{
$dir = dirname(__FILE__);
- //common_debug("class = " . $cls);
-
switch ($cls)
{
case 'Facebook': // Facebook PHP SDK
$action->script('https://connect.facebook.net/en_US/all.js');
$script = <<<ENDOFSCRIPT
+function setCookie(name, value) {
+ var date = new Date();
+ date.setTime(date.getTime() + (5 * 60 * 1000)); // 5 mins
+ var expires = "; expires=" + date.toGMTString();
+ document.cookie = name + "=" + value + expires + "; path=/";
+}
+
FB.init({appId: %1\$s, status: true, cookie: true, xfbml: true, oauth: true});
$('#facebook_button').bind('click', function(event) {
FB.login(function(response) {
if (response.authResponse) {
+ // put the access token in a cookie for the next step
+ setCookie('fb_access_token', response.authResponse.accessToken);
window.location.href = '%2\$s';
} else {
// NOP (user cancelled login)
*
* @param Action action the current action
*/
- function onEndLogout($action)
+ function onStartLogout($action)
{
if ($this->hasApplication()) {
- //$session = $this->facebook->getSession();
- $fbuser = null;
- $fbuid = null;
- try {
- $fbuid = $this->facebook->getUser();
- $fbuser = $this->facebook->api('/me');
- } catch (FacebookApiException $e) {
- common_log(LOG_ERROR, $e, __FILE__);
- }
+ $cur = common_current_user();
+ $flink = Foreign_link::getByUserID($cur->id, FACEBOOK_SERVICE);
+
+ if (!empty($flink)) {
+
+ $this->facebook->setAccessToken($flink->credentials);
- if (!empty($fbuser)) {
+ if (common_config('singleuser', 'enabled')) {
+ $user = User::singleUser();
+
+ $destination = common_local_url(
+ 'showstream',
+ array('nickname' => $user->nickname)
+ );
+ } else {
+ $destination = common_local_url('public');
+ }
$logoutUrl = $this->facebook->getLogoutUrl(
- array('next' => common_local_url('public'))
+ array('next' => $destination)
);
common_log(
),
__FILE__
);
- common_debug("LOGOUT URL = $logoutUrl");
+
+ $action->logout();
+
common_redirect($logoutUrl, 303);
+ return false; // probably never get here, but hey
}
+
+ return true;
}
}
// Check cookie for a valid access_token
- $cookie = $this->get_facebook_cookie(
- common_config('facebook', 'appid'),
- common_config('facebook', 'secret')
- );
-
- $this->accessToken = $cookie['access_token'];
+ if (isset($_COOKIE['fb_access_token'])) {
+ $this->accessToken = $_COOKIE['fb_access_token'];
+ if (empty($this->accessToken)) {
+ $this->clientError(_m("Unable to authenticate you with Facebook."));
+ return false;
+ }
+ }
- common_debug("cookie = " . var_export($cookie, true));
-
- $this->fbuser = json_decode(
- file_get_contents(
- 'https://graph.facebook.com/me?access_token='
- . $this->accessToken
- )
- );
+ $graphUrl = 'https://graph.facebook.com/me?access_token=' . urlencode($this->accessToken);
+ $this->fbuser = json_decode(file_get_contents($graphUrl));
if (!empty($this->fbuser)) {
-
$this->fbuid = $this->fbuser->id;
- common_debug("fbuser = " . var_export($this->fbuser, true));
- common_debug("fbuid = " . $this->fbuid);
-
// OKAY, all is well... proceed to register
-
- common_debug("Found a valid Facebook user.", __FILE__);
-
return true;
-
} else {
- // This shouldn't happen in the regular course of things
+ // log badness
list($proxy, $ip) = common_client_ip();
return false;
}
- function get_facebook_cookie($app_id, $app_secret) {
- $args = array();
-
- parse_str(trim($_COOKIE['fbs_' . $app_id], '\\"'), $args);
-
- ksort($args);
- $payload = '';
-
- foreach ($args as $key => $value) {
- if ($key != 'sig') {
- $payload .= $key . '=' . $value;
- }
- }
-
- if (md5($payload . $app_secret) != $args['sig']) {
- return null;
- }
-
- return $args;
- }
-
function handle($args)
{
parent::handle($args);
// User already has a linked Facebook account and shouldn't be here!
- common_debug(
- sprintf(
- 'There\'s already a local user %d linked with Facebook user %s.',
- $flink->user_id,
- $this->fbuid
- )
- );
-
$this->clientError(
// TRANS: Client error displayed when trying to connect to a Facebook account that is already linked
// TRANS: in the same StatusNet site.
// There's already a local user linked to this Facebook account.
- common_debug(
- sprintf(
- 'There\'s already a local user %d linked with Facebook user %s.',
- $cur->id,
- $this->fbuid
- )
- );
-
$this->clientError(
// TRANS: Client error displayed when trying to connect to a Facebook account that is already linked
// TRANS: in the same StatusNet site.
{
$token = $this->trimmed('token');
+ // CSRF protection
if (!$token || $token != common_session_token()) {
$this->showForm(
// TRANS: Client error displayed when the session token does not match or is not given.
