View source
<?php
function _oauth_common_admin() {
$form = array();
$form['oauth_common_enable_provider'] = array(
'#type' => 'checkbox',
'#title' => t('Enable the oauth provider'),
'#default_value' => variable_get('oauth_common_enable_provider', TRUE),
'#description' => t('This option controls whether this site should act as a OAuth provider or not'),
);
$form['oauth_common_request_token_lifetime'] = array(
'#type' => 'textfield',
'#title' => t('Request token lifetime (in seconds)'),
'#default_value' => variable_get('oauth_common_request_token_lifetime', 7200),
);
$form['#validate'][] = '_oauth_common_admin_settings_validate';
return system_settings_form($form);
}
function _oauth_common_admin_settings_validate($form, $form_state) {
$values = $form_state['values'];
$lifetime = intval($values['oauth_common_request_token_lifetime'], 10);
if (!$lifetime) {
form_set_error('oauth_common_request_token_lifetime', t('The request token lifetime must be a non-zero integer value.'));
}
}
function oauth_common_list_context($js = NULL) {
$header = array(
array(
'data' => t('Title'),
'class' => 'oauth-common-contexts-title',
),
array(
'data' => t('Storage'),
'class' => 'oauth-common-contexts-storage',
),
array(
'data' => t('Operations'),
'class' => 'oauth-common-contexts-operations',
),
);
$contexts = oauth_common_context_load_all();
$rows = array();
if (!$contexts) {
$contexts = array();
}
foreach ($contexts as $context) {
$operations = array();
if (empty($context->disabled)) {
$operations[] = array(
'title' => t('Edit'),
'href' => 'admin/settings/oauth/' . $context->name . '/edit',
);
$operations[] = array(
'title' => t('Export'),
'href' => 'admin/settings/oauth/' . $context->name . '/export',
);
}
if ($context->export_type == (EXPORT_IN_CODE | EXPORT_IN_DATABASE)) {
$operations[] = array(
'title' => t('Revert'),
'href' => 'admin/settings/oauth/' . $context->name . '/delete',
);
}
elseif ($context->export_type != EXPORT_IN_CODE) {
$operations[] = array(
'title' => t('Delete'),
'href' => 'admin/settings/oauth/' . $context->name . '/delete',
);
}
elseif (empty($context->disabled)) {
$operations[] = array(
'title' => t('Disable'),
'href' => 'admin/settings/oauth/' . $context->name . '/disable',
'query' => drupal_get_destination(),
);
}
else {
$operations[] = array(
'title' => t('Enable'),
'href' => 'admin/settings/oauth/' . $context->name . '/enable',
'query' => drupal_get_destination(),
);
}
$rows[$context->name] = array(
'data' => array(
'title' => array(
'data' => check_plain($context->title),
'class' => 'oauth-common-contexts-title',
),
'storage' => array(
'data' => $context->export_type == EXPORT_IN_CODE ? t('In code') : t('In database'),
'class' => 'oauth-common-contexts-storage',
),
'operations' => array(
'data' => theme('links', $operations),
'class' => 'oauth-common-contexts-operations',
),
),
'class' => 'oauth-common-contexts-' . $context->name . (!empty($context->disabled) ? ' oauth-common-contexts-disabled' : ''),
);
}
$table = theme('table', $header, $rows, array(
'id' => 'oauth-common-list-contexts',
));
return $table;
}
function oauth_common_add_context() {
$context = oauth_common_context_new();
drupal_set_title(t('Add context'));
if (!$context) {
drupal_set_message(t("Can't create contexts, check that you've installed !ctools.", array(
'!ctools' => l('Chaos tool suite', 'http://drupal.org/project/ctools'),
)), 'error');
$result = '';
}
else {
$result = oauth_common_edit_context($context);
}
return $result;
}
function oauth_common_edit_context($context) {
if (!is_object($context)) {
$context = oauth_common_context_load($context);
}
if ($context && !empty($context->title)) {
drupal_set_title(check_plain($context->title));
}
return drupal_get_form('oauth_common_edit_form_context', $context);
}
function oauth_common_edit_form_context(&$form_state, $context) {
$form = array(
'#pre_render' => array(
'_oauth_common_add_admin_css',
),
);
$form['cid'] = array(
'#type' => 'value',
'#value' => isset($context->cid) ? $context->cid : '',
);
$form['context_object'] = array(
'#type' => 'value',
'#value' => $context,
);
$form['name'] = array(
'#type' => 'textfield',
'#size' => 24,
