Upload folder via GUI - includes

2026-06-05 22:23:21 +02:00
parent 54170fa514
commit 5d6c2d73be
4 changed files with 534 additions and 0 deletions
--- a/includes/oauth.php
+++ b/includes/oauth.php
@@ -0,0 +1,73 @@
+<?php
+if ( ! defined( 'ABSPATH' ) ) exit;
+
+function authentik_get_authorize_url() {
+    return get_option( 'authentik_oidc_authorize_url', '' );
+}
+
+function authentik_get_token_url() {
+    return get_option( 'authentik_oidc_token_url', '' );
+}
+
+function authentik_get_userinfo_url() {
+    return get_option( 'authentik_oidc_userinfo_url', '' );
+}
+
+function authentik_get_logout_url() {
+    return get_option( 'authentik_oidc_logout_url', '' );
+}
+
+function authentik_build_login_url() {
+    $s     = authentik_get_settings();
+    $state = wp_generate_password( 16, false );
+    set_transient( 'authentik_state_' . $state, 1, 300 );
+
+    $params = [
+        'response_type' => 'code',
+        'client_id'     => $s['client_id'],
+        'redirect_uri'  => $s['redirect_uri'],
+        'scope'         => 'openid email profile',
+        'state'         => $state,
+    ];
+
+    return authentik_get_authorize_url() . '?' . http_build_query( $params );
+}
+
+function authentik_exchange_code( $code ) {
+    $s   = authentik_get_settings();
+    $res = wp_remote_post( authentik_get_token_url(), [
+        'timeout' => (int) $s['timeout'],
+        'body'    => [
+            'grant_type'    => 'authorization_code',
+            'code'          => $code,
+            'redirect_uri'  => $s['redirect_uri'],
+            'client_id'     => $s['client_id'],
+            'client_secret' => $s['client_secret'],
+        ],
+    ] );
+
+    if ( is_wp_error( $res ) ) {
+        return new WP_Error( 'token_request_failed', $res->get_error_message() );
+    }
+
+    $body = json_decode( wp_remote_retrieve_body( $res ), true );
+    if ( empty( $body['access_token'] ) ) {
+        return new WP_Error( 'token_missing', 'Kein Access-Token erhalten.' );
+    }
+
+    return $body;
+}
+
+function authentik_get_userinfo( $access_token ) {
+    $s   = authentik_get_settings();
+    $res = wp_remote_get( authentik_get_userinfo_url(), [
+        'timeout' => (int) $s['timeout'],
+        'headers' => [ 'Authorization' => 'Bearer ' . $access_token ],
+    ] );
+
+    if ( is_wp_error( $res ) ) {
+        return new WP_Error( 'userinfo_failed', $res->get_error_message() );
+    }
+
+    return json_decode( wp_remote_retrieve_body( $res ), true );
+}