+ * OAuth state table

+ *

+ * @var string

+ */

+ protected $auth_provider_oauth_state_table;

+

+ /**

+ * @param string $auth_provider_oauth_state_table

+ public function __construct(\phpbb\db\driver\driver_interface $db, \phpbb\config\config $config, \phpbb\passwords\manager $passwords_manager, \phpbb\request\request_interface $request, \phpbb\user $user, $auth_provider_oauth_token_storage_table, $auth_provider_oauth_state_table, $auth_provider_oauth_token_account_assoc, \phpbb\di\service_collection $service_providers, $users_table, \Symfony\Component\DependencyInjection\ContainerInterface $phpbb_container, \phpbb\event\dispatcher_interface $dispatcher, $phpbb_root_path, $php_ext)

+ $this->auth_provider_oauth_state_table = $auth_provider_oauth_state_table;

+ // Request the name of the OAuth service

+ $storage = new \phpbb\auth\provider\oauth\token_storage($this->db, $this->user, $this->auth_provider_oauth_token_storage_table, $this->auth_provider_oauth_state_table);

+ if (($service::OAUTH_VERSION === 2 && $this->request->is_set('code', \phpbb\request\request_interface::GET))

+ || ($service::OAUTH_VERSION === 1 && $this->request->is_set('oauth_token', \phpbb\request\request_interface::GET)))

+ /**

+ * Check to see if this provider is already associated with an account.

+ *

+ * Enforcing a data type to make data contains strings and not integers,

+ * so values are quoted in the SQL WHERE statement.

+ */

+ 'provider' => (string) $service_name_original,

+ 'oauth_provider_id' => (string) $unique_id

+

+ $redirect_data = array(

+ 'auth_provider' => 'oauth',

+ 'login_link_oauth_service' => $service_name_original,

+ );

+

+ /**

+ * Event is triggered before check if provider is already associated with an account

+ *

+ * @event core.oauth_login_after_check_if_provider_id_has_match

+ * @var array row User row

+ * @var array data Provider data

+ * @var array redirect_data Data to be appended to the redirect url

+ * @var \OAuth\Common\Service\ServiceInterface service OAuth service

+ * @since 3.2.3-RC1

+ * @changed 3.2.6-RC1 Added redirect_data

+ */

+ $vars = array(

+ 'row',

+ 'data',

+ 'redirect_data',

+ 'service',

+ );

+ extract($this->dispatcher->trigger_event('core.oauth_login_after_check_if_provider_id_has_match', compact($vars)));

+

+ 'redirect_data' => $redirect_data,

+ $sql = 'SELECT user_id, username, user_password, user_passchg, user_email, user_ip, user_type, user_login_attempts

+ /**

+ * Check if the user is banned.

+ * The fourth parameter, return, has to be true,

+ * otherwise the OAuth login is still called and

+ * an uncaught exception is thrown as there is no

+ * token stored in the database.

+ */

+ $ban = $this->user->check_ban($row['user_id'], $row['user_ip'], $row['user_email'], true);

+ if (!empty($ban))

+ {

+ $till_date = !empty($ban['ban_end']) ? $this->user->format_date($ban['ban_end']) : '';

+ $message = !empty($ban['ban_end']) ? 'BOARD_BAN_TIME' : 'BOARD_BAN_PERM';

+

+ $contact_link = phpbb_get_board_contact_link($this->config, $this->phpbb_root_path, $this->php_ext);

+ $message = $this->user->lang($message, $till_date, '<a href="' . $contact_link . '">', '</a>');

+ $message .= !empty($ban['ban_give_reason']) ? '<br /><br />' . $this->user->lang('BOARD_BAN_REASON', $ban['ban_give_reason']) : '';

+ $message .= !empty($ban['ban_triggered_by']) ? '<br /><br /><em>' . $this->user->lang('BAN_TRIGGERED_BY_' . strtoupper($ban['ban_triggered_by'])) . '</em>' : '';

+

+ return array(

+ 'status' => LOGIN_BREAK,

+ 'error_msg' => $message,

+ 'user_row' => $row,

+ );

+ }

+

+ * Event is triggered after user is successfully logged in via OAuth.

