1330 lines
45 KiB
PHP
1330 lines
45 KiB
PHP
<?php
|
|
|
|
use NSL\Notices;
|
|
use NSL\Persistent\Persistent;
|
|
|
|
require_once dirname(__FILE__) . '/provider-admin.php';
|
|
require_once dirname(__FILE__) . '/provider-dummy.php';
|
|
require_once dirname(__FILE__) . '/user.php';
|
|
|
|
abstract class NextendSocialProvider extends NextendSocialProviderDummy {
|
|
|
|
protected $dbID;
|
|
protected $optionKey;
|
|
|
|
protected $enabled = false;
|
|
|
|
/** @var NextendSocialAuth */
|
|
protected $client;
|
|
|
|
protected $authUserData = array();
|
|
|
|
protected $requiredFields = array();
|
|
|
|
protected $svg = '';
|
|
|
|
protected $sync_fields = array();
|
|
|
|
/**
|
|
* NextendSocialProvider constructor.
|
|
*
|
|
* @param $defaultSettings
|
|
*/
|
|
public function __construct($defaultSettings) {
|
|
|
|
if (empty($this->dbID)) {
|
|
$this->dbID = $this->id;
|
|
}
|
|
|
|
$this->optionKey = 'nsl_' . $this->id;
|
|
|
|
do_action('nsl_provider_init', $this);
|
|
|
|
$this->sync_fields = apply_filters('nsl_' . $this->getId() . '_sync_fields', $this->sync_fields);
|
|
|
|
$extraSettings = apply_filters('nsl_' . $this->getId() . '_extra_settings', array(
|
|
'ask_email' => 'when-empty',
|
|
'ask_user' => 'never',
|
|
'ask_password' => 'never',
|
|
'auto_link' => 'email',
|
|
'disabled_roles' => array(),
|
|
'register_roles' => array(
|
|
'default'
|
|
)
|
|
));
|
|
|
|
foreach ($this->getSyncFields() as $field_name => $fieldData) {
|
|
|
|
$extraSettings['sync_fields/fields/' . $field_name . '/enabled'] = 0;
|
|
$extraSettings['sync_fields/fields/' . $field_name . '/meta_key'] = $this->id . '_' . $field_name;
|
|
}
|
|
|
|
$this->settings = new NextendSocialLoginSettings($this->optionKey, array_merge(array(
|
|
'settings_saved' => '0',
|
|
'tested' => '0',
|
|
'custom_default_button' => '',
|
|
'custom_icon_button' => '',
|
|
'login_label' => '',
|
|
'register_label' => '',
|
|
'link_label' => '',
|
|
'unlink_label' => '',
|
|
'user_prefix' => '',
|
|
'user_fallback' => '',
|
|
'oauth_redirect_url' => '',
|
|
'terms' => '',
|
|
|
|
'sync_profile/register' => 1,
|
|
'sync_profile/login' => 1,
|
|
'sync_profile/link' => 1,
|
|
|
|
'sync_fields/link' => 0,
|
|
'sync_fields/login' => 0
|
|
), $extraSettings, $defaultSettings));
|
|
|
|
$this->admin = new NextendSocialProviderAdmin($this);
|
|
|
|
}
|
|
|
|
public function needPro() {
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* @return string
|
|
*/
|
|
public function getDbID() {
|
|
return $this->dbID;
|
|
}
|
|
|
|
public function getOptionKey() {
|
|
return $this->optionKey;
|
|
}
|
|
|
|
public function getRawDefaultButton() {
|
|
|
|
return '<div class="nsl-button nsl-button-default nsl-button-' . $this->id . '" style="background-color:' . $this->color . ';"><div class="nsl-button-svg-container">' . $this->svg . '</div><div class="nsl-button-label-container">{{label}}</div></div>';
|
|
}
|
|
|
|
public function getRawIconButton() {
|
|
return '<div class="nsl-button nsl-button-icon nsl-button-' . $this->id . '" style="background-color:' . $this->color . ';"><div class="nsl-button-svg-container">' . $this->svg . '</div></div>';
|
|
}
|
|
|
|
public function getDefaultButton($label) {
|
|
$button = $this->settings->get('custom_default_button');
|
|
if (!empty($button)) {
|
|
return str_replace('{{label}}', __($label, 'nextend-facebook-connect'), $button);
|
|
}
|
|
|
|
return str_replace('{{label}}', __($label, 'nextend-facebook-connect'), $this->getRawDefaultButton());
|
|
}
|
|
|
|
public function getIconButton() {
|
|
$button = $this->settings->get('custom_icon_button');
|
|
if (!empty($button)) {
|
|
return $button;
|
|
}
|
|
|
|
return $this->getRawIconButton();
|
|
}
|
|
|
|
public function getLoginUrl() {
|
|
$args = array('loginSocial' => $this->getId());
|
|
|
|
if (isset($_REQUEST['interim-login'])) {
|
|
$args['interim-login'] = 1;
|
|
}
|
|
|
|
return add_query_arg($args, NextendSocialLogin::getLoginUrl());
|
|
}
|
|
|
|
/**
|
|
* Returns the url where the Provider App should redirect during the OAuth/OpenID flow.
|
|
*
|
|
* @return string
|
|
*/
|
|
public abstract function getRedirectUriForAuthFlow();
|
|
|
|
|
|
/**
|
|
* Should return a single redirect URL that:
|
|
* - we us as default redirect uri suggestion in the Getting Started and Fixed redirect uri pages.
|
|
* - we store to detect the redirect url changes
|
|
*
|
|
* @return string
|
|
*/
|
|
public abstract function getBaseRedirectUriForAppCreation();
|
|
|
|
/**
|
|
* This function should return an array of URLs generated from getRedirectUri().
|
|
*
|
|
* We display the generated results in the Getting Started section and the Fixed redirect uri pages.
|
|
* Also we use these for the OAuth redirect uri change checking.
|
|
*
|
|
* @return array
|
|
*/
|
|
public function getAllRedirectUrisForAppCreation() {
|
|
/**
|
|
* Parameters:
|
|
* 1: Array with an URL that should be added to the App by default.
