214 lines
7.8 KiB
PHP
214 lines
7.8 KiB
PHP
|
<?php
|
||
|
|
||
|
namespace OAuth2;
|
||
|
|
||
|
/**
|
||
|
* OAuth2\Request
|
||
|
* This class is taken from the Symfony2 Framework and is part of the Symfony package.
|
||
|
* See Symfony\Component\HttpFoundation\Request (https://github.com/symfony/symfony)
|
||
|
*/
|
||
|
class Request implements RequestInterface
|
||
|
{
|
||
|
public $attributes;
|
||
|
public $request;
|
||
|
public $query;
|
||
|
public $server;
|
||
|
public $files;
|
||
|
public $cookies;
|
||
|
public $headers;
|
||
|
public $content;
|
||
|
|
||
|
/**
|
||
|
* Constructor.
|
||
|
*
|
||
|
* @param array $query The GET parameters
|
||
|
* @param array $request The POST parameters
|
||
|
* @param array $attributes The request attributes (parameters parsed from the PATH_INFO, ...)
|
||
|
* @param array $cookies The COOKIE parameters
|
||
|
* @param array $files The FILES parameters
|
||
|
* @param array $server The SERVER parameters
|
||
|
* @param string $content The raw body data
|
||
|
*
|
||
|
* @api
|
||
|
*/
|
||
|
public function __construct(array $query = array(), array $request = array(), array $attributes = array(), array $cookies = array(), array $files = array(), array $server = array(), $content = null, array $headers = null)
|
||
|
{
|
||
|
$this->initialize($query, $request, $attributes, $cookies, $files, $server, $content, $headers);
|
||
|
}
|
||
|
|
||
|
/**
|
||
|
* Sets the parameters for this request.
|
||
|
*
|
||
|
* This method also re-initializes all properties.
|
||
|
*
|
||
|
* @param array $query The GET parameters
|
||
|
* @param array $request The POST parameters
|
||
|
* @param array $attributes The request attributes (parameters parsed from the PATH_INFO, ...)
|
||
|
* @param array $cookies The COOKIE parameters
|
||
|
* @param array $files The FILES parameters
|
||
|
* @param array $server The SERVER parameters
|
||
|
* @param string $content The raw body data
|
||
|
*
|
||
|
* @api
|
||
|
*/
|
||
|
public function initialize(array $query = array(), array $request = array(), array $attributes = array(), array $cookies = array(), array $files = array(), array $server = array(), $content = null, array $headers = null)
|
||
|
{
|
||
|
$this->request = $request;
|
||
|
$this->query = $query;
|
||
|
$this->attributes = $attributes;
|
||
|
$this->cookies = $cookies;
|
||
|
$this->files = $files;
|
||
|
$this->server = $server;
|
||
|
$this->content = $content;
|
||
|
$this->headers = is_null($headers) ? $this->getHeadersFromServer($this->server) : $headers;
|
||
|
}
|
||
|
|
||
|
public function query($name, $default = null)
|
||
|
{
|
||
|
return isset($this->query[$name]) ? $this->query[$name] : $default;
|
||
|
}
|
||
|
|
||
|
public function request($name, $default = null)
|
||
|
{
|
||
|
return isset($this->request[$name]) ? $this->request[$name] : $default;
|
||
|
}
|
||
|
|
||
|
public function server($name, $default = null)
|
||
|
{
|
||
|
return isset($this->server[$name]) ? $this->server[$name] : $default;
|
||
|
}
|
||
|
|
||
|
public function headers($name, $default = null)
|
||
|
{
|
||
|
$headers = array_change_key_case($this->headers);
|
||
|
$name = strtolower($name);
|
||
|
|
||
|
return isset($headers[$name]) ? $headers[$name] : $default;
|
||
|
}
|
||
|
|
||
|
public function getAllQueryParameters()
|
||
|
{
|
||
|
return $this->query;
|
||
|
}
|
||
|
|
||
|
/**
|
||
|
* Returns the request body content.
|
||
|
*
|
||
|
* @param Boolean $asResource If true, a resource will be returned
|
||
|
*
|
||
|
* @return string|resource The request body content or a resource to read the body stream.
