X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=src%2FModule%2FOwa.php;h=7b3af7b52fe93d0f7f1e1aba046aeaab39ee04ad;hb=3bca4fe2a64671d09e08346456cdfa6c12f996e9;hp=a1dbfa2f315ea3aa8b31d9f2f12e5ae99854f5b9;hpb=2f28c2ebbfd8f66093d7081d40b1d48f65fcff20;p=friendica.git diff --git a/src/Module/Owa.php b/src/Module/Owa.php index a1dbfa2f31..7b3af7b52f 100644 --- a/src/Module/Owa.php +++ b/src/Module/Owa.php @@ -1,7 +1,24 @@ . + * */ + namespace Friendica\Module; use Friendica\BaseModule; @@ -11,9 +28,10 @@ use Friendica\Database\DBA; use Friendica\Model\Contact; use Friendica\Model\OpenWebAuthToken; use Friendica\Util\HTTPSignature; +use Friendica\Util\Strings; /** - * @brief OpenWebAuth verifier and token generator + * OpenWebAuth verifier and token generator * * See https://macgirvin.com/wiki/mike/OpenWebAuth/Home * Requests to this endpoint should be signed using HTTP Signatures @@ -26,9 +44,8 @@ use Friendica\Util\HTTPSignature; */ class Owa extends BaseModule { - public static function init() + protected function rawContent(array $request = []) { - $ret = [ 'success' => false ]; foreach (['REDIRECT_REMOTE_USER', 'HTTP_AUTHORIZATION'] as $head) { @@ -58,33 +75,32 @@ class Owa extends BaseModule $verified = HTTPSignature::verifyMagic($contact['pubkey']); if ($verified && $verified['header_signed'] && $verified['header_valid']) { - Logger::log('OWA header: ' . print_r($verified, true), Logger::DATA); - Logger::log('OWA success: ' . $contact['addr'], Logger::DATA); + Logger::debug('OWA header', ['addr' => $contact['addr'], 'data' => $verified]); $ret['success'] = true; - $token = random_string(32); + $token = Strings::getRandomHex(32); - // Store the generated token in the databe. + // Store the generated token in the database. OpenWebAuthToken::create('owt', 0, $token, $contact['addr']); $result = ''; - // Encrypt the token with the public contacts publik key. + // Encrypt the token with the public contacts public key. // Only the specific public contact will be able to encrypt it. // At a later time, we will compare weather the token we're getting // is really the same token we have stored in the database. openssl_public_encrypt($token, $result, $contact['pubkey']); - $ret['encrypted_token'] = base64url_encode($result); + $ret['encrypted_token'] = Strings::base64UrlEncode($result); } else { - Logger::log('OWA fail: ' . $contact['id'] . ' ' . $contact['addr'] . ' ' . $contact['url'], Logger::DEBUG); + Logger::info('OWA fail', ['id' => $contact['id'], 'addr' => $contact['addr'], 'url' => $contact['url']]); } } else { - Logger::log('Contact not found: ' . $handle, Logger::DEBUG); + Logger::info('Contact not found', ['handle' => $handle]); } } } } } - System::jsonExit($ret, 'application/x-dfrn+json'); + $this->jsonExit($ret, 'application/x-zot+json'); } }