+ if ($service::OAUTH_VERSION === 1)

+ {

+ $token = $service->requestRequestToken();

+ $url = $service->getAuthorizationUri(array('oauth_token' => $token->getRequestToken()));

+ }

+ else

+ {

+ $url = $service->getAuthorizationUri();

+ }

+ $redirect_url = generate_board_url() . '/ucp.' . $this->php_ext . '?mode=login&login=external&oauth_service=' . $actual_name;

+ $storage = new \phpbb\auth\provider\oauth\token_storage($this->db, $this->user, $this->auth_provider_oauth_token_storage_table, $this->auth_provider_oauth_state_table);

+ $storage = new \phpbb\auth\provider\oauth\token_storage($this->db, $this->user, $this->auth_provider_oauth_token_storage_table, $this->auth_provider_oauth_state_table);

+ if (($service::OAUTH_VERSION === 2 && $this->request->is_set('code', \phpbb\request\request_interface::GET))

+ || ($service::OAUTH_VERSION === 1 && $this->request->is_set('oauth_token', \phpbb\request\request_interface::GET)))

+ if ($service::OAUTH_VERSION === 1)

+ {

+ $token = $service->requestRequestToken();

+ $url = $service->getAuthorizationUri(array('oauth_token' => $token->getRequestToken()));

+ }

+ else

+ {

+ $url = $service->getAuthorizationUri();

+ }

+ // Check if the external account is already associated with other user

+ $sql = 'SELECT user_id

+ FROM ' . $this->auth_provider_oauth_token_account_assoc . "

+ WHERE provider = '" . $this->db->sql_escape($data['provider']) . "'

+ AND oauth_provider_id = '" . $this->db->sql_escape($data['oauth_provider_id']) . "'";

+ $result = $this->db->sql_query($sql);

+ $row = $this->db->sql_fetchrow($result);

+ $this->db->sql_freeresult($result);

+

+ if ($row)

+ {

+ trigger_error('AUTH_PROVIDER_OAUTH_ERROR_ALREADY_LINKED');

+ }

+

+ // Link account

+ $storage = new \phpbb\auth\provider\oauth\token_storage($this->db, $this->user, $this->auth_provider_oauth_token_storage_table, $this->auth_provider_oauth_state_table);

+ if ($rows !== false && count($rows))

+ 'SERVICE_ID' => $actual_name,

+ // Clear all tokens belonging to the user on this service

+ $storage = new \phpbb\auth\provider\oauth\token_storage($this->db, $this->user, $this->auth_provider_oauth_token_storage_table, $this->auth_provider_oauth_state_table);

+<?php

+/**

+*

+* This file is part of the phpBB Forum Software package.

+*

+* @copyright (c) phpBB Limited <https://www.phpbb.com>

+* @license GNU General Public License, version 2 (GPL-2.0)

+*

+* For full copyright and license information, please see

+* the docs/CREDITS.txt file.

+*

+*/

+

+namespace phpbb\auth\provider\oauth\service;

+

+/**

+* Twitter OAuth service

+*/

+class twitter extends \phpbb\auth\provider\oauth\service\base

+{

+ /**

+ * phpBB config

+ *

+ * @var \phpbb\config\config

+ */

+ protected $config;

+

+ /**

+ * phpBB request

+ *

+ * @var \phpbb\request\request_interface

+ */

+ protected $request;

+

+ /**

+ * Constructor

+ *

+ * @param \phpbb\config\config $config

+ * @param \phpbb\request\request_interface $request

+ */

+ public function __construct(\phpbb\config\config $config, \phpbb\request\request_interface $request)

+ {

+ $this->config = $config;

+ $this->request = $request;

+ }

+

+ /**

+ * {@inheritdoc}

+ */

+ public function get_service_credentials()

+ {

+ return array(

+ 'key' => $this->config['auth_oauth_twitter_key'],

+ 'secret' => $this->config['auth_oauth_twitter_secret'],

+ );

+ }

+

+ /**

+ * {@inheritdoc}

+ */

+ public function perform_auth_login()

+ {

+ if (!($this->service_provider instanceof \OAuth\OAuth1\Service\Twitter))

+ {

+ throw new \phpbb\auth\provider\oauth\service\exception('AUTH_PROVIDER_OAUTH_ERROR_INVALID_SERVICE_TYPE');