|
|
*
|
|
* 2: The provider instance
|
|
*/
|
|
return apply_filters('nsl_redirect_uri_override', array($this->getBaseRedirectUriForAppCreation()), $this);
|
|
}
|
|
|
|
/**
|
|
* Enable the selected provider.
|
|
*
|
|
* @return bool
|
|
*/
|
|
public function enable() {
|
|
$this->enabled = true;
|
|
|
|
do_action('nsl_' . $this->getId() . '_enabled');
|
|
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* Check if provider is enabled.
|
|
*
|
|
* @return bool
|
|
*/
|
|
public function isEnabled() {
|
|
return $this->enabled;
|
|
}
|
|
|
|
/**
|
|
* Check if provider is verified.
|
|
*
|
|
* @return bool
|
|
*/
|
|
public function isTested() {
|
|
return !!$this->settings->get('tested');
|
|
}
|
|
|
|
|
|
public abstract function checkAuthRedirectUrl();
|
|
|
|
public function updateAuthRedirectUrl() {
|
|
$this->settings->update(array(
|
|
'oauth_redirect_url' => $this->getBaseRedirectUriForAppCreation()
|
|
));
|
|
}
|
|
|
|
/**
|
|
* @return array
|
|
*/
|
|
public function getRequiredFields() {
|
|
return $this->requiredFields;
|
|
}
|
|
|
|
/**
|
|
* Get the current state of a Provider.
|
|
*
|
|
* @return string
|
|
*/
|
|
public function getState() {
|
|
foreach ($this->requiredFields as $name => $label) {
|
|
$value = $this->settings->get($name);
|
|
if (empty($value)) {
|
|
return 'not-configured';
|
|
}
|
|
}
|
|
if (!$this->isTested()) {
|
|
return 'not-tested';
|
|
}
|
|
|
|
if (!$this->isEnabled()) {
|
|
return 'disabled';
|
|
}
|
|
|
|
return 'enabled';
|
|
}
|
|
|
|
/**
|
|
* Authenticate and connect with the provider.
|
|
*/
|
|
public function connect() {
|
|
try {
|
|
$this->doAuthenticate();
|
|
} catch (NSLContinuePageRenderException $e) {
|
|
// This is not an error. We allow the page to continue the normal display flow and later we inject our things.
|
|
// Used by Theme my login function where we override the shortcode and we display our email request.
|
|
} catch (Exception $e) {
|
|
$this->onError($e);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* @return NextendSocialAuth
|
|
*/
|
|
protected abstract function getClient();
|
|
|
|
public function getTestUrl() {
|
|
return $this->getClient()
|
|
->getTestUrl();
|
|
}
|
|
|
|
/**
|
|
* @throws NSLContinuePageRenderException
|
|
*/
|
|
protected function doAuthenticate() {
|
|
|
|
if (!headers_sent()) {
|
|
//All In One WP Security sets a LOCATION header, so we need to remove it to do a successful test.
|
|
if (function_exists('header_remove')) {
|
|
header_remove("LOCATION");
|
|
} else {
|
|
header('LOCATION:', true); //Under PHP 5.3
|
|
}
|
|
}
|
|
|
|
//If it is a real login action, add the actions for the connection.
|
|
if (!$this->isTest()) {
|
|
add_action($this->id . '_login_action_before', array(
|
|
$this,
|
|
'liveConnectBefore'
|
|
));
|
|
add_action($this->id . '_login_action_redirect', array(
|
|
$this,
|
|
'liveConnectRedirect'
|
|
));
|
|
add_action($this->id . '_login_action_get_user_profile', array(
|
|
$this,
|
|
'liveConnectGetUserProfile'
|
|
));
|
|
|
|
$interim_login = isset($_REQUEST['interim-login']);
|
|
if ($interim_login) {
|
|
Persistent::set($this->id . '_interim_login', 1);
|
|
}
|
|
/**
|
|
* Store the settings for the provider login.
|
|
*/
|
|
$display = isset($_REQUEST['display']);
|
|
if ($display && $_REQUEST['display'] == 'popup') {
|
|
Persistent::set($this->id . '_display', 'popup');
|
|
}
|
|
|
|
} else { //This is just to verify the settings.
|
|
add_action($this->id . '_login_action_get_user_profile', array(
|
|
$this,
|
|
'testConnectGetUserProfile'
|
|
));
|
|
}
|
|
|
|
// Redirect if the login is blocked by another Plugin like Cerber.
|
|
if (function_exists('cerber_is_allowed')) {
|
|
$allowed = cerber_is_allowed();
|
|
if (!$allowed) {
|
|
global $wp_cerber;
|
|
$error = $wp_cerber->getErrorMsg();
|
|
Notices::addError($error);
|
|
|
|
$loginDisabledRedirectURL = apply_filters('nsl_disabled_login_redirect_url', NextendSocialLogin::getLoginUrl());
|
|
$this->redirectWithAuthenticationError($loginDisabledRedirectURL);
|
|
}
|
|
}
|
|
|
|
do_action($this->id . '_login_action_before', $this);
|
|
|
|
$this->doAuthProtocolSpecificFlow();
|
|
|
|
}
|
|
|
|
protected function handlePopupRedirectAfterAuthentication() {
|
|
/**
|
|
* if the login display was in popup window,
|
|
* in the source window the user is redirected to the login url.
