HOME

Mini Shell 1.0
DIR:/home/htlwork.com/www/dev/vantastic-barber/app/Libraries/Combank/Simplify/
Current File : /home/htlwork.com/www/dev/vantastic-barber/app/Libraries/Combank/Simplify/Simplify_HTTP.php
<?php
/*
 * Copyright (c) 2013, MasterCard International Incorporated
 * All rights reserved.
 * 
 * Redistribution and use in source and binary forms, with or without modification, are 
 * permitted provided that the following conditions are met:
 * 
 * Redistributions of source code must retain the above copyright notice, this list of 
 * conditions and the following disclaimer.
 * Redistributions in binary form must reproduce the above copyright notice, this list of 
 * conditions and the following disclaimer in the documentation and/or other materials 
 * provided with the distribution.
 * Neither the name of the MasterCard International Incorporated nor the names of its 
 * contributors may be used to endorse or promote products derived from this software 
 * without specific prior written permission.
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY 
 * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 
 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT 
 * SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, 
 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
 * TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; 
 * OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER 
 * IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING 
 * IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 
 * SUCH DAMAGE.
 */
namespace App\Libraries\Combank\Simplify;   

use Exception; 
use InvalidArgumentException;

use App\Libraries\Combank\Simplify;   			
use App\Libraries\Combank\Simplify\Simplify_Constants;		
// use App\Libraries\Combank\Simplify\Simplify_ApiException;   		

class Simplify_HTTP
{
    const DELETE = "DELETE";
    const GET = "GET";
    const POST = "POST";
    const PUT = "PUT";

    const HTTP_SUCCESS = 200;
    const HTTP_REDIRECTED = 302;
    const HTTP_UNAUTHORIZED = 401;
    const HTTP_NOT_FOUND = 404;
    const HTTP_NOT_ALLOWED = 405;
    const HTTP_BAD_REQUEST = 400;


    const JWS_NUM_HEADERS         = 7;
    const JWS_ALGORITHM           = 'HS256';
    const JWS_TYPE                = 'JWS';
    const JWS_HDR_UNAME           = 'uname';
    const JWS_HDR_URI             = 'api.simplifycommerce.com/uri';
    const JWS_HDR_TIMESTAMP       = 'api.simplifycommerce.com/timestamp';
    const JWS_HDR_NONCE           = 'api.simplifycommerce.com/nonce';
    const JWS_MAX_TIMESTAMP_DIFF  = 300; // 5 minutes in seconds

    static private $_validMethods = array(
        "post" => self::POST,
        "put" => self::PUT,
        "get" => self::GET,
        "delete" => self::DELETE);

    public function request($url, $method, $publicKey, $privateKey, $payload = '')
    {
        if ($publicKey == null) {
            throw new InvalidArgumentException('Must have a valid public key to connect to the API');
        }

        if ($privateKey == null) {
            throw new InvalidArgumentException('Must have a valid API key to connect to the API');
        }

        if (!array_key_exists(strtolower($method), self::$_validMethods)) {
            throw new InvalidArgumentException('Invalid method: '.strtolower($method));
        }

        $method = self::$_validMethods[strtolower($method)];

        $curl = curl_init();

        $options = array();

        $options[CURLOPT_URL] = $url;
        $options[CURLOPT_CUSTOMREQUEST] = $method;
        $options[CURLOPT_RETURNTRANSFER] = true;
        $options[CURLOPT_FAILONERROR] = false;

        $signature = $this->jwsEncode($publicKey, $privateKey, $url, $payload, $method == self::POST || $method == self::PUT);

        if ($method == self::POST || $method == self::PUT) {
            $headers = array(
                 'Content-type: application/json'
            );
            $options[CURLOPT_POSTFIELDS] = $signature;
        } else {
            $headers = array(
                 'Authorization: JWS ' . $signature
            );
        }

        array_push($headers, 'Accept: application/json');
        $user_agent = 'PHP-SDK/' . Simplify_Constants::VERSION;
        if (Simplify::$userAgent != null) {
            $user_agent = $user_agent . ' ' . Simplify::$userAgent;
        }
        array_push($headers, 'User-Agent: ' . $user_agent);

        $options[CURLOPT_HTTPHEADER] = $headers;

        curl_setopt_array($curl, $options);

