From 4d4308c46d4f7801c657cc79d2243e1a81831334 Mon Sep 17 00:00:00 2001
From: RaindropsSys <raindrops@equestria.dev>
Date: Fri, 27 Oct 2023 22:29:56 +0200
Subject: Updated 32 files, added 279 files, deleted 3 files and renamed 14
 files (automated)

---
 oauth/.DS_Store                 | Bin 6148 -> 6148 bytes
 oauth/callback-native/index.php |   3 ++-
 oauth/callback/index.php        |   3 ++-
 oauth/index.php                 |   2 +-
 oauth/init/index.php            |   3 ++-
 oauth/native/index.php          |   3 ++-
 oauth/needs-native/index.php    |   1 +
 7 files changed, 10 insertions(+), 5 deletions(-)

(limited to 'oauth')

diff --git a/oauth/.DS_Store b/oauth/.DS_Store
index f3ee465..b1ba7bb 100644
Binary files a/oauth/.DS_Store and b/oauth/.DS_Store differ
diff --git a/oauth/callback-native/index.php b/oauth/callback-native/index.php
index ea9993b..c5d0b44 100644
--- a/oauth/callback-native/index.php
+++ b/oauth/callback-native/index.php
@@ -1,5 +1,6 @@
 <?php
 
+header("X-Frame-Options: DENY");
 $app = json_decode(file_get_contents($_SERVER['DOCUMENT_ROOT'] . "/includes/app.json"), true);
 $server = "account.equestria.dev";
 
@@ -18,7 +19,7 @@ curl_setopt($crl, CURLOPT_HTTPHEADER, [
     "Content-Type: application/x-www-form-urlencoded",
     "Accept: application/json"
 ]);
-curl_setopt($crl, CURLOPT_POSTFIELDS, "grant_type=authorization_code&redirect_uri=" . urlencode(($_SERVER['SERVER_PORT'] === "8043" ? "http://localhost:8043" : "https://wavy.equestria.horse") . "/oauth/callback-native") . "&code=" . $_GET['code']);
+curl_setopt($crl, CURLOPT_POSTFIELDS, "grant_type=authorization_code&redirect_uri=" . urlencode(($_SERVER['SERVER_PORT'] === "8043" ? "https://mist-testing.equestria.horse" : "https://mist.equestria.horse") . "/oauth/callback-native") . "&code=" . $_GET['code']);
 
 $result = curl_exec($crl);
 $result = json_decode($result, true);
diff --git a/oauth/callback/index.php b/oauth/callback/index.php
index e879990..d65bced 100644
--- a/oauth/callback/index.php
+++ b/oauth/callback/index.php
@@ -1,5 +1,6 @@
 <?php
 
+header("X-Frame-Options: DENY");
 $app = json_decode(file_get_contents($_SERVER['DOCUMENT_ROOT'] . "/includes/app.json"), true);
 $server = "account.equestria.dev";
 
@@ -18,7 +19,7 @@ curl_setopt($crl, CURLOPT_HTTPHEADER, [
     "Content-Type: application/x-www-form-urlencoded",
     "Accept: application/json"
 ]);
-curl_setopt($crl, CURLOPT_POSTFIELDS, "grant_type=authorization_code&redirect_uri=" . urlencode(($_SERVER['SERVER_PORT'] === "8043" ? "http://localhost:8043" : "https://wavy.equestria.horse") . "/oauth/callback") . "&code=" . $_GET['code']);
+curl_setopt($crl, CURLOPT_POSTFIELDS, "grant_type=authorization_code&redirect_uri=" . urlencode(($_SERVER['SERVER_PORT'] === "8043" ? "https://mist-testing.equestria.horse" : "https://mist.equestria.horse") . "/oauth/callback") . "&code=" . $_GET['code']);
 
 $result = curl_exec($crl);
 $result = json_decode($result, true);
diff --git a/oauth/index.php b/oauth/index.php
index e381cbd..96cc545 100644
--- a/oauth/index.php
+++ b/oauth/index.php
@@ -1 +1 @@
-<?php header("Location: /oauth/init/") and die();
\ No newline at end of file
+<?php header("X-Frame-Options: DENY"); header("Location: /oauth/init/") and die();
\ No newline at end of file
diff --git a/oauth/init/index.php b/oauth/init/index.php
index 9a3ab52..f0696b2 100644
--- a/oauth/init/index.php
+++ b/oauth/init/index.php
@@ -1,7 +1,8 @@
 <?php
 
+header("X-Frame-Options: DENY");
 $app = json_decode(file_get_contents($_SERVER['DOCUMENT_ROOT'] . "/includes/app.json"), true);
 $server = "account.equestria.dev";
 
-header("Location: https://$server/hub/api/rest/oauth2/auth?client_id=" . $app["id"] . "&response_type=code&redirect_uri=" . ($_SERVER['SERVER_PORT'] === "8043" ? "http://localhost:8043" : "https://wavy.equestria.horse") . "/oauth/callback&scope=Hub&request_credentials=default&access_type=offline");
+header("Location: https://$server/hub/api/rest/oauth2/auth?client_id=" . $app["id"] . "&response_type=code&redirect_uri=" . ($_SERVER['SERVER_PORT'] === "8043" ? "https://mist-testing.equestria.horse" : "https://mist.equestria.horse") . "/oauth/callback&scope=Hub&request_credentials=default&access_type=offline");
 die();
diff --git a/oauth/native/index.php b/oauth/native/index.php
index bec74e2..9401489 100644
--- a/oauth/native/index.php
+++ b/oauth/native/index.php
@@ -1,7 +1,8 @@
 <?php
 
+header("X-Frame-Options: DENY");
 $app = json_decode(file_get_contents($_SERVER['DOCUMENT_ROOT'] . "/includes/app.json"), true);
 $server = "account.equestria.dev";
 
-header("Location: https://$server/hub/api/rest/oauth2/auth?client_id=" . $app["id"] . "&response_type=code&redirect_uri=" . ($_SERVER['SERVER_PORT'] === "8043" ? "http://localhost:8043" : "https://wavy.equestria.horse") . "/oauth/callback-native&scope=Hub&request_credentials=required&access_type=offline");
+header("Location: https://$server/hub/api/rest/oauth2/auth?client_id=" . $app["id"] . "&response_type=code&redirect_uri=" . ($_SERVER['SERVER_PORT'] === "8043" ? "https://mist-testing.equestria.horse" : "https://mist.equestria.horse") . "/oauth/callback-native&scope=Hub&request_credentials=required&access_type=offline");
 die();
diff --git a/oauth/needs-native/index.php b/oauth/needs-native/index.php
index 0de2bce..fe1345e 100644
--- a/oauth/needs-native/index.php
+++ b/oauth/needs-native/index.php
@@ -1,3 +1,4 @@
+<?php header("X-Frame-Options: DENY"); ?>
 <!doctype html>
 <html lang="en">
 <head>
-- 
cgit