Edit File by line

<?php

[0] Fix | Delete

[1] Fix | Delete

/**

[2] Fix | Delete

* Wrapper for the ET_Core_OAuth library.

[3] Fix | Delete

[4] Fix | Delete

* @since 1.1.0

[5] Fix | Delete

* @package ET\Core\API

[6] Fix | Delete

[7] Fix | Delete

* @property string consumer_key

[8] Fix | Delete

* @property string consumer_secret

[9] Fix | Delete

* @property string access_token

[10] Fix | Delete

* @property string access_token_secret

[11] Fix | Delete

[12] Fix | Delete

class ET_Core_API_OAuthHelper {

[13] Fix | Delete

[14] Fix | Delete

/**

[15] Fix | Delete

* URL for access token requests.

[16] Fix | Delete

[17] Fix | Delete

* @since 1.1.0

[18] Fix | Delete

* @var string

[19] Fix | Delete

[20] Fix | Delete

public $ACCESS_TOKEN_URL;

[21] Fix | Delete

[22] Fix | Delete

/**

[23] Fix | Delete

* URL for authorizing applications.

[24] Fix | Delete

[25] Fix | Delete

* @since 1.1.0

[26] Fix | Delete

* @var string

[27] Fix | Delete

[28] Fix | Delete

public $AUTHORIZATION_URL;

[29] Fix | Delete

[30] Fix | Delete

/**

[31] Fix | Delete

* URL for request token requests.

[32] Fix | Delete

[33] Fix | Delete

* @since 1.1.0

[34] Fix | Delete

* @var string

[35] Fix | Delete

[36] Fix | Delete

public $REQUEST_TOKEN_URL;

[37] Fix | Delete

[38] Fix | Delete

/**

[39] Fix | Delete

* The OAuth2 bearer for this instance. This is used as the value of the HTTP

[40] Fix | Delete

* `Authorization` header. The format is: `Bearer {$access_token}`.

[41] Fix | Delete

[42] Fix | Delete

* @since 1.1.0

[43] Fix | Delete

* @var string

[44] Fix | Delete

[45] Fix | Delete

private $bearer = null;

[46] Fix | Delete

[47] Fix | Delete

/**

[48] Fix | Delete

* The OAuth Consumer object for this instance.

[49] Fix | Delete

[50] Fix | Delete

* @since 1.1.0

[51] Fix | Delete

* @var ET_Core_LIB_OAuthConsumer

[52] Fix | Delete

[53] Fix | Delete

public $consumer = null;

[54] Fix | Delete

[55] Fix | Delete

/**

[56] Fix | Delete

* The OAuth Token object for this instance.

[57] Fix | Delete

[58] Fix | Delete

* @since 1.1.0

[59] Fix | Delete

* @var ET_Core_LIB_OAuthToken

[60] Fix | Delete

[61] Fix | Delete

public $token = null;

[62] Fix | Delete

[63] Fix | Delete

/**

[64] Fix | Delete

* ET_Core_API_OAuth_Helper constructor.

[65] Fix | Delete

[66] Fix | Delete

* @since 1.1.0

[67] Fix | Delete

[68] Fix | Delete

* @param array $data {

[69] Fix | Delete

* The consumer key/secret and access token/secret.

[70] Fix | Delete

[71] Fix | Delete

* @type string $consumer_key Consumer key. Required.

[72] Fix | Delete

* @type string $consumer_secret Consumer secret. Required.

[73] Fix | Delete

* @type string $access_token Previously obtained access token. Optional.

[74] Fix | Delete

* @type string $access_secret Previously obtained access secret. Optional.

[75] Fix | Delete

* }

[76] Fix | Delete

* @param array $urls {

[77] Fix | Delete

* The service's OAuth endpoints.

[78] Fix | Delete

[79] Fix | Delete

* @type string $request_token_url URL for request tokens. Required.

[80] Fix | Delete

* @type string $authorization_url URL for authorizations. Optional.

[81] Fix | Delete

* @type string $access_token_url URL for access tokens. Required.

