1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
|
<?php
/**
* Common library of functions used by Twitter Services.
*
* @package TwitterService
* @license http://www.gnu.org/licenses/old-licenses/gpl-2.0.html GNU Public License version 2
* @copyright Curverider Ltd 2008-2010
*/
/**
* Tests if the system admin has enabled Sign-On-With-Twitter
*
* @param void
* @return bool
*/
function twitterservice_allow_sign_on_with_twitter() {
if (!$consumer_key = get_plugin_setting('consumer_key', 'twitterservice')) {
return FALSE;
}
if (!$consumer_secret = get_plugin_setting('consumer_secret', 'twitterservice')) {
return FALSE;
}
return get_plugin_setting('sign_on', 'twitterservice') == 'yes';
}
function twitterservice_forward() {
// sanity check
if (!twitterservice_allow_sign_on_with_twitter()) {
forward();
}
$callback = elgg_normalize_url("pg/twitterservice/login");
$request_link = twitterservice_get_authorize_url($callback);
forward($request_link);
}
function twitterservice_login() {
// sanity check
if (!twitterservice_allow_sign_on_with_twitter()) {
forward();
}
$token = twitterservice_get_access_token(get_input('oauth_verifier'));
if (!isset($token['oauth_token']) or !isset($token['oauth_token_secret'])) {
register_error(elgg_echo('twitterservice:login:error'));
forward();
}
// attempt to find user
$values = array(
'plugin:settings:twitterservice:access_key' => $token['oauth_token'],
'plugin:settings:twitterservice:access_secret' => $token['oauth_token_secret'],
);
if (!$users = get_entities_from_private_setting_multi($values, 'user', '', 0, '', 0)) {
// need Twitter account credentials
$consumer_key = get_plugin_setting('consumer_key', 'twitterservice');
$consumer_secret = get_plugin_setting('consumer_secret', 'twitterservice');
$api = new TwitterOAuth($consumer_key, $consumer_secret, $token['oauth_token'], $token['oauth_token_secret']);
$twitter = $api->get('account/verify_credentials');
// backward compatibility for stalled-development Twitter Login plugin
$user = FALSE;
if ($twitter_user = get_user_by_username($token['screen_name'])) {
if (($screen_name = $twitter_user->twitter_screen_name) && ($screen_name == $token['screen_name'])) {
// convert existing account
$user = $twitter_user;
$forward = '';
}
}
// create new user
if (!$user) {
// check new registration allowed
if (!elgg_get_config('allow_registration')) {
register_error(elgg_echo('registerdisabled'));
forward();
}
// trigger a hook for plugin authors to intercept
if (!trigger_plugin_hook('new_twitter_user', 'twitter_service', array('account' => $twitter), TRUE)) {
// halt execution
register_error(elgg_echo('twitterservice:login:error'));
forward();
}
// Elgg-ify Twitter credentials
$username = "{$twitter->screen_name}_twitter";
$display_name = $twitter->name;
$password = generate_random_cleartext_password();
// @hack Temporary, junk email account to allow user creation
$email = "$username@elgg.com";
try {
// create new account
if (!$user_id = register_user($username, $password, $display_name, $email)) {
register_error(elgg_echo('registerbad'));
forward();
}
} catch (RegistrationException $r) {
register_error($r->getMessage());
forward();
}
$user = new ElggUser($user_id);
// @hack Remove temporary email and forward to user settings page
// @todo Consider using a view to force valid email
system_message(elgg_echo('twitterservice:login:email'));
$user->email = '';
$user->save();
$forward = "pg/settings/user/{$user->username}";
}
// set twitter services tokens
set_plugin_usersetting('twitter_name', $token['screen_name'], $user->guid);
set_plugin_usersetting('access_key', $token['oauth_token'], $user->guid);
set_plugin_usersetting('access_secret', $token['oauth_token_secret'], $user->guid);
// pull in Twitter icon
twitterservice_update_user_avatar($user, $twitter->profile_image_url);
// login new user
if (login($user)) {
system_message(elgg_echo('twitterservice:login:success'));
} else {
