[Summary view] [Print] [Text view]

   1  <?php
   2  
   3  // This file is part of Moodle - http://moodle.org/
   4  //
   5  // Moodle is free software: you can redistribute it and/or modify
   6  // it under the terms of the GNU General Public License as published by
   7  // the Free Software Foundation, either version 3 of the License, or
   8  // (at your option) any later version.
   9  //
  10  // Moodle is distributed in the hope that it will be useful,
  11  // but WITHOUT ANY WARRANTY; without even the implied warranty of
  12  // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  13  // GNU General Public License for more details.
  14  //
  15  // You should have received a copy of the GNU General Public License
  16  // along with Moodle.  If not, see <http://www.gnu.org/licenses/>.
  17  
  18  /**
  19   * An oauth2 redirection endpoint which can be used for an application:
  20   * http://tools.ietf.org/html/draft-ietf-oauth-v2-26#section-3.1.2
  21   *
  22   * This is used because some oauth servers will not allow a redirect urls
  23   * with get params (like repository callback) and that needs to be called
  24   * using the state param.
  25   *
  26   * @package    core
  27   * @copyright  2012 Dan Poltawski
  28   * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
  29   */
  30  
  31  require_once(__DIR__ . '/../config.php');
  32  
  33  // The authorization code generated by the authorization server.
  34  $code = required_param('code', PARAM_RAW);
  35  // The state parameter we've given (used in moodle as a redirect url).
  36  $state = required_param('state', PARAM_LOCALURL);
  37  
  38  $redirecturl = new moodle_url($state);
  39  $params = $redirecturl->params();
  40  
  41  if (isset($params['sesskey']) and confirm_sesskey($params['sesskey'])) {
  42      $redirecturl->param('oauth2code', $code);
  43      redirect($redirecturl);
  44  } else {
  45      print_error('invalidsesskey');
  46  }