first commit

2026-01-07 11:40:41 +08:00
parent 2b5d784e31
commit 8f2ed2c108
6466 changed files with 1431506 additions and 0 deletions
--- a/ZeedFramework/library/Zeed/OAuth/InternalValidator.php
+++ b/ZeedFramework/library/Zeed/OAuth/InternalValidator.php
@@ -0,0 +1,112 @@
+<?php
+/**
+ * Zeed Platform Project
+ * Based on Zeed Framework & Zend Framework.
+ * 
+ * BTS - Billing Transaction Service
+ * CAS - Central Authentication Service
+ * 
+ * LICENSE
+ * http://www.zeed.com.cn/license/
+ * 
+ * @category   Zeed
+ * @package    Zeed_ChangeMe
+ * @subpackage ChangeMe
+ * @copyright  Copyright (c) 2010 Zeed Technologies PRC Inc. (http://www.zeed.com.cn)
+ * @author     Zeed Team (http://blog.zeed.com.cn)
+ * @since      Aug 10, 2010
+ * @version    SVN: $Id: InternalValidator.php 5989 2010-08-11 04:56:37Z woody $
+ */
+
+/**
+ * 简单验证请求是否合法, 仅限验证内部应用直接调用API
+ * 
+ * @author ahdong
+ */
+class Zeed_OAuth_InternalValidator
+{
+    /**
+     * @var integer
+     */
+    public static $_timestampThreshold = 300;
+    
+    /**
+     * 简单验证请求是否合法, 仅限内部应用直接调用API
+     * 
+     * @param array $consumers array('key1'=>'secret1','key2'=>'secret2')
+     * @param Zeed_OAuth_Token $token
+     * @param Zeed_OAuth_Request $request
+     */
+    public static function validate($consumers, Zeed_OAuth_Token $token = null, Zeed_OAuth_Request $request = null)
+    {
+        if (is_null($request)) {
+            $request = Zeed_OAuth_Request::fromRequest();
+        }
+        $consumerKey = @$request->getParameter("oauth_consumer_key");
+        if (! $consumerKey) {
+            throw new Zeed_OAuth_Exception("No consumer key");
+        }
+        
+        if (!in_array($consumerKey, array_keys($consumers))) {
+            throw new Zeed_OAuth_Exception("Invalid consumer key");
+        }
+        
+        // verify that timestamp is recentish
+        $timestamp = @$request->getParameter('oauth_timestamp');
+        if (! $timestamp) {
+            throw new Zeed_OAuth_Exception('Missing timestamp parameter. The parameter is required');
+        }
+        $now = time();
+        if (abs($now - $timestamp) > self::$_timestampThreshold) {
+            throw new Zeed_OAuth_Exception("Expired timestamp, yours $timestamp, ours $now");
+        }
+        
+        $consumer = new Zeed_OAuth_Consumer($consumerKey, $consumers[$consumerKey]);
+        
+        // verify that nonce is fresh
+        $nonce = @$request->getParameter('oauth_nonce');
+        if (! $nonce) {
+            throw new Zeed_OAuth_Exception('Missing nonce parameter. The parameter is required');
+        }
+        $nonceKey = md5('zoi-'.$consumer.'-'.$token.'-'.$timestamp.'-'.$nonce);
+        $cached = Zeed_Cache::instance()->load($nonceKey);
+        if ($cached !== false) {
+            throw new Zeed_OAuth_Exception('Replay attacks');
+        } else {
+            Zeed_Cache::instance()->save(1,$nonceKey,array('zoi'),self::$_timestampThreshold*2);
+        }
+        
+        // verify signature
+        $signatureMethod = self::_getSignatureMethod($request);
+        $signature = $request->getParameter('oauth_signature');
+        $validSig = $signatureMethod->checkSignature($request, $consumer, $token, $signature);
+        if (! $validSig) {
+            throw new Zeed_OAuth_Exception("Invalid signature");
+        }
+        
+        return $request->getParameters();
+    }
+    
+    /**
+     * 获取签名方式
+     * 
+     * @param Zeed_OAuth_Request $request
+     * @return Zeed_OAuth_Signature_Abstract
+     */
+    protected static function _getSignatureMethod($request)
+    {
+        $signatureMethod = @$request->getParameter("oauth_signature_method");
+        
+        if (! $signatureMethod) {
+            throw new Zeed_OAuth_Exception('No signature method parameter. This parameter is required');
+        }
+        
+        if ('HMAC-SHA1' == $signatureMethod) {
+            return new Zeed_OAuth_Signature_HMACSHA1();
+        } else {
+            throw new Zeed_OAuth_Exception('Unsupported signature method');
+        }
+    }
+}
+
+// End ^ Native EOL ^ encoding