You can not select more than 25 topics
			Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
		
		
		
		
		
			
		
			
				
					
					
						
							905 lines
						
					
					
						
							26 KiB
						
					
					
				
			
		
		
		
			
			
			
				
					
				
				
					
				
			
		
		
	
	
							905 lines
						
					
					
						
							26 KiB
						
					
					
				
								<?php
							 | 
						|
								use Abraham\TwitterOAuth\TwitterOAuth;
							 | 
						|
								use IndieWeb\DateFormatter;
							 | 
						|
								
							 | 
						|
								function require_login(&$app, $redirect=true) {
							 | 
						|
								  $params = $app->request()->params();
							 | 
						|
								  if(array_key_exists('token', $params)) {
							 | 
						|
								    try {
							 | 
						|
								      $data = JWT::decode($params['token'], Config::$jwtSecret, array('HS256'));
							 | 
						|
								      $_SESSION['user_id'] = $data->user_id;
							 | 
						|
								      $_SESSION['me'] = $data->me;
							 | 
						|
								    } catch(DomainException $e) {
							 | 
						|
								      if($redirect) {
							 | 
						|
								        header('X-Error: DomainException');
							 | 
						|
								        $app->redirect('/', 302);
							 | 
						|
								      } else {
							 | 
						|
								        return false;
							 | 
						|
								      }
							 | 
						|
								    } catch(UnexpectedValueException $e) {
							 | 
						|
								      if($redirect) {
							 | 
						|
								        header('X-Error: UnexpectedValueException');
							 | 
						|
								        $app->redirect('/', 302);
							 | 
						|
								      } else {
							 | 
						|
								        return false;
							 | 
						|
								      }
							 | 
						|
								    }
							 | 
						|
								  }
							 | 
						|
								
							 | 
						|
								  if(!array_key_exists('user_id', $_SESSION)) {
							 | 
						|
								    if($redirect)
							 | 
						|
								      $app->redirect('/', 302);
							 | 
						|
								    return false;
							 | 
						|
								  } else {
							 | 
						|
								    return ORM::for_table('users')->find_one($_SESSION['user_id']);
							 | 
						|
								  }
							 | 
						|
								}
							 | 
						|
								
							 | 
						|
								function generate_login_token($opts=[]) {
							 | 
						|
								  return JWT::encode(array_merge([
							 | 
						|
								    'user_id' => $_SESSION['user_id'],
							 | 
						|
								    'me' => $_SESSION['me'],
							 | 
						|
								    'created_at' => time()
							 | 
						|
								  ], $opts), Config::$jwtSecret);
							 | 
						|
								}
							 | 
						|
								
							 | 
						|
								$app->get('/dashboard', function() use($app) {
							 | 
						|
								  if($user=require_login($app)) {
							 | 
						|
								    render('dashboard', array(
							 | 
						|
								      'title' => 'Dashboard',
							 | 
						|
								      'authorizing' => false
							 | 
						|
								    ));
							 | 
						|
								  }
							 | 
						|
								});
							 | 
						|
								
							 | 
						|
								$app->get('/new', function() use($app) {
							 | 
						|
								  if($user=require_login($app)) {
							 | 
						|
								    $params = $app->request()->params();
							 | 
						|
								
							 | 
						|
								    $entry = false;
							 | 
						|
								    $in_reply_to = '';
							 | 
						|
								
							 | 
						|
								    if(array_key_exists('reply', $params))
							 | 
						|
								       $in_reply_to = $params['reply'];
							 | 
						|
								
							 | 
						|
								    $test_response = '';
							 | 
						|
								    if($user->last_micropub_response) {
							 | 
						|
								      try {
							 | 
						|
								        if(@json_decode($user->last_micropub_response)) {
							 | 
						|
								          $d = json_decode($user->last_micropub_response);
							 | 
						|
								          $test_response = $d->response;
							 | 
						|
								        }
							 | 
						|
								      } catch(Exception $e) {
							 | 
						|
								      }
							 | 
						|
								    }
							 | 
						|
								
							 | 
						|
								    render('new-post', array(
							 | 
						|
								      'title' => 'New Post',
							 | 
						|
								      'in_reply_to' => $in_reply_to,
							 | 
						|
								      'micropub_endpoint' => $user->micropub_endpoint,
							 | 
						|
								      'media_endpoint' => $user->micropub_media_endpoint,
							 | 
						|
								      'micropub_scope' => $user->micropub_scope,
							 | 
						|
								      'micropub_access_token' => $user->micropub_access_token,
							 | 
						|
								      'response_date' => $user->last_micropub_response_date,
							 | 
						|
								      'syndication_targets' => json_decode($user->syndication_targets, true),
							 | 
						|
								      'test_response' => $test_response,
							 | 
						|
								      'location_enabled' => $user->location_enabled,
							 | 
						|
								      'user' => $user,
							 | 
						|
								      'authorizing' => false
							 | 
						|
								    ));
							 | 
						|
								  }
							 | 
						|
								});
							 | 
						|
								
							 | 
						|
								$app->get('/new/last-photo.json', function() use($app) {
							 | 
						|
								  if($user=require_login($app)) {
							 | 
						|
								    $url = null;
							 | 
						|
								
							 | 
						|
								    if($user->micropub_media_endpoint) {
							 | 
						|
								      // Request the last file uploaded from the media endpoint
							 | 
						|
								      $response = micropub_get($user->micropub_media_endpoint, ['q'=>'last'], $user->micropub_access_token);
							 | 
						|
								      if(isset($response['data']['url'])) {
							 | 
						|
								        $url = $response['data']['url'];
							 | 
						|
								      }
							 | 
						|
								    }
							 | 
						|
								
							 | 
						|
								    $app->response()['Content-type'] = 'application/json';
							 | 
						|
								    $app->response()->body(json_encode(array(
							 | 
						|
								      'url' => $url
							 | 
						|
								    )));
							 | 
						|
								  }
							 | 
						|
								});
							 | 
						|
								
