3 * StatusNet, the distributed open-source microblogging tool
5 * Register a new OAuth Application
9 * LICENCE: This program is free software: you can redistribute it and/or modify
10 * it under the terms of the GNU Affero General Public License as published by
11 * the Free Software Foundation, either version 3 of the License, or
12 * (at your option) any later version.
14 * This program is distributed in the hope that it will be useful,
15 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 * GNU Affero General Public License for more details.
19 * You should have received a copy of the GNU Affero General Public License
20 * along with this program. If not, see <http://www.gnu.org/licenses/>.
22 * @category Applications
24 * @author Zach Copley <zach@status.net>
25 * @copyright 2008-2009 StatusNet, Inc.
26 * @license http://www.fsf.org/licensing/licenses/agpl-3.0.html GNU Affero General Public License version 3.0
27 * @link http://status.net/
30 if (!defined('STATUSNET') && !defined('LACONICA')) {
35 * Add a new application
37 * This is the form for adding a new application
39 * @category Application
41 * @author Zach Copley <zach@status.net>
42 * @license http://www.fsf.org/licensing/licenses/agpl-3.0.html GNU Affero General Public License version 3.0
43 * @link http://status.net/
46 class NewApplicationAction extends OwnerDesignAction
52 return _('New Application');
59 function prepare($args)
61 parent::prepare($args);
63 if (!common_logged_in()) {
64 $this->clientError(_('You must be logged in to register an application.'));
74 * On GET, show the form. On POST, try to save the app.
76 * @param array $args unused
81 function handle($args)
83 parent::handle($args);
85 if ($_SERVER['REQUEST_METHOD'] == 'POST') {
86 $this->handlePost($args);
92 function handlePost($args)
94 // Workaround for PHP returning empty $_POST and $_FILES when POST
95 // length > post_max_size in php.ini
99 && ($_SERVER['CONTENT_LENGTH'] > 0)
101 $msg = _('The server was unable to handle that much POST ' .
102 'data (%s bytes) due to its current configuration.');
103 $this->clientException(sprintf($msg, $_SERVER['CONTENT_LENGTH']));
108 $token = $this->trimmed('token');
109 if (!$token || $token != common_session_token()) {
110 $this->clientError(_('There was a problem with your session token.'));
114 $cur = common_current_user();
116 if ($this->arg('cancel')) {
117 common_redirect(common_local_url('oauthappssettings'), 303);
118 } elseif ($this->arg('save')) {
121 $this->clientError(_('Unexpected form submission.'));
125 function showForm($msg=null)
131 function showContent()
133 $form = new ApplicationEditForm($this);
137 function showPageNotice()
140 $this->element('p', 'error', $this->msg);
142 $this->element('p', 'instructions',
143 _('Use this form to register a new application.'));
149 $name = $this->trimmed('name');
150 $description = $this->trimmed('description');
151 $source_url = $this->trimmed('source_url');
152 $organization = $this->trimmed('organization');
153 $homepage = $this->trimmed('homepage');
154 $callback_url = $this->trimmed('callback_url');
155 $type = $this->arg('app_type');
156 $access_type = $this->arg('default_access_type');
159 $this->showForm(_('Name is required.'));
161 } elseif (mb_strlen($name) > 255) {
162 $this->showForm(_('Name is too long (max 255 chars).'));
164 } elseif (empty($description)) {
165 $this->showForm(_('Description is required.'));
167 } elseif (Oauth_application::descriptionTooLong($description)) {
168 $this->showForm(sprintf(
169 _('Description is too long (max %d chars).'),
170 Oauth_application::maxDescription()));
172 } elseif (empty($source_url)) {
173 $this->showForm(_('Source URL is required.'));
175 } elseif ((strlen($source_url) > 0)
178 array('allowed_schemes' => array('http', 'https'))
182 $this->showForm(_('Source URL is not valid.'));
184 } elseif (empty($organization)) {
185 $this->showForm(_('Organization is required.'));
187 } elseif (mb_strlen($organization) > 255) {
188 $this->showForm(_('Organization is too long (max 255 chars).'));
190 } elseif (empty($homepage)) {
191 $this->showForm(_('Organization homepage is required.'));
193 } elseif ((strlen($homepage) > 0)
196 array('allowed_schemes' => array('http', 'https'))
200 $this->showForm(_('Homepage is not a valid URL.'));
202 } elseif (mb_strlen($callback_url) > 255) {
203 $this->showForm(_('Callback is too long.'));
205 } elseif (strlen($callback_url) > 0
208 array('allowed_schemes' => array('http', 'https'))
212 $this->showForm(_('Callback URL is not valid.'));
216 $cur = common_current_user();
218 // Checked in prepare() above
220 assert(!is_null($cur));
222 $app = new Oauth_application();
224 $app->query('BEGIN');
227 $app->owner = $cur->id;
228 $app->description = $description;
229 $app->source_url = $source_url;
230 $app->organization = $organization;
231 $app->homepage = $homepage;
232 $app->callback_url = $callback_url;
235 // Yeah, I dunno why I chose bit flags. I guess so I could
236 // copy this value directly to Oauth_application_user
237 // access_type which I think does need bit flags -- Z
239 if ($access_type == 'r') {
240 $app->setAccessFlags(true, false);
242 $app->setAccessFlags(true, true);
245 $app->created = common_sql_now();
247 // generate consumer key and secret
249 $consumer = Consumer::generateNew();
251 $result = $consumer->insert();
254 common_log_db_error($consumer, 'INSERT', __FILE__);
255 $this->serverError(_('Could not create application.'));
258 $app->consumer_key = $consumer->consumer_key;
260 $this->app_id = $app->insert();
262 if (!$this->app_id) {
263 common_log_db_error($app, 'INSERT', __FILE__);
264 $this->serverError(_('Could not create application.'));
265 $app->query('ROLLBACK');
270 $app->query('COMMIT');
272 common_redirect(common_local_url('oauthappssettings'), 303);