'#maxlength' => 32,
'#default_value' => $context->name,
'#title' => t('Context name'),
'#description' => t('A unique name used to identify this preset internally. It must be only be alpha characters and underscores. No spaces, numbers or uppercase characters.'),
'#required' => TRUE,
);
$form['title'] = array(
'#type' => 'textfield',
'#size' => 24,
'#maxlength' => 100,
'#default_value' => $context->title,
'#title' => t('Context title'),
'#required' => TRUE,
);
$sign_methods = array(
'PLAINTEXT' => t('Plaintext'),
);
foreach (hash_algos() as $algo) {
$sign_methods['HMAC-' . strtoupper($algo)] = 'HMAC-' . strtoupper($algo);
}
$form['signature_methods'] = array(
'#type' => 'fieldset',
'#title' => t('Signature methods'),
'#collapsible' => TRUE,
'#collapsed' => TRUE,
'#tree' => TRUE,
'selected' => array(
'#type' => 'checkboxes',
'#title' => t('Supported signature methods'),
'#options' => $sign_methods,
'#default_value' => !empty($context->authorization_options['signature_methods']) ? $context->authorization_options['signature_methods'] : array(
'HMAC-SHA1',
'HMAC-SHA256',
'HMAC-SHA384',
'HMAC-SHA512',
),
),
);
$form['authorization_options'] = array(
'#type' => 'fieldset',
'#title' => t('Authorization options'),
'#tree' => TRUE,
'#collapsible' => TRUE,
'#collapsed' => TRUE,
);
$form['authorization_options']['page_title'] = array(
'#type' => 'textfield',
'#title' => t('Page title'),
'#description' => t('The title of the authorization page.'),
'#size' => 40,
'#maxlength' => 255,
'#default_value' => empty($context->authorization_options['page_title']) ? '' : $context->authorization_options['page_title'],
);
$form['authorization_options']['message'] = array(
'#type' => 'textarea',
'#title' => t('Message'),
'#description' => t('The message shown to the user when authorizing.'),
'#default_value' => empty($context->authorization_options['message']) ? '' : $context->authorization_options['message'],
);
$form['authorization_options']['warning'] = array(
'#type' => 'textarea',
'#title' => t('Warning'),
'#description' => t('The warning shown to the user when authorizing.'),
'#default_value' => empty($context->authorization_options['warning']) ? '' : $context->authorization_options['warning'],
);
$form['authorization_options']['deny_access_title'] = array(
'#type' => 'textfield',
'#title' => t('Deny access title'),
'#description' => t('The title of deny access link.'),
'#size' => 40,
'#maxlength' => 255,
'#default_value' => empty($context->authorization_options['deny_access_title']) ? '' : $context->authorization_options['deny_access_title'],
);
$form['authorization_options']['grant_access_title'] = array(
'#type' => 'textfield',
'#title' => t('Grant access title'),
'#description' => t('The title of grant access button.'),
'#size' => 40,
'#maxlength' => 255,
'#default_value' => empty($context->authorization_options['grant_access_title']) ? '' : $context->authorization_options['grant_access_title'],
);
$form['authorization_options']['access_token_lifetime'] = array(
'#type' => 'textfield',
'#title' => t('Access token lifetime'),
'#description' => t('The time, in seconds, for which an access token should be valid, use 0 to never expire access tokens.'),
'#size' => 10,
'#maxlength' => 255,
'#default_value' => empty($context->authorization_options['access_token_lifetime']) ? 0 : $context->authorization_options['access_token_lifetime'],
);
$form['authorization_options']['disable_auth_level_selection'] = array(
'#type' => 'checkbox',
'#title' => t('Disable authorization level selection'),
'#description' => t('If this is checked the user won\'t be able to choose the authorization level, and the default authorization level(s) will be used.'),
'#default_value' => !empty($context->authorization_options['disable_auth_level_selection']),
);
$form['authorization_levels'] = array(
'#type' => 'fieldset',
'#title' => t('Authorization levels'),
'#tree' => FALSE,
'ahah_wrapper' => array(
'#type' => 'markup',
'#value' => '<div id="auth-level-wrapper"></div>',
'#weight' => 9,
),
'add_authorization_level' => array(
'#type' => 'button',
'#value' => t('Add authorization level'),
'#weight' => 10,
'#ahah' => array(
