| Server IP : 79.136.114.73 / Your IP : 18.217.111.22 Web Server : Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.29 OpenSSL/1.0.1f System : Linux b8009 3.13.0-170-generic #220-Ubuntu SMP Thu May 9 12:40:49 UTC 2019 x86_64 User : www-data ( 33) PHP Version : 5.5.9-1ubuntu4.29 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority, MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/icad.astacus.se/sharepoint/vendor/vgrem/php-spo/src/Runtime/Auth/ |
Upload File : |
<?php
namespace Office365\Runtime\Auth;
use Office365\Runtime\Http\RequestException;
use Office365\Runtime\Http\Requests;
/**
* Provider to acquire the access token from a Microsoft Azure Access Control Service (ACS)
*/
class ACSTokenProvider extends BaseTokenProvider
{
/**
* @var string
*/
private static $SharePointPrincipal = "00000003-0000-0ff1-ce00-000000000000";
/**
* @var string
*/
private $url;
/**
* ACSTokenProvider constructor.
* @param string $url
*/
public function __construct($url)
{
$this->url = $url;
}
/**
* Acquires the access token from a Microsoft ACS
* @param array $parameters
* @return mixed
* @throws RequestException
*/
public function acquireToken($parameters)
{
$realm = $this->getRealmFromTargetUrl();
$urlInfo = parse_url($this->url);
return $this->getAppOnlyAccessToken(
$parameters["clientId"],
$parameters["clientSecret"],
$urlInfo["host"],
$realm);
}
/**
* @return string
* @throws RequestException
*/
private function getRealmFromTargetUrl()
{
$headers = array();
$headers['Authorization'] = 'Bearer';
$response = Requests::head($this->url, $headers);
return $this->processRealmResponse($response->getContent());
}
/**
* @param string $payload
* @return string
*/
private function processRealmResponse($payload){
$headerKey = "WWW-Authenticate";
$result = array_filter(
explode("\r\n", $payload),
function ($line) use ($headerKey) {
return stripos($line,$headerKey) === 0;
}
);
if(count($result) > 0){
$authHeader = explode(",", reset($result));
$bearerHeader = explode(':', $authHeader[0]);
$realm = explode('=', $bearerHeader[1]);
return str_replace('"', '', $realm[1]);
}
return null;
}
/**
* Obtain access token from Azure ACS
* @param string $clientId
* @param string $clientSecret
* @param string $targetHost
* @param string $targetRealm
* @return mixed
* @throws RequestException
*/
private function getAppOnlyAccessToken($clientId, $clientSecret, $targetHost,$targetRealm)
{
$resource = $this->getFormattedPrincipal(self::$SharePointPrincipal,$targetHost,$targetRealm);
$principalId = $this->getFormattedPrincipal($clientId,null, $targetRealm);
$stsUrl = $this->getSecurityTokenServiceUrl($targetRealm);
$oauth2Request = $this->createAccessTokenRequestWithClientCredentials($principalId,$clientSecret,$resource);
$headers = array();
$headers[] = 'content-Type: application/x-www-form-urlencoded';
$response = Requests::post($stsUrl, $headers, $oauth2Request);
return json_decode($response->getContent(),true);
}
private function getFormattedPrincipal($principalName, $hostName, $realm)
{
if ($hostName) {
return "$principalName/$hostName@$realm";
}
return "$principalName@$realm";
}
private function getSecurityTokenServiceUrl($realm){
return "https://accounts.accesscontrol.windows.net/$realm/tokens/OAuth/2";
}
private function createAccessTokenRequestWithClientCredentials($clientId, $clientSecret, $scope)
{
$data = array(
'grant_type' => 'client_credentials',
'client_id' => $clientId,
'client_secret' => $clientSecret,
'scope' => $scope,
'resource' => $scope
);
return http_build_query($data);
}
}