|
|
* and the popup window must be closed
|
|
*/
|
|
if (Persistent::get($this->id . '_display') == 'popup') {
|
|
Persistent::delete($this->id . '_display');
|
|
?>
|
|
<!doctype html>
|
|
<html lang=en>
|
|
<head>
|
|
<meta charset=utf-8>
|
|
<title><?php _e('Authentication successful', 'nextend-facebook-connect'); ?></title>
|
|
<script type="text/javascript">
|
|
try {
|
|
if (window.opener !== null && window.opener !== window) {
|
|
var sameOrigin = true;
|
|
try {
|
|
var currentOrigin = window.location.protocol + '//' + window.location.hostname;
|
|
if (window.opener.location.href.substring(0, currentOrigin.length) !== currentOrigin) {
|
|
sameOrigin = false;
|
|
}
|
|
|
|
} catch (e) {
|
|
/**
|
|
* Blocked cross origin
|
|
*/
|
|
sameOrigin = false;
|
|
}
|
|
if (sameOrigin) {
|
|
var url = <?php echo wp_json_encode($this->getLoginUrl()); ?>;
|
|
if (typeof window.opener.nslRedirect === 'function') {
|
|
window.opener.nslRedirect(url);
|
|
} else {
|
|
window.opener.location = url;
|
|
}
|
|
window.close();
|
|
} else {
|
|
window.location.reload(true);
|
|
}
|
|
} else {
|
|
if (window.opener === null) {
|
|
/**
|
|
* Cross-Origin-Opener-Policy blocked the access to the opener
|
|
*/
|
|
if (typeof BroadcastChannel === "function") {
|
|
const _nslLoginBroadCastChannel = new BroadcastChannel('nsl_login_broadcast_channel');
|
|
_nslLoginBroadCastChannel.postMessage({
|
|
action: 'redirect',
|
|
href:<?php echo wp_json_encode($this->getLoginUrl()); ?>});
|
|
_nslLoginBroadCastChannel.close();
|
|
window.close();
|
|
} else {
|
|
window.location.reload(true);
|
|
}
|
|
} else {
|
|
window.location.reload(true);
|
|
}
|
|
}
|
|
} catch (e) {
|
|
window.location.reload(true);
|
|
}
|
|
</script>
|
|
</head>
|
|
<body><a href="<?php echo esc_url($this->getLoginUrl()); ?>"><?php echo 'Continue...'; ?></a></body>
|
|
</html>
|
|
<?php
|
|
exit;
|
|
}
|
|
}
|
|
|
|
protected abstract function doAuthProtocolSpecificFlow();
|
|
|
|
/**
|
|
* @param $data
|
|
* Connect with the selected provider.
|
|
* After a successful login, we no longer need the previous persistent data.
|
|
*/
|
|
public function liveConnectGetUserProfile($data) {
|
|
|
|
$socialUser = new NextendSocialUser($this, $data);
|
|
$socialUser->liveConnectGetUserProfile();
|
|
|
|
$this->deleteLoginPersistentData();
|
|
$this->redirectToLastLocationOther(true);
|
|
}
|
|
|
|
/**
|
|
* @param $user_id
|
|
* @param $providerIdentifier
|
|
* @param $isRegister
|
|
* Insert the userid into the wp_social_users table,
|
|
* in this way a link is created between user accounts and the providers.
|
|
*
|
|
* @return bool
|
|
*/
|
|
public function linkUserToProviderIdentifier($user_id, $providerIdentifier, $isRegister = false) {
|
|
/** @var $wpdb WPDB */ global $wpdb;
|
|
|
|
$connectedProviderID = $this->getProviderIdentifierByUserID($user_id);
|
|
|
|
if ($connectedProviderID !== null) {
|
|
if ($connectedProviderID == $providerIdentifier) {
|
|
// This provider already linked to this user
|
|
return true;
|
|
}
|
|
|
|
// User already have this provider attached to his account with different provider id.
|
|
return false;
|
|
}
|
|
|
|
if ($isRegister) {
|
|
/**
|
|
* This is a register action.
|
|
*/
|
|
$wpdb->insert($wpdb->prefix . 'social_users', array(
|
|
'ID' => $user_id,
|
|
'type' => $this->dbID,
|
|
'identifier' => $providerIdentifier,
|
|
'register_date' => current_time('mysql'),
|
|
'link_date' => current_time('mysql'),
|
|
), array(
|
|
'%d',
|
|
'%s',
|
|
'%s',
|
|
'%s',
|
|
'%s'
|
|
));
|
|
} else {
|
|
/**
|
|
* This is a link action.
|
|
*/
|
|
$wpdb->insert($wpdb->prefix . 'social_users', array(
|
|
'ID' => $user_id,
|
|
'type' => $this->dbID,
|
|
'identifier' => $providerIdentifier,
|
|
'link_date' => current_time('mysql'),
|
|
), array(
|
|
'%d',
|
|
'%s',
|
|
'%s',
|
|
'%s'
|
|
));
|
|
}
|
|
|
|
do_action('nsl_' . $this->getId() . '_link_user', $user_id, $this->getId(), $isRegister);
|
|
|
|
return true;
|
|
}
|
|
|
|
public function getUserIDByProviderIdentifier($identifier) {
|
|
/** @var $wpdb WPDB */ global $wpdb;
|
|
|
|
return $wpdb->get_var($wpdb->prepare('SELECT ID FROM `' . $wpdb->prefix . 'social_users` WHERE type = %s AND identifier = %s', array(
|
|
$this->dbID,
|
|
$identifier
|
|
)));
|
|
}
|
|
|
|
protected function getProviderIdentifierByUserID($user_id) {
|
|
/** @var $wpdb WPDB */ global $wpdb;
|
|
|
|
return $wpdb->get_var($wpdb->prepare('SELECT identifier FROM `' . $wpdb->prefix . 'social_users` WHERE type = %s AND ID = %s', array(
|
|
$this->dbID,
|
|
$user_id
|
|
)));
|
|
}
|
|
|
|
/**
|
|
* @param $user_id
|
|
* Delete the link between the user account and the provider.
|
|
*/
|
|
public function removeConnectionByUserID($user_id) {
|
|
/** @var $wpdb WPDB */ global $wpdb;
|
|
|
|
$wpdb->query($wpdb->prepare('DELETE FROM `' . $wpdb->prefix . 'social_users` WHERE type = %s AND ID = %d', array(
|
|
$this->dbID,
|
|
$user_id
|
|
)));
|
|
}
|
|
|
|
protected function unlinkUser() {
|
|
//Filter to disable unlinking social accounts
|
|
$unlinkAllowed = apply_filters('nsl_allow_unlink', true);
|
|
|
|
if ($unlinkAllowed) {
|
|
$user_info = wp_get_current_user();
|
|
if ($user_info->ID) {
|
|
$unlinkedIdentifier = $this->getProviderIdentifierByUserID($user_info->ID);
|
|
$this->removeConnectionByUserID($user_info->ID);
|
|
|
|
do_action('nsl_unlink_user', $user_info->ID, $this->getId(), $unlinkedIdentifier);
|
|
|
|
return true;
|
|
}
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* If the current user has linked the account with a provider return the user identifier else false.