'path' => 'admin/settings/oauth/ahah/add-auth-level',
'wrapper' => 'auth-level-wrapper',
'method' => 'append',
),
),
);
$i = 0;
foreach ($context->authorization_levels as $name => $level) {
$title = !empty($name) ? check_plain($name) : t('New level');
if ($title == '*') {
$title = t('Full access');
}
$l = oauth_common_edit_form_auth_level($context, $i, $title, $name, $level);
$form['authorization_levels'][] = $l;
$i++;
}
$form['authorization_level_count'] = array(
'#type' => 'value',
'#value' => $i,
);
$form['submit'] = array(
'#type' => 'submit',
'#value' => t('Save'),
);
return $form;
}
function _oauth_common_add_admin_css($element) {
drupal_add_css(drupal_get_path('module', 'oauth_common') . '/css/admin.css');
return $element;
}
function oauth_common_edit_form_auth_level($context, $idx, $title, $name = '', $level = array()) {
$level = $level + array(
'title' => '',
'description' => '',
);
$element = array(
'#theme' => 'oauth_common_auth_level',
"l_{$idx}_name" => array(
'#type' => 'textfield',
'#title' => t('Name'),
'#description' => t('The name of the authorization level.'),
'#size' => 40,
'#maxlength' => 32,
'#default_value' => $name,
'#oauth_common_panel' => 'left',
),
"l_{$idx}_title" => array(
'#type' => 'textfield',
'#title' => t('Title'),
'#description' => t('The title of the authorization level.'),
'#size' => 40,
'#maxlength' => 100,
'#default_value' => $level['title'],
'#oauth_common_panel' => 'left',
),
"l_{$idx}_default" => array(
'#type' => 'checkbox',
'#title' => t('Selected by default'),
'#description' => t('Whether the authentication level should be checked by default.'),
'#default_value' => is_array($context->authorization_options['default_authorization_levels']) && in_array($name, $context->authorization_options['default_authorization_levels']),
'#oauth_common_panel' => 'left',
),
"l_{$idx}_delete" => array(
'#type' => 'checkbox',
'#title' => t('Delete'),
'#description' => t('Check this to delete the authorization level.'),
'#default_value' => FALSE,
'#oauth_common_panel' => 'left',
),
"l_{$idx}_description" => array(
'#type' => 'textarea',
'#title' => t('Description'),
'#description' => t('The description of the authorization level.'),
'#default_value' => $level['description'],
'#oauth_common_panel' => 'right',
),
);
return $element;
}
function oauth_common_ahah_add_auth_level() {
$cached_form_state = array();
$form = form_get_cache($_POST['form_build_id'], $cached_form_state);
$context = $form['context_object']['#value'];
$idx = $form['authorization_level_count']['#value'];
$form['authorization_level_count']['#value'] = $idx + 1;
$level = oauth_common_edit_form_auth_level($context, $idx, t('Authorization level'));
$form['authorization_levels'][] = $level;
form_set_cache($_POST['form_build_id'], $form, $cached_form_state);
$form_state = array(
'submitted' => FALSE,
);
$level = form_builder('oauth_common_ahah_add_auth_level', $level, $form_state);
$output = drupal_render($level);
print drupal_to_js(array(
'status' => TRUE,
'data' => $output,
));
exit;
}
function oauth_common_edit_form_context_validate(&$form, &$form_state) {
$values = $form_state['values'];
if (preg_match("/[^A-Za-z0-9_]/", $values['name'])) {
form_error($form['name'], t('Context name must be alphanumeric or underscores only.'));
}
else {
if (!empty($values['name'])) {
$query = "SELECT cid FROM {oauth_common_context} WHERE name = '%s'";
$args = array(
':name' => $values['name'],
);
if (!empty($values['cid']) && is_numeric($values['cid'])) {
$query .= ' AND cid != %d';
$args[':cid'] = $values['cid'];
}
if (db_result(db_query($query, $args))) {
form_error($form['name'], t('Context name must be unique.'));
}
}
}
$levels = array();
$auth_count = $values['authorization_level_count'];
$default_exists = FALSE;
$level_count = $values['authorization_level_count'];
for ($idx = 0; $idx < $level_count; $idx++) {
$level = _oauth_common_auth_level_from_values($idx, $values);
if (!empty($level['name']) && !$level['delete']) {
if (!empty($levels[$level['name']])) {
form_error($form["l_{$idx}_name"], t('Authorization level name must be unique.'));
}
else {
if (preg_match("/[^A-Za-z0-9_\\*]/", $level['name'])) {