[82] Fix | Delete

* }

[83] Fix | Delete

[84] Fix | Delete

public function __construct( array $data, array $urls, $owner ) {

[85] Fix | Delete

$this->_initialize( $data, $urls );

[86] Fix | Delete

[87] Fix | Delete

$this->sha1_method = new ET_Core_LIB_OAuthHMACSHA1();

[88] Fix | Delete

$this->consumer = new ET_Core_LIB_OAuthConsumer( $this->consumer_key, $this->consumer_secret );

[89] Fix | Delete

[90] Fix | Delete

if ( '' !== $this->access_token && '' !== $this->access_token_secret ) {

[91] Fix | Delete

$this->token = new ET_Core_LIB_OAuthToken( $this->access_token, $this->access_token_secret );

[92] Fix | Delete

} else if ( empty( $this->access_token ) && ! empty( $this->access_token_secret ) ) {

[93] Fix | Delete

$this->bearer = "Bearer {$this->access_token_secret}";

[94] Fix | Delete

}

[95] Fix | Delete

}

[96] Fix | Delete

[97] Fix | Delete

/**

[98] Fix | Delete

* @internal

[99] Fix | Delete

[100] Fix | Delete

* @param array $data {@see self::__construct()}

[101] Fix | Delete

* @param array $urls {@see self::__construct()}

[102] Fix | Delete

[103] Fix | Delete

private function _initialize( $data, $urls ) {

[104] Fix | Delete

$this->consumer_key = isset( $data['consumer_key'] ) ? $data['consumer_key'] : '';

[105] Fix | Delete

$this->consumer_secret = isset( $data['consumer_secret'] ) ? $data['consumer_secret'] : '';

[106] Fix | Delete

$this->access_token = isset( $data['access_key'] ) ? $data['access_key'] : '';

[107] Fix | Delete

$this->access_token_secret = isset( $data['access_secret'] ) ? $data['access_secret'] : '';

[108] Fix | Delete

[109] Fix | Delete

$this->REQUEST_TOKEN_URL = $urls['request_token_url'];

[110] Fix | Delete

$this->AUTHORIZATION_URL = $urls['authorization_url'];

[111] Fix | Delete

$this->ACCESS_TOKEN_URL = $urls['access_token_url'];

[112] Fix | Delete

$this->REDIRECT_URL = isset( $urls['redirect_url'] ) ? $urls['redirect_url'] : '';

[113] Fix | Delete

}

[114] Fix | Delete

[115] Fix | Delete

protected function _get_oauth2_parameters( $args ) {

[116] Fix | Delete

et_core_nonce_verified_previously();

[117] Fix | Delete

[118] Fix | Delete

return wp_parse_args( $args, array(

[119] Fix | Delete

'grant_type' => 'authorization_code',

[120] Fix | Delete

'code' => sanitize_text_field( $_GET['code'] ),

[121] Fix | Delete

'client_id' => $this->consumer_key,

[122] Fix | Delete

'client_secret' => $this->consumer_secret,

[123] Fix | Delete

'redirect_uri' => $this->REDIRECT_URL,

[124] Fix | Delete

) );

[125] Fix | Delete

}

[126] Fix | Delete

[127] Fix | Delete

/**

[128] Fix | Delete

* @param \ET_Core_HTTPRequest $request

[129] Fix | Delete

[130] Fix | Delete

* @return \ET_Core_HTTPRequest

[131] Fix | Delete

[132] Fix | Delete

protected function _prepare_oauth_request( $request ) {

[133] Fix | Delete

$parameters = array();

[134] Fix | Delete

[135] Fix | Delete

if ( is_array( $request->BODY ) && $request->BODY && ! $request->JSON_BODY ) {

[136] Fix | Delete

$parameters = $request->BODY;

[137] Fix | Delete

}

[138] Fix | Delete

[139] Fix | Delete

$oauth_request = ET_Core_LIB_OAuthRequest::from_consumer_and_token(

[140] Fix | Delete

$this->consumer,

[141] Fix | Delete

$this->token,

[142] Fix | Delete

$request->METHOD,

[143] Fix | Delete

$request->URL,

[144] Fix | Delete

$parameters

[145] Fix | Delete

);