|
||
|
*/
|
||
|
public function getContent($asResource = false)
|
||
|
{
|
||
|
if (false === $this->content || (true === $asResource && null !== $this->content)) {
|
||
|
throw new \LogicException('getContent() can only be called once when using the resource return type.');
|
||
|
}
|
||
|
|
||
|
if (true === $asResource) {
|
||
|
$this->content = false;
|
||
|
|
||
|
return fopen('php://input', 'rb');
|
||
|
}
|
||
|
|
||
|
if (null === $this->content) {
|
||
|
$this->content = file_get_contents('php://input');
|
||
|
}
|
||
|
|
||
|
return $this->content;
|
||
|
}
|
||
|
|
||
|
private function getHeadersFromServer($server)
|
||
|
{
|
||
|
$headers = array();
|
||
|
foreach ($server as $key => $value) {
|
||
|
if (0 === strpos($key, 'HTTP_')) {
|
||
|
$headers[substr($key, 5)] = $value;
|
||
|
}
|
||
|
// CONTENT_* are not prefixed with HTTP_
|
||
|
elseif (in_array($key, array('CONTENT_LENGTH', 'CONTENT_MD5', 'CONTENT_TYPE'))) {
|
||
|
$headers[$key] = $value;
|
||
|
}
|
||
|
}
|
||
|
|
||
|
if (isset($server['PHP_AUTH_USER'])) {
|
||
|
$headers['PHP_AUTH_USER'] = $server['PHP_AUTH_USER'];
|
||
|
$headers['PHP_AUTH_PW'] = isset($server['PHP_AUTH_PW']) ? $server['PHP_AUTH_PW'] : '';
|
||
|
} else {
|
||
|
/*
|
||
|
* php-cgi under Apache does not pass HTTP Basic user/pass to PHP by default
|
||
|
* For this workaround to work, add this line to your .htaccess file:
|
||
|
* RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
|
||
|
*
|
||
|
* A sample .htaccess file:
|
||
|
* RewriteEngine On
|
||
|
* RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
|
||
|
* RewriteCond %{REQUEST_FILENAME} !-f
|
||
|
* RewriteRule ^(.*)$ app.php [QSA,L]
|
||
|
*/
|
||
|
|
||
|
$authorizationHeader = null;
|
||
|
if (isset($server['HTTP_AUTHORIZATION'])) {
|
||
|
$authorizationHeader = $server['HTTP_AUTHORIZATION'];
|
||
|
} elseif (isset($server['REDIRECT_HTTP_AUTHORIZATION'])) {
|
||
|
$authorizationHeader = $server['REDIRECT_HTTP_AUTHORIZATION'];
|
||
|
} elseif (function_exists('apache_request_headers')) {
|
||
|
$requestHeaders = (array) apache_request_headers();
|
||
|
|
||
|
// Server-side fix for bug in old Android versions (a nice side-effect of this fix means we don't care about capitalization for Authorization)
|
||
|
$requestHeaders = array_combine(array_map('ucwords', array_keys($requestHeaders)), array_values($requestHeaders));
|
||
|
|
||
|
if (isset($requestHeaders['Authorization'])) {
|
||
|
$authorizationHeader = trim($requestHeaders['Authorization']);
|
||
|
}
|
||
|
}
|
||
|
|
||
|
if (null !== $authorizationHeader) {
|
||
|
$headers['AUTHORIZATION'] = $authorizationHeader;
|
||
|
// Decode AUTHORIZATION header into PHP_AUTH_USER and PHP_AUTH_PW when authorization header is basic
|
||
|
if (0 === stripos($authorizationHeader, 'basic')) {
|
||
|
$exploded = explode(':', base64_decode(substr($authorizationHeader, 6)));
|
||
|
if (count($exploded) == 2) {
|
||
|
list($headers['PHP_AUTH_USER'], $headers['PHP_AUTH_PW']) = $exploded;
|
||
|
}
|
||
|
}
|
||
|
}
|
||
|
}
|
||
|
|
||
|
// PHP_AUTH_USER/PHP_AUTH_PW
|
||
|
if (isset($headers['PHP_AUTH_USER'])) {
|
||
|
$headers['AUTHORIZATION'] = 'Basic '.base64_encode($headers['PHP_AUTH_USER'].':'.$headers['PHP_AUTH_PW']);
|
||
|
}
|
||
|
|
||
|
return $headers;
|
||
|
}
|
||
|
|
||
|
/**
|
||
|
* Creates a new request with values from PHP's super globals.
|
||
|
*
|
||
|
* @return Request A new request
|
||
|
*
|
||
|
* @api
|
||
|
*/
|
||
|
public static function createFromGlobals()
|
||
|
{
|
||
|
$class = get_called_class();
|
||
|
$request = new $class($_GET, $_POST, array(), $_COOKIE, $_FILES, $_SERVER);
|
||
|
|
||
|
$contentType = $request->server('CONTENT_TYPE', '');
|
||
|
$requestMethod = $request->server('REQUEST_METHOD', 'GET');
|
||
|
if (0 === strpos($contentType, 'application/x-www-form-urlencoded')
|
||
|
&& in_array(strtoupper($requestMethod), array('PUT', 'DELETE'))
|
||
|
) {
|
||
|
parse_str($request->getContent(), $data);
|
||
|
$request->request = $data;
|
||
|
} elseif (0 === strpos($contentType, 'application/json')
|
||
|
&& in_array(strtoupper($requestMethod), array('POST', 'PUT', 'DELETE'))
|
||
|
) {
|
||
|
$data = json_decode($request->getContent(), true);
|
||
|
$request->request = $data;
|
||
|
}
|
||
|
|
||
|
return $request;
|
||
|
}
|
||
|
}
|