|
|
*
|
|
* @return bool|null|string
|
|
*/
|
|
public function isCurrentUserConnected() {
|
|
/** @var $wpdb WPDB */ global $wpdb;
|
|
|
|
$current_user = wp_get_current_user();
|
|
$ID = $wpdb->get_var($wpdb->prepare('SELECT identifier FROM `' . $wpdb->prefix . 'social_users` WHERE type LIKE %s AND ID = %d', array(
|
|
$this->dbID,
|
|
$current_user->ID
|
|
)));
|
|
if ($ID === null) {
|
|
return false;
|
|
}
|
|
|
|
return $ID;
|
|
}
|
|
|
|
/**
|
|
* @param $user_id
|
|
* If a user has linked the account with a provider return the user identifier else false.
|
|
*
|
|
* @return bool|null|string
|
|
*/
|
|
public function isUserConnected($user_id) {
|
|
/** @var $wpdb WPDB */ global $wpdb;
|
|
|
|
$ID = $wpdb->get_var($wpdb->prepare('SELECT identifier FROM `' . $wpdb->prefix . 'social_users` WHERE type LIKE %s AND ID = %d', array(
|
|
$this->dbID,
|
|
$user_id
|
|
)));
|
|
if ($ID === null) {
|
|
return false;
|
|
}
|
|
|
|
return $ID;
|
|
}
|
|
|
|
/**
|
|
* Generates an escaped attribute string.
|
|
*
|
|
* @param array $atts The attribute name value pairs
|
|
*
|
|
* @return string.
|
|
* @see NSLDEV-678
|
|
*/
|
|
private function getEscapeAttributesString(array $atts = []): string {
|
|
$attributes = '';
|
|
foreach ($atts as $attr => $value) {
|
|
if (is_scalar($value) && '' !== $value && false !== $value) {
|
|
$value = ('href' === $attr) ? esc_url($value) : esc_attr($value);
|
|
$attributes .= ' ' . $attr . '="' . $value . '"';
|
|
}
|
|
}
|
|
|
|
return $attributes;
|
|
}
|
|
|
|
public function getConnectButton($buttonStyle = 'default', $redirectTo = null, $trackerData = false, $labelType = 'login', $customLabel = false) {
|
|
$arg = array();
|
|
if (!empty($redirectTo)) {
|
|
$arg['redirect'] = urlencode($redirectTo);
|
|
} else if (!empty($_GET['redirect_to'])) {
|
|
$arg['redirect'] = urlencode($_GET['redirect_to']);
|
|
} else {
|
|
$currentPageUrl = NextendSocialLogin::getCurrentPageURL();
|
|
if ($currentPageUrl !== false) {
|
|
$arg['redirect'] = urlencode($currentPageUrl);
|
|
}
|
|
}
|
|
|
|
if ($trackerData !== false) {
|
|
$arg['trackerdata'] = urlencode($trackerData);
|
|
$arg['trackerdata_hash'] = urlencode(wp_hash($trackerData));
|
|
|
|
}
|
|
|
|
if ($customLabel) {
|
|
$label = str_replace('{{providerName}}', $this->getLabel(), $customLabel);
|
|
} else {
|
|
$label = $this->settings->get('login_label');
|
|
$useCustomRegisterLabel = NextendSocialLogin::$settings->get('custom_register_label');
|
|
if ($labelType == 'register' && $useCustomRegisterLabel) {
|
|
$label = $this->settings->get('register_label');
|
|
}
|
|
}
|
|
|
|
switch ($buttonStyle) {
|
|
case 'icon':
|
|
|
|
$button = $this->getIconButton();
|
|
break;
|
|
default:
|
|
|
|
$button = $this->getDefaultButton($label);
|
|
break;
|
|
}
|
|
|
|
$defaultLinkAttributes = [
|
|
"href" => add_query_arg($arg, $this->getLoginUrl()),
|
|
"rel" => "nofollow",
|
|
"aria-label" => __($label, 'nextend-facebook-connect'),
|
|
"data-plugin" => "nsl",
|
|
"data-action" => "connect",
|
|
"data-provider" => $this->getId(),
|
|
"data-popupwidth" => $this->getPopupWidth(),
|
|
"data-popupheight" => $this->getPopupHeight()
|
|
|
|
];
|
|
|
|
$customLinkAttributes = [];
|
|
if (defined('ELEMENTOR_PRO_VERSION')) {
|
|
/**
|
|
* Fix: Elementor Pro - Page Transitions shouldn't affect our button link.
|
|
*
|
|
* @see NSLDEV-441
|
|
*/
|
|
$customLinkAttributes['data-e-disable-page-transition'] = true;
|
|
}
|
|
$customLinkAttributes = apply_filters('nsl_connect_button_custom_attributes', $customLinkAttributes, $this);
|
|
$allLinkAttributes = array_merge($defaultLinkAttributes, $customLinkAttributes);
|
|
|
|
$buttonLinkOpeningTagStart = '<a' . $this->getEscapeAttributesString($allLinkAttributes) . '>';
|
|
$buttonLinkClosingTag = '</a>';
|
|
|
|
|
|
return $buttonLinkOpeningTagStart . $button . $buttonLinkClosingTag;
|
|
}
|
|
|
|
public function getLinkButton() {
|
|
|
|
$args = array(
|
|
'action' => 'link'
|
|
);
|
|
|
|
$redirect = NextendSocialLogin::getCurrentPageURL();
|
|
if ($redirect !== false) {
|
|
$args['redirect'] = urlencode($redirect);
|
|
}
|
|
|
|
$defaultLinkAttributes = [
|
|
"href" => add_query_arg($args, $this->getLoginUrl()),
|
|
"rel" => "nofollow",
|
|
"aria-label" => __($this->settings->get('link_label'), 'nextend-facebook-connect'),
|
|
"style" => "text-decoration:none;display:inline-block;box-shadow:none;",
|
|
"data-plugin" => "nsl",
|
|
"data-action" => "link",
|
|
"data-provider" => $this->getId(),
|
|
"data-popupwidth" => $this->getPopupWidth(),
|
|
"data-popupheight" => $this->getPopupHeight()
|
|
|
|
];
|
|
|
|
$customLinkAttributes = [];
|
|
if (defined('ELEMENTOR_PRO_VERSION')) {
|
|
/**
|
|
* Fix: Elementor Pro - Page Transitions shouldn't affect our button link.
