Initial commit

OAuth2Client.php

@@ -0,0 +1,127 @@
+<?php
+
+class OAuth2 {
+
+	private $client_id;
+	private $client_secret;
+	private $redirect_uri;
+	private $scope;
+	private $access_token;
+	private $url;
+	private $URL_AUTH;
+	private $URL_TOKEN;
+	private $URL_USER;
+	private $URL_GROUP;
+	private $auth_type;
+	private $session;
+	private $grant_type;
+	private $response_type;
+
+	public function __construct(
+		$client_id, 
+		$client_secret, 
+		$redirect_uri, 
+		$auth, 
+		$token, 
+		$user, 
+		$authorization_type = 'Bearer', 
+		$session = false, 
+		$verify = false, 
+		$grant_type = 'authorization_code',
+		$response_type = 'code'){
+
+		$this->client_id 	   = $client_id;
+		$this->client_secret   = $client_secret;
+		$this->redirect_uri    = $redirect_uri;
+		$this->URL_AUTH 	   = $auth . "?";
+		$this->URL_TOKEN 	   = $token . "?";
+		$this->URL_USER 	   = $user . "?";
+		$this->auth_type 	   = $authorization_type;
+		$this->session 		   = $session;
+		$this->verify_ssl_peer = $verify ? 1 : 0;
+		$this->verify_ssl_host = $verify ? 2 : 0;
+		$this->grant_type 	   = $grant_type;
+		$this->response_type   = $response_type;
+	}
+
+	public function get_access_token($state = false) {
+		if($this->session && $state) {
+			if($_SESSION['state'] != $state) {
+				die('States does not match');
+			}
+		}
+
+		$access_token = $this->get_oauth_token();
+		return $access_token;
+	}
+
+	private function get_oauth_token() {
+		$code   = htmlspecialchars($_GET['code']);
+		$params = array(
+			'grant_type' 	=> $this->grant_type,
+			'client_id'  	=> $this->client_id,
+			'client_secret' => $this->client_secret,
+			'code' 			=> $code,
+			'redirect_uri'  => $this->redirect_uri,
+		);
+
+		$url_params = http_build_query($params);
+		$url  		= $this->URL_TOKEN . $url_params;
+
+		$result 	  = curl_exec($this->create_curl($url, false, $params));
+		$result_obj   = json_decode($result, true);
+		$access_token = $result_obj['access_token'];
+		$expires_in   = $result_obj['expires_in'];
+		$expires_at   = time() + $expires_in;
+		
+		return $access_token;
+	}
+
+	public function get_identity($access_token) {
+		$params = array(
+			'access_token' => $access_token,
+		);
+		$url_params = http_build_query($params);
+		$url 		= $this->URL_USER . $url_params;
+		$result 	= curl_exec($this->create_curl($url, array('Authorization: ' . $this->auth_type . ' ' . $access_token), false));
+		$result_obj = json_decode($result, true);
+
+		return $result_obj;
+	}
+
+	public function redirect($state = false) {
+		if(!$state) $state = uniqid('', true);
+		$params = array(
+			'client_id' 	=> $this->client_id,
+			'response_type' => $this->response_type,
+			'redirect_uri'  => $this->redirect_uri,
+			'state' 		=> $state,
+		);
+
+		if($this->session) $_SESSION['state'] = $state;
+
+		$url = $this->URL_AUTH . http_build_query($params);
+		
+		header("Location: $url");
+		exit;
+	}
+
+
+	private function create_curl($url, $header, $extended) {
+		$curl = curl_init();
+		curl_setopt($curl, CURLOPT_URL, $url);
+		curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
+		if ($header){
+			curl_setopt($curl, CURLOPT_HTTPHEADER, $header);
+		}
+		if ($extended) {
+			curl_setopt($curl, CURLOPT_POST, 1);
+			curl_setopt($curl, CURLOPT_POSTFIELDS, $extended);
+			curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, $this->verify_ssl_peer);
+			curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, $this->verify_ssl_host);
+		}
+		return $curl;
+	}
+}
+
+?>

README.md

@@ -0,0 +1,46 @@
+# General OAuth2-Client
+
+To use this general OAuth2 client-class, include it with
+``` require_once('OAuth2Client.php'); 
+	$oauth2 = new OAuth2( $client_id, $client_secret, $redirect_uri, $auth, $token, $user, $authorization_type, $session, $verify, $grant_type, $response_type);
+```
+
+$client_id is client id of the OAuth2 application
+$client_secret is client secret of the OAuth2 application
+$redirect_uri is the specified redirect-uri for the OAuth2 application
+$auth is the full url for authorization
+$token is the full token url
+$user is the full identity url (example: https://auth.dataporten.no/userinfo)
+
+
+Optional - 
+
+$authorization_type defaults to Bearer
+$session specifies whether the state is to be saved in _SESSION storage, defaults to false
+$verify is whether to verify SSL of host and peer, defaults to false
+$grant_type defaults to 'authorization_code'
+$response_type defaults to 'code'
+
+
+To start the redirect phase
+
+``` $oauth2->redirect($state); ```
+
+($state defaults to false)
+
+
+To get access token
+
+``` $oauth2->get_access_token(); ```
+
+returns the access_token.
+
+(Optional value is $state, to check up against _SESSION variables)
+
+
+To get identity
+
+``` $oauth->get_identity($access_token); ```
+
+returns the identity-object as returned from the OAuth2-provider.
+