/* OAuth 2 */
if ( isset( Request::i()->access_token ) )
{
foreach ( array( 'access_token', 'token_type', 'expires_in', 'scope', 'state' ) as $k )
{
if ( isset( Request::i()->$k ) )
{
$destination = $destination->setQueryString( $k, Request::i()->$k );
}
}
}
/* OAuth 1 */
elseif ( isset( Request::i()->oauth_token ) )
{
foreach ( array( 'oauth_token', 'oauth_verifier', 'state' ) as $k )
{
if ( isset( Request::i()->$k ) )
{
$destination = $destination->setQueryString( $k, Request::i()->$k );
}
}
}
elseif ( isset( Request::i()->code ) )
{
/* Sign in with Apple does not make name available any later in the process */
if ( isset( Request::i()->user ) )
{
$_SESSION['oauth_user'] = Request::i()->user;
}
$destination = $destination->setQueryString( 'code', Request::i()->code );
}
/* If it's a POST request and the URL is quite long, we need to redirect via POST */
if ( Request::i()->requestMethod() === 'POST')
{
@header( 'Cross-Origin-Opener-Policy: same-origin' );
@header( "Cache-control: no-cache, no-store, must-revalidate, max-age=0, s-maxage=0" );
@header( "Expires: 0" );
$queryStringComponents = $destination->queryString;
$destination = \IPS\Http\Url::createFromString( @base64_decode( $explodedData[1] ) );
$loading = \IPS\Member::loggedIn()->language()->get('loading');
$message = \IPS\Member::loggedIn()->language()->get('sign_in_short');
$output = <<
{$loading}
HTML;
echo $output;
exit;
}
Output::i()->redirect( $destination );
exit;
}
catch (Exception $e ) {}
}
$url = (string) Url::internal( 'oauth/callback/', 'none' );
/* Force no caching */
@header( 'Cross-Origin-Opener-Policy: same-origin' );
@header( "Cache-control: no-cache, no-store, must-revalidate, max-age=0, s-maxage=0" );
@header( "Expires: 0" );
?>
<?php echo Member::loggedIn()->language()->get( 'loading' ); ?>