117 lines
3.5 KiB
PHP
117 lines
3.5 KiB
PHP
<?php
|
||
/**
|
||
* Zeed Platform Project
|
||
* Based on Zeed Framework & Zend Framework.
|
||
*
|
||
* BTS - Billing Transaction Service
|
||
* CAS - Central Authentication Service
|
||
*
|
||
* LICENSE
|
||
* http://www.zeed.com.cn/license/
|
||
*
|
||
* @category Zeed
|
||
* @package Zeed_ChangeMe
|
||
* @subpackage ChangeMe
|
||
* @copyright Copyright (c) 2010 Zeed Technologies PRC Inc. (http://www.zeed.com.cn)
|
||
* @author Zeed Team (http://blog.zeed.com.cn)
|
||
* @since 2011-5-11
|
||
* @version SVN: $Id$
|
||
*/
|
||
|
||
/**
|
||
* 内部API入口抽象
|
||
*/
|
||
abstract class Com_Controller_InternalApi extends Zeed_Controller_Action
|
||
{
|
||
/**
|
||
* OAuth 请求
|
||
* @var Zeed_OAuth_Request
|
||
*/
|
||
protected $_oauthRequest;
|
||
|
||
/**
|
||
* OAuth 请求参数
|
||
* @var array
|
||
*/
|
||
protected $_oauthParameters;
|
||
|
||
/**
|
||
* API入口名称
|
||
* @var string
|
||
*/
|
||
protected $_apiNameSpace = 'InternalApi';
|
||
|
||
/**
|
||
* API是否需要使用CONSUMER作为TOKEN，否则调用时TOKEN为NULL
|
||
* @var boolean
|
||
*/
|
||
protected $_useKeyAsToken = false;
|
||
|
||
/**
|
||
* api配置文件
|
||
* @var unknown_type
|
||
*/
|
||
private $apimap = 'internalapimap';
|
||
|
||
public function index()
|
||
{
|
||
//检查方法是否存在
|
||
$method = $this->getParam('__REQUEST_METHOD__');
|
||
if (empty($method)) {
|
||
$this->_MethodNotFound();
|
||
exit();
|
||
}
|
||
try {
|
||
$parameters = $this->validatePermission($method);
|
||
} catch (Exception $e) {
|
||
$errorCode = $e->getCode() ? $e->getCode() : 20001;
|
||
$this->_UnauthorizedCall($e->getMessage(), $errorCode);
|
||
exit();
|
||
}
|
||
$config = Zeed_Config::loadGroup($this->apimap);
|
||
$api = $config[$method];
|
||
$className = $api['class'];
|
||
$methodName = $api['function'];
|
||
//$result = call_user_func(array($className,$methodName) ,$parameters);
|
||
$c = new $className($parameters);
|
||
$result = $c->$methodName();
|
||
|
||
$return = array('status'=>0, 'data'=>$result, 'error'=>null);
|
||
echo json_encode($return);
|
||
}
|
||
/**
|
||
* 检查当前调用者的KEY是否有权限访问指定方法
|
||
* @param string $method
|
||
* @throws Exception
|
||
*/
|
||
protected function validatePermission($method)
|
||
{
|
||
$request = Zeed_OAuth_Request::fromRequest();
|
||
$consumerKey = @$request->getParameter("oauth_consumer_key");
|
||
$secret = Com_KeyManager_Client::getInstance()->getKeySecret($consumerKey);
|
||
if ($secret === false) {
|
||
throw new Exception('Invalid consumer key', 20002);
|
||
}
|
||
$consumers = array($consumerKey => $secret);
|
||
$token = ($this->_useKeyAsToken) ? new Zeed_OAuth_Token($consumerKey, $secret) : null;
|
||
$parameters = Zeed_OAuth_InternalValidator::validate($consumers, $token, $request);
|
||
|
||
$permissions = Com_KeyManager_Client::getInstance()->getKeyPermissions($consumerKey);
|
||
if (! in_array($this->_apiNameSpace, $permissions) && ! in_array($this->_apiNameSpace . '/' . $method, $permissions)
|
||
&& ! in_array($method, $permissions)) { /*the last condition is added by sxy*/
|
||
throw new Exception('EW_OAUTH_NO_PERMISSION', 20006);
|
||
}
|
||
|
||
return $parameters;
|
||
}
|
||
|
||
protected function _MethodNotFound()
|
||
{
|
||
exit(json_encode(array('status' => - 1, 'data' => null, 'error' => 'Method Not Found')));
|
||
}
|
||
|
||
protected function _UnauthorizedCall($msg = 'Unauthorized Call', $code = 20001)
|
||
{
|
||
exit(json_encode(array('status' => $code, 'data' => null, 'error' => $msg)));
|
||
}
|
||
} |