heiglandreas/HybridAuth

<?php
/**
 * Copyright (c)2012-2012 heiglandreas
 *
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to deal
 * in the Software without restriction, including without limitation the rights
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 * copies of the Software, and to permit persons to whom the Software is
 * furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIBILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 * THE SOFTWARE.
 *
 * @category
 * @author    Andreas Heigl<andreas@heigl.org>
 * @copyright ©2012-2012 Andreas Heigl
 * @license   http://www.opesource.org/licenses/mit-license.php MIT-License
 * @version   0.0
 * @since     27.12.12
 * @link      https://github.com/heiglandreas/
 */
namespace OrgHeiglHybridAuth\Controller;

use Hybridauth\Hybridauth;
use Hybridauth\Endpoint;
use SocialConnect\Auth\Service;
use Zend\Mvc\Controller\AbstractActionController;
use Zend\Session\Container as SessionContainer;
use OrgHeiglHybridAuth\UserWrapperFactory;

/**
 * Login or out using a social service
 *
 * @category
 * @author    Andreas Heigl<andreas@heigl.org>
 * @copyright ©2012-2012 Andreas Heigl
 * @license   http://www.opesource.org/licenses/mit-license.php MIT-License
 * @version   0.0
 * @since     27.12.12
 * @link      https://github.com/heiglandreas/
 */
class IndexController extends AbstractActionController
{
    /**
     * Stores the HybridAuth-Instance
     *
     * @var Service $authenticator
     */
    protected $authenticator = null;

    /**
     * Storage of the session-Container
     *
     * @var SessionContainer $session
     */
    protected $session = null;

    /**
     * Storage of the UserProxyFactory
     *
     * @var UserWrapperFactory $userProxyFactory
     */
    protected $userWrapperFactory = null;
    /**
     * Set the authenticator
     *
     * @param Service $authenticator The Authenticator-Backend
     *
     * @return IndexController
     */
    public function setAuthenticator(Service $authenticator)
    {
        $this->authenticator = $authenticator;
        return $this;
    }

    /**
     * Set the session container
     *
     * @param SessionContainer $container The session-container to use for storing the authentication
     *
     * @return IndexController
     */
    public function setSession(SessionContainer $container)
    {
        $this->session = $container;
        return $this;
    }

    /**
     * Set the userwrapper
     *
     * @param UserWrapperFactory $factory The ProxyFactory
     *
     * @return IndexController
     */
    public function setUserWrapperFactory(UserWrapperFactory $factory)
    {
        $this->userWrapperFactory = $factory;
        return $this;
    }

    /**
     * login using twitter
     */
    public function loginAction()
    {
        $providerName = $this->params()->fromRoute('provider');
        $this->session->offsetSet('redirect', $this->params()->fromRoute('redirect'));

        $provider = $this->authenticator->getProvider($providerName);

        return $this->redirectTo($provider->makeAuthUrl());
    }

    /**
     * Logout
     */
    public function logoutAction()
    {
        $this->session->offsetSet('authenticated', false);
        $this->session->offsetSet('user', null);
        $this->session->offsetSet('backend', null);

        return $this->doRedirect();
    }

    /**
     * Redirect to the last known URL
     *
     * @return boolean
     */
    protected function doRedirect()
    {
        if (! $redirect = $this->session->offsetGet('redirect')) {
            $redirect = $this->getEvent()->getRouteMatch()->getParam('redirect');
        }

        $this->session->offsetUnset('redirect');
        $redirect = base64_decode($redirect);

        if (! $redirect) {
            $redirect = '/';
        }

        if (preg_match('|://|', $redirect)) {
            $this->redirect()->toUrl($redirect);
        } else {
            $this->redirect()->toRoute($redirect);
        }
        return false;
    }

    public function redirectTo($uri)
    {
        $this->redirect()->toUrl($uri);
    }

    /**
     * Call the HybridAuth-Backend
     */
    public function backendAction()
    {
        $providerName = $this->params()->fromRoute('provider');

        $provider = $this->authenticator->getProvider($providerName);
        $accessToken = $provider->getAccessTokenByRequestParameters($_GET);

        if (! $accessToken) {
            $this->session->offsetSet('authenticated', false);
            $this->session->offsetSet('user', null);
            $this->session->offsetSet('backend', $providerName);

            return $this->doRedirect();
        }

        $this->session->offsetSet('authenticated',true);
        $this->session->offsetSet('user', $this->userWrapperFactory->factory($provider->getIdentity($accessToken)));
        $this->session->offsetSet('backend', $providerName);

        return $this->doRedirect();
    }
}