FM / xero

/home/desid573/public_html/angel/payment/xero/

/home/desid573/public_html/angel/payment/xero

Name	Size	Mode	Actions
docs/	-	0755	rm
lib/	-	0755	rm
test/	-	0755	rm
vendor/	-	0755	rm
__MACOSX/	-	0755	rm
authorisation.php	1906	0644	edit dl rm
authorizedResource.php	1742	0644	edit dl rm
callback.php	2263	0644	edit dl rm
CODE_OF_CONDUCT.md	3344	0644	edit dl rm
composer.json	984	0644	edit dl rm
CONTRIBUTING.md	5453	0644	edit dl rm
error_log	43477	0644	edit dl rm
getInvoice.php	4557	0644	edit dl rm
git_push.sh	1661	0644	edit dl rm
phpunit.xml.dist	688	0644	edit dl rm
README.md	10952	0644	edit dl rm
storage.php	1557	0644	edit dl rm
vendor.zip	886241	0644	edit dl rm

Edit: /home/desid573/public_html/angel/payment/xero/authorisation.php (1906B)

<?php
  ini_set('display_errors', 'On');
  require __DIR__ . '/vendor/autoload.php';
  require_once('storage.php');

// Storage Class uses sessions for storing access token (demo only)
  // you'll need to extend to your Database for a scalable solution
  $storage = new StorageClass();

session_start();

$provider = new \League\OAuth2\Client\Provider\GenericProvider([
    'clientId'                => '0019D1B665CC45AE9D0B78C189A265AC',   
    'clientSecret'            => 'thiiEp0E7ZSZPmQW58Oe9x3Ek_hmmd9fggVtdUD0EpFlZVII',
    'redirectUri'             => 'https://desidrivers.com.au/angel/payment/xero/callback.php',
    'urlAuthorize'            => 'https://login.xero.com/identity/connect/authorize',
    'urlAccessToken'          => 'https://identity.xero.com/connect/token',
    'urlResourceOwnerDetails' => 'https://api.xero.com/api.xro/2.0/Organisation'
  ]);

// If we don't have an authorization code then get one
  if (!isset($_GET['code'])) {
    $options = [
        'scope' => ['openid email profile offline_access accounting.settings accounting.transactions accounting.contacts accounting.journals.read accounting.reports.read accounting.attachments']
    ];

// Fetch the authorization URL from the provider; this returns the urlAuthorize option and generates and applies any necessary parameters (e.g. state).
    $authorizationUrl = $provider->getAuthorizationUrl($options);

// Get the state generated for you and store it to the session.
    $_SESSION['oauth2state'] = $provider->getState();

// Redirect the user to the authorization URL.
    header('Location: ' . $authorizationUrl);
    exit();

// Check given state against previously stored one to mitigate CSRF attack
  } elseif (empty($_GET['state']) || ($_GET['state'] !== $_SESSION['oauth2state'])) {
      unset($_SESSION['oauth2state']);
      exit('Invalid state');
  } else {
    //no action
  }
?>

'0019D1B665CC45AE9D0B78C189A265AC', 'clientSecret' => 'thiiEp0E7ZSZPmQW58Oe9x3Ek_hmmd9fggVtdUD0EpFlZVII', 'redirectUri' => 'https://desidrivers.com.au/angel/payment/xero/callback.php', 'urlAuthorize' => 'https://login.xero.com/identity/connect/authorize', 'urlAccessToken' => 'https://identity.xero.com/connect/token', 'urlResourceOwnerDetails' => 'https://api.xero.com/api.xro/2.0/Organisation' ]); // If we don't have an authorization code then get one if (!isset($_GET['code'])) { $options = [ 'scope' => ['openid email profile offline_access accounting.settings accounting.transactions accounting.contacts accounting.journals.read accounting.reports.read accounting.attachments'] ]; // Fetch the authorization URL from the provider; this returns the urlAuthorize option and generates and applies any necessary parameters (e.g. state). $authorizationUrl = $provider->getAuthorizationUrl($options); // Get the state generated for you and store it to the session. $_SESSION['oauth2state'] = $provider->getState(); // Redirect the user to the authorization URL. header('Location: ' . $authorizationUrl); exit(); // Check given state against previously stored one to mitigate CSRF attack } elseif (empty($_GET['state']) || ($_GET['state'] !== $_SESSION['oauth2state'])) { unset($_SESSION['oauth2state']); exit('Invalid state'); } else { //no action } ?>