        $data = curl_exec($curl);
        $errno = curl_errno($curl);
        $status = curl_getinfo($curl, CURLINFO_HTTP_CODE);
        
        if ($data == false || $errno != CURLE_OK) {
            throw new Simplify_ApiConnectionException(curl_error($curl));
        }

        $object = json_decode($data, true);

        if ($status == self::HTTP_SUCCESS) {
            curl_close($curl);
            return $object;
        }

        if ($status == self::HTTP_REDIRECTED) {
            curl_close($curl);
            throw new Simplify_BadRequestException("Unexpected response code returned from the API, have you got the correct URL?", $status, $object);
        } else if ($status == self::HTTP_BAD_REQUEST) {
            curl_close($curl);
            throw new Simplify_BadRequestException("Bad request", $status, $object);
        } else if ($status == self::HTTP_UNAUTHORIZED) {
            curl_close($curl);
            throw new Simplify_AuthenticationException("You are not authorized to make this request.  Are you using the correct API keys?", $status, $object);
        } else if ($status == self::HTTP_NOT_FOUND) {
            curl_close($curl);
            throw new Simplify_ObjectNotFoundException("Object not found", $status, $object);
        } else if ($status == self::HTTP_NOT_ALLOWED) {
            curl_close($curl);
            throw new Simplify_NotAllowedException("Operation not allowed", $status, $object);
        } else if ($status < 500) {
            curl_close($curl);
            throw new Simplify_BadRequestException("Bad request", $status, $object);
        }

        curl_close($curl);
        throw new Simplify_SystemException("An unexpected error has been raised.  Looks like there's something wrong at our end." , $status, $object);

    }


    public function jwsDecode($publicKey, $privateKey, $hash)
    {
        if ($publicKey == null) {
            throw new InvalidArgumentException('Must have a valid public key to connect to the API');
        }

        if ($privateKey == null) {
            throw new InvalidArgumentException('Must have a valid API key to connect to the API');
        }

        if (!isset($hash['payload'])) {
            throw new InvalidArgumentException('Event data is Missing payload');
        }
        $payload = trim($hash['payload']);
        

        try {
            $parts = explode('.', $payload);
            if (count($parts) != 3) {
                $this->jwsAuthError("Incorrectly formatted JWS message");
            }
    
            $headerStr = $this->jwsUrlSafeDecode64($parts[0]);
            $bodyStr = $this->jwsUrlSafeDecode64($parts[1]);
            $sigStr = $parts[2];

            $url = null;
            if (isset($hash['url'])) {
                $url = $hash['url'];
            }
            $this->jwsVerifyHeader($headerStr, $url, $publicKey);

            $msg = $parts[0] . "." . $parts[1];
            if (!$this->jwsVerifySignature($privateKey, $msg, $sigStr)) {
                $this->jwsAuthError("JWS signature does not match");
            }
            
            return $bodyStr;

        } catch (ApiException $e) {
            throw $e;
        } catch (Exception $e) {
            $this->jwsAuthError("Exception during JWS decoding: " . $e);
        }

    }

    private function jwsEncode($publicKey, $privateKey, $url, $payload, $hasPayload)
    {
        // TODO - better seeding of RNG
        $jws_hdr = array('typ' => self::JWS_TYPE,
                          'alg' => self::JWS_ALGORITHM,
                          'kid' => $publicKey,
                          self::JWS_HDR_URI => $url,
                          self::JWS_HDR_TIMESTAMP => sprintf("%u000", round(microtime(true))),
                          self::JWS_HDR_NONCE => sprintf("%u", mt_rand()),
    	);

        $header = $this->jwsUrlSafeEncode64(json_encode($jws_hdr));

        if ($hasPayload) {
            $payload = $this->jwsUrlSafeEncode64($payload);
        } else {
            $payload = '';
        }

        $msg = $header . "." . $payload;
        return $msg . "." . $this->jwsSign($privateKey, $msg);
    }

    private function jwsSign($privateKey, $msg) {
        $decodedPrivateKey = $this->jwsUrlSafeDecode64($privateKey);
        $sig = hash_hmac('sha256', $msg, $decodedPrivateKey, true);

        return $this->jwsUrlSafeEncode64($sig);
    }

    private function jwsVerifyHeader($header, $url, $publicKey) {

	    $hdr = json_decode($header, true);

	    if (count($hdr) != self::JWS_NUM_HEADERS) {
		    $this->jwsAuthError("Incorrect number of JWS header parameters - found " . count($hdr) . " required " . self::JWS_NUM_HEADERS);
        }

	    if ($hdr['alg'] != self::JWS_ALGORITHM) {
		    $this->jwsAuthError("Incorrect algorithm - found " . $hdr['alg'] . " required " . self::WS_ALGORITHM);
        }

	    if ($hdr['typ'] != self::JWS_TYPE) {
		    $this->jwsAuthError("Incorrect type - found " . $hdr['typ'] . " required " . self::JWS_TYPE);
        }

	    if ($hdr['kid'] == null) {
		    $this->jwsAuthError("Missing Key ID");
	    }

	    if ($hdr['kid'] != $publicKey) {
	        if ($this->isLiveKey($publicKey)) {
	            $this->jwsAuthError("Invalid Key ID");
            }
        }   

	    if ($hdr[self::JWS_HDR_URI] == null) {
		    $this->jwsAuthError("Missing URI");
        }

	    if ($url != null && $hdr[self::JWS_HDR_URI] != $url) {
	        $this->jwsAuthError("Incorrect URL - found " . $hdr[self::JWS_HDR_URI] . " required " . $url);
        }


	    if ($hdr[self::JWS_HDR_TIMESTAMP] == null) {
		    $this->jwsAuthError("Missing timestamp");
        }

	    if (!$this->jwsVerifyTimestamp($hdr[self::JWS_HDR_TIMESTAMP])) {
		    $this->jwsAuthError("Invalid timestamp");
	    }
  
	    if ($hdr[self::JWS_HDR_NONCE] == null) {
		    $this->jwsAuthError("Missing nonce");
        }

	    if ($hdr[self::JWS_HDR_UNAME] == null) {
		    $this->jwsAuthError("Missing username");
        }
    }


    private function jwsVerifySignature($privateKey, $msg, $expectedSig) {
        return $this->jwsSign($privateKey, $msg) == $expectedSig;
    }

    private function jwsAuthError($reason) {
        throw new Simplify_AuthenticationException("JWS authentication failure: " . $reason);
    }

    private function jwsVerifyTimestamp($ts) {
        $now = round(microtime(true)); // Seconds
        return abs($now - $ts / 1000) < self::JWS_MAX_TIMESTAMP_DIFF;
    }

    private function isLiveKey($k) {
        return strpos($k, "lvpb") === 0;
    }
  
    private function jwsUrlSafeEncode64($s) {
        return str_replace(array('+', '/', '='),
                           array('-', '_', ''),
                           base64_encode($s));
    }

    private function jwsUrlSafeDecode64($s) {

        switch (strlen($s) % 4) {
            case 0: break;
            case 2: $s = $s . "==";
                    break;
            case 3: $s = $s . "=";
                    break;
            default: throw new InvalidArgumentException('incorrecly formatted JWS payload');
        }
        return base64_decode(str_replace(array('-', '_'), array('+', '/'), $s));
    }   

}


class Simplify_ApiException extends Exception
{

    protected $errorData;
    protected $status;
    protected $errorCode;
    protected $reference;

    /**
     * @ignore
     */
    function __construct($message, $status = null, $errorData = null) {
        parent::__construct($message);

        $this->status = $status;
        $this->errorCode = null;
        $this->reference = null;

        if ($errorData != null) {
            
            $this->reference = $errorData['reference'];
            $this->errorData = $errorData;

            $error = $errorData['error'];            
            if ($error != null) {
    
                $m = $error['message'];
                if ($m != null) {
                    $this->message = $m;
                }

                $this->errorCode = $error['code'];
            }
        }
    }
    
    /**
     * Returns a map of all error data returned by the API.
     * @return array a map containing API error data.
     */
    function getErrorData() {
        return $this->errorData;
    }

    /**
     * Returns the HTTP status for the request.
     * @return string HTTP status code (or null if there is no status).
     */
    function getStatus() {
        return $this->status;
    }
    
