path: root/Zotlabs/Module/Rmagic.php

<?php
namespace Zotlabs\Module;

use Zotlabs\Lib\Libzot;

class Rmagic extends \Zotlabs\Web\Controller {

	function init() {

		if(local_channel())
			goaway(z_root());

		$me = get_my_address();
		if($me) {
			$r = q("select hubloc_url, hubloc_network from hubloc where hubloc_addr = '%s' and hubloc_deleted = 0 order by hubloc_id desc",
				dbesc($me)
			);
			if(! $r) {
				$w = discover_by_webbie($me);
				if($w) {
					$r = q("select hubloc_url, hubloc_network from hubloc where hubloc_addr = '%s' and hubloc_deleted = 0 order by hubloc_id desc",
						dbesc($me)
					);
				}
			}

			if($r) {
				$r = Libzot::zot_record_preferred($r);
				if($r['hubloc_url'] === z_root())
					goaway(z_root() . '/login');
				$dest = bin2hex(z_root() . '/' . str_replace(['rmagic','zid='],['','zid_='],\App::$query_string));
				goaway($r['hubloc_url'] . '/magic' . '?f=&owa=1&bdest=' . $dest);
			}
		}
	}

	function post() {

		$address = trim($_REQUEST['address']);

		if(strpos($address,'@') === false) {
			$arr = array('address' => $address);
			call_hooks('reverse_magic_auth', $arr);

			// if they're still here...
			notice( t('Authentication failed.') . EOL);
			return;
		}
		else {

			// Presumed Red identity. Perform reverse magic auth

			if(strpos($address,'@') === false) {
				notice('Invalid address.');
				return;
			}

			$r = null;
			if($address) {
				$r = q("select hubloc_url, hubloc_network from hubloc where hubloc_addr = '%s' and hubloc_deleted = 0 order by hubloc_id desc",
					dbesc($address)
				);
				if(! $r) {
					$w = discover_by_webbie($address);
					if($w) {
						$r = q("select hubloc_url, hubloc_network from hubloc where hubloc_addr = '%s' and hubloc_deleted = 0 order by hubloc_id desc",
							dbesc($address)
						);
					}
				}
			}

			if($r) {
				$r = Libzot::zot_record_preferred($r);
				$url = $r['hubloc_url'];
			}
			else {
				$url = 'https://' . substr($address,strpos($address,'@')+1);
			}

			if($url) {
				if($_SESSION['return_url'])
					$dest = bin2hex(z_root() . '/' . str_replace('zid=','zid_=',$_SESSION['return_url']));
				else
					$dest = bin2hex(z_root() . '/' . str_replace([ 'rmagic', 'zid=' ] ,[ '', 'zid_='],\App::$query_string));

				goaway($url . '/magic' . '?f=&owa=1&bdest=' . $dest);
			}
		}
	}


	function get() {
		return replace_macros(get_markup_template('rmagic.tpl'),
			[
				'$title'   => t('Remote Authentication'),
				'$address' => [ 'address', t('Enter your channel address (e.g. channel@example.com)'), '', '' ],
				'$submit'  => t('Authenticate')
			]
		);
	}
}