|
|
*
|
|
* @see NSLDEV-441
|
|
*/
|
|
$customLinkAttributes['data-e-disable-page-transition'] = true;
|
|
}
|
|
$customLinkAttributes = apply_filters('nsl_link_button_custom_attributes', $customLinkAttributes, $this);
|
|
$allLinkAttributes = array_merge($defaultLinkAttributes, $customLinkAttributes);
|
|
|
|
$buttonLinkOpeningTagStart = '<a' . $this->getEscapeAttributesString($allLinkAttributes) . '>';
|
|
$buttonLinkClosingTag = '</a>';
|
|
|
|
|
|
return $buttonLinkOpeningTagStart . $this->getDefaultButton($this->settings->get('link_label')) . $buttonLinkClosingTag;
|
|
}
|
|
|
|
public function getUnLinkButton() {
|
|
|
|
$unlinkButtonUrl = $this->getUnLinkButtonUrl();
|
|
$redirect = NextendSocialLogin::getCurrentPageURL();
|
|
if ($redirect !== false) {
|
|
$args['redirect'] = urlencode($redirect);
|
|
$unlinkButtonUrl = add_query_arg($args, $unlinkButtonUrl);
|
|
}
|
|
|
|
$defaultLinkAttributes = [
|
|
"href" => $unlinkButtonUrl,
|
|
"rel" => "nofollow",
|
|
"aria-label" => __($this->settings->get('unlink_label'), 'nextend-facebook-connect'),
|
|
"style" => "text-decoration:none;display:inline-block;box-shadow:none;",
|
|
"data-plugin" => "nsl",
|
|
"data-action" => "unlink",
|
|
"data-provider" => $this->getId()
|
|
|
|
];
|
|
|
|
$customLinkAttributes = [];
|
|
if (defined('ELEMENTOR_PRO_VERSION')) {
|
|
/**
|
|
* Fix: Elementor Pro - Page Transitions shouldn't affect our button link.
|
|
*
|
|
* @see NSLDEV-441
|
|
*/
|
|
$customLinkAttributes['data-e-disable-page-transition'] = true;
|
|
}
|
|
$customLinkAttributes = apply_filters('nsl_unlink_button_custom_attributes', $customLinkAttributes, $this);
|
|
$allLinkAttributes = array_merge($defaultLinkAttributes, $customLinkAttributes);
|
|
|
|
$buttonLinkOpeningTagStart = '<a' . $this->getEscapeAttributesString($allLinkAttributes) . '>';
|
|
$buttonLinkClosingTag = '</a>';
|
|
|
|
return $buttonLinkOpeningTagStart . $this->getDefaultButton($this->settings->get('unlink_label')) . $buttonLinkClosingTag;
|
|
}
|
|
|
|
protected function getUnLinkButtonUrl() {
|
|
$args = array(
|
|
'action' => 'unlink'
|
|
);
|
|
|
|
return wp_nonce_url(add_query_arg($args, $this->getLoginUrl()), 'nsl_unlink_provider');
|
|
}
|
|
|
|
|
|
public function redirectToLoginForm() {
|
|
$this->redirectWithAuthenticationError(NextendSocialLogin::getLoginUrl());
|
|
}
|
|
|
|
/**
|
|
* @param $url
|
|
*/
|
|
public function redirectWithAuthenticationError($url) {
|
|
self::redirect(__('Authentication error', 'nextend-facebook-connect'), NextendSocialLogin::enableNoticeForUrl($url));
|
|
}
|
|
|
|
/**
|
|
* -Allows for logged in users to unlink their account from a provider, if it was linked, and
|
|
* redirects to the last location.
|
|
* -During linking process, store the action as link. After the linking process is finished,
|
|
* delete this stored info and redirects to the last location.
|
|
*/
|
|
public function liveConnectBefore() {
|
|
|
|
if (is_user_logged_in() && $this->isCurrentUserConnected()) {
|
|
|
|
if (isset($_GET['action']) && $_GET['action'] == 'unlink') {
|
|
|
|
if (isset($_REQUEST['_wpnonce'])) {
|
|
if (wp_verify_nonce($_REQUEST['_wpnonce'], 'nsl_unlink_provider')) {
|
|
if ($this->unlinkUser()) {
|
|
Notices::addSuccess(__('Unlink successful.', 'nextend-facebook-connect'));
|
|
} else {
|
|
Notices::addError(__('Unlink is not allowed!', 'nextend-facebook-connect'));
|
|
}
|
|
} else {
|
|
Notices::addError(__('Unlink failed: nonce is invalid', 'nextend-facebook-connect'));
|
|
}
|
|
} else {
|
|
/**
|
|
* If the nonce is missing, we have to ask the user for confirmation!
|
|
* For this, we mimic the logics of the WordPress log out, when there is no nonce set for it - see wp_nonce_ays()
|
|
*/
|
|
|
|
$title = sprintf(__('You are attempting to unlink your WordPress account from %s.'), $this->getLabel());
|
|
$response_code = 403;
|
|
|
|
$unlinkButtonUrl = $this->getUnLinkButtonUrl();
|
|
$lastLocationRedirectTo = $this->getLastLocationRedirectTo();
|
|
if ($lastLocationRedirectTo) {
|
|
$args = [
|
|
'redirect' => urlencode($lastLocationRedirectTo)
|
|
];
|
|
$unlinkButtonUrl = add_query_arg($args, $unlinkButtonUrl);
|
|
}
|
|
|
|
$html = $title;
|
|
$html .= '<p>';
|
|
$html .= sprintf(__('Do you really want to %1$s unlink %2$s it?'), '<a href="' . $unlinkButtonUrl . '">', '</a>', 'nsl_unlink_provider');
|
|
$html .= '</p>';
|
|
wp_die($html, $title, $response_code);
|
|
}
|
|
|
|
}
|
|
|
|
$this->redirectToLastLocationOther(true);
|
|
exit;
|
|
}
|
|
|
|
if (isset($_GET['action']) && $_GET['action'] == 'link') {
|
|
Persistent::set($this->id . '_action', 'link');
|
|
}
|
|
|
|
if (is_user_logged_in() && Persistent::get($this->id . '_action') != 'link') {
|
|
$this->deleteLoginPersistentData();
|
|
|
|
$this->redirectToLastLocationOther();
|
|
exit;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Store where the user logged in.
