mirror of
https://github.com/fusionpbx/fusionpbx.git
synced 2026-01-16 13:38:26 +00:00
0efc4befe4
* More permission check fixes * Update call_block_edit.php * Update call_forward.php * Update call_forward_edit.php * Update call_forward.php * Update dialplans.php * Update fax_edit.php * Update phrase_edit.php * Update sip_profile_copy.php * Update system.php * Update xml_cdr.php * Update contact_attachment_edit.php * Update contact_auth.php * Update contact_relations_view.php * Update contact_timer_inc.php * Update contact_timer.php * Update contacts_vcard.php * Update permissions_default.php * Update menu_item_list.php * Update user_edit.php
120 lines
3.9 KiB
PHP
120 lines
3.9 KiB
PHP
<?php
|
|
/*
|
|
FusionPBX
|
|
Version: MPL 1.1
|
|
|
|
The contents of this file are subject to the Mozilla Public License Version
|
|
1.1 (the "License"); you may not use this file except in compliance with
|
|
the License. You may obtain a copy of the License at
|
|
http://www.mozilla.org/MPL/
|
|
|
|
Software distributed under the License is distributed on an "AS IS" basis,
|
|
WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
|
|
for the specific language governing rights and limitations under the
|
|
License.
|
|
|
|
The Original Code is FusionPBX
|
|
|
|
The Initial Developer of the Original Code is
|
|
Mark J Crane <markjcrane@fusionpbx.com>
|
|
Portions created by the Initial Developer are Copyright (C) 2008-2013
|
|
the Initial Developer. All Rights Reserved.
|
|
|
|
Contributor(s):
|
|
Mark J Crane <markjcrane@fusionpbx.com>
|
|
*/
|
|
//includes files
|
|
require_once dirname(__DIR__, 2) . "/resources/require.php";
|
|
require_once "resources/check_auth.php";
|
|
|
|
//check permissions
|
|
if (!permission_exists('contact_add')) {
|
|
echo "access denied";
|
|
exit;
|
|
}
|
|
|
|
/*
|
|
echo "bang!";
|
|
exit;
|
|
*/
|
|
|
|
//add multi-lingual support
|
|
$language = new text;
|
|
$text = $language->get();
|
|
|
|
|
|
$_SESSION['contact_auth']['source'] = ($_SESSION['contact_auth']['source'] == '') ? $_REQUEST['source'] : $_SESSION['contact_auth']['source'];
|
|
$_SESSION['contact_auth']['target'] = ($_SESSION['contact_auth']['target'] == '') ? $_REQUEST['target'] : $_SESSION['contact_auth']['target'];
|
|
|
|
|
|
//google api authentication
|
|
if ($_SESSION['contact_auth']['source'] == 'google') {
|
|
|
|
if ($_REQUEST['error']) {
|
|
message::add(($text['message-'.$_REQUEST['error']] != '') ? $text['message-'.$_REQUEST['error']] : $_REQUEST['error'], 'negative');
|
|
header("Location: ".$_SESSION['contact_auth']['referer']);
|
|
unset($_SESSION['contact_auth']);
|
|
exit;
|
|
}
|
|
|
|
if (isset($_REQUEST['signout'])) {
|
|
unset($_SESSION['contact_auth']['token']);
|
|
message::add($text['message-google_signed_out']);
|
|
header("Location: https://www.google.com/accounts/Logout?continue=https://appengine.google.com/_ah/logout?continue=".(($_SERVER["HTTPS"] == "on") ? "https" : "http")."://".$_SERVER['HTTP_HOST'].PROJECT_PATH."/core/contacts/".$_SESSION['contact_auth']['referer']);
|
|
exit;
|
|
}
|
|
|
|
if ($_GET['code'] == '') {
|
|
header("Location: https://accounts.google.com/o/oauth2/auth?client_id=".$settings->get('contact', 'google_oauth_client_id')."&redirect_uri=".(($_SERVER["HTTPS"] == "on") ? "https" : "http")."://".$_SERVER['HTTP_HOST'].$_SERVER['PHP_SELF']."&scope=https://www.google.com/m8/feeds/&response_type=code");
|
|
exit;
|
|
}
|
|
else {
|
|
$auth_code = $_GET["code"];
|
|
}
|
|
|
|
/*******************************************************************************************/
|
|
// request access token
|
|
|
|
$fields = array(
|
|
'code' => urlencode($auth_code),
|
|
'client_id' => urlencode($settings->get('contact', 'google_oauth_client_id')),
|
|
'client_secret' => urlencode($settings->get('contact', 'google_oauth_client_secret')),
|
|
'redirect_uri' => urlencode((($_SERVER["HTTPS"] == "on") ? "https" : "http")."://".$_SERVER['HTTP_HOST'].$_SERVER['PHP_SELF']),
|
|
'grant_type' => urlencode('authorization_code')
|
|
);
|
|
|
|
foreach($fields as $key => $value) {
|
|
$post_fields[] = $key.'='.$value;
|
|
}
|
|
$post_fields = implode("&", $post_fields);
|
|
|
|
$curl = curl_init();
|
|
curl_setopt($curl, CURLOPT_URL, 'https://accounts.google.com/o/oauth2/token');
|
|
curl_setopt($curl, CURLOPT_POST, 5);
|
|
curl_setopt($curl, CURLOPT_POSTFIELDS, $post_fields);
|
|
curl_setopt($curl, CURLOPT_RETURNTRANSFER, TRUE);
|
|
curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, FALSE);
|
|
$result = curl_exec($curl);
|
|
curl_close($curl);
|
|
|
|
$response = json_decode($result);
|
|
$access_token = $response->access_token;
|
|
|
|
if ($access_token != '') {
|
|
// redirect to target script
|
|
$_SESSION['contact_auth']['token'] = $access_token;
|
|
header("Location: ".$_SESSION['contact_auth']['target']);
|
|
exit;
|
|
}
|
|
|
|
}
|
|
else {
|
|
|
|
message::add($text['message-access_denied'], 'negative');
|
|
header("Location: ".$_SESSION['contact_auth']['referer']);
|
|
unset($_SESSION['contact_auth']);
|
|
exit;
|
|
|
|
}
|
|
?>
|