    /**
     * Returns unique reference for the API error.
     * @return string a reference (or null if there is no reference).
     */
    function getReference() {
        return $this->reference;
    }

    /**
     * Returns an code for the API error.
     * @return string the error code.
     */
    function getErrorCode() {
        return $this->errorCode;
    }

    /**
     * Returns a description of the error.
     * @return string Description of the error.
     */
    function describe() {
        return get_class($this) . ": \"" 
            . $this->getMessage() . "\" (status: "
            . $this->getStatus() . ", error code: "
            . $this->getErrorCode() . ", reference: "
            . $this->getReference() . ")";
    }

}


/**
 * Exception raised when there are communication problems contacting the API.
 */
class Simplify_ApiConnectionException extends Simplify_ApiException {

    /**
     * @ignore
     */
    function __construct($message, $status = null, $errorData = null) {
        parent::__construct($message, $status, $errorData);
    }
}

/**
 * Exception raised where there are problems authenticating a request.
 */
class Simplify_AuthenticationException extends Simplify_ApiException {

    /**
     * @ignore
     */
    function __construct($message, $status = null, $errorData = null) {
        parent::__construct($message, $status, $errorData);
    }
}

/**
 * Exception raised when the API request contains errors.
 */
class Simplify_BadRequestException extends Simplify_ApiException {

    protected $fieldErrors;

    /**
     * @ignore
     */
    function __construct($message, $status = null, $errorData = null) {
        parent::__construct($message, $status, $errorData);

        $fieldErrors = array();

        if ($errorData != null) {
            $error = $errorData['error'];
            if ($error != null) {
                $fieldErrors = $error['fieldErrors'];
                if ($fieldErrors != null) {
                    $this->fieldErrors = array();                
                    foreach ($fieldErrors as $fieldError) {
                        array_push($this->fieldErrors, new Simplify_FieldError($fieldError));
                    }
                }
            }
        }
    }

    /**
     * Returns a boolean indicating whether there are any field errors.
     * @return boolean true if there are field errors; false otherwise.
     */
    function hasFieldErrors() {
        return true;
        return count($this->fieldErrors) > 0;
    }

    /**
     * Returns a list containing all field errors.
     * @return array list of field errors.
     */
    function getFieldErrors() {
        return $this->fieldErrors;
    }

    /**
     * Returns a description of the error.
     * @return string description of the error.
     */
    function describe() {
        $s = parent::describe();
        foreach ($this->getFieldErrors() as $fieldError) {
            $s = $s . "\n" . (string) $fieldError;
        }
        return $s . "\n";
    }

}

/**
 * Represents a single error in a field of a request sent to the API.
 */
class Simplify_FieldError {

    protected $field;
    protected $code;
    protected $message;

    /**
     * @ignore
     */
    function __construct($errorData) {
    
        $this->field = $errorData['field'];
        $this->code = $errorData['code'];
        $this->message = $errorData['message'];
    }

    /**
     * Returns the name of the field with the error.
     * @return string the field name.
     */
    function getFieldName() {
        return $this->field;
    }

    /**
     * Returns the code for the error.
     * @return string the error code.
     */
    function getErrorCode() {
        return $this->code;
    }

    /**
     * Returns a description of the error.
     * @return string description of the error.
     */
    function getMessage() {
        return $this->message;
    }


    function __toString() {
        return "Field error: " . $this->getFieldName() . "\"" . $this->getMessage() . "\" (" . $this->getErrorCode() . ")";
    }

}

/**
 * Exception when a requested object cannot be found.
 */
class Simplify_ObjectNotFoundException extends Simplify_ApiException {

    /**
     * @ignore
     */
    function __construct($message, $status = null, $errorData = null) {
        parent::__construct($message, $status, $errorData);
    }
}

/**
 * Exception when a request was not allowed.
 */
class Simplify_NotAllowedException extends Simplify_ApiException {

    /**
     * @ignore
     */
    function __construct($message, $status = null, $errorData = null) {
        parent::__construct($message, $status, $errorData);
    }
}

/**
 * Exception when there was a system error processing a request.
 */
class Simplify_SystemException extends Simplify_ApiException {

    /**
     * @ignore
     */
    function __construct($message, $status = null, $errorData = null) {
        parent::__construct($message, $status, $errorData);
    }
}