mobile view: show events and admin, but hide pm link

[friendica.git] / mod / api.php

diff --git a/mod/api.php b/mod/api.php
index fa5e43de981e5877ad74c41e0e351e60762414b2..4a1db1be5511c7a0f7f6d19daeae38065cc14d6d 100644 (file)
--- a/mod/api.php
+++ b/mod/api.php
@@ -1,11 +1,118 @@
 <?php
+/**
+ * @file mod/api.php
+ */
+use Friendica\App;
+use Friendica\Core\Config;
+use Friendica\Core\L10n;
+use Friendica\Core\Renderer;
+use Friendica\Database\DBA;
+use Friendica\Module\Login;
 
-require_once('include/api.php');
+require_once 'include/api.php';
 
-function api_content(&$a) {
-       echo api_call($a);
-       killme();
+function oauth_get_client(OAuthRequest $request)
+{
+       $params = $request->get_parameters();
+       $token = $params['oauth_token'];
+
+       $r = q("SELECT `clients`.*
+                       FROM `clients`, `tokens`
+                       WHERE `clients`.`client_id`=`tokens`.`client_id`
+                       AND `tokens`.`id`='%s' AND `tokens`.`scope`='request'", DBA::escape($token));
+
+       if (!DBA::isResult($r)) {
+               return null;
+       }
+
+       return $r[0];
+}
+
+function api_post(App $a)
+{
+       if (!local_user()) {
+               notice(L10n::t('Permission denied.') . EOL);
+               return;
+       }
+
+       if (count($a->user) && !empty($a->user['uid']) && $a->user['uid'] != local_user()) {
+               notice(L10n::t('Permission denied.') . EOL);
+               return;
+       }
 }
 
+function api_content(App $a)
+{
+       if ($a->cmd == 'api/oauth/authorize') {
+               /*
+                * api/oauth/authorize interact with the user. return a standard page
+                */
+
+               $a->page['template'] = "minimal";
+
+               // get consumer/client from request token
+               try {
+                       $request = OAuthRequest::from_request();
+               } catch (Exception $e) {
+                       echo "<pre>";
+                       var_dump($e);
+                       exit();
+               }
+
+               if (!empty($_POST['oauth_yes'])) {
+                       $app = oauth_get_client($request);
+                       if (is_null($app)) {
+                               return "Invalid request. Unknown token.";
+                       }
+                       $consumer = new OAuthConsumer($app['client_id'], $app['pw'], $app['redirect_uri']);
 
+                       $verifier = md5($app['secret'] . local_user());
+                       Config::set("oauth", $verifier, local_user());
 
+                       if ($consumer->callback_url != null) {
+                               $params = $request->get_parameters();
+                               $glue = "?";
+                               if (strstr($consumer->callback_url, $glue)) {
+                                       $glue = "?";
+                               }
+                               $a->internalRedirect($consumer->callback_url . $glue . 'oauth_token=' . OAuthUtil::urlencode_rfc3986($params['oauth_token']) . '&oauth_verifier=' . OAuthUtil::urlencode_rfc3986($verifier));
+                               exit();
+                       }
+
+                       $tpl = Renderer::getMarkupTemplate("oauth_authorize_done.tpl");
+                       $o = Renderer::replaceMacros($tpl, [
+                               '$title' => L10n::t('Authorize application connection'),
+                               '$info' => L10n::t('Return to your app and insert this Securty Code:'),
+                               '$code' => $verifier,
+                       ]);
+
+                       return $o;
+               }
+
+               if (!local_user()) {
+                       /// @TODO We need login form to redirect to this page
+                       notice(L10n::t('Please login to continue.') . EOL);
+                       return Login::form($a->query_string, false, $request->get_parameters());
+               }
+               //FKOAuth1::loginUser(4);
+
+               $app = oauth_get_client($request);
+               if (is_null($app)) {
+                       return "Invalid request. Unknown token.";
+               }
+
+               $tpl = Renderer::getMarkupTemplate('oauth_authorize.tpl');
+               $o = Renderer::replaceMacros($tpl, [
+                       '$title' => L10n::t('Authorize application connection'),
+                       '$app' => $app,
+                       '$authorize' => L10n::t('Do you want to authorize this application to access your posts and contacts, and/or create new posts for you?'),
+                       '$yes' => L10n::t('Yes'),
+                       '$no' => L10n::t('No'),
+               ]);
+
+               return $o;
+       }
+
+       echo api_call($a);
+       exit();
+}