system_message(elgg_echo('twitterservice:login:error'));
}
forward($forward);
} elseif (count($users) == 1) {
if (login($users[0])) {
system_message(elgg_echo('twitterservice:login:success'));
} else {
system_message(elgg_echo('twitterservice:login:error'));
}
forward();
}
// register login error
register_error(elgg_echo('twitterservice:login:error'));
forward();
}
function twitterservice_update_user_avatar($user, $file_location) {
$sizes = array(
'topbar' => array(16, 16, TRUE),
'tiny' => array(25, 25, TRUE),
'small' => array(40, 40, TRUE),
'medium' => array(100, 100, TRUE),
'large' => array(200, 200, FALSE),
'master' => array(550, 550, FALSE),
);
$filehandler = new ElggFile();
$filehandler->owner_guid = $user->getGUID();
foreach ($sizes as $size => $dimensions) {
$image = get_resized_image_from_existing_file(
$file_location,
$dimensions[0],
$dimensions[1],
$dimensions[2]
);
$filehandler->setFilename("profile/$user->username$size.jpg");
$filehandler->open('write');
$filehandler->write($image);
$filehandler->close();
}
return TRUE;
}
/**
* User-initiated Twitter authorization
*
* Callback action from Twitter registration. Registers a single Elgg user with
* the authorization tokens. Will revoke access from previous users when a
* conflict exists.
*
* Depends upon {@link twitterservice_get_authorize_url} being called previously
* to establish session request tokens.
*/
function twitterservice_authorize() {
$token = twitterservice_get_access_token();
if (!isset($token['oauth_token']) || !isset($token['oauth_token_secret'])) {
register_error(elgg_echo('twitterservice:authorize:error'));
forward('pg/settings/plugins');
}
// only one user per tokens
$values = array(
'plugin:settings:twitterservice:access_key' => $token['oauth_token'],
'plugin:settings:twitterservice:access_secret' => $token['oauth_token_secret'],
);
if ($users = get_entities_from_private_setting_multi($values, 'user', '', 0, '', 0)) {
foreach ($users as $user) {
// revoke access
clear_plugin_usersetting('twitter_name', $user->getGUID());
clear_plugin_usersetting('access_key', $user->getGUID());
clear_plugin_usersetting('access_secret', $user->getGUID());
}
}
// register user's access tokens
set_plugin_usersetting('twitter_name', $token['screen_name']);
set_plugin_usersetting('access_key', $token['oauth_token']);
set_plugin_usersetting('access_secret', $token['oauth_token_secret']);
system_message(elgg_echo('twitterservice:authorize:success'));
forward('pg/settings/plugins');
}
function twitterservice_revoke() {
// unregister user's access tokens
clear_plugin_usersetting('twitter_name');
clear_plugin_usersetting('access_key');
clear_plugin_usersetting('access_secret');
system_message(elgg_echo('twitterservice:revoke:success'));
forward('pg/settings/plugins');
}
function twitterservice_get_authorize_url($callback=NULL) {
global $SESSION;
$consumer_key = get_plugin_setting('consumer_key', 'twitterservice');
$consumer_secret = get_plugin_setting('consumer_secret', 'twitterservice');
// request tokens from Twitter
$twitter = new TwitterOAuth($consumer_key, $consumer_secret);
$token = $twitter->getRequestToken($callback);
// save token in session for use after authorization
$SESSION['twitterservice'] = array(
'oauth_token' => $token['oauth_token'],
'oauth_token_secret' => $token['oauth_token_secret'],
);
return $twitter->getAuthorizeURL($token['oauth_token']);
}
function twitterservice_get_access_token($oauth_verifier=FALSE) {
global $SESSION;
$consumer_key = get_plugin_setting('consumer_key', 'twitterservice');
$consumer_secret = get_plugin_setting('consumer_secret', 'twitterservice');
// retrieve stored tokens
$oauth_token = $SESSION['twitterservice']['oauth_token'];
$oauth_token_secret = $SESSION['twitterservice']['oauth_token_secret'];
$SESSION->offsetUnset('twitterservice');
// fetch an access token
$api = new TwitterOAuth($consumer_key, $consumer_secret, $oauth_token, $oauth_token_secret);
return $api->getAccessToken($oauth_verifier);
}
|
