File zp-extensions/federated_logon/Auth/Yadis/XRI.php

  1: <?php
  2: 
  3: /**
  4:  * Routines for XRI resolution.
  5:  *
  6:  * @package OpenID
  7:  * @author JanRain, Inc. <openid@janrain.com>
  8:  * @copyright 2005-2008 Janrain, Inc.
  9:  * @license http://www.apache.org/licenses/LICENSE-2.0 Apache
 10:  */
 11: 
 12: require_once 'Auth/Yadis/Misc.php';
 13: require_once 'Auth/Yadis/Yadis.php';
 14: require_once 'Auth/OpenID.php';
 15: 
 16: function Auth_Yadis_getDefaultProxy()
 17: {
 18:     return 'http://xri.net/';
 19: }
 20: 
 21: function Auth_Yadis_getXRIAuthorities()
 22: {
 23:     return array('!', '=', '@', '+', '$', '(');
 24: }
 25: 
 26: function Auth_Yadis_getEscapeRE()
 27: {
 28:     $parts = array();
 29:     foreach (array_merge(Auth_Yadis_getUCSChars(),
 30:                          Auth_Yadis_getIPrivateChars()) as $pair) {
 31:         list($m, $n) = $pair;
 32:         $parts[] = sprintf("%s-%s", chr($m), chr($n));
 33:     }
 34: 
 35:     return sprintf('/[%s]/', implode('', $parts));
 36: }
 37: 
 38: function Auth_Yadis_getXrefRE()
 39: {
 40:     return '/\((.*?)\)/';
 41: }
 42: 
 43: function Auth_Yadis_identifierScheme($identifier)
 44: {
 45:     if (Auth_Yadis_startswith($identifier, 'xri://') ||
 46:         ($identifier &&
 47:           in_array($identifier[0], Auth_Yadis_getXRIAuthorities()))) {
 48:         return "XRI";
 49:     } else {
 50:         return "URI";
 51:     }
 52: }
 53: 
 54: function Auth_Yadis_toIRINormal($xri)
 55: {
 56:     if (!Auth_Yadis_startswith($xri, 'xri://')) {
 57:         $xri = 'xri://' . $xri;
 58:     }
 59: 
 60:     return Auth_Yadis_escapeForIRI($xri);
 61: }
 62: 
 63: function _escape_xref($xref_match)
 64: {
 65:     $xref = $xref_match[0];
 66:     $xref = str_replace('/', '%2F', $xref);
 67:     $xref = str_replace('?', '%3F', $xref);
 68:     $xref = str_replace('#', '%23', $xref);
 69:     return $xref;
 70: }
 71: 
 72: function Auth_Yadis_escapeForIRI($xri)
 73: {
 74:     $xri = str_replace('%', '%25', $xri);
 75:     $xri = preg_replace_callback(Auth_Yadis_getXrefRE(),
 76:                                  '_escape_xref', $xri);
 77:     return $xri;
 78: }
 79: 
 80: function Auth_Yadis_toURINormal($xri)
 81: {
 82:     return Auth_Yadis_iriToURI(Auth_Yadis_toIRINormal($xri));
 83: }
 84: 
 85: function Auth_Yadis_iriToURI($iri)
 86: {
 87:     if (1) {
 88:         return $iri;
 89:     } else {
 90:         // According to RFC 3987, section 3.1, "Mapping of IRIs to URIs"
 91:         return preg_replace_callback(Auth_Yadis_getEscapeRE(),
 92:                                      'Auth_Yadis_pct_escape_unicode', $iri);
 93:     }
 94: }
 95: 
 96: 
 97: function Auth_Yadis_XRIAppendArgs($url, $args)
 98: {
 99:     // Append some arguments to an HTTP query.  Yes, this is just like
100:     // OpenID's appendArgs, but with special seasoning for XRI
101:     // queries.
102: 
103:     if (count($args) == 0) {
104:         return $url;
105:     }
106: 
107:     // Non-empty array; if it is an array of arrays, use multisort;
108:     // otherwise use sort.
109:     if (array_key_exists(0, $args) &&
110:         is_array($args[0])) {
111:         // Do nothing here.
112:     } else {
113:         $keys = array_keys($args);
114:         sort($keys);
115:         $new_args = array();
116:         foreach ($keys as $key) {
117:             $new_args[] = array($key, $args[$key]);
118:         }
119:         $args = $new_args;
120:     }
121: 
122:     // According to XRI Resolution section "QXRI query parameters":
123:     //
124:     // "If the original QXRI had a null query component (only a