							 | 
						|
								$app->get('/bookmark', function() use($app) {
							 | 
						|
								  if($user=require_login($app)) {
							 | 
						|
								    $params = $app->request()->params();
							 | 
						|
								
							 | 
						|
								    $url = '';
							 | 
						|
								    $name = '';
							 | 
						|
								    $content = '';
							 | 
						|
								    $tags = '';
							 | 
						|
								
							 | 
						|
								    if(array_key_exists('url', $params))
							 | 
						|
								      $url = $params['url'];
							 | 
						|
								
							 | 
						|
								    if(array_key_exists('name', $params))
							 | 
						|
								      $name = $params['name'];
							 | 
						|
								
							 | 
						|
								    if(array_key_exists('content', $params))
							 | 
						|
								      $content = $params['content'];
							 | 
						|
								
							 | 
						|
								    render('new-bookmark', array(
							 | 
						|
								      'title' => 'New Bookmark',
							 | 
						|
								      'bookmark_url' => $url,
							 | 
						|
								      'bookmark_name' => $name,
							 | 
						|
								      'bookmark_content' => $content,
							 | 
						|
								      'bookmark_tags' => $tags,
							 | 
						|
								      'token' => generate_login_token(),
							 | 
						|
								      'syndication_targets' => json_decode($user->syndication_targets, true),
							 | 
						|
								      'user' => $user,
							 | 
						|
								      'authorizing' => false
							 | 
						|
								    ));
							 | 
						|
								  }
							 | 
						|
								});
							 | 
						|
								
							 | 
						|
								$app->get('/favorite', function() use($app) {
							 | 
						|
								  if($user=require_login($app)) {
							 | 
						|
								    $params = $app->request()->params();
							 | 
						|
								
							 | 
						|
								    $like_of = '';
							 | 
						|
								
							 | 
						|
								    if(array_key_exists('url', $params))
							 | 
						|
								      $like_of = $params['url'];
							 | 
						|
								
							 | 
						|
								    // Check if there was a login token in the query string and whether it has autosubmit=true
							 | 
						|
								    $autosubmit = false;
							 | 
						|
								
							 | 
						|
								    if(array_key_exists('token', $params)) {
							 | 
						|
								      try {
							 | 
						|
								        $data = JWT::decode($params['token'], Config::$jwtSecret, ['HS256']);
							 | 
						|
								        if(isset($data->autosubmit) && $data->autosubmit) {
							 | 
						|
								          // Only allow this token to be used for the user who created it
							 | 
						|
								          if($data->user_id == $_SESSION['user_id']) {
							 | 
						|
								            $autosubmit = true;
							 | 
						|
								          }
							 | 
						|
								        }
							 | 
						|
								      } catch(Exception $e) {
							 | 
						|
								      }
							 | 
						|
								    }
							 | 
						|
								
							 | 
						|
								    if(array_key_exists('edit', $params)) {
							 | 
						|
								      $edit_data = get_micropub_source($user, $params['edit'], 'like-of');
							 | 
						|
								      $url = $params['edit'];
							 | 
						|
								      if(isset($edit_data['like-of'])) {
							 | 
						|
								        $like_of = $edit_data['like-of'][0];
							 | 
						|
								      }
							 | 
						|
								    } else {
							 | 
						|
								      $edit_data = false;
							 | 
						|
								      $url = false;
							 | 
						|
								    }
							 | 
						|
								
							 | 
						|
								    render('new-favorite', array(
							 | 
						|
								      'title' => 'New Favorite',
							 | 
						|
								      'like_of' => $like_of,
							 | 
						|
								      'token' => generate_login_token(['autosubmit'=>true]),
							 | 
						|
								      'authorizing' => false,
							 | 
						|
								      'autosubmit' => $autosubmit,
							 | 
						|
								      'url' => $url
							 | 
						|
								    ));
							 | 
						|
								  }
							 | 
						|
								});
							 | 
						|
								
							 | 
						|
								$app->get('/event', function() use($app) {
							 | 
						|
								  if($user=require_login($app)) {
							 | 
						|
								    $params = $app->request()->params();
							 | 
						|
								
							 | 
						|
								    render('event', array(
							 | 
						|
								      'title' => 'Event',
							 | 
						|
								      'authorizing' => false
							 | 
						|
								    ));
							 | 
						|
								  }
							 | 
						|
								});
							 | 
						|
								
							 | 
						|
								$app->get('/itinerary', function() use($app) {
							 | 
						|
								  if($user=require_login($app)) {
							 | 
						|
								    $params = $app->request()->params();
							 | 
						|
								
							 | 
						|
								    render('new-itinerary', array(
							 | 
						|
								      'title' => 'Itinerary',
							 | 
						|
								      'authorizing' => false
							 | 
						|
								    ));
							 | 
						|
								  }
							 | 
						|
								});
							 | 
						|
								
							 | 
						|
								$app->get('/flight', function() use($app) {
							 | 
						|
								  if($user=require_login($app)) {
							 | 
						|
								    $params = $app->request()->params();
							 | 
						|
								
							 | 
						|
								    render('new-flight', array(
							 | 
						|
								      'title' => 'Flight',
							 | 
						|
								      'authorizing' => false
							 | 
						|
								    ));
							 | 
						|
								  }
							 | 
						|
								});
							 | 
						|
								
							 | 
						|
								$app->post('/flight', function() use($app) {
							 | 
						|
								  if($user=require_login($app)) {
							 | 
						|
								    $params = $app->request()->params();
							 | 
						|
								
							 | 
						|
								    $location = false;
							 | 
						|
								
							 | 
						|
								    if($params['action'] == 'find') {
							 | 
						|
								
							 | 
						|
								    } elseif($params['action'] == 'checkin') {
							 | 
						|
								
