From ca4588f1b8200ef93e1614f2274a960bbb9fd53e Mon Sep 17 00:00:00 2001
From: RaindropsSys <raindrops@equestria.dev>
Date: Sun, 12 Nov 2023 22:15:51 +0100
Subject: Updated 7 files (automated)

---
 .DS_Store                       | Bin 18436 -> 18436 bytes
 app/.DS_Store                   | Bin 6148 -> 6148 bytes
 assets/.DS_Store                | Bin 10244 -> 10244 bytes
 oauth/.DS_Store                 | Bin 6148 -> 6148 bytes
 oauth/callback-native/index.php |   6 +++---
 oauth/callback/index.php        |   4 +---
 profile/index.php               |   1 -
 7 files changed, 4 insertions(+), 7 deletions(-)

diff --git a/.DS_Store b/.DS_Store
index 97a165e..fab33f5 100644
Binary files a/.DS_Store and b/.DS_Store differ
diff --git a/app/.DS_Store b/app/.DS_Store
index eb8b571..251444b 100644
Binary files a/app/.DS_Store and b/app/.DS_Store differ
diff --git a/assets/.DS_Store b/assets/.DS_Store
index c61d89b..1026c09 100644
Binary files a/assets/.DS_Store and b/assets/.DS_Store differ
diff --git a/oauth/.DS_Store b/oauth/.DS_Store
index d23a8fa..053721e 100644
Binary files a/oauth/.DS_Store and b/oauth/.DS_Store differ
diff --git a/oauth/callback-native/index.php b/oauth/callback-native/index.php
index 5095734..c6a1327 100644
--- a/oauth/callback-native/index.php
+++ b/oauth/callback-native/index.php
@@ -1,5 +1,6 @@
 <?php
 
+var_dump("START");
 header("X-Frame-Options: DENY");
 $app = json_decode(file_get_contents($_SERVER['DOCUMENT_ROOT'] . "/includes/app.json"), true);
 $server = "account.equestria.dev";
@@ -38,9 +39,7 @@ if (isset($result["access_token"])) {
     $result = $result_orig = curl_exec($crl);
     $result = json_decode($result, true);
 
-    $isAllowed = in_array("5fe2cdf1-cff8-470e-a54a-ad1c713b0387", array_map(function ($i) { return $i["id"]; }, $result["transitiveGroups"]));
-
-    if (!$isAllowed) {
+    if (!in_array($result["id"], $app["allowed"])) {
         header("HTTP/1.1 403 Forbidden");
         die("Not allowed to log in to this application. This will be reported.");
     }
@@ -48,6 +47,7 @@ if (isset($result["access_token"])) {
     if (!file_exists($_SERVER['DOCUMENT_ROOT'] . "/includes/tokens")) mkdir($_SERVER['DOCUMENT_ROOT'] . "/includes/tokens");
 
     $token = "wv_" . bin2hex(random_bytes(64));
+
     file_put_contents($_SERVER['DOCUMENT_ROOT'] . "/includes/tokens/" . $token, $result_orig);
     header("Location: http://127.0.0.1:12981/?token=$token");
     die();
diff --git a/oauth/callback/index.php b/oauth/callback/index.php
index f57e124..bbb3322 100644
--- a/oauth/callback/index.php
+++ b/oauth/callback/index.php
@@ -38,9 +38,7 @@ if (isset($result["access_token"])) {
     $result = $result_orig = curl_exec($crl);
     $result = json_decode($result, true);
 
-    $isAllowed = in_array("5fe2cdf1-cff8-470e-a54a-ad1c713b0387", array_map(function ($i) { return $i["id"]; }, $result["transitiveGroups"]));
-
-    if (!$isAllowed) {
+    if (!in_array($result["id"], $app["allowed"])) {
         header("HTTP/1.1 403 Forbidden");
         die("Not allowed to log in to this application. This will be reported.");
     }
diff --git a/profile/index.php b/profile/index.php
index 1fb6ac3..2005b5f 100644
--- a/profile/index.php
+++ b/profile/index.php
@@ -164,7 +164,6 @@ function allowed(string $item): bool {
     <meta property="og:type" content="profile" />
     <meta property="og:title" content="<?= $available ? $userProfile['name'] . " (@" . $userProfile["login"] . ") on Mist" : "Mist" ?>" />
     <meta property="og:description" content="<?= $available ? "View " . $userProfile['name'] . "'s profile on Mist, including their favorite songs, listening history, and album library." : "Mist" ?>" />
-    <meta property="og:url" content="https://html.sammy-codes.com/" />
     <meta property="og:image" content="<?= $available ? "https://account.equestria.dev/hub/api/rest/avatar/" . $userProfile["id"] . "?dpr=2&size=64" : '' ?>" />
 </head>
 
-- 
cgit