Login & automatic membership system

.gitignore

@@ -42,3 +42,5 @@ package-lock.json
 index.php
 .DS_Store
 static/.DS_Store
+vendor
+composer.lock

.htaccess

@@ -5,3 +5,5 @@ RewriteRule ^gym_data$ gym_data.php?$1 [QSA,L]
 RewriteRule ^motd_data$ motd_data.php?$1 [QSA,L]
 RewriteRule ^weather_data$ weather_data.php?$1 [QSA,L]
 RewriteRule ^serviceWorker.min.js$ static/dist/js/serviceWorker.min.js?$1 [QSA,L]
+RewriteRule ^user$ user.php?$1 [QSA,L]
+RewriteRule ^discord-login$ discord-login.php?$1 [QSA,L]

DiscordAuth.php

@@ -0,0 +1,79 @@
+<?php
+
+require_once("config/config.php");
+require_once("DiscordRedirector.php");
+use EasyBib\OAuth2\Client\AuthorizationCodeGrant\ClientConfig;
+use EasyBib\OAuth2\Client\AuthorizationCodeGrant\ServerConfig;
+use EasyBib\OAuth2\Client\AuthorizationCodeGrant\AuthorizationCodeSession;
+use EasyBib\OAuth2\Client\AuthorizationCodeGrant\Authorization\AuthorizationResponse;
+use EasyBib\OAuth2\Client\Scope;
+use GuzzleHttp\Client;
+
+class DiscordAuth
+{
+    protected $oauthSession;
+    protected $resource;
+
+    protected function setUpOAuth()
+    {
+        $httpClient = new Client(['base_uri' => 'https://discordapp.com']);
+        $redirector = new DiscordRedirector($this);
+
+        global $discordBotClientId, $discordBotClientSecret, $discordBotRedirectUri;
+
+        $clientConfig = new ClientConfig([
+            'client_id' => $discordBotClientId,
+            'client_secret' => $discordBotClientSecret,
+            'redirect_uri' => $discordBotRedirectUri
+        ]);
+
+        $serverConfig = new ServerConfig([
+            'authorization_endpoint' => '/api/oauth2/authorize',
+            'token_endpoint' => '/api/oauth2/token',
+        ]);
+
+        $this->oauthSession = new AuthorizationCodeSession(
+            $httpClient,
+            $redirector,
+            $clientConfig,
+            $serverConfig
+        );
+
+        $scope = new Scope(['identify']);
+        $this->oauthSession->setScope($scope);
+    }
+
+    public function gotoDiscord()
+    {
+        $this->setUpOAuth();
+        return $this->oauthSession->authorize();
+    }
+
+    public function handleAuthorizationResponse()
+    {
+        $this->setUpOAuth();
+        $authorizationResponse = new AuthorizationResponse($_GET);
+        $this->oauthSession->handleAuthorizationResponse($authorizationResponse);
+    }
+
+    private function setUpResource()
+    {
+        if ($this->resource != null) {
+            return $this->resource;
+        }
+        $handler = \GuzzleHttp\HandlerStack::create();
+        $handler->before('http_errors', function ($callable) {
+            return new \EasyBib\Guzzle\BearerAuthMiddleware($callable, $this->oauthSession);
+        });
+        $this->resource = new \GuzzleHttp\Client([
+            'base_uri' => 'https://discordapp.com',
+            'handler' => $handler,
+        ]);
+    }
+
+    public function get($uri)
+    {
+        $this->setUpResource();
+        return $this->resource->get($uri)->getBody()->getContents();
+    }
+}

DiscordRedirector.php

@@ -0,0 +1,18 @@
+<?php
+
+require_once("vendor/autoload.php");
+use EasyBib\OAuth2\Client\AuthorizationCodeGrant\RedirectorInterface;
+
+class DiscordRedirector implements RedirectorInterface
+{
+    private $controller;
+
+    public function __construct()
+    {
+    }
+
+    public function redirect($url)
+    {
+        return header("Location: $url");
+    }
+}

composer.json

@@ -0,0 +1,7 @@
+{
+    "name": "Discord Login",
+    "description": "Discord Login for PMSF",
+    "require": {
+        "easybiblabs/oauth2-client-php": "^4.1"
+    }
+}

config/default.php

@@ -76,28 +76,103 @@
 $motdTitle = "";
 $motdContent = "";
 
+//-----------------------------------------------------
+// Login
+//-----------------------------------------------------
+
+$noNativeLogin = true;                                              // true/false - This will enable the built in login system.
+$domainName = '';                                                   // If this is empty, reset-password emails will use the domain name taken from the URL.
+
+$noDiscordLogin = true;                                             // true/false - This will enable login through discord.
+                                                                    // 1. Create a discord bot here -> https://discordapp.com/developers/applications/me
+                                                                    // 2. Install composer with "apt-get install composer".
+                                                                    // 3. Navigate to your website's root folder and type "composer install" to install the dependencies.
+                                                                    // 4. Add your callback-page as a REDIRECT URI to your discord bot. Should be the same as $discordBotRedirectUri.
+                                                                    // 5. Enter Client ID, Client Secret and Redirect URI below.
+$discordBotClientId = 0;
+$discordBotClientSecret = "";
+$discordBotRedirectUri = "https://example.com/discord-callback.php";
+
+$adminUsers = array('admin@example.com', 'Superadmin#13337');       // You can add multiple admins by adding them to the array.
+$logfile = '../members.log';                                        // Path to log file. Make sure this works as it will be your life saver if your db crashes.
+$daysMembershipPerQuantity = 31;                                    // How many days membership one selly quantity will give.
+$sellyPage = '';                                                    // Link to selly purchase page for membership renewal.
+$sellyWebhookSecret = '';                                           // Add a secret key at https://selly.gg/settings to make sure the payment webhook is sent from selly to prevent fake payments.
+                                                                    // Add the same key to the $sellyWebhookSecret variable.
+
 //-----------------------------------------------------
 // FRONTEND SETTINGS
 //-----------------------------------------------------
 