							 | 
						|
								      $payload = [
							 | 
						|
								        'type' => ['h-entry'],
							 | 
						|
								        'properties' => [
							 | 
						|
								          'checkin' => [
							 | 
						|
								            [
							 | 
						|
								              'type' => ['h-card'],
							 | 
						|
								              'properties' => [
							 | 
						|
								                'name' => [$params['flight']],
							 | 
						|
								                'url' => ['http://flightaware.com/live/flight/'.$params['flight']],
							 | 
						|
								              ]
							 | 
						|
								            ]
							 | 
						|
								          ]
							 | 
						|
								        ]
							 | 
						|
								      ];
							 | 
						|
								
							 | 
						|
								      $r = micropub_post_for_user($user, $payload, null, true);
							 | 
						|
								
							 | 
						|
								      $location = $r['location'];
							 | 
						|
								
							 | 
						|
								      if($location) {
							 | 
						|
								        // Store the checkin in the database to enable the cron job tracking the flight
							 | 
						|
								        $flight = ORM::for_table('flights')->create();
							 | 
						|
								        $flight->user_id = $_SESSION['user_id'];
							 | 
						|
								        $flight->date_created = date('Y-m-d H:i:s');
							 | 
						|
								        $flight->active = 1;
							 | 
						|
								        $flight->url = $location;
							 | 
						|
								        $flight->flight = $params['flight'];
							 | 
						|
								        $flight->save();
							 | 
						|
								      }
							 | 
						|
								    }
							 | 
						|
								
							 | 
						|
								    $app->response()['Content-type'] = 'application/json';
							 | 
						|
								    $app->response()->body(json_encode(array(
							 | 
						|
								      'result' => 'ok',
							 | 
						|
								      'location' => $location
							 | 
						|
								    )));
							 | 
						|
								  }
							 | 
						|
								});
							 | 
						|
								
							 | 
						|
								$app->get('/flight/:id/:flightID/route.json', function($id, $flightID) use($app) {
							 | 
						|
								  $route = false;
							 | 
						|
								
							 | 
						|
								  $flight = ORM::for_table('flights')->where('id', $id)->find_one();
							 | 
						|
								  if($flight) {
							 | 
						|
								    $lastPosition = json_decode($flight->lastposition, true);
							 | 
						|
								    if($lastPosition['InFlightInfoResult']['faFlightID'] == $flightID) {
							 | 
						|
								
							 | 
						|
								      // {"type":"FeatureCollection","features":[{"type":"Feature","geometry":{"type":"Point","coordinates":[-122.638351,45.52217]},"properties":{"date":"2016-01-02T23:13:49Z","altitude":42.666666666667}}
							 | 
						|
								
							 | 
						|
								      $route = [
							 | 
						|
								        'type' => 'FeatureCollection',
							 | 
						|
								        'features' => []
							 | 
						|
								      ];
							 | 
						|
								
							 | 
						|
								      $positions = json_decode($flight->positions, true);
							 | 
						|
								      foreach($positions as $p) {
							 | 
						|
								        $route['features'][] = [
							 | 
						|
								          'type' => 'Feature',
							 | 
						|
								          'geometry' => [
							 | 
						|
								            'type' => 'Point',
							 | 
						|
								            'coordinates' => [$p['lng'], $p['lat']]
							 | 
						|
								          ],
							 | 
						|
								          'properties' => [
							 | 
						|
								            'date' => $p['date'],
							 | 
						|
								            'altitude' => $p['altitude'],
							 | 
						|
								            'heading' => $p['heading'],
							 | 
						|
								            'speed' => $p['speed']
							 | 
						|
								          ]
							 | 
						|
								        ];
							 | 
						|
								      }
							 | 
						|
								
							 | 
						|
								    }
							 | 
						|
								  }
							 | 
						|
								
							 | 
						|
								  $app->response()['Content-type'] = 'application/json';
							 | 
						|
								  $app->response()->body(json_encode($route));
							 | 
						|
								});
							 | 
						|
								
							 | 
						|
								$app->get('/photo', function() use($app) {
							 | 
						|
								  if($user=require_login($app)) {
							 | 
						|
								    $params = $app->request()->params();
							 | 
						|
								
							 | 
						|
								    render('photo', array(
							 | 
						|
								      'title' => 'New Photo',
							 | 
						|
								      'note_content' => '',
							 | 
						|
								      'authorizing' => false
							 | 
						|
								    ));
							 | 
						|
								  }
							 | 
						|
								});
							 | 
						|
								
							 | 
						|
								$app->get('/review', function() use($app) {
							 | 
						|
								  if($user=require_login($app)) {
							 | 
						|
								    $params = $app->request()->params();
							 | 
						|
								
							 | 
						|
								    render('review', array(
							 | 
						|
								      'title' => 'Review',
							 | 
						|
								      'authorizing' => false
							 | 
						|
								    ));
							 | 
						|
								  }
							 | 
						|
								});
							 | 
						|
								
							 | 
						|
								$app->get('/repost', function() use($app) {
							 | 
						|
								  if($user=require_login($app)) {
							 | 
						|
								    $params = $app->request()->params();
							 | 
						|
								
							 | 
						|
								    $repost_of = '';
							 | 
						|
								
							 | 
						|
								    if(array_key_exists('url', $params))
							 | 
						|
								      $repost_of = $params['url'];
							 | 
						|
								