125:     //  leading question mark), or a query component consisting of
126:     //  only question marks, one additional leading question mark MUST
127:     //  be added when adding any XRI resolution parameters."
128:     if (strpos(rtrim($url, '?'), '?') !== false) {
129:         $sep = '&';
130:     } else {
131:         $sep = '?';
132:     }
133: 
134:     return $url . $sep . Auth_OpenID::httpBuildQuery($args);
135: }
136: 
137: function Auth_Yadis_providerIsAuthoritative($providerID, $canonicalID)
138: {
139:     $lastbang = strrpos($canonicalID, '!');
140:     $p = substr($canonicalID, 0, $lastbang);
141:     return $p == $providerID;
142: }
143: 
144: function Auth_Yadis_rootAuthority($xri)
145: {
146:     // Return the root authority for an XRI.
147: 
148:     $root = null;
149: 
150:     if (Auth_Yadis_startswith($xri, 'xri://')) {
151:         $xri = substr($xri, 6);
152:     }
153: 
154:     $authority = explode('/', $xri, 2);
155:     $authority = $authority[0];
156:     if ($authority[0] == '(') {
157:         // Cross-reference.
158:         //  This is incorrect if someone nests cross-references so
159:         //   there is another close-paren in there.  Hopefully nobody
160:         //   does that before we have a real xriparse function.
161:         //   Hopefully nobody does that *ever*.
162:         $root = substr($authority, 0, strpos($authority, ')') + 1);
163:     } else if (in_array($authority[0], Auth_Yadis_getXRIAuthorities())) {
164:         // Other XRI reference.
165:         $root = $authority[0];
166:     } else {
167:         // IRI reference.
168:         $_segments = explode("!", $authority);
169:         $segments = array();
170:         foreach ($_segments as $s) {
171:             $segments = array_merge($segments, explode("*", $s));
172:         }
173:         $root = $segments[0];
174:     }
175: 
176:     return Auth_Yadis_XRI($root);
177: }
178: 
179: function Auth_Yadis_XRI($xri)
180: {
181:     if (!Auth_Yadis_startswith($xri, 'xri://')) {
182:         $xri = 'xri://' . $xri;
183:     }
184:     return $xri;
185: }
186: 
187: function Auth_Yadis_getCanonicalID($iname, $xrds)
188: {
189:     // Returns false or a canonical ID value.
190: 
191:     // Now nodes are in reverse order.
192:     $xrd_list = array_reverse($xrds->allXrdNodes);
193:     $parser = $xrds->parser;
194:     $node = $xrd_list[0];
195: 
196:     $canonicalID_nodes = $parser->evalXPath('xrd:CanonicalID', $node);
197: 
198:     if (!$canonicalID_nodes) {
199:         return false;
200:     }
201: 
202:     $canonicalID = $canonicalID_nodes[0];
203:     $canonicalID = Auth_Yadis_XRI($parser->content($canonicalID));
204: 
205:     $childID = $canonicalID;
206: 
207:     for ($i = 1; $i < count($xrd_list); $i++) {
208:         $xrd = $xrd_list[$i];
209: 
210:         $parent_sought = substr($childID, 0, strrpos($childID, '!'));
211:         $parentCID = $parser->evalXPath('xrd:CanonicalID', $xrd);
212:         if (!$parentCID) {
213:             return false;
214:         }
215:         $parentCID = Auth_Yadis_XRI($parser->content($parentCID[0]));
216: 
217:         if (strcasecmp($parent_sought, $parentCID)) {
218:             // raise XRDSFraud.
219:             return false;
220:         }
221: 
222:         $childID = $parent_sought;
223:     }
224: 
225:     $root = Auth_Yadis_rootAuthority($iname);
226:     if (!Auth_Yadis_providerIsAuthoritative($root, $childID)) {
227:         // raise XRDSFraud.
228:         return false;
229:     }
230: 
231:     return $canonicalID;
232: }
233: 
234: 
235:
Packages

Classes

Exceptions

Functions
