<?php
/**
 * OpenID 
 * 
 * PHP Version 5.2.0+
 * 
 * @category  Auth
 * @package   OpenID
 * @author    Bill Shupp <hostmaster@shupp.org> 
 * @copyright 2009 Bill Shupp
 * @license   http://www.opensource.org/licenses/bsd-license.php FreeBSD
 * @link      http://github.com/shupp/openid
 */
namespace phorkie;
// A tool for testing Relying Party functionality
set_include_path(
    __DIR__ . '/../../src/'
    . PATH_SEPARATOR . get_include_path()
);

$pageRequiresLogin = false;
require_once 'www-header.php';
require_once 'openid/config.php';


if (isset($_REQUEST['logout'])) {
    unset($_SESSION);
    session_destroy();
    $redirect = 'http://' . $_SERVER['HTTP_HOST'];
    header('Location: ' . filter_var($redirect, FILTER_SANITIZE_URL));
    exit;
}

if (!count($_GET) && !count($_POST)) {
    render(
        'login',
        null
    );
    exit;
}

// Hackaround Non-Javascript Login Page
if (!count($_POST) && isset($_GET['start'])) {
    $_POST = $_GET;
}

if (isset($_POST['openid_url'])) {
    $openid_url = $_POST['openid_url'];
} else if (isset($_SESSION['openid_url'])) {
    $openid_url = $_SESSION['openid_url'];
} else {
    $openid_url = null;
}

try {
    $o = new \OpenID_RelyingParty($returnTo, $realm, $openid_url);
} catch (OpenID_Exception $e) {
    $contents  = "<div class='openid_results'>\n";
    $contents .= "<pre>" . $e->getMessage() . "</pre>\n";
    $contents .= "</div class='openid_results'>";
    include_once 'openid/wrapper.php';
    exit;
}

if (!empty($_POST['disable_associations']) || !empty($_SESSION['disable_associations'])) {
    $o->disableAssociations();
    $_SESSION['disable_associations'] = true;
}

$log = new \OpenID_Observer_Log;
\OpenID::attach($log);

if (isset($_POST['start'])) {

    $_SESSION['openid_url'] = $openid_url;
    try {
        $authRequest = $o->prepare();
    } catch (OpenID_Exception $e) {
        $contents  = "<div class='openid_results'>\n";
        $contents .= "<pre>" . $e->getMessage() . "</pre>\n";
        $contents .= "</div class='openid_results'>";
        include_once 'openid/wrapper.php';
        exit;
    }

    // SREG
    $sreg = new \OpenID_Extension_SREG11(\OpenID_Extension::REQUEST);
    $sreg->set('required', 'email,fullname');
    $authRequest->addExtension($sreg);

    // AX
    $ax = new \OpenID_Extension_AX(\OpenID_Extension::REQUEST);
    $ax->set('type.email', 'http://axschema.org/contact/email');
    $ax->set('type.firstname', 'http://axschema.org/namePerson/first');
    $ax->set('type.lastname', 'http://axschema.org/namePerson/last');
    $ax->set('mode', 'fetch_request');
    $ax->set('required', 'email,firstname,lastname');
    $authRequest->addExtension($ax);

    $url = $authRequest->getAuthorizeURL();
    
    header("Location: $url");
    exit;
    
}

if (isset($_SESSION['openid_url'])) {
    $usid = $_SESSION['openid_url'];
    unset($_SESSION['openid_url']);
} else {
    $usid = null;
}

unset($_SESSION['disable_associations']);

if (!count($_POST)) {
    list(, $queryString) = explode('?', $_SERVER['REQUEST_URI']);
} else {
    // I hate php sometimes
    $queryString = file_get_contents('php://input');
}

$message = new \OpenID_Message($queryString, \OpenID_Message::FORMAT_HTTP);
$id      = $message->get('openid.claimed_id');
$mode    = $message->get('openid.mode');

try {
    $result = $o->verify(new \Net_URL2($returnTo . '?' . $queryString), $message);

    if ($result->success()) {
        $status  = "<tr><td>Status:</td><td><font color='green'>SUCCESS!";
        $status .= " ({$result->getAssertionMethod()})</font></td></tr>";
    } else {
        $status  = "<tr><td>Status:</td><td><font color='red'>FAIL!";
        $status .= " ({$result->getAssertionMethod()})</font></td></tr>";
    }
} catch (OpenID_Exception $e) {
    $status  = "<tr><td>Status:</td><td><font color='red'>EXCEPTION!";
    $status .= " ({$e->getMessage()} : {$e->getCode()})</font></td></tr>";
  }


$openid = $message->getArrayFormat();

$email = isset($openid['openid.ext1.value.email'])
    ? $openid['openid.ext1.value.email']
    : null;
$email = isset($openid['openid.ext2.value.email']) && !isset($email)
    ? $openid['openid.ext2.value.email']
    : $email;
$email = isset($openid['openid.sreg.email']) && !isset($email)
    ? $openid['openid.sreg.email']
    : $email;
$email = isset($openid['openid.ax.value.email']) && !isset($email)
    ? $openid['openid.ax.value.email']
    : $email;
$_SESSION['email'] = isset($email)
    ? $email
    : $GLOBALS['phorkie']['auth']['anonymousEmail'];

$name = isset($openid['openid.ext1.value.firstname'])
    && isset($openid['openid.ext1.value.lastname'])
    ? $openid['openid.ext1.value.firstname'] . ' '
    . $openid['openid.ext1.value.lastname']
    : null;
$name = isset($openid['openid.sreg.fullname']) && !isset($name)
    ? $openid['openid.sreg.fullname']
    : $name;

$_SESSION['name'] = isset($name) ? $name : $_SERVER['REMOTE_ADDR'];
$_SESSION['identity'] = $openid['openid.identity'];

$redirect = 'http://' . $_SERVER['HTTP_HOST'] . $_SESSION['REQUEST_URI'];
header('Location: ' . filter_var($redirect, FILTER_SANITIZE_URL));
exit;
?>