							 | 
						|
								    if(array_key_exists('edit', $params)) {
							 | 
						|
								      $edit_data = get_micropub_source($user, $params['edit'], 'repost-of');
							 | 
						|
								      $url = $params['edit'];
							 | 
						|
								      if(isset($edit_data['repost-of'])) {
							 | 
						|
								        $repost = $edit_data['repost-of'][0];
							 | 
						|
								        if(is_string($edit_data['repost-of'][0])) {
							 | 
						|
								          $repost_of = $repost;
							 | 
						|
								        } elseif(is_array($repost)) {
							 | 
						|
								          if(array_key_exists('type', $repost) && in_array('h-cite', $repost)) {
							 | 
						|
								            if(array_key_exists('url', $repost['properties'])) {
							 | 
						|
								              $repost_of = $repost['properties']['url'][0];
							 | 
						|
								            }
							 | 
						|
								          } else {
							 | 
						|
								            // Error
							 | 
						|
								          }
							 | 
						|
								        } else {
							 | 
						|
								          // Error: don't know what type of post this is
							 | 
						|
								        }
							 | 
						|
								      }
							 | 
						|
								    } else {
							 | 
						|
								      $edit_data = false;
							 | 
						|
								      $url = false;
							 | 
						|
								    }
							 | 
						|
								
							 | 
						|
								    render('new-repost', array(
							 | 
						|
								      'title' => 'New Repost',
							 | 
						|
								      'repost_of' => $repost_of,
							 | 
						|
								      'token' => generate_login_token(),
							 | 
						|
								      'authorizing' => false,
							 | 
						|
								      'url' => $url,
							 | 
						|
								    ));
							 | 
						|
								  }
							 | 
						|
								});
							 | 
						|
								
							 | 
						|
								$app->post('/prefs', function() use($app) {
							 | 
						|
								  if($user=require_login($app)) {
							 | 
						|
								    $params = $app->request()->params();
							 | 
						|
								    $user->location_enabled = $params['enabled'];
							 | 
						|
								    $user->save();
							 | 
						|
								  }
							 | 
						|
								  $app->response()['Content-type'] = 'application/json';
							 | 
						|
								  $app->response()->body(json_encode(array(
							 | 
						|
								    'result' => 'ok'
							 | 
						|
								  )));
							 | 
						|
								});
							 | 
						|
								
							 | 
						|
								$app->post('/prefs/timezone', function() use($app) {
							 | 
						|
								  // Called when the interface finds the user's location.
							 | 
						|
								  // Look up the timezone for this location and store it as their default.
							 | 
						|
								  $timezone = false;
							 | 
						|
								  if($user=require_login($app)) {
							 | 
						|
								    $params = $app->request()->params();
							 | 
						|
								    $timezone = p3k\Timezone::timezone_for_location($params['latitude'], $params['longitude']);
							 | 
						|
								    if($timezone) {
							 | 
						|
								      $user->default_timezone = $timezone;
							 | 
						|
								      $user->save();
							 | 
						|
								    }
							 | 
						|
								  }
							 | 
						|
								  $app->response()['Content-type'] = 'application/json';
							 | 
						|
								  $app->response()->body(json_encode(array(
							 | 
						|
								    'result' => 'ok',
							 | 
						|
								    'timezone' => $timezone,
							 | 
						|
								  )));
							 | 
						|
								});
							 | 
						|
								
							 | 
						|
								$app->get('/add-to-home', function() use($app) {
							 | 
						|
								  $params = $app->request()->params();
							 | 
						|
								  header("Cache-Control: no-cache, must-revalidate");
							 | 
						|
								
							 | 
						|
								  if(array_key_exists('token', $params) && !session('add-to-home-started')) {
							 | 
						|
								    unset($_SESSION['add-to-home-started']);
							 | 
						|
								
							 | 
						|
								    // Verify the token and sign the user in
							 | 
						|
								    try {
							 | 
						|
								      $data = JWT::decode($params['token'], Config::$jwtSecret, array('HS256'));
							 | 
						|
								      $_SESSION['user_id'] = $data->user_id;
							 | 
						|
								      $_SESSION['me'] = $data->me;
							 | 
						|
								      $app->redirect('/new', 302);
							 | 
						|
								    } catch(DomainException $e) {
							 | 
						|
								      header('X-Error: DomainException');
							 | 
						|
								      $app->redirect('/', 302);
							 | 
						|
								    } catch(UnexpectedValueException $e) {
							 | 
						|
								      header('X-Error: UnexpectedValueException');
							 | 
						|
								      $app->redirect('/', 302);
							 | 
						|
								    }
							 | 
						|
								
							 | 
						|
								  } else {
							 | 
						|
								
							 | 
						|
								    if($user=require_login($app)) {
							 | 
						|
								      if(array_key_exists('start', $params)) {
							 | 
						|
								        $_SESSION['add-to-home-started'] = true;
							 | 
						|
								
							 | 
						|
								        $token = JWT::encode(array(
							 | 
						|
								          'user_id' => $_SESSION['user_id'],
							 | 
						|
								          'me' => $_SESSION['me'],
							 | 
						|
								          'created_at' => time()
							 | 
						|
								        ), Config::$jwtSecret);
							 | 
						|
								
							 | 
						|
								        $app->redirect('/add-to-home?token='.$token, 302);
							 | 
						|
								      } else {
							 | 
						|
								        unset($_SESSION['add-to-home-started']);
							 | 
						|
								        render('add-to-home', array('title' => 'Quill'));
							 | 
						|
								      }
							 | 
						|
								    }
							 | 
						|
								  }
							 | 
						|
								});
							 | 
						|
								
							 | 
						|
								$app->get('/email', function() use($app) {
							 | 
						|
								  if($user=require_login($app)) {
							 | 
						|
								
							 | 
						|
								    $test_response = '';
							 | 
						|
								    if($user->last_micropub_response) {
							 | 
						|
								      try {
							 | 
						|
								        if(@json_decode($user->last_micropub_response)) {
							 | 
						|
								          $d = json_decode($user->last_micropub_response);
							 | 
						|
								          $test_response = $d->response;
							 | 
						|
								        }
							 | 
						|
								      } catch(Exception $e) {
							 | 
						|
								      }
							 | 
						|
								    }
							 | 
						|
								
							 | 
						|
								    if(!$user->email_username) {
							 | 
						|
								      $host = parse_url($user->url, PHP_URL_HOST);
							 | 
						|
								      $user->email_username = $host . '.' . rand(100000,999999);
							 | 
						|
								      $user->save();
							 | 
						|
								    }
							 | 
						|
								