*/
function setAvatar($user)
{
- $picUrl = sprintf(
- 'http://graph.facebook.com/%s/picture?type=large',
- $this->fbuid
- );
-
- // fetch the picture from Facebook
- $client = new HTTPClient();
+ try {
+ $picUrl = sprintf(
+ 'http://graph.facebook.com/%d/picture?type=large',
+ $this->fbuser->id
+ );
- // fetch the actual picture
- $response = $client->get($picUrl);
+ // fetch the picture from Facebook
+ $client = new HTTPClient();
- if ($response->isOk()) {
+ // fetch the actual picture
+ $response = $client->get($picUrl);
- $finalUrl = $client->getUrl();
+ if ($response->isOk()) {
- // Make sure the filename is unique becuase it's possible for a user
- // to deauthorize our app, and then come back in as a new user but
- // have the same Facebook picture (avatar URLs have a unique index
- // and their URLs are based on the filenames).
- $filename = 'facebook-' . common_good_rand(4) . '-'
- . substr(strrchr($finalUrl, '/'), 1);
+ // seems to always be jpeg, but not sure
+ $tmpname = "facebook-avatar-tmp-" . common_good_rand(4);
- $ok = file_put_contents(
- Avatar::path($filename),
- $response->getBody()
- );
-
- if (!$ok) {
- common_log(
- LOG_WARNING,
- sprintf(
- 'Couldn\'t save Facebook avatar %s',
- $tmp
- ),
- __FILE__
+ $ok = file_put_contents(
+ Avatar::path($tmpname),
+ $response->getBody()
);
- } else {
-
- // save it as an avatar
- $profile = $user->getProfile();
-
- if ($profile->setOriginal($filename)) {
- common_log(
- LOG_INFO,
- sprintf(
- 'Saved avatar for %s (%d) from Facebook picture for '
- . '%s (fbuid %d), filename = %s',
- $user->nickname,
- $user->id,
- $this->fbuser->name,
- $this->fbuid,
- $filename
- ),
- __FILE__
- );
+ if (!$ok) {
+ common_log(LOG_WARNING, 'Couldn\'t save tmp Facebook avatar: ' . $tmpname, __FILE__);
+ } else {
+ // save it as an avatar
+ $profile = $user->getProfile();
+
+ if ($profile->setOriginal($tmpname)) {
+ common_log(
+ LOG_INFO,
+ sprintf(
+ 'Saved avatar for %s (%d) from Facebook picture for '
+ . '%s (fbuid %d), filename = %s',
+ $user->nickname,
+ $user->id,
+ $this->fbuser->name,
+ $this->fbuid,
+ $filename
+ ),
+ __FILE__
+ );
+
+ // clean up
+ @unlink(Avatar::path($tmpname));
+ }
+
}
}
+ } catch (Exception $e) {
+ common_log(LOG_WARNING, 'Couldn\'t save Facebook avatar: ' . $e->getMessage(), __FILE__);
+ // error isn't fatal, continue
}
}
$user = User::staticGet('nickname', $nickname);
- if (!empty($user)) {
- common_debug(
- sprintf(
- 'Found a legit user to connect to Facebook: %s (%d)',
- $user->nickname,
- $user->id
- ),
- __FILE__
- );
- }
-
$this->tryLinkUser($user);
common_set_user($user);
common_real_login(true);
+ // clear out the stupid cookie
+ setcookie('fb_access_token', '', time() - 3600); // one hour ago
+
$this->goHome($user->nickname);
}
{
$user = common_current_user();
$this->tryLinkUser($user);
+
+ // clear out the stupid cookie
+ setcookie('fb_access_token', '', time() - 3600); // one hour ago
common_redirect(common_local_url('facebookfinishlogin'), 303);
}
$this->serverError(_m('Error connecting user to Facebook.'));
return;
}
-
- common_debug(
- sprintf(
- 'Connected Facebook user %s (fbuid %d) to local user %s (%d)',
- $this->fbuser->name,
- $this->fbuid,
- $user->nickname,
- $user->id
- ),
- __FILE__
- );
}
function tryLogin()
{
- common_debug(
- sprintf(
- 'Trying login for Facebook user %s',
- $this->fbuid
- ),
- __FILE__
- );
-
$flink = Foreign_link::getByForeignID($this->fbuid, FACEBOOK_SERVICE);
if (!empty($flink)) {
common_set_user($user);
common_real_login(true);
+
+ // clear out the stupid cookie
+ setcookie('fb_access_token', '', time() - 3600); // one hour ago
+
$this->goHome($user->nickname);
}
} else {
-
- common_debug(
- sprintf(
- 'No flink found for fbuid: %s - new user',
- $this->fbuid
- ),
- __FILE__
- );
-
$this->showForm(null, $this->bestNewNickname());
}
}
function flinkUser($user_id, $fbuid)
{
$flink = new Foreign_link();
- $flink->user_id = $user_id;
- $flink->foreign_id = $fbuid;
- $flink->service = FACEBOOK_SERVICE;
- // Pull the access token from the Facebook cookies
+ $flink->user_id = $user_id;
+ $flink->foreign_id = $fbuid;
+ $flink->service = FACEBOOK_SERVICE;
$flink->credentials = $this->accessToken;
-
- $flink->created = common_sql_now();
+ $flink->created = common_sql_now();
$flink_id = $flink->insert();
projects / quix0rs-gnu-social.git / commitdiff