|
|
*/
|
|
public function liveConnectRedirect() {
|
|
if (!empty($_GET['trackerdata']) && !empty($_GET['trackerdata_hash'])) {
|
|
if (wp_hash($_GET['trackerdata']) === $_GET['trackerdata_hash']) {
|
|
Persistent::set('trackerdata', sanitize_text_field($_GET['trackerdata']));
|
|
}
|
|
}
|
|
if (!empty($_GET['redirect'])) {
|
|
Persistent::set('redirect', sanitize_url($_GET['redirect']));
|
|
}
|
|
}
|
|
|
|
public function redirectToLastLocation($notice = false) {
|
|
$url = $this->getLastLocationRedirectTo();
|
|
|
|
if (Persistent::get($this->id . '_interim_login') == 1) {
|
|
$this->deleteLoginPersistentData();
|
|
$args['interim_login'] = 'nsl';
|
|
|
|
$url = add_query_arg($args, NextendSocialLogin::getLoginUrl('login'));
|
|
if ($notice) {
|
|
$url = NextendSocialLogin::enableNoticeForUrl($url);
|
|
}
|
|
|
|
self::redirect(__('Authentication successful', 'nextend-facebook-connect'), $url);
|
|
|
|
exit;
|
|
}
|
|
|
|
if ($notice) {
|
|
$url = NextendSocialLogin::enableNoticeForUrl($url);
|
|
}
|
|
self::redirect(__('Authentication successful', 'nextend-facebook-connect'), $url);
|
|
}
|
|
|
|
/**
|
|
* @param bool $notice
|
|
*/
|
|
protected function redirectToLastLocationOther($notice = false) {
|
|
$this->redirectToLastLocation($notice);
|
|
}
|
|
|
|
protected function validateRedirect($location) {
|
|
$location = wp_sanitize_redirect($location);
|
|
|
|
return wp_validate_redirect($location, apply_filters('wp_safe_redirect_fallback', admin_url(), 302));
|
|
}
|
|
|
|
public function hasFixedRedirect() {
|
|
if (NextendSocialLogin::$WPLoginCurrentFlow == 'register') {
|
|
$fixedRedirect = NextendSocialLogin::$settings->get('redirect_reg');
|
|
$fixedRedirect = apply_filters($this->id . '_register_redirect_url', $fixedRedirect, $this);
|
|
if (!empty($fixedRedirect)) {
|
|
return true;
|
|
}
|
|
|
|
} else if (NextendSocialLogin::$WPLoginCurrentFlow == 'login') {
|
|
$fixedRedirect = NextendSocialLogin::$settings->get('redirect');
|
|
$fixedRedirect = apply_filters($this->id . '_login_redirect_url', $fixedRedirect, $this);
|
|
if (!empty($fixedRedirect)) {
|
|
return true;
|
|
}
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* If fixed redirect url is set, redirect to fixed redirect url.
|
|
* If fixed redirect url is not set, but redirect is in the url redirect to the $_GET['redirect'].
|
|
* If fixed redirect url is not set and there is no redirect in the url, redirects to the default redirect url if it
|
|
* is set.
|
|
* Else redirect to the site url.
|
|
*
|
|
* @return mixed|void
|
|
*/
|
|
protected function getLastLocationRedirectTo() {
|
|
$redirect_to = '';
|
|
$requested_redirect_to = '';
|
|
$fixedRedirect = '';
|
|
|
|
if (NextendSocialLogin::$WPLoginCurrentFlow == 'register') {
|
|
|
|
$fixedRedirect = NextendSocialLogin::$settings->get('redirect_reg');
|
|
$fixedRedirect = apply_filters($this->id . '_register_redirect_url', $fixedRedirect, $this);
|
|
|
|
} else if (NextendSocialLogin::$WPLoginCurrentFlow == 'login') {
|
|
|
|
$fixedRedirect = NextendSocialLogin::$settings->get('redirect');
|
|
$fixedRedirect = apply_filters($this->id . '_login_redirect_url', $fixedRedirect, $this);
|
|
|
|
}
|
|
|
|
if (!empty($fixedRedirect)) {
|
|
$redirect_to = $fixedRedirect;
|
|
} else {
|
|
$requested_redirect_to = Persistent::get('redirect');
|
|
|
|
if (!empty($requested_redirect_to)) {
|
|
if (empty($requested_redirect_to) || !NextendSocialLogin::isAllowedRedirectUrl($requested_redirect_to)) {
|
|
if (!empty($_GET['redirect']) && NextendSocialLogin::isAllowedRedirectUrl($_GET['redirect'])) {
|
|
$requested_redirect_to = $_GET['redirect'];
|
|
} else {
|
|
$requested_redirect_to = '';
|
|
}
|
|
}
|
|
|
|
if (empty($requested_redirect_to)) {
|
|
$redirect_to = site_url();
|
|
} else {
|
|
$redirect_to = $requested_redirect_to;
|
|
}
|
|
$redirect_to = wp_sanitize_redirect($redirect_to);
|
|
$redirect_to = wp_validate_redirect($redirect_to, site_url());
|
|
|
|
$redirect_to = $this->validateRedirect($redirect_to);
|
|
} else if (!empty($_GET['redirect']) && NextendSocialLogin::isAllowedRedirectUrl($_GET['redirect'])) {
|
|
$redirect_to = $_GET['redirect'];
|
|
|
|
$redirect_to = wp_sanitize_redirect($redirect_to);
|
|
$redirect_to = wp_validate_redirect($redirect_to, site_url());
|
|
|
|
$redirect_to = $this->validateRedirect($redirect_to);
|
|
}
|
|
|
|
if (empty($redirect_to)) {
|
|
$defaultRedirect = '';
|
|
|
|
if (NextendSocialLogin::$WPLoginCurrentFlow == 'register') {
|
|
$defaultRedirect = NextendSocialLogin::$settings->get('default_redirect_reg');
|
|
$defaultRedirect = apply_filters($this->id . '_default_register_redirect_url', $defaultRedirect, $this);
|
|
|
|
} else if (NextendSocialLogin::$WPLoginCurrentFlow == 'login') {
|
|
$defaultRedirect = NextendSocialLogin::$settings->get('default_redirect');
|
|
$defaultRedirect = apply_filters($this->id . '_default_[login_redirect_url', $defaultRedirect, $this);
|
|
}
|
|
|
|
if ((!empty($defaultRedirect))) {
|
|
$redirect_to = $defaultRedirect;
|
|
}
|
|
}
|
|
|
|
$redirect_to = apply_filters('nsl_' . $this->getId() . 'default_last_location_redirect', $redirect_to, $requested_redirect_to);
|
|
}
|
|
|
|
if ($redirect_to == '' || $redirect_to == $this->getLoginUrl()) {
|
|
$redirect_to = site_url();
|
|
}
|
|
|
|
Persistent::delete('redirect');
|
|
|
|
return apply_filters('nsl_' . $this->getId() . 'last_location_redirect', $redirect_to, $requested_redirect_to);
|
|
}
|
|
|
|
/**
|
|
* @param $user_id
|
|
* @param $provider NextendSocialProvider
|
|
* @param $data array
|
|
*/
|
|
public function syncProfile($user_id, $provider, $data) {
|
|
}
|
|
|
|
/**
|
|
* @return bool
|
|
*/
|
|
public function hasSyncableProfileFields() {
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* Check if a logged in user with manage_options capability, want to verify their provider settings.