[146] Fix | Delete

[147] Fix | Delete

$oauth_request->sign_request( $this->sha1_method, $this->consumer, $this->token );

[148] Fix | Delete

[149] Fix | Delete

if ( 'GET' === $request->METHOD ) {

[150] Fix | Delete

$request->URL = $oauth_request->to_url();

[151] Fix | Delete

} else if ( 'POST' === $request->METHOD ) {

[152] Fix | Delete

$request->URL = $request->JSON_BODY ? $oauth_request->to_url() : $oauth_request->get_normalized_http_url();

[153] Fix | Delete

$request->BODY = $request->JSON_BODY ? json_encode( $request->BODY ) : $oauth_request->to_post_data();

[154] Fix | Delete

}

[155] Fix | Delete

[156] Fix | Delete

return $request;

[157] Fix | Delete

}

[158] Fix | Delete

[159] Fix | Delete

/**

[160] Fix | Delete

* @param \ET_Core_HTTPRequest $request

[161] Fix | Delete

[162] Fix | Delete

* @return \ET_Core_HTTPRequest

[163] Fix | Delete

[164] Fix | Delete

protected function _prepare_oauth2_request( $request ) {

[165] Fix | Delete

if ( null !== $this->bearer ) {

[166] Fix | Delete

$request->HEADERS['Authorization'] = $this->bearer;

[167] Fix | Delete

}

[168] Fix | Delete

[169] Fix | Delete

if ( $request->JSON_BODY ) {

[170] Fix | Delete

return $request;

[171] Fix | Delete

}

[172] Fix | Delete

[173] Fix | Delete

if ( is_array( $request->BODY ) && ! array_key_exists( 'code', $request->BODY ) ) {

[174] Fix | Delete

$request->URL = add_query_arg( $request->BODY, $request->URL );

[175] Fix | Delete

$request->BODY = null;

[176] Fix | Delete

}

[177] Fix | Delete

[178] Fix | Delete

return $request;

[179] Fix | Delete

}

[180] Fix | Delete

[181] Fix | Delete

/**

[182] Fix | Delete

* Finish the OAuth2 authorization process if needed.

[183] Fix | Delete

[184] Fix | Delete

public static function finish_oauth2_authorization() {

[185] Fix | Delete

et_core_nonce_verified_previously();

[186] Fix | Delete

[187] Fix | Delete

if ( ! isset( $_GET['state'] ) || 0 !== strpos( $_GET['state'], 'ET_Core' ) ) {

[188] Fix | Delete

return;

[189] Fix | Delete

}

[190] Fix | Delete

[191] Fix | Delete

list( $_, $name, $account, $nonce ) = explode( '|', sanitize_text_field( rawurldecode( $_GET['state'] ) ) );

[192] Fix | Delete

[193] Fix | Delete

if ( ! $name || ! $account || ! $nonce ) {

[194] Fix | Delete

return;

[195] Fix | Delete

}

[196] Fix | Delete

[197] Fix | Delete

$_GET['nonce'] = $nonce;

[198] Fix | Delete

[199] Fix | Delete

et_core_security_check( 'manage_options', 'et_core_api_service_oauth2', 'nonce', '_GET' );

[200] Fix | Delete

[201] Fix | Delete

$providers = et_core_api_email_providers();

[202] Fix | Delete

[203] Fix | Delete

if ( ! $providers->account_exists( $name, $account ) ) {

[204] Fix | Delete

et_core_die();

[205] Fix | Delete

}

[206] Fix | Delete

[207] Fix | Delete

if ( ! $provider = $providers->get( $name, $account, 'ET_Core' ) ) {

[208] Fix | Delete

et_core_die();

[209] Fix | Delete

}

[210] Fix | Delete

[211] Fix | Delete

$result = $provider->fetch_subscriber_lists();

[212] Fix | Delete

[213] Fix | Delete

// Display the authorization results

[214] Fix | Delete

echo et_core_esc_previously( ET_Bloom::generate_modal_warning( $result ) );

[215] Fix | Delete

}

[216] Fix | Delete

[217] Fix | Delete

/**

[218] Fix | Delete

* Prepare a request for an access token.

