FM / xero-2

/home/desid573/public_html/payment/xero-2/

/home/desid573/public_html/payment/xero-2

Name	Size	Mode	Actions
.github/	-	0755	rm
doc/	-	0755	rm
docs/	-	0755	rm
lib/	-	0755	rm
pdf/	-	0755	rm
test/	-	0755	rm
vendor/	-	0755	rm
vendor-old/	-	0755	rm
.gitignore	25	0644	edit dl rm
addBillingContact.php	5247	0644	edit dl rm
authorisation.php	1510	0644	edit dl rm
authorizedResource.php	1792	0644	edit dl rm
callback.php	3014	0644	edit dl rm
CODE_OF_CONDUCT.md	3344	0644	edit dl rm
composer.json	1027	0644	edit dl rm
CONTRIBUTING.md	5384	0644	edit dl rm
error_log	307389327	0644	edit dl rm
git_push.sh	1661	0644	edit dl rm
invoiceSend.php	11528	0644	edit dl rm
LICENSE	1075	0644	edit dl rm
phpunit.xml.dist	688	0644	edit dl rm
README.md	24902	0644	edit dl rm
rgtiSend.php	7940	0644	edit dl rm
storage.php	1602	0644	edit dl rm
vendor.zip	3128512	0644	edit dl rm
webhook.php	17370	0644	edit dl rm
webhook_response.php	16562	0644	edit dl rm

Edit: /home/desid573/public_html/payment/xero-2/callback.php (3014B)

<?php
  ini_set('display_errors', 'On');
  require __DIR__ . '/vendor/autoload.php';
  require_once('storage.php');

// Storage Classe uses sessions for storing token > extend to your DB of choice
  $storage = new StorageClass();

$provider = new \League\OAuth2\Client\Provider\GenericProvider([
    'clientId'                => '792F5D6E7E10404EA0BD0DA3CFF525BC',   
    'clientSecret'            => '_w1yk8UQTp5QV9CzzDD4G3daZXjANQ40hQfyUZf91jUxemGF',
    'redirectUri'             => 'https://desidrivers.com.au/payment/xero-2/callback.php',
    'urlAuthorize'            => 'https://login.xero.com/identity/connect/authorize',
    'urlAccessToken'          => 'https://identity.xero.com/connect/token',
    'urlResourceOwnerDetails' => 'https://api.xero.com/api.xro/2.0/Organisation'
  ]);
   
  // If we don't have an authorization code then get one
  if (!isset($_GET['code'])) {
    echo "Something went wrong, no authorization code found";
    exit("Something went wrong, no authorization code found");

// Check given state against previously stored one to mitigate CSRF attack
  } elseif (empty($_GET['state']) || ($_GET['state'] !== $_SESSION['oauth2state'])) {
    echo "Invalid State";
    unset($_SESSION['oauth2state']);
    exit('Invalid state');
  } else {
  
    try {
      // