AbstractFlow.php

<?php
namespace Flowpack\OAuth2\Client\Flow;

/*                                                                        *
 * This script belongs to the TYPO3 Flow package "Flowpack.OAuth2.Client".*
 *                                                                        *
 * It is free software; you can redistribute it and/or modify it under    *
 * the terms of the GNU General Public License, either version 3 of the   *
 * License, or (at your option) any later version.                        *
 *                                                                        *
 * The TYPO3 project - inspiring people to share!                         *
 *                                                                        */

use Flowpack\OAuth2\Client\Token\AbstractClientToken;
use Neos\Flow\Annotations as Flow;
use Neos\Flow\Security\Authentication\TokenInterface;
use Neos\Flow\Security\Account;
use Neos\Flow\Security\Policy\PolicyService;
use Neos\Flow\Validation\ValidatorResolver;
use Neos\Party\Domain\Repository\PartyRepository;

/**
 */
abstract class AbstractFlow implements FlowInterface
{

    /**
     * @Flow\Inject
     * @var \Neos\Flow\Security\Context
     */
    protected $securityContext;

    /**
     * @Flow\Inject
     * @var \Neos\Flow\Persistence\PersistenceManagerInterface
     */
    protected $persistenceManager;

    /**
     * @Flow\Inject
     * @var \Neos\Flow\Security\AccountRepository
     */
    protected $accountRepository;

    /**
     * @Flow\Inject
     * @var PartyRepository
     */
    protected $partyRepository;

    /**
     * @Flow\Inject
     * @var PolicyService
     */
    protected $policyService;

    /**
     * @Flow\Inject
     * @var ValidatorResolver
     */
    protected $validatorResolver;

    /**
     * Will contain the user data given by the remote authentication service.
     * So far, this would be, for example,
     *  'id' (2) => '100006517130975' (15)
     *  'name' (4) => 'Rainer Wein' (11)
     *  'first_name' (10) => 'Rainer' (6)
     *  'last_name' (9) => 'Wein' (4)
     *  'link' (4) => 'https://www.facebook.com/profile.php?id=100006517130975' (55)
     *  'birthday' (8) => '08/28/1980' (10)
     *  'gender' (6) => 'female' (6)
     *  'email' (5) => 'rainer_izygemu_wein@tfbnw.net' (29)
     *  'timezone' (8) => integer 1
     *  'locale' (6) => 'de_DE' (5)
     *  'updated_time' (12) => '2013-11-12T09:12:35+0000' (24)
     *
     * @var array
     */
    protected $authenticationServicesUserData = array();

    /**
     * 0 => 'email',
     * 1 => 'first_name',
     * 2 => 'last_name'
     *
     * @var array
     */
    protected $authenticationServicesFields = array();

    /**
     * @var array
     */
    protected $tokenForeignAccounts = array();

    /**
     * @param AbstractClientToken $token
     * @return TokenInterface
     */
    public function getTokenOfForeignAccountOf(AbstractClientToken $token)
    {
        $foreignAccount = $this->getForeignAccountFor($token);
        /** @var $token TokenInterface */
        foreach ($this->securityContext->getAuthenticationTokens() as $token) {
            if ($token->getAccount() === $foreignAccount) {
                return $token;
            }
        }
        return null;
    }

    /**
     * @param AbstractClientToken $token
     * @return Account
     */
    public function getForeignAccountFor(AbstractClientToken $token)
    {
        if (!array_key_exists((string)$token, $this->tokenForeignAccounts)) {
            if (!isset($this->authenticationServicesUserData[(string)$token])) {
                $this->initializeUserData($token);
            }
            $this->tokenForeignAccounts[(string)$token] = $this->accountRepository->findOneByAccountIdentifier($this->authenticationServicesUserData[(string)$token]['email']);
        }
        return $this->tokenForeignAccounts[(string)$token];
    }

    /**
     * @param TokenInterface $foreignAccountToken
     * @param AbstractClientToken $possibleOAuthTokenAuthenticatedWithoutParty
     */
    public function setPartyOfAuthenticatedTokenAndAttachToAccountFor(TokenInterface $foreignAccountToken, AbstractClientToken $possibleOAuthTokenAuthenticatedWithoutParty)
    {
        $oauthAccount = $possibleOAuthTokenAuthenticatedWithoutParty->getAccount();
        // TODO: this must be properly specifiable (the Roles to add)
        //$oauthAccount->setRoles();
        $oauthAccount->setParty($foreignAccountToken->getAccount()->getParty());
        $this->accountRepository->update($oauthAccount);
    }

    /**
     * This returns the (first) *authenticated* OAuth token which doesn't have a party attached.
     *
     *@return AbstractClientToken
     */
    public function getChargedAuthenticatedTokenHavingNoPartyAttached()
    {
        /** @var $token AbstractClientToken */
        foreach ((array)$this->securityContext->getAuthenticationTokensOfType($this->getTokenClassName()) as $token) {
            if ($token->getAuthenticationStatus() === TokenInterface::AUTHENTICATION_SUCCESSFUL
                && ($token->getAccount() === null || $token->getAccount()->getParty() === null)
            ) {
                return $token;
            }
        }
        return null;
    }
}