							 | 
						|
								    render('email', array(
							 | 
						|
								      'title' => 'Post-by-Email',
							 | 
						|
								      'micropub_endpoint' => $user->micropub_endpoint,
							 | 
						|
								      'test_response' => $test_response,
							 | 
						|
								      'user' => $user
							 | 
						|
								    ));
							 | 
						|
								  }
							 | 
						|
								});
							 | 
						|
								
							 | 
						|
								$app->get('/settings', function() use($app) {
							 | 
						|
								  if($user=require_login($app)) {
							 | 
						|
								    render('settings', [
							 | 
						|
								      'title' => 'Settings',
							 | 
						|
								      'user' => $user,
							 | 
						|
								      'authorizing' => false
							 | 
						|
								    ]);
							 | 
						|
								  }
							 | 
						|
								});
							 | 
						|
								
							 | 
						|
								$app->post('/settings/save', function() use($app) {
							 | 
						|
								  if($user=require_login($app)) {
							 | 
						|
								    $params = $app->request()->params();
							 | 
						|
								
							 | 
						|
								    if(array_key_exists('html_content', $params))
							 | 
						|
								      $user->micropub_optin_html_content = $params['html_content'] ? 1 : 0;
							 | 
						|
								
							 | 
						|
								    if(array_key_exists('slug_field', $params) && $params['slug_field'])
							 | 
						|
								      $user->micropub_slug_field = $params['slug_field'];
							 | 
						|
								
							 | 
						|
								    if(array_key_exists('syndicate_field', $params) && $params['syndicate_field']) {
							 | 
						|
								      if(in_array($params['syndicate_field'], ['syndicate-to','mp-syndicate-to']))
							 | 
						|
								        $user->micropub_syndicate_field = $params['syndicate_field'];
							 | 
						|
								    }
							 | 
						|
								
							 | 
						|
								    $user->save();
							 | 
						|
								    $app->response()['Content-type'] = 'application/json';
							 | 
						|
								    $app->response()->body(json_encode(array(
							 | 
						|
								      'result' => 'ok'
							 | 
						|
								    )));
							 | 
						|
								  }
							 | 
						|
								});
							 | 
						|
								
							 | 
						|
								$app->post('/settings/html-content', function() use($app) {
							 | 
						|
								  if($user=require_login($app)) {
							 | 
						|
								    $params = $app->request()->params();
							 | 
						|
								    $user->micropub_optin_html_content = $params['html'] ? 1 : 0;
							 | 
						|
								    $user->save();
							 | 
						|
								    $app->response()['Content-type'] = 'application/json';
							 | 
						|
								    $app->response()->body(json_encode(array(
							 | 
						|
								      'html' => $user->micropub_optin_html_content
							 | 
						|
								    )));
							 | 
						|
								  }
							 | 
						|
								});
							 | 
						|
								$app->get('/settings/html-content', function() use($app) {
							 | 
						|
								  if($user=require_login($app)) {
							 | 
						|
								    $app->response()['Content-type'] = 'application/json';
							 | 
						|
								    $app->response()->body(json_encode(array(
							 | 
						|
								      'html' => $user->micropub_optin_html_content
							 | 
						|
								    )));
							 | 
						|
								  }
							 | 
						|
								});
							 | 
						|
								
							 | 
						|
								$app->get('/view', function() use($app) {
							 | 
						|
								  if($user=require_login($app)) {
							 | 
						|
								    $params = $app->request()->params();
							 | 
						|
								
							 | 
						|
								    $xray = new p3k\XRay();
							 | 
						|
								    $result = $xray->parse($params['url']);
							 | 
						|
								    if(isset($result['data']))
							 | 
						|
								      $entry = $result['data'];
							 | 
						|
								    else
							 | 
						|
								      $entry = [];
							 | 
						|
								
							 | 
						|
								    render('view-post', array(
							 | 
						|
								      'title' => 'View',
							 | 
						|
								      'entry' => $entry,
							 | 
						|
								      'authorizing' => false
							 | 
						|
								    ));
							 | 
						|
								  }
							 | 
						|
								});
							 | 
						|
								
							 | 
						|
								function create_favorite(&$user, $url) {
							 | 
						|
								
							 | 
						|
								  $tweet_id = false;
							 | 
						|
								  $twitter_syndication = false;
							 | 
						|
								
							 | 
						|
								  // POSSE favorites to Twitter
							 | 
						|
								  if($user->twitter_access_token && preg_match('/https?:\/\/(?:www\.)?twitter\.com\/[^\/]+\/status(?:es)?\/(\d+)/', $url, $match)) {
							 | 
						|
								    $tweet_id = $match[1];
							 | 
						|
								    $twitter = new TwitterOAuth(Config::$twitterClientID, Config::$twitterClientSecret,
							 | 
						|
								      $user->twitter_access_token, $user->twitter_token_secret);
							 | 
						|
								    $result = $twitter->post('favorites/create', array(
							 | 
						|
								      'id' => $tweet_id
							 | 
						|
								    ));
							 | 
						|
								    if(property_exists($result, 'id_str')) {
							 | 
						|
								      $twitter_syndication = 'https://twitter.com/'.$user->twitter_username.'/status/'.$result->id_str;
							 | 
						|
								    }
							 | 
						|
								  }
							 | 
						|
								
							 | 
						|
								  $micropub_request = array(
							 | 
						|
								    'like-of' => $url
							 | 
						|
								  );
							 | 
						|
								  if($twitter_syndication) {
							 | 
						|
								    $micropub_request['syndication'] = $twitter_syndication;
							 | 
						|
								  }
							 | 
						|
								  $r = micropub_post_for_user($user, $micropub_request);
							 | 
						|
								
