diff options
Diffstat (limited to 'oauth/callback-native/index.php')
| -rw-r--r-- | oauth/callback-native/index.php | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/oauth/callback-native/index.php b/oauth/callback-native/index.php index 5095734..c6a1327 100644 --- a/oauth/callback-native/index.php +++ b/oauth/callback-native/index.php @@ -1,5 +1,6 @@ <?php +var_dump("START"); header("X-Frame-Options: DENY"); $app = json_decode(file_get_contents($_SERVER['DOCUMENT_ROOT'] . "/includes/app.json"), true); $server = "account.equestria.dev"; @@ -38,9 +39,7 @@ if (isset($result["access_token"])) { $result = $result_orig = curl_exec($crl); $result = json_decode($result, true); - $isAllowed = in_array("5fe2cdf1-cff8-470e-a54a-ad1c713b0387", array_map(function ($i) { return $i["id"]; }, $result["transitiveGroups"])); - - if (!$isAllowed) { + if (!in_array($result["id"], $app["allowed"])) { header("HTTP/1.1 403 Forbidden"); die("Not allowed to log in to this application. This will be reported."); } @@ -48,6 +47,7 @@ if (isset($result["access_token"])) { if (!file_exists($_SERVER['DOCUMENT_ROOT'] . "/includes/tokens")) mkdir($_SERVER['DOCUMENT_ROOT'] . "/includes/tokens"); $token = "wv_" . bin2hex(random_bytes(64)); + file_put_contents($_SERVER['DOCUMENT_ROOT'] . "/includes/tokens/" . $token, $result_orig); header("Location: http://127.0.0.1:12981/?token=$token"); die(); |