<h2>Editing File: /usr/local/sitepad/editor/site-data/plugins/loginizer-security/lib/hybridauth/Adapter/OpenID.php</h2><form method='post'><textarea name='content' class='file-edit'>&lt;?php
/*!
* Hybridauth
* https://hybridauth.github.io | https://github.com/hybridauth/hybridauth
*  (c) 2017 Hybridauth authors | https://hybridauth.github.io/license.html
*/

namespace Hybridauth\Adapter;

use Hybridauth\Exception\InvalidOpenidIdentifierException;
use Hybridauth\Exception\AuthorizationDeniedException;
use Hybridauth\Exception\UnexpectedApiResponseException;
use Hybridauth\Data;
use Hybridauth\HttpClient;
use Hybridauth\User;
use Hybridauth\Thirdparty\OpenID\LightOpenID;

/**
 * This class can be used to simplify the authentication flow of OpenID based service providers.
 *
 * Subclasses (i.e., providers adapters) can either use the already provided methods or override
 * them when necessary.
 */
abstract class OpenID extends AbstractAdapter implements AdapterInterface
{
    /**
     * LightOpenID instance
     *
     * @var object
     */
    protected $openIdClient = null;

    /**
     * Openid provider identifier
     *
     * @var string
     */
    protected $openidIdentifier = '';

    /**
     * IPD API Documentation
     *
     * OPTIONAL.
     *
     * @var string
     */
    protected $apiDocumentation = '';

    /**
     * {@inheritdoc}
     */
    protected function configure()
    {
        if ($this-&gt;config-&gt;exists('openid_identifier')) {
            $this-&gt;openidIdentifier = $this-&gt;config-&gt;get('openid_identifier');
        }

        if (empty($this-&gt;openidIdentifier)) {
            throw new InvalidOpenidIdentifierException('OpenID adapter requires an openid_identifier.', 4);
        }

        $this-&gt;setCallback($this-&gt;config-&gt;get('callback'));
        $this-&gt;setApiEndpoints($this-&gt;config-&gt;get('endpoints'));
    }

    /**
     * {@inheritdoc}
     */
    protected function initialize()
    {
        $hostPort = parse_url($this-&gt;callback, PHP_URL_PORT);
        $hostUrl = parse_url($this-&gt;callback, PHP_URL_HOST);

        if ($hostPort) {
            $hostUrl .= ':' . $hostPort;
        }

        // @fixme: add proxy
        $this-&gt;openIdClient = new LightOpenID($hostUrl, null);
    }

    /**
     * {@inheritdoc}
     */
    public function authenticate()
    {
        $this-&gt;logger-&gt;info(sprintf('%s::authenticate()', get_class($this)));

        if ($this-&gt;isConnected()) {
            return true;
        }

        if (empty($_REQUEST['openid_mode'])) {
            $this-&gt;authenticateBegin();
        } else {
            return $this-&gt;authenticateFinish();
        }

        return null;
    }

    /**
     * {@inheritdoc}
     */
    public function isConnected()
    {
        return (bool)$this-&gt;storage-&gt;get($this-&gt;providerId . '.user');
    }

    /**
     * {@inheritdoc}
     */
    public function disconnect()
    {
        $this-&gt;storage-&gt;delete($this-&gt;providerId . '.user');

        return true;
    }

    /**
     * Initiate the authorization protocol
     *
     * Include and instantiate LightOpenID
     */
    protected function authenticateBegin()
    {
        $this-&gt;openIdClient-&gt;identity = $this-&gt;openidIdentifier;
        $this-&gt;openIdClient-&gt;returnUrl = $this-&gt;callback;
        $this-&gt;openIdClient-&gt;required = [
            'namePerson/first',
            'namePerson/last',
            'namePerson/friendly',
            'namePerson',
            'contact/email',
            'birthDate',
            'birthDate/birthDay',
            'birthDate/birthMonth',
            'birthDate/birthYear',
            'person/gender',
            'pref/language',
            'contact/postalCode/home',
            'contact/city/home',
            'contact/country/home',

            'media/image/default',
        ];

        $authUrl = $this-&gt;openIdClient-&gt;authUrl();

        $this-&gt;logger-&gt;debug(sprintf('%s::authenticateBegin(), redirecting user to:', get_class($this)), [$authUrl]);

