4 * This module contains the CURL-based HTTP fetcher implementation.
8 * LICENSE: See the COPYING file included in this distribution.
11 * @author JanRain, Inc. <openid@janrain.com>
12 * @copyright 2005-2008 Janrain, Inc.
13 * @license http://www.apache.org/licenses/LICENSE-2.0 Apache
19 require_once "Auth/Yadis/HTTPFetcher.php";
21 require_once "Auth/OpenID.php";
24 * A paranoid {@link Auth_Yadis_HTTPFetcher} class which uses CURL
29 class Auth_Yadis_ParanoidHTTPFetcher extends Auth_Yadis_HTTPFetcher {
30 function Auth_Yadis_ParanoidHTTPFetcher()
37 $this->headers = array();
44 function _writeHeader($ch, $header)
46 array_push($this->headers, rtrim($header));
47 return strlen($header);
53 function _writeData($ch, $data)
55 if (strlen($this->data) > 1024*Auth_OpenID_FETCHER_MAX_RESPONSE_KB) {
64 * Does this fetcher support SSL URLs?
66 function supportsSSL()
70 return in_array('https', $v['protocols']);
71 } elseif (is_string($v)) {
72 return preg_match('/OpenSSL/i', $v);
78 function get($url, $extra_headers = null)
80 if (!$this->canFetchURL($url)) {
84 $stop = time() + $this->timeout;
85 $off = $this->timeout;
89 while ($redir && ($off > 0)) {
96 "curl_init returned false; could not " .
97 "initialize for URL '%s'", $url);
101 if (defined('CURLOPT_NOSIGNAL')) {
102 curl_setopt($c, CURLOPT_NOSIGNAL, true);
105 if (!$this->allowedURL($url)) {
106 Auth_OpenID::log("Fetching URL not allowed: %s",
111 curl_setopt($c, CURLOPT_WRITEFUNCTION,
112 array($this, "_writeData"));
113 curl_setopt($c, CURLOPT_HEADERFUNCTION,
114 array($this, "_writeHeader"));
116 if ($extra_headers) {
117 curl_setopt($c, CURLOPT_HTTPHEADER, $extra_headers);
120 $cv = curl_version();
122 $curl_user_agent = 'curl/'.$cv['version'];
124 $curl_user_agent = $cv;
126 curl_setopt($c, CURLOPT_USERAGENT,
127 Auth_OpenID_USER_AGENT.' '.$curl_user_agent);
128 curl_setopt($c, CURLOPT_TIMEOUT, $off);
129 curl_setopt($c, CURLOPT_URL, $url);
131 if (defined('Auth_OpenID_VERIFY_HOST')) {
132 curl_setopt($c, CURLOPT_SSL_VERIFYPEER, true);
133 curl_setopt($c, CURLOPT_SSL_VERIFYHOST, 2);
137 $code = curl_getinfo($c, CURLINFO_HTTP_CODE);
139 $headers = $this->headers;
142 Auth_OpenID::log("Got no response code when fetching %s", $url);
143 Auth_OpenID::log("CURL error (%s): %s",
144 curl_errno($c), curl_error($c));
148 if (in_array($code, array(301, 302, 303, 307))) {
149 $url = $this->_findRedirect($headers, $url);
155 if (defined('Auth_OpenID_VERIFY_HOST') &&
156 $this->isHTTPS($url)) {
157 Auth_OpenID::log('OpenID: Verified SSL host %s using '.
160 $new_headers = array();
162 foreach ($headers as $header) {
163 if (strpos($header, ': ')) {
164 list($name, $value) = explode(': ', $header, 2);
165 $new_headers[$name] = $value;
170 "Successfully fetched '%s': GET response code %s",
173 return new Auth_Yadis_HTTPResponse($url, $code,
174 $new_headers, $body);
177 $off = $stop - time();
183 function post($url, $body, $extra_headers = null)
185 if (!$this->canFetchURL($url)) {
193 if (defined('CURLOPT_NOSIGNAL')) {
194 curl_setopt($c, CURLOPT_NOSIGNAL, true);
197 curl_setopt($c, CURLOPT_POST, true);
198 curl_setopt($c, CURLOPT_POSTFIELDS, $body);
199 curl_setopt($c, CURLOPT_TIMEOUT, $this->timeout);
200 curl_setopt($c, CURLOPT_URL, $url);
201 curl_setopt($c, CURLOPT_WRITEFUNCTION,
202 array($this, "_writeData"));
204 if (defined('Auth_OpenID_VERIFY_HOST')) {
205 curl_setopt($c, CURLOPT_SSL_VERIFYPEER, true);
206 curl_setopt($c, CURLOPT_SSL_VERIFYHOST, 2);
211 $code = curl_getinfo($c, CURLINFO_HTTP_CODE);
214 Auth_OpenID::log("Got no response code when fetching %s", $url);
215 Auth_OpenID::log("CURL error (%s): %s",
216 curl_errno($c), curl_error($c));
220 if (defined('Auth_OpenID_VERIFY_HOST') && $this->isHTTPS($url)) {
221 Auth_OpenID::log('OpenID: Verified SSL host %s using '.
228 $new_headers = $extra_headers;
230 foreach ($this->headers as $header) {
231 if (strpos($header, ': ')) {
232 list($name, $value) = explode(': ', $header, 2);
233 $new_headers[$name] = $value;
238 Auth_OpenID::log("Successfully fetched '%s': POST response code %s",
241 return new Auth_Yadis_HTTPResponse($url, $code,
242 $new_headers, $body);