$text";
}
function hashPassword($password)
{
return bin2hex(Auth_OpenID_SHA1($password));
}
/**
* Set up the session
*/
function init()
{
session_name('openid_server');
session_start();
}
/**
* Check the user's login information
*/
function checkLogin($openid_url, $password)
{
global $openid_users;
$hash = hashPassword($password);
return isset($openid_users[$openid_url])
&& $hash == $openid_users[$openid_url];
}
/**
* Get the openid_url out of the cookie
*
* @return mixed $openid_url The URL that was stored in the cookie or
* false if there is none present or if the cookie is bad.
*/
function getLoggedInUser()
{
return isset($_SESSION['openid_url'])
? $_SESSION['openid_url']
: false;
}
/**
* Set the openid_url in the cookie
*
* @param mixed $identity_url The URL to set. If set to null, the
* value will be unset.
*/
function setLoggedInUser($identity_url=null)
{
if (!isset($identity_url)) {
unset($_SESSION['openid_url']);
} else {
$_SESSION['openid_url'] = $identity_url;
}
}
function pageHeader($user, $title, $h1=null, $login=false)
{
if (!$h1) {
$h1 = $title;
}
if ($user) {
$head = sprintf(logged_in_pat, linkURL($user));
} else {
if (!$login) {
$head = logged_out_pat;
}
}
return sprintf(html_start, $title, $h1, $head);
}
function pageFoot()
{
return html_end;
}
function succeed($info)
{
$server = getServer();
$resp = $server->getAuthResponse(&$info, true);
handleResponse($resp, 'badAuth');
}
function doAuth($info)
{
$req_url = $info->getIdentityURL();
$user = getLoggedInUser();
if ($req_url == $user) {
if (isTrusted($info->getTrustRoot())) {
// This is a trusted site, so continue
succeed($info);
} else {
$_SESSION['request'] = serialize($info);
trustPage($info);
}
} else {
$_SESSION['request'] = serialize($info);
if ($user) {
$msg = sprintf(bad_user_pat, linkURL($user), linkURL($req_url));
} else {
$msg = sprintf(no_user_pat, linkURL($req_url));
}
loginPage(array($msg), $req_url);
}
}
function isTrusted($trust_root)
{
global $trusted_sites;
return in_array($trust_root, $trusted_sites);
}
function doError($error)
{
showError($error, '500', 'Internal error');
exit(1);
}
function badAuth($info)
{
doError('Unexpectedly got DO_AUTH inside of DO_AUTH');
}
function handleResponse($response, $do_auth)
{
list ($status, $info) = $response;
switch($status) {
case Auth_OpenID_REMOTE_ERROR:
case Auth_OpenID_REMOTE_OK:
returnKV($info);
break;
case Auth_OpenID_REDIRECT:
redirect($info);
break;
case Auth_OpenID_DO_AUTH:
$do_auth($info);
break;
case Auth_OpenID_DO_ABOUT:
aboutPage();
break;
case Auth_OpenID_LOCAL_ERROR:
showError($info, '400', 'Bad request');
break;
default:
$repr = var_export($status, true);
doError("Internal error: unknown status $repr");
}
exit(0);
}
function loginForm($identity_url='')
{
return sprintf(login_form_pat, $identity_url);
}
function showErrors($errors)
{
if ($errors) {
foreach ($errors as $error) {
print '
Enter your identity URL and password into this form to log in to
this server. This server must be configured to accept your identity URL.
');
define('html_start',
'
%s
PHP OpenID Server
%s
%s
');
define('html_end',
'
');
define('bad_user_pat',
'You are logged in as %s and this request is for %s.');
define('no_user_pat',
'You are not logged in and this request is for %s.');
define('logged_in_pat',
'You are logged in as %s. Log out');
define('logged_out_pat',
'Not logged in. Log in');
?>