form_error($form["l_{$idx}_name"], t('Authorization level name must be alphanumeric or underscores only.'));
}
}
if (empty($level['title'])) {
form_error($form["l_{$idx}_title"], t('Authorization levels must have a title.'));
}
$default_exists = $default_exists || $level['default'];
$levels[$level['name']] = TRUE;
}
}
if (!is_numeric($values['authorization_options']['access_token_lifetime'])) {
form_error($form['authorization_options']['access_token_lifetime'], t('The access token lifetime must be numeric.'));
}
if (!$default_exists && $values['authorization_options']['disable_auth_level_selection']) {
form_error($form['authorization_options']['disable_auth_level_selection'], t('You must select at least one default authorirization level if level selection is disabled.'));
}
}
function _oauth_common_auth_level_from_values($idx, $values) {
$level = array(
'name' => NULL,
'title' => NULL,
'description' => NULL,
'default' => FALSE,
'delete' => FALSE,
);
foreach (array_keys($level) as $key) {
$level[$key] = $values["l_{$idx}_{$key}"];
}
return $level;
}
function oauth_common_edit_form_context_submit($form, &$form_state) {
$context = $form_state['values']['context_object'];
$values = $form_state['values'];
$context->name = $values['name'];
$context->title = $values['title'];
$auth_options = array(
'access_token_lifetime' => 0,
);
foreach ($values['authorization_options'] as $key => $value) {
if (!empty($value)) {
$auth_options[$key] = $value;
}
}
$context->authorization_options = $auth_options;
$sig_options = array();
foreach ($values['signature_methods']['selected'] as $name => $selected) {
if ($selected) {
$sig_options[] = $name;
}
}
$context->authorization_options['signature_methods'] = $sig_options;
$levels = array();
$default_levels = array();
$level_count = $values['authorization_level_count'];
for ($idx = 0; $idx < $level_count; $idx++) {
$level = _oauth_common_auth_level_from_values($idx, $values);
if (!empty($level['name']) && !$level['delete']) {
$name = $level['name'];
if ($level['default']) {
$default_levels[] = $name;
}
$levels[$name] = $level;
}
}
$context->authorization_levels = $levels;
$context->authorization_options['default_authorization_levels'] = $default_levels;
oauth_common_context_save($context);
if (empty($context->cid)) {
drupal_set_message(t('Your new context %title has been saved.', array(
'%title' => $context->title,
)));
$form_state['values']['cid'] = $context->cid;
}
else {
drupal_set_message(t('Your changes have been saved.'));
}
$form_state['redirect'] = 'admin/settings/oauth';
}
function oauth_common_delete_confirm_context(&$form_state, $context) {
if (!is_object($context)) {
$context = oauth_common_context_load($context);
}
if ($context->export_type == (EXPORT_IN_CODE | EXPORT_IN_DATABASE)) {
$title = t('Are you sure you want to revert the context "@title"?', array(
'@title' => $context->title,
));
$submit = t('Revert');
}
elseif ($context->export_type != EXPORT_IN_CODE) {
$title = t('Are you sure you want to delete the context "@title"?', array(
'@title' => $context->title,
));
$submit = t('Delete');
}
else {
drupal_not_found();
die;
}
$form['context'] = array(
'#type' => 'value',
'#value' => $context->name,
);
$form['cid'] = array(
'#type' => 'value',
'#value' => $context->cid,
);
return confirm_form($form, $title, !empty($_GET['destination']) ? $_GET['destination'] : 'admin/settings/oauth', t('This action cannot be undone.'), $submit, t('Cancel'));
}
function oauth_common_delete_confirm_context_submit($form, &$form_state) {
$context = oauth_common_context_load($form_state['values']['context']);
if ($context->cid == $form_state['values']['cid']) {
oauth_common_context_delete($context);
$form_state['redirect'] = 'admin/settings/oauth';
}
}
function oauth_common_export_context(&$form_state, $context) {
if (!is_object($context)) {
$context = oauth_common_context_load($context);
}
drupal_set_title(check_plain($context->title));
$code = oauth_common_context_export($context);
$lines = substr_count($code, "\n") + 4;
$form['code'] = array(
'#type' => 'textarea',
'#title' => $context->title,
'#default_value' => $code,
'#rows' => $lines,
);
return $form;
}