+if ($noNativeLogin === true && $noDiscordLogin == true ||  (($noNativeLogin === false || $noDiscordLogin === false) && !empty($_SESSION['user']->expire_timestamp) && $_SESSION['user']->expire_timestamp > time())) {
+
+    /*
+        THESE SETTINGS WILL BE APPLIED IF:
+            - LOGIN IS DISABLED
+            - LOGIN IS ENABLED AND THE USER IS LOGGED ON
+    */
+
+    /* Marker Settings */
+    $noExcludeMinIV = false;                                        // true/false
+    $noMinIV = false;                                               // true/false
+    $noMinLevel = false;                                            // true/false
+    $noHighLevelData = false;                                       // true/false
+
+    /* Notification Settings */
+    $noNotifyPokemon = false;                                       // true/false
+    $noNotifyRarity = false;                                        // true/false
+    $noNotifyIv = false;                                            // true/false
+    $noNotifyLevel = false;                                         // true/false
+    $noNotifyRaid = false;                                          // true/false
+    $noNotifySound = false;                                         // true/false
+    $noCriesSound = false;                                          // true/false
+    $noNotifyBounce = false;                                        // true/false
+    $noNotifyNotification = false;                                  // true/false
+
+    /* Style Settings */
+    $iconNotifySizeModifier = 15;                                   // 0, 15, 30, 45
+} else {
+
+    /*
+        THESE SETTINGS WILL BE APPLIED IF:
+            - LOGIN IS ENABLED AND THE USER IS NOT A DONATOR
+    */
+
+    /* Marker Settings */
+    $noExcludeMinIV = true;                                         // true/false
+    $noMinIV = true;                                                // true/false
+    $noMinLevel = true;                                             // true/false
+    $noHighLevelData = true;                                        // true/false
+
+    /* Notification Settings */
+    $noNotifyPokemon = true;                                        // true/false
+    $noNotifyRarity = true;                                         // true/false
+    $noNotifyIv = true;                                             // true/false
+    $noNotifyLevel = true;                                          // true/false
+    $noNotifyRaid = true;                                           // true/false
+    $noNotifySound = true;                                          // true/false
+    $noCriesSound = true;                                           // true/false
+    $noNotifyBounce = true;                                         // true/false
+    $noNotifyNotification = true;                                   // true/false
+
+    /* Style Settings */
+    $iconNotifySizeModifier = 0;                                    // 0, 15, 30, 45
+}
+
 /* Marker Settings */
 
 $noPokemon = false;                                                 // true/false
 $enablePokemon = 'true';                                            // true/false
 $noPokemonNumbers = false;                                          // true/false
-$noHighLevelData = false;                                           // true/false
 $noHidePokemon = false;                                             // true/false
 $hidePokemon = '[10, 13, 16, 19, 21, 29, 32, 41, 46, 48, 50, 52, 56, 74, 77, 96, 111, 133,
                   161, 163, 167, 177, 183, 191, 194, 168]';         // [] for empty
-$hidePokemonCoords = true;                                          // true/false
 
-$noExcludeMinIV = false;                                            // true/false
+$hidePokemonCoords = false;                                         // true/false
+
 $excludeMinIV = '[131, 143, 147, 148, 149, 248]';                   // [] for empty
 
-$noMinIV = false;                                                   // true/false
 $minIV = '0';                                                       // "0" for empty or a number
-
-$noMinLevel = false;                                                // true/false
 $minLevel = '0';                                                    // "0" for empty or a number
 
 $noBigKarp = false;                                                 // true/false
@@ -148,31 +223,22 @@
 
 /* Notification Settings */
 
-$noNotifyPokemon = false;                                           // true/false
 $notifyPokemon = '[201]';                                           // [] for empty
 
-$noNotifyRarity = false;                                            // true/false
 $notifyRarity = '[]';                                               // "Common", "Uncommon", "Rare", "Very Rare", "Ultra Rare"
 
-$noNotifyIv = false;                                                // true/false
 $notifyIv = '""';                                                   // "" for empty or a number
 
-$noNotifyLevel = false;                                             // true/false
 $notifyLevel = '""';                                                // "" for empty or a number
 
-$noNotifyRaid = false;                                              // true/false
 $notifyRaid = 5;                                                    // O to disable
 
-$noNotifySound = false;                                             // true/false
 $notifySound = 'false';                                             // true/false
 
-$noCriesSound = false;                                              // true/false
 $criesSound = 'false';                                              // true/false
 
-$noNotifyBounce = false;                                            // true/false
 $notifyBounce = 'true';                                             // true/false
 
-$noNotifyNotification = false;                                      // true/false
 $notifyNotification = 'true';                                       // true/false
 
 /* Style Settings */
@@ -189,7 +255,6 @@
 $iconSize = 0;                                                      // -8, 0, 10, 20
 
 $noIconNotifySizeModifier = false;                                  // true/false | Increase size of notified Pokemon
-$iconNotifySizeModifier = 15;                                       // 0, 15, 30, 45
 
 $noGymStyle = false;                                                // true/false
 $gymStyle = 'ingame';                                               // ingame, shield