							 | 
						|
								  return $r;
							 | 
						|
								}
							 | 
						|
								
							 | 
						|
								function edit_favorite(&$user, $post_url, $like_of) {
							 | 
						|
								  $micropub_request = [
							 | 
						|
								    'action' => 'update',
							 | 
						|
								    'url' => $post_url,
							 | 
						|
								    'replace' => [
							 | 
						|
								      'like-of' => [$like_of]
							 | 
						|
								    ]
							 | 
						|
								  ];
							 | 
						|
								  $r = micropub_post_for_user($user, $micropub_request, null, true);
							 | 
						|
								  return $r;
							 | 
						|
								}
							 | 
						|
								
							 | 
						|
								function create_repost(&$user, $url) {
							 | 
						|
								
							 | 
						|
								  $tweet_id = false;
							 | 
						|
								  $twitter_syndication = false;
							 | 
						|
								
							 | 
						|
								  if($user->twitter_access_token && preg_match('/https?:\/\/(?:www\.)?twitter\.com\/[^\/]+\/status(?:es)?\/(\d+)/', $url, $match)) {
							 | 
						|
								    $tweet_id = $match[1];
							 | 
						|
								    $twitter = new TwitterOAuth(Config::$twitterClientID, Config::$twitterClientSecret,
							 | 
						|
								      $user->twitter_access_token, $user->twitter_token_secret);
							 | 
						|
								    $result = $twitter->post('statuses/retweet/'.$tweet_id);
							 | 
						|
								    if(property_exists($result, 'id_str')) {
							 | 
						|
								      $twitter_syndication = 'https://twitter.com/'.$user->twitter_username.'/status/'.$result->id_str;
							 | 
						|
								    }
							 | 
						|
								  }
							 | 
						|
								
							 | 
						|
								  $micropub_request = array(
							 | 
						|
								    'repost-of' => $url
							 | 
						|
								  );
							 | 
						|
								  if($twitter_syndication) {
							 | 
						|
								    $micropub_request['syndication'] = $twitter_syndication;
							 | 
						|
								  }
							 | 
						|
								  $r = micropub_post_for_user($user, $micropub_request);
							 | 
						|
								
							 | 
						|
								  return $r;
							 | 
						|
								}
							 | 
						|
								
							 | 
						|
								function edit_repost(&$user, $post_url, $repost_of) {
							 | 
						|
								  $micropub_request = [
							 | 
						|
								    'action' => 'update',
							 | 
						|
								    'url' => $post_url,
							 | 
						|
								    'replace' => [
							 | 
						|
								      'repost-of' => [$repost_of]
							 | 
						|
								    ]
							 | 
						|
								  ];
							 | 
						|
								  $r = micropub_post_for_user($user, $micropub_request, null, true);
							 | 
						|
								  return $r;
							 | 
						|
								}
							 | 
						|
								
							 | 
						|
								$app->post('/favorite', function() use($app) {
							 | 
						|
								  if($user=require_login($app)) {
							 | 
						|
								    $params = $app->request()->params();
							 | 
						|
								
							 | 
						|
								    $error = false;
							 | 
						|
								
							 | 
						|
								    if(isset($params['edit']) && $params['edit']) {
							 | 
						|
								      $r = edit_favorite($user, $params['edit'], $params['like_of']);
							 | 
						|
								      if(isset($r['location']) && $r['location'])
							 | 
						|
								        $location = $r['location'];
							 | 
						|
								      elseif(in_array($r['code'], [200,201,204]))
							 | 
						|
								        $location = $params['edit'];
							 | 
						|
								      elseif(in_array($r['code'], [401,403])) {
							 | 
						|
								        $location = false;
							 | 
						|
								        $error = 'Your Micropub endpoint denied the request. Check that Quill is authorized to update posts.';
							 | 
						|
								      } else {
							 | 
						|
								        $location = false;
							 | 
						|
								        $error = 'Your Micropub endpoint did not return a location header or a recognized response code';
							 | 
						|
								      }
							 | 
						|
								    } else {
							 | 
						|
								      $r = create_favorite($user, $params['like_of']);
							 | 
						|
								      $location = $r['location'];
							 | 
						|
								    }
							 | 
						|
								
							 | 
						|
								    $app->response()['Content-type'] = 'application/json';
							 | 
						|
								    $app->response()->body(json_encode(array(
							 | 
						|
								      'location' => $location,
							 | 
						|
								      'error' => $r['error'],
							 | 
						|
								      'error_details' => $error,
							 | 
						|
								    )));
							 | 
						|
								  }
							 | 
						|
								});
							 | 
						|
								
							 | 
						|
								$app->post('/repost', function() use($app) {
							 | 
						|
								  if($user=require_login($app)) {
							 | 
						|
								    $params = $app->request()->params();
							 | 
						|
								
							 | 
						|
								    $error = false;
							 | 
						|
								
							 | 
						|
								    if(isset($params['edit']) && $params['edit']) {
							 | 
						|
								      $r = edit_repost($user, $params['edit'], $params['repost_of']);
							 | 
						|
								      if(isset($r['location']) && $r['location'])
							 | 
						|
								        $location = $r['location'];
							 | 
						|
								      elseif(in_array($r['code'], [200,201,204]))
							 | 
						|
								        $location = $params['edit'];
							 | 
						|
								      elseif(in_array($r['code'], [401,403])) {
							 | 
						|
								        $location = false;
							 | 
						|
								        $error = 'Your Micropub endpoint denied the request. Check that Quill is authorized to update posts.';
							 | 
						|
								      } else {
							 | 
						|
								        $location = false;
							 | 
						|
								        $error = 'Your Micropub endpoint did not return a location header or a recognized response code';
							 | 
						|
								      }
							 | 
						|
								    } else {
							 | 
						|
								      $r = create_repost($user, $params['repost_of']);
							 | 
						|
								      $location = $r['location'];
							 | 
						|
								    }
							 | 
						|
								