+ }

+

+ $storage = $this->service_provider->getStorage();

+ $token = $storage->retrieveAccessToken('Twitter');

+ $tokensecret = $token->getRequestTokenSecret();

+

+ // This was a callback request from twitter, get the token

+ $this->service_provider->requestAccessToken(

+ $this->request->variable('oauth_token', ''),

+ $this->request->variable('oauth_verifier', ''),

+ $tokensecret

+ );

+

+ // Send a request with it

+ $result = json_decode($this->service_provider->request('account/verify_credentials.json'), true);

+

+ // Return the unique identifier returned from twitter

+ return $result['id'];

+ }

+

+ /**

+ * {@inheritdoc}

+ */

+ public function perform_token_auth()

+ {

+ if (!($this->service_provider instanceof \OAuth\OAuth1\Service\Twitter))

+ {

+ throw new \phpbb\auth\provider\oauth\service\exception('AUTH_PROVIDER_OAUTH_ERROR_INVALID_SERVICE_TYPE');

+ }

+

+ // Send a request with it

+ $result = json_decode($this->service_provider->request('account/verify_credentials.json'), true);

+

+ // Return the unique identifier returned from twitter

+ return $result['id'];

+ }

+}

+use OAuth\Common\Storage\Exception\AuthorizationStateNotFoundException;

+ protected $oauth_token_table;

+

+ /**

+ * OAuth state table

+ *

+ * @var string

+ */

+ protected $oauth_state_table;

+ * @var string

+ */

+ protected $cachedState;

+

+ /**

+ * @param string $oauth_token_table

+ * @param string $oauth_state_table

+ public function __construct(\phpbb\db\driver\driver_interface $db, \phpbb\user $user, $oauth_token_table, $oauth_state_table)

+ $this->oauth_token_table = $oauth_token_table;

+ $this->oauth_state_table = $oauth_state_table;

+ $sql = 'UPDATE ' . $this->oauth_token_table . '

+ SET ' . $this->db->sql_build_array('UPDATE', $data) . '

+ WHERE user_id = ' . (int) $this->user->data['user_id'] . '

+ ' . ((int) $this->user->data['user_id'] === ANONYMOUS ? "AND session_id = '" . $this->db->sql_escape($this->user->data['session_id']) . "'" : '') . "

+ AND provider = '" . $this->db->sql_escape($service) . "'";

+

+ if (!$this->db->sql_affectedrows())

+ {

+ $data = array(

+ 'user_id' => (int) $this->user->data['user_id'],

+ 'provider' => $service,

+ 'oauth_token' => $this->json_encode_token($token),

+ 'session_id' => $this->user->data['session_id'],

+ );

+

+ $sql = 'INSERT INTO ' . $this->oauth_token_table . $this->db->sql_build_array('INSERT', $data);

+

+ $this->db->sql_query($sql);

+ }

+

+ return $this;

+ $sql = 'DELETE FROM ' . $this->oauth_token_table . '

+

+ return $this;

+ $sql = 'DELETE FROM ' . $this->oauth_token_table . '

+

+ return $this;

+ }

+

+ /**

+ * {@inheritdoc}

+ */

+ public function storeAuthorizationState($service, $state)

+ {

+ $service = $this->get_service_name_for_db($service);

+

+ $this->cachedState = $state;

+

+ $data = array(

+ 'user_id' => (int) $this->user->data['user_id'],

+ 'provider' => $service,

+ 'oauth_state' => $state,

+ 'session_id' => $this->user->data['session_id'],

+ );

+

+ $sql = 'INSERT INTO ' . $this->oauth_state_table . '

+ ' . $this->db->sql_build_array('INSERT', $data);

+ $this->db->sql_query($sql);

+

+ return $this;

+ }

+

+ /**

+ * {@inheritdoc}

+ */

+ public function hasAuthorizationState($service)

+ {

+ $service = $this->get_service_name_for_db($service);

+

+ if ($this->cachedState)

+ {

+ return true;

+ }

+

+ $data = array(

+ 'user_id' => (int) $this->user->data['user_id'],

+ 'provider' => $service,

+ );

+

+ if ((int) $this->user->data['user_id'] === ANONYMOUS)