|
|
*
|
|
* @return bool
|
|
*/
|
|
public function isTest() {
|
|
if (is_user_logged_in() && current_user_can(NextendSocialLogin::getRequiredCapability())) {
|
|
if (isset($_REQUEST['test'])) {
|
|
Persistent::set('test', 1);
|
|
|
|
return true;
|
|
} else if (Persistent::get('test') == 1) {
|
|
return true;
|
|
}
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* Make the current provider in verified mode, and update the oauth_redirect_url.
|
|
*/
|
|
public function testConnectGetUserProfile() {
|
|
|
|
$this->deleteLoginPersistentData();
|
|
|
|
$this->settings->update(array(
|
|
'tested' => 1,
|
|
'oauth_redirect_url' => $this->getBaseRedirectUriForAppCreation()
|
|
));
|
|
|
|
Notices::addSuccess(__('The test was successful', 'nextend-facebook-connect'));
|
|
|
|
?>
|
|
<!doctype html>
|
|
<html lang=en>
|
|
<head>
|
|
<meta charset=utf-8>
|
|
<title><?php _e('The test was successful', 'nextend-facebook-connect'); ?></title>
|
|
<?php
|
|
NextendSocialLogin::nslDOMReady();
|
|
?>
|
|
<script type="text/javascript">
|
|
if (window.opener) {
|
|
window.opener.location.reload(true);
|
|
window.close();
|
|
} else {
|
|
/**
|
|
* Cross-Origin-Opener-Policy blocked the access to the opener
|
|
*/
|
|
if (typeof BroadcastChannel === "function") {
|
|
const nslVerifySettingsBroadCastChannel = new BroadcastChannel("nsl_verify_settings_broadcast_channel");
|
|
nslVerifySettingsBroadCastChannel.postMessage({action: 'reload'});
|
|
nslVerifySettingsBroadCastChannel.close();
|
|
window.close();
|
|
} else {
|
|
window._nslDOMReady(function () {
|
|
document.body.innerHTML = 'Close this window and refresh the parent window!';
|
|
});
|
|
}
|
|
}
|
|
</script>
|
|
</head>
|
|
<body>
|
|
</body>
|
|
</html>
|
|
<?php
|
|
exit;
|
|
}
|
|
|
|
public function deleteLoginPersistentData() {
|
|
Persistent::delete($this->id . '_interim_login');
|
|
Persistent::delete($this->id . '_display');
|
|
Persistent::delete($this->id . '_action');
|
|
Persistent::delete('test');
|
|
}
|
|
|
|
public function deleteTokenPersistentData() {
|
|
}
|
|
|
|
/**
|
|
* @param $e Exception
|
|
*/
|
|
protected function onError($e) {
|
|
if (NextendSocialLogin::$settings->get('debug') == 1 || $this->isTest()) {
|
|
header('HTTP/1.0 401 Unauthorized');
|
|
echo "Error: " . $e->getMessage() . "\n";
|
|
} else {
|
|
//@TODO we might need to make difference between user cancelled auth and error and redirect the user based on that.
|
|
$url = $this->getLastLocationRedirectTo();
|
|
?>
|
|
<!doctype html>
|
|
<html lang=en>
|
|
<head>
|
|
<meta charset=utf-8>
|
|
<title><?php echo __('Authentication failed', 'nextend-facebook-connect'); ?></title>
|
|
<script type="text/javascript">
|
|
try {
|
|
if (window.opener !== null && window.opener !== window) {
|
|
var sameOrigin = true;
|
|
try {
|
|
var currentOrigin = window.location.protocol + '//' + window.location.hostname;
|
|
if (window.opener.location.href.substring(0, currentOrigin.length) !== currentOrigin) {
|
|
sameOrigin = false;
|
|
}
|
|
|
|
} catch (e) {
|
|
/**
|
|
* Blocked cross origin
|
|
*/
|
|
sameOrigin = false;
|
|
}
|
|
if (sameOrigin) {
|
|
window.close();
|
|
}
|
|
}
|
|
} catch (e) {
|
|
}
|
|
window.location = <?php echo wp_json_encode($url); ?>;
|
|
</script>
|
|
<meta http-equiv="refresh" content="0;<?php echo esc_attr($url); ?>">
|
|
</head>
|
|
<body>
|
|
</body>
|
|
</html>
|
|
<?php
|
|
}
|
|
$this->deleteLoginPersistentData();
|
|
exit;
|
|
}
|
|
|
|
protected function saveUserData($user_id, $key, $data) {
|
|
update_user_meta($user_id, $this->id . '_' . $key, $data);
|
|
}
|
|
|
|
protected function getUserData($user_id, $key) {
|
|
return get_user_meta($user_id, $this->id . '_' . $key, true);
|
|
}
|
|
|
|
/**
|
|
* @param $user_id
|
|
*
|
|
* @return bool
|
|
* @deprecated
|
|
*
|
|
*/
|
|
public function getAvatar($user_id) {
|
|
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* @return array
|
|
*/
|
|
protected function getCurrentUserInfo() {
|
|
return array();
|
|
}
|
|
|
|
/**
|
|
* @param $key
|
|
*
|
|
* @return string
|
|
*/
|
|
public function getAuthUserData($key) {
|
|
return '';
|
|
}
|
|
|
|
|
|
/**
|
|
* @param $key
|
|
* @param $authOptions
|
|
* Can be used for accessing the getAuthUserData() function outside of our normal flow.
