Subversion Repositories eFlore/Applications.cel

	}

	protected function decodeToken($token){

		$parts = explode('.', $token);

		$payload = $parts[1];

		$payload = $this->urlsafeB64Decode($payload);

		$payload = json_decode($payload, true);

		return $payload;

	}

	protected function urlsafeB64Decode($input) {

		$remainder = strlen($input) % 4;

		if ($remainder) {

			$padlen = 4 - $remainder;

			$input .= str_repeat('=', $padlen);

		}

		return base64_decode(strtr($input, '-_', '+/'));

	}

	protected function getUserFromCookie(){

		$cookie = $_COOKIE[$this->config['authentification']['cookieName']];

		if ($cookie){

			// Récupération de l'id et email de l'utilisateur connecté

			$tokenInfos = $this->decodeToken($cookie);

			$token = $this->refreshToken($cookie)['token'];

			$user = [

				'id' => $tokenInfos['id'],

				'email' => $tokenInfos['sub'],

				'token' => $token

			];

			return $user;

		}

	}

	protected function refreshToken($token) {

		$service = "auth/identite?token=" . $token;

		$verificationServiceURL = sprintf($this->config['chemins']['baseURLServicesAnnuaireTpl'], $service);

		$ch = curl_init();

		$cookie = $this->config['authentification']['cookieName'].'='.$token;

		$headr = array();

		$headr[] = 'Cookie: ' . $cookie;

		$headr[] = 'Authorization: '.$token;

		curl_setopt($ch, CURLOPT_URL, $verificationServiceURL);

		curl_setopt($ch, CURLOPT_CUSTOMREQUEST, 'GET');

		curl_setopt($ch, CURLOPT_HTTPHEADER,$headr);

//		curl_setopt($ch, CURLOPT_HTTPHEADER, [

//			'Cookie: ' . $cookie,

//		]);

		curl_setopt($ch, CURLOPT_COOKIE, $cookie);

		curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);

		// équivalent de "-k"

		curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);

		curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);

		$response = curl_exec($ch);

		curl_close($ch);

		return json_decode($response, true);