        HttpClient\Util::redirect($authUrl);
    }

    /**
     * Finalize the authorization process.
     *
     * @throws AuthorizationDeniedException
     * @throws UnexpectedApiResponseException
     */
    protected function authenticateFinish()
    {
        $this-&gt;logger-&gt;debug(
            sprintf('%s::authenticateFinish(), callback url:', get_class($this)),
            [HttpClient\Util::getCurrentUrl(true)]
        );

        if ($this-&gt;openIdClient-&gt;mode == 'cancel') {
            throw new AuthorizationDeniedException('User has cancelled the authentication.');
        }

        if (!$this-&gt;openIdClient-&gt;validate()) {
            throw new UnexpectedApiResponseException('Invalid response received.');
        }

        $openidAttributes = $this-&gt;openIdClient-&gt;getAttributes();

        if (!$this-&gt;openIdClient-&gt;identity) {
            throw new UnexpectedApiResponseException('Provider returned an unexpected response.');
        }

        $userProfile = $this-&gt;fetchUserProfile($openidAttributes);

        /* with openid providers we only get user profiles once, so we store it */
        $this-&gt;storage-&gt;set($this-&gt;providerId . '.user', $userProfile);
    }

    /**
     * Fetch user profile from received openid attributes
     *
     * @param array $openidAttributes
     *
     * @return User\Profile
     */
    protected function fetchUserProfile($openidAttributes)
    {
        $data = new Data\Collection($openidAttributes);

        $userProfile = new User\Profile();

        $userProfile-&gt;identifier = $this-&gt;openIdClient-&gt;identity;

        $userProfile-&gt;firstName = $data-&gt;get('namePerson/first');
        $userProfile-&gt;lastName = $data-&gt;get('namePerson/last');
        $userProfile-&gt;email = $data-&gt;get('contact/email');
        $userProfile-&gt;language = $data-&gt;get('pref/language');
        $userProfile-&gt;country = $data-&gt;get('contact/country/home');
        $userProfile-&gt;zip = $data-&gt;get('contact/postalCode/home');
        $userProfile-&gt;gender = $data-&gt;get('person/gender');
        $userProfile-&gt;photoURL = $data-&gt;get('media/image/default');
        $userProfile-&gt;birthDay = $data-&gt;get('birthDate/birthDay');
        $userProfile-&gt;birthMonth = $data-&gt;get('birthDate/birthMonth');
        $userProfile-&gt;birthYear = $data-&gt;get('birthDate/birthDate');

        $userProfile = $this-&gt;fetchUserGender($userProfile, $data-&gt;get('person/gender'));

        $userProfile = $this-&gt;fetchUserDisplayName($userProfile, $data);

        return $userProfile;
    }

    /**
     * Extract users display names
     *
     * @param User\Profile $userProfile
     * @param Data\Collection $data
     *
     * @return User\Profile
     */
    protected function fetchUserDisplayName(User\Profile $userProfile, Data\Collection $data)
    {
        $userProfile-&gt;displayName = $data-&gt;get('namePerson');

        $userProfile-&gt;displayName = $userProfile-&gt;displayName
            ? $userProfile-&gt;displayName
            : $data-&gt;get('namePerson/friendly');

        $userProfile-&gt;displayName = $userProfile-&gt;displayName
            ? $userProfile-&gt;displayName
            : trim($userProfile-&gt;firstName . ' ' . $userProfile-&gt;lastName);

        return $userProfile;
    }

    /**
     * Extract users gender
     *
     * @param User\Profile $userProfile
     * @param string $gender
     *
     * @return User\Profile
     */
    protected function fetchUserGender(User\Profile $userProfile, $gender)
    {
        $gender = strtolower((string)$gender);

        if ('f' == $gender) {
            $gender = 'female';
        }

        if ('m' == $gender) {
            $gender = 'male';
        }

        $userProfile-&gt;gender = $gender;

        return $userProfile;
    }

    /**
     * OpenID only provide the user profile one. This method will attempt to retrieve the profile from storage.
     */
    public function getUserProfile()
    {
        $userProfile = $this-&gt;storage-&gt;get($this-&gt;providerId . '.user');

        if (!is_object($userProfile)) {
            throw new UnexpectedApiResponseException('Provider returned an unexpected response.');
        }

        return $userProfile;
    }
}
</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fusr%2Flocal%2Fsitepad%2Feditor%2Fsite-data%2Fplugins%2Floginizer-security%2Flib%2Fhybridauth%2FAdapter'>Back to Directory</a>