Merge pull request #12 from pdsinterop/feature/remote-client-document

add support for remote client document

Author: ylebre

lib/ClientRegistration.php

@@ -5,6 +5,10 @@
 
 	class ClientRegistration {
 		public static function getRegistration($clientId) {
+			if (preg_match("/^http(s)?:/", $clientId)) {
+				return self::getRemoteRegistration($clientId);
+			}
+
 			Db::connect();
 			$query = Db::$pdo->prepare(
 				'SELECT clientData FROM clients WHERE clientId=:clientId'
@@ -18,7 +22,19 @@ public static function getRegistration($clientId) {
 			}
 			return false;
 		}
-		
+
+		public static function getRemoteRegistration($url) {
+			$clientDocument = file_get_contents($url);
+			$clientRegistration = json_decode($clientDocument, true);
+			if (!isset($clientRegistration['client_id'])) {
+				throw new \Exception("No client ID found in client document");
+			}
+			if (!isset($clientRegistration['redirect_uris'])) {
+				throw new \Exception("No redirect URIs found in client document");
+			}
+			return $clientRegistration;
+		}
+
 		public static function saveClientRegistration($clientData) {
 			Db::connect();
 			if (!isset($clientData['client_name'])) {

lib/Routes/SolidIdp.php

@@ -68,7 +68,7 @@ public static function respondToAuthorize() {
 				$approval = true;
 			} else {
 				$clientRegistration = ClientRegistration::getRegistration($clientId);
-				if (in_array($clientRegistration['origin'], TRUSTED_APPS)) {
+				if (isset($clientRegistration['origin']) && in_array($clientRegistration['origin'], TRUSTED_APPS)) {
 					$approval = true;
 				}
 			}