							 | 
						|
								    $app->response()['Content-type'] = 'application/json';
							 | 
						|
								    $app->response()->body(json_encode(array(
							 | 
						|
								      'location' => $location,
							 | 
						|
								      'error' => $r['error'],
							 | 
						|
								      'error_details' => $error,
							 | 
						|
								    )));
							 | 
						|
								  }
							 | 
						|
								});
							 | 
						|
								
							 | 
						|
								$app->get('/reply/preview', function() use($app) {
							 | 
						|
								  if($user=require_login($app)) {
							 | 
						|
								    $params = $app->request()->params();
							 | 
						|
								
							 | 
						|
								    if(!isset($params['url']) || !$params['url']) {
							 | 
						|
								      return '';
							 | 
						|
								    }
							 | 
						|
								
							 | 
						|
								    $reply_url = trim($params['url']);
							 | 
						|
								
							 | 
						|
								    if(preg_match('/twtr\.io\/([0-9a-z]+)/i', $reply_url, $match)) {
							 | 
						|
								      $twtr = 'https://twitter.com/_/status/' . sxg_to_num($match[1]);
							 | 
						|
								      $ch = curl_init($twtr);
							 | 
						|
								      curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
							 | 
						|
								      curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
							 | 
						|
								      curl_exec($ch);
							 | 
						|
								      $expanded_url = curl_getinfo($ch, CURLINFO_EFFECTIVE_URL);
							 | 
						|
								      if($expanded_url) $reply_url = $expanded_url;
							 | 
						|
								    }
							 | 
						|
								
							 | 
						|
								    $entry = false;
							 | 
						|
								
							 | 
						|
								    $xray_opts = [];
							 | 
						|
								
							 | 
						|
								    if(preg_match('/twitter\.com\/(?:[^\/]+)\/statuse?s?\/(.+)/', $reply_url, $match)) {
							 | 
						|
								      if($user->twitter_access_token) {
							 | 
						|
								        $xray_opts['twitter_api_key'] = Config::$twitterClientID;
							 | 
						|
								        $xray_opts['twitter_api_secret'] = Config::$twitterClientSecret;
							 | 
						|
								        $xray_opts['twitter_access_token'] = $user->twitter_access_token;
							 | 
						|
								        $xray_opts['twitter_access_token_secret'] = $user->twitter_token_secret;
							 | 
						|
								      }
							 | 
						|
								    }
							 | 
						|
								
							 | 
						|
								    // Pass to X-Ray to see if it can expand the entry
							 | 
						|
								    $xray = new p3k\XRay();
							 | 
						|
								    $xray->http = new p3k\HTTP('Quill ('.Config::$base_url.')');
							 | 
						|
								    $data = $xray->parse($reply_url, $xray_opts);
							 | 
						|
								    if($data && isset($data['data'])) {
							 | 
						|
								      if($data['data']['type'] == 'entry') {
							 | 
						|
								        $entry = $data['data'];
							 | 
						|
								      } elseif($data['data']['type'] == 'event') {
							 | 
						|
								        $entry = $data['data'];
							 | 
						|
								        $content = '';
							 | 
						|
								        if(isset($entry['start']) && isset($entry['end'])) {
							 | 
						|
								          $formatted = DateFormatter::format($entry['start'], $entry['end'], false);
							 | 
						|
								          if($formatted)
							 | 
						|
								            $content .= $formatted;
							 | 
						|
								          else {
							 | 
						|
								            $start = new DateTime($entry['start']);
							 | 
						|
								            $end = new DateTime($entry['end']);
							 | 
						|
								            if($start && $end)
							 | 
						|
								              $content .= 'from '.$start->format('Y-m-d g:ia').' to '.$end->format('Y-m-d g:ia');
							 | 
						|
								          }
							 | 
						|
								        } elseif(isset($entry['start'])) {
							 | 
						|
								          $formatted = DateFormatter::format($entry['start'], false, false);
							 | 
						|
								          if($formatted)
							 | 
						|
								            $content .= $formatted;
							 | 
						|
								          else {
							 | 
						|
								            $start = new DateTime($entry['start']);
							 | 
						|
								            if($start)
							 | 
						|
								              $content .= $start->format('Y-m-d g:ia');
							 | 
						|
								          }
							 | 
						|
								        }
							 | 
						|
								
							 | 
						|
								        $entry['content']['text'] = $content;
							 | 
						|
								      }
							 | 
						|
								      // Create a nickname based on the author URL
							 | 
						|
								      if($entry && array_key_exists('author', $entry)) {
							 | 
						|
								        if($entry['author']['url']) {
							 | 
						|
								          if(!isset($entry['author']['nickname']) || !$entry['author']['nickname'])
							 | 
						|
								            $entry['author']['nickname'] = display_url($entry['author']['url']);
							 | 
						|
								        }
							 | 
						|
								      }
							 | 
						|
								    }
							 | 
						|
								
							 | 
						|
								    $mentions = [];
							 | 
						|
								    if($entry) {
							 | 
						|
								      if(array_key_exists('author', $entry) && isset($entry['author']['nickname'])) {
							 | 
						|
								        // Find all @-names in the post, as well as the author name
							 | 
						|
								        $mentions[] = strtolower($entry['author']['nickname']);
							 | 
						|
								      }
							 | 
						|
								
							 | 
						|
								      if(isset($entry['content']) && $entry['content'] && isset($entry['content']['text'])) {
							 | 
						|
								        if(preg_match_all('/(^|(?<=[\s\/]))@([a-z0-9_]+([a-z0-9_\.]*)?)/i', $entry['content']['text'], $matches)) {
							 | 
						|
								          foreach($matches[0] as $nick) {
							 | 
						|
								            if(trim($nick,'@') != $user->twitter_username && trim($nick,'@') != display_url($user->url))
							 | 
						|
								              $mentions[] = strtolower(trim($nick,'@'));
							 | 
						|
								          }
							 | 
						|
								        }
							 | 
						|
								      }
							 | 
						|
								