[219] Fix | Delete

[220] Fix | Delete

* @param array $args {

[221] Fix | Delete

* For OAuth 1.0 & 1.0a:

[222] Fix | Delete

[223] Fix | Delete

* @type string $verifier OAuth verifier token. Optional.

[224] Fix | Delete

[225] Fix | Delete

* For OAuth 2.0:

[226] Fix | Delete

[227] Fix | Delete

* @type string $code The code returned when the user was redirected back to their dashboard.

[228] Fix | Delete

* @type string $grant_type The desired grant type, as per the OAuth 2.0 spec.

[229] Fix | Delete

* @type string $redirect_uri The redirect URL from the original authorization request.

[230] Fix | Delete

* }

[231] Fix | Delete

[232] Fix | Delete

* @return ET_Core_HTTPRequest

[233] Fix | Delete

[234] Fix | Delete

public function prepare_access_token_request( $args = array() ) {

[235] Fix | Delete

et_core_nonce_verified_previously();

[236] Fix | Delete

$oauth2 = ! empty( $_GET['code'] );

[237] Fix | Delete

$request = new ET_Core_HTTPRequest( $this->ACCESS_TOKEN_URL, 'POST', '', true );

[238] Fix | Delete

$request->BODY = $oauth2 ? $this->_get_oauth2_parameters( $args ) : $args;

[239] Fix | Delete

[240] Fix | Delete

return $this->prepare_oauth_request( $request, $oauth2 );

[241] Fix | Delete

}

[242] Fix | Delete

[243] Fix | Delete

/**

[244] Fix | Delete

* Prepare an OAuth 1.0a or 2.0 request.

[245] Fix | Delete

[246] Fix | Delete

* @param ET_Core_HTTPRequest $request

[247] Fix | Delete

* @param bool $oauth2

[248] Fix | Delete

[249] Fix | Delete

* @return \ET_Core_HTTPRequest

[250] Fix | Delete

[251] Fix | Delete

function prepare_oauth_request( $request, $oauth2 = false ) {

[252] Fix | Delete

return $oauth2 ? $this->_prepare_oauth2_request( $request ) : $this->_prepare_oauth_request( $request );

[253] Fix | Delete

}

[254] Fix | Delete

[255] Fix | Delete

/**

[256] Fix | Delete

* Process a response to an OAuth access token request and retrieve the access token if auth was successful.

[257] Fix | Delete

[258] Fix | Delete

* @param \ET_Core_HTTPResponse $response

[259] Fix | Delete

[260] Fix | Delete

public function process_authentication_response( $response, $json = true ) {

[261] Fix | Delete

if ( $response->ERROR ) {

[262] Fix | Delete

return;

[263] Fix | Delete

}

[264] Fix | Delete

[265] Fix | Delete

$response = $json ? $response->DATA : wp_parse_args( $response->DATA );

[266] Fix | Delete

[267] Fix | Delete

if ( isset( $response['oauth_token'], $response['oauth_token_secret'] ) ) {

[268] Fix | Delete

// OAuth 1.0a

[269] Fix | Delete

$token = sanitize_text_field( $response['oauth_token'] );

[270] Fix | Delete

$secret = sanitize_text_field( $response['oauth_token_secret'] );

[271] Fix | Delete

$this->token = new ET_Core_LIB_OAuthToken( $token, $secret );

[272] Fix | Delete

} else if ( isset( $response['access_token'], $response['refresh_token'] ) ) {

[273] Fix | Delete

// OAuth 2.0

[274] Fix | Delete

$this->token = new ET_Core_LIB_OAuthToken( '', sanitize_text_field( $response['access_token'] ) );

[275] Fix | Delete

$this->token->refresh_token = sanitize_text_field( $response['refresh_token'] );

[276] Fix | Delete

}

[277] Fix | Delete

}

[278] Fix | Delete

}

[279] Fix | Delete

[280] Fix | Delete