Differential D15620 Diff 37653 src/applications/oauthserver/controller/client/PhabricatorOAuthClientTestController.php
Changeset View
Changeset View
Standalone View
Standalone View
src/applications/oauthserver/controller/client/PhabricatorOAuthClientTestController.php
| Show All 9 Lines | public function handleRequest(AphrontRequest $request) { | ||||
| $client = id(new PhabricatorOAuthServerClientQuery()) | $client = id(new PhabricatorOAuthServerClientQuery()) | ||||
| ->setViewer($viewer) | ->setViewer($viewer) | ||||
| ->withIDs(array($id)) | ->withIDs(array($id)) | ||||
| ->executeOne(); | ->executeOne(); | ||||
| if (!$client) { | if (!$client) { | ||||
| return new Aphront404Response(); | return new Aphront404Response(); | ||||
| } | } | ||||
| $view_uri = $client->getViewURI(); | $done_uri = $client->getViewURI(); | ||||
| // Look for an existing authorization. | |||||
| $authorization = id(new PhabricatorOAuthClientAuthorizationQuery()) | |||||
| ->setViewer($viewer) | |||||
| ->withUserPHIDs(array($viewer->getPHID())) | |||||
| ->withClientPHIDs(array($client->getPHID())) | |||||
| ->executeOne(); | |||||
| if ($authorization) { | |||||
| return $this->newDialog() | |||||
| ->setTitle(pht('Already Authorized')) | |||||
| ->appendParagraph( | |||||
| pht( | |||||
| 'You have already authorized this application to access your '. | |||||
| 'account.')) | |||||
| ->addCancelButton($view_uri, pht('Close')); | |||||
| } | |||||
| if ($request->isFormPost()) { | if ($request->isFormPost()) { | ||||
| $server = id(new PhabricatorOAuthServer()) | $server = id(new PhabricatorOAuthServer()) | ||||
| ->setUser($viewer) | ->setUser($viewer) | ||||
| ->setClient($client); | ->setClient($client); | ||||
| // Create an authorization if we don't already have one. | |||||
| $authorization = id(new PhabricatorOAuthClientAuthorizationQuery()) | |||||
| ->setViewer($viewer) | |||||
| ->withUserPHIDs(array($viewer->getPHID())) | |||||
| ->withClientPHIDs(array($client->getPHID())) | |||||
| ->executeOne(); | |||||
| if (!$authorization) { | |||||
| $scope = array(); | $scope = array(); | ||||
| $authorization = $server->authorizeClient($scope); | $authorization = $server->authorizeClient($scope); | ||||
| } | |||||
| $id = $authorization->getID(); | $access_token = $server->generateAccessToken(); | ||||
| $panel_uri = '/settings/panel/oauthorizations/?id='.$id; | |||||
| return id(new AphrontRedirectResponse())->setURI($panel_uri); | $form = id(new AphrontFormView()) | ||||
| ->setViewer($viewer) | |||||
| ->appendInstructions( | |||||
| pht( | |||||
| 'Keep this token private, it allows any bearer to access '. | |||||
| 'your account on behalf of this application.')) | |||||
| ->appendChild( | |||||
| id(new AphrontFormTextControl()) | |||||
| ->setLabel(pht('Token')) | |||||
| ->setValue($access_token->getToken())); | |||||
| return $this->newDialog() | |||||
| ->setTitle(pht('OAuth Access Token')) | |||||
| ->appendForm($form) | |||||
| ->addCancelButton($done_uri, pht('Close')); | |||||
| } | } | ||||
| // TODO: It would be nice to put scope options in this dialog, maybe? | // TODO: It would be nice to put scope options in this dialog, maybe? | ||||
| return $this->newDialog() | return $this->newDialog() | ||||
| ->setTitle(pht('Authorize Application?')) | ->setTitle(pht('Authorize Application?')) | ||||
| ->appendParagraph( | ->appendParagraph( | ||||
| pht( | pht( | ||||
| 'This will create an authorization, permitting %s to access '. | 'This will create an authorization and OAuth token, permitting %s '. | ||||
| 'your account.', | 'to access your account.', | ||||
| phutil_tag('strong', array(), $client->getName()))) | phutil_tag('strong', array(), $client->getName()))) | ||||
| ->addCancelButton($view_uri) | ->addCancelButton($done_uri) | ||||
| ->addSubmitButton(pht('Authorize Application')); | ->addSubmitButton(pht('Authorize Application')); | ||||
| } | } | ||||
| } | } | ||||