							 | 
						|
								      $mentions = array_values(array_unique($mentions));
							 | 
						|
								    }
							 | 
						|
								
							 | 
						|
								    $syndications = [];
							 | 
						|
								    if($entry && isset($entry['syndication'])) {
							 | 
						|
								      foreach($entry['syndication'] as $s) {
							 | 
						|
								        $host = parse_url($s, PHP_URL_HOST);
							 | 
						|
								        switch($host) {
							 | 
						|
								          case 'twitter.com':
							 | 
						|
								          case 'www.twitter.com':
							 | 
						|
								            $icon = 'twitter.ico'; break;
							 | 
						|
								          case 'facebook.com':
							 | 
						|
								          case 'www.facebook.com':
							 | 
						|
								            $icon = 'facebook.ico'; break;
							 | 
						|
								          case 'github.com':
							 | 
						|
								          case 'www.github.com':
							 | 
						|
								            $icon = 'github.ico'; break;
							 | 
						|
								          default:
							 | 
						|
								            $icon = 'default.png'; break;
							 | 
						|
								        }
							 | 
						|
								        $syndications[] = [
							 | 
						|
								          'url' => $s,
							 | 
						|
								          'icon' => $icon
							 | 
						|
								        ];
							 | 
						|
								      }
							 | 
						|
								    }
							 | 
						|
								
							 | 
						|
								    $app->response()['Content-type'] = 'application/json';
							 | 
						|
								    $app->response()->body(json_encode([
							 | 
						|
								      'canonical_reply_url' => $reply_url,
							 | 
						|
								      'entry' => $entry,
							 | 
						|
								      'mentions' => $mentions,
							 | 
						|
								      'syndications' => $syndications,
							 | 
						|
								    ]));
							 | 
						|
								  }
							 | 
						|
								});
							 | 
						|
								
							 | 
						|
								$app->get('/edit', function() use($app) {
							 | 
						|
								  if($user=require_login($app)) {
							 | 
						|
								    $params = $app->request()->params();
							 | 
						|
								
							 | 
						|
								    if(!isset($params['url']) || !$params['url']) {
							 | 
						|
								      $app->response()->body('no URL specified');
							 | 
						|
								    }
							 | 
						|
								
							 | 
						|
								    // Query the micropub endpoint for the source properties
							 | 
						|
								    $source = micropub_get($user->micropub_endpoint, [
							 | 
						|
								        'q' => 'source',
							 | 
						|
								        'url' => $params['url']
							 | 
						|
								      ], $user->micropub_access_token);
							 | 
						|
								
							 | 
						|
								    $data = $source['data'];
							 | 
						|
								
							 | 
						|
								    if(array_key_exists('error', $data)) {
							 | 
						|
								      render('edit/error', [
							 | 
						|
								        'title' => 'Error',
							 | 
						|
								        'summary' => 'Your Micropub endpoint returned an error:',
							 | 
						|
								        'error' => $data['error'],
							 | 
						|
								        'error_description' => $data['error_description']
							 | 
						|
								      ]);
							 | 
						|
								      return;
							 | 
						|
								    }
							 | 
						|
								
							 | 
						|
								    if(!array_key_exists('properties', $data) || !array_key_exists('type', $data)) {
							 | 
						|
								      render('edit/error', [
							 | 
						|
								        'title' => 'Error',
							 | 
						|
								        'summary' => '',
							 | 
						|
								        'error' => 'Invalid Response',
							 | 
						|
								        'error_description' => 'Your endpoint did not return "properties" and "type" in the response.'
							 | 
						|
								      ]);
							 | 
						|
								      return;
							 | 
						|
								    }
							 | 
						|
								
							 | 
						|
								    // Start checking for content types
							 | 
						|
								    $type = $data['type'][0];
							 | 
						|
								    $error = false;
							 | 
						|
								    $url = false;
							 | 
						|
								
							 | 
						|
								    if($type == 'h-review') {
							 | 
						|
								      $url = '/review';
							 | 
						|
								    } elseif($type == 'h-event') {
							 | 
						|
								      $url = '/event';
							 | 
						|
								    } elseif($type != 'h-entry') {
							 | 
						|
								      $error = 'This type of post is not supported by any of Quill\'s editing interfaces. Type: '.$type;
							 | 
						|
								    } else {
							 | 
						|
								      if(array_key_exists('bookmark-of', $data['properties'])) {
							 | 
						|
								        $url = '/bookmark';
							 | 
						|
								      } elseif(array_key_exists('like-of', $data['properties'])) {
							 | 
						|
								        $url = '/favorite';
							 | 
						|
								      } elseif(array_key_exists('repost-of', $data['properties'])) {
							 | 
						|
								        $url = '/repost';
							 | 
						|
								      }
							 | 
						|
								    }
							 | 
						|
								
							 | 
						|
								    if($error) {
							 | 
						|
								      render('edit/error', [
							 | 
						|
								        'title' => 'Error',
							 | 
						|
								        'summary' => '',
							 | 
						|
								        'error' => 'There was a problem!',
							 | 
						|
								        'error_description' => $error
							 | 
						|
								      ]);
							 | 
						|
								      return;      
							 | 
						|
								    }
							 | 
						|
								
							 | 
						|
								    // Until all interfaces are complete, show an error here for unsupported ones
							 | 
						|
								    if(!in_array($url, ['/favorite','/repost'])) {
							 | 
						|
								      render('edit/error', [
							 | 
						|
								        'title' => 'Not Yet Supported',
							 | 
						|
								        'summary' => '',
							 | 
						|
								        'error' => 'Not Yet Supported',
							 | 
						|
								        'error_description' => 'Editing is not yet supported for this type of post.'
							 | 
						|
								      ]);
							 | 
						|
								      return;      
							 | 
						|
								    }
							 | 
						|
								
							 | 
						|
								    $app->redirect($url . '?edit=' . $params['url'], 302);
							 | 
						|
								  }
							 | 
						|
								});
							 |