una/studio/classes/BxDolStudioOAuthLib.php

<?php defined('BX_DOL') or die('hack attempt');
/**
 * Copyright (c) UNA, Inc - https://una.io
 * MIT License - https://opensource.org/licenses/MIT
 *
 * @defgroup    UnaStudio UNA Studio
 * @{
 */

class BxDolStudioOAuthLib extends BxDolStudioOAuthOAuth1 implements iBxDolSingleton
{
    protected function __construct()
    {
        if (isset($GLOBALS['bxDolClasses'][get_class($this)]))
            trigger_error ('Multiple instances are not allowed for the class: ' . get_class($this), E_USER_ERROR);

        parent::__construct();

        $this->sKey = getParam('sys_oauth_key');
        $this->sSecret = getParam('sys_oauth_secret');
        $this->sDataRetrieveMethod = OAUTH_HTTP_METHOD_POST;
    }

    public function __clone()
    {
        if (isset($GLOBALS['bxDolClasses'][get_class($this)]))
            trigger_error('Clone is not allowed for the class: ' . get_class($this), E_USER_ERROR);
    }

    public static function getInstance()
    {
        if (!isset($GLOBALS['bxDolClasses'][__CLASS__])) {
            $sClass = __CLASS__;
            $GLOBALS['bxDolClasses'][__CLASS__] = new $sClass();
        }

        return $GLOBALS['bxDolClasses'][__CLASS__];
    }

    protected function authorize()
    {
        if($this->isAuthorized())
            return true;

		$oConsumer = $this->getServiceObject(false);

        try {
            $bToken = bx_get('oauth_token') !== false;
            $mixedSecret = $this->oSession->getValue('sys_oauth_secret');
            if(!$bToken && $mixedSecret !== false) {
                $this->oSession->unsetValue('sys_oauth_secret');
                $mixedSecret = false;
            }

            //--- Get request token and redirect to authorize.
            if(!$bToken && $mixedSecret === false)
                return $this->getRequestToken($oConsumer);

            //--- Get access token.
            if($bToken && $mixedSecret !== false)
                return $this->getAccessToken(bx_get('oauth_token'), $mixedSecret, bx_get('oauth_verifier'), (int)bx_get('oauth_user'),  $oConsumer);
        }
        catch(OAuthException $e) {
            return $this->getRequestToken();
        }

        return $this->getRequestToken();
    }

    protected function getRequestToken($oConsumer = null)
    {
    	if(empty($oConsumer))
    		$oConsumer = $this->getServiceObject();

    	$aRequestToken = $oConsumer->getRequestToken(BX_DOL_OAUTH_URL_REQUEST_TOKEN);
		if(empty($aRequestToken))
        	return _t('_adm_err_oauth_cannot_get_token');

		if($this->isServerError($aRequestToken))
			throw new OAuthException();

		$this->oSession->setValue('sys_oauth_secret', $aRequestToken['oauth_token_secret']);
		return _t('_adm_msg_oauth_need_authorize', bx_append_url_params(BX_DOL_OAUTH_URL_AUTHORIZE, array('oauth_token' => $aRequestToken['oauth_token'], 'sid' => bx_site_hash())));
    }

    protected function getAccessToken($sToken, $mixedSecret, $sVerifier, $iUser,  $oConsumer)
    {
		$oConsumer->setToken($sToken, $mixedSecret);
		$aAccessToken = $oConsumer->getAccessToken(bx_append_url_params(BX_DOL_OAUTH_URL_ACCESS_TOKEN, array('oauth_verifier' => $sVerifier)));
		if(empty($aAccessToken))
			return _t('_adm_err_oauth_cannot_get_token');

		if($this->isServerError($aAccessToken))
			throw new OAuthException();

		$this->oSession->setValue('sys_oauth_token', $aAccessToken['oauth_token']);
		$this->oSession->setValue('sys_oauth_secret', $aAccessToken['oauth_token_secret']);
		$this->oSession->setValue('sys_oauth_authorized', 1);
		$this->oSession->setValue('sys_oauth_authorized_user', $iUser);

		return true;
    }
    
    protected function fetch($aParams = array())
    {
        if(!$this->isAuthorized())
            return array();

		$oConsumer = $this->getServiceObject(false);

        try {
            $oConsumer->setToken($this->oSession->getValue('sys_oauth_token'), $this->oSession->getValue('sys_oauth_secret'));
            $oConsumer->fetch(BX_DOL_OAUTH_URL_FETCH_DATA, $aParams, $this->sDataRetrieveMethod);

            //echo $oConsumer->getLastResponse(); exit;	//--- Uncomment to debug
            return json_decode($oConsumer->getLastResponse(), true);
        } 
        catch(OAuthException $e) {
            return array();
        }
    }

	private function getServiceObject($bClearStorage = true)
    {
    	if($bClearStorage)
    		$this->unsetAuthorizedUser();

    	$oConsumer = new OAuth($this->sKey, $this->sSecret);
		$oConsumer->setAuthType(OAUTH_AUTH_TYPE_URI);
        $oConsumer->enableDebug();

        return $oConsumer;
    }
}

/** @} */