|
|
*
|
|
* @return mixed
|
|
*/
|
|
public abstract function getAuthUserDataByAuthOptions($key, $authOptions);
|
|
|
|
/**
|
|
* @param $user_id
|
|
* @param $authOptions
|
|
* @param string $action
|
|
* @param bool $shouldSyncProfile
|
|
* Can be used for triggering the Sync Data storing and Avatar updating functions
|
|
* outside of our normal flow.
|
|
*
|
|
* @return mixed
|
|
*/
|
|
public abstract function triggerSync($user_id, $authOptions, $action = "login", $shouldSyncProfile = false);
|
|
|
|
/**
|
|
* @param $title
|
|
* @param $url
|
|
* Redirect the source of the popup window to a specified url.
|
|
*/
|
|
public static function redirect($title, $url) {
|
|
$url = NextendSocialLogin::maybeAddBypassCacheArgToUrl($url);
|
|
?>
|
|
<!doctype html>
|
|
<html lang=en>
|
|
<head>
|
|
<meta charset=utf-8>
|
|
<title><?php echo $title; ?></title>
|
|
<script type="text/javascript">
|
|
try {
|
|
if (window.opener !== null && window.opener !== window) {
|
|
var sameOrigin = true;
|
|
try {
|
|
var currentOrigin = window.location.protocol + '//' + window.location.hostname;
|
|
if (window.opener.location.href.substring(0, currentOrigin.length) !== currentOrigin) {
|
|
sameOrigin = false;
|
|
}
|
|
|
|
} catch (e) {
|
|
/**
|
|
* Blocked cross origin
|
|
*/
|
|
sameOrigin = false;
|
|
}
|
|
if (sameOrigin) {
|
|
window.opener.location = <?php echo wp_json_encode($url); ?>;
|
|
window.close();
|
|
}
|
|
}
|
|
} catch (e) {
|
|
}
|
|
window.location = <?php echo wp_json_encode($url); ?>;
|
|
</script>
|
|
<meta http-equiv="refresh" content="0;<?php echo esc_attr($url); ?>">
|
|
</head>
|
|
<body>
|
|
</body>
|
|
</html>
|
|
<?php
|
|
exit;
|
|
}
|
|
|
|
public function getSyncFields() {
|
|
return $this->sync_fields;
|
|
}
|
|
|
|
public function hasSyncFields() {
|
|
return !empty($this->sync_fields);
|
|
}
|
|
|
|
public function validateSettings($newData, $postedData) {
|
|
|
|
return $newData;
|
|
}
|
|
|
|
protected function needUpdateAvatar($user_id) {
|
|
return apply_filters('nsl_avatar_store', NextendSocialLogin::$settings->get('avatar_store'), $user_id, $this);
|
|
}
|
|
|
|
protected function updateAvatar($user_id, $url) {
|
|
do_action('nsl_update_avatar', $this, $user_id, $url);
|
|
}
|
|
|
|
public function exportPersonalData($userID) {
|
|
$data = array();
|
|
|
|
$socialID = $this->isUserConnected($userID);
|
|
if ($socialID !== false) {
|
|
$data[] = array(
|
|
'name' => $this->getLabel() . ' ' . __('Identifier', 'nextend-facebook-connect'),
|
|
'value' => $socialID,
|
|
);
|
|
}
|
|
|
|
$profilePicture = $this->getUserData($userID, 'profile_picture');
|
|
if (!empty($profilePicture)) {
|
|
$data[] = array(
|
|
'name' => $this->getLabel() . ' ' . __('Profile Picture'),
|
|
'value' => $profilePicture,
|
|
);
|
|
}
|
|
|
|
foreach ($this->getSyncFields() as $fieldName => $fieldData) {
|
|
$meta_key = $this->settings->get('sync_fields/fields/' . $fieldName . '/meta_key');
|
|
if (!empty($meta_key)) {
|
|
$value = get_user_meta($userID, $meta_key, true);
|
|
if (!empty($value)) {
|
|
$data[] = array(
|
|
'name' => $this->getLabel() . ' ' . $fieldData['label'],
|
|
'value' => $value
|
|
);
|
|
}
|
|
}
|
|
}
|
|
|
|
$data = $this->extendExportedPersonalData($userID, $data);
|
|
|
|
return $data;
|
|
}
|
|
|
|
/**
|
|
* @param $userID
|
|
*
|
|
* @param array $data
|
|
*
|
|
* @return array
|
|
*/
|
|
public function extendExportedPersonalData($userID, $data) {
|
|
return $data;
|
|
}
|
|
|
|
|
|
public function getSyncDataFieldDescription($fieldName) {
|
|
return '';
|
|
}
|
|
|
|
/**
|
|
* @param $user_id
|
|
* Update social_users table with login date of the user.
|
|
*/
|
|
public function logLoginDate($user_id) {
|
|
/** @var $wpdb WPDB */ global $wpdb;
|
|
$wpdb->update($wpdb->prefix . 'social_users', array('login_date' => current_time('mysql'),), array(
|
|
'ID' => $user_id,
|
|
'type' => $this->dbID
|
|
), array(
|
|
'%s',
|
|
'%s'
|
|
));
|
|
}
|
|
|
|
}
|