+ {

+ $data['session_id'] = $this->user->data['session_id'];

+ }

+

+ return (bool) $this->get_state_row($data);

+ }

+

+ /**

+ * {@inheritdoc}

+ */

+ public function retrieveAuthorizationState($service)

+ {

+ $service = $this->get_service_name_for_db($service);

+

+ if ($this->cachedState)

+ {

+ return $this->cachedState;

+ }

+

+ $data = array(

+ 'user_id' => (int) $this->user->data['user_id'],

+ 'provider' => $service,

+ );

+

+ if ((int) $this->user->data['user_id'] === ANONYMOUS)

+ {

+ $data['session_id'] = $this->user->data['session_id'];

+ }

+

+ return $this->get_state_row($data);

+ }

+

+ /**

+ * {@inheritdoc}

+ */

+ public function clearAuthorizationState($service)

+ {

+ $service = $this->get_service_name_for_db($service);

+

+ $this->cachedState = null;

+

+ $sql = 'DELETE FROM ' . $this->oauth_state_table . '

+ WHERE user_id = ' . (int) $this->user->data['user_id'] . "

+ AND provider = '" . $this->db->sql_escape($service) . "'";

+

+ if ((int) $this->user->data['user_id'] === ANONYMOUS)

+ {

+ $sql .= " AND session_id = '" . $this->db->sql_escape($this->user->data['session_id']) . "'";

+ }

+

+ $this->db->sql_query($sql);

+

+ return $this;

+ }

+

+ /**

+ * {@inheritdoc}

+ */

+ public function clearAllAuthorizationStates()

+ {

+ $this->cachedState = null;

+

+ $sql = 'DELETE FROM ' . $this->oauth_state_table . '

+ WHERE user_id = ' . (int) $this->user->data['user_id'];

+

+ if ((int) $this->user->data['user_id'] === ANONYMOUS)

+ {

+ $sql .= " AND session_id = '" . $this->db->sql_escape($this->user->data['session_id']) . "'";

+ }

+

+ $this->db->sql_query($sql);

+

+ return $this;

+ $sql = 'UPDATE ' . $this->oauth_token_table . '

+ * Checks to see if a state exists solely by the session_id of the user

+ *

+ * @param string $service The name of the OAuth service

+ * @return bool true if they have state, false if they don't

+ */

+ public function has_state_by_session($service)

+ {

+ $service = $this->get_service_name_for_db($service);

+

+ if ($this->cachedState)

+ {

+ return true;

+ }

+

+ $data = array(

+ 'session_id' => $this->user->data['session_id'],

+ 'provider' => $service,

+ );

+

+ return (bool) $this->get_state_row($data);

+ }

+

+ /**

+ public function retrieve_state_by_session($service)

+ {

+ $service = $this->get_service_name_for_db($service);

+

+ if ($this->cachedState)

+ {

+ return $this->cachedState;

+ }

+

+ $data = array(

+ 'session_id' => $this->user->data['session_id'],

+ 'provider' => $service,

+ );

+

+ return $this->_retrieve_state($data);

+ }

+

+ * A helper function that performs the query for retrieve state functions

+ *

+ * @param array $data

+ * @return mixed

+ * @throws \OAuth\Common\Storage\Exception\AuthorizationStateNotFoundException

+ */

+ protected function _retrieve_state($data)

+ {

+ $row = $this->get_state_row($data);

+

+ if (!$row)

+ {

+ throw new AuthorizationStateNotFoundException();

+ }

+

+ $this->cachedState = $row['oauth_state'];

+ return $this->cachedState;

+ }

+

+ /**

+ $sql = 'SELECT oauth_token FROM ' . $this->oauth_token_table . '

+ WHERE ' . $this->db->sql_build_array('SELECT', $data);

+ $result = $this->db->sql_query($sql);

+ $row = $this->db->sql_fetchrow($result);

+ $this->db->sql_freeresult($result);

+

+ return $row;

+ }

+

+ /**

+ * A helper function that performs the query for retrieving a state

+ *

+ * @param array $data

+ * @return mixed

+ */

+ protected function get_state_row($data)

+ {

+ $sql = 'SELECT oauth_state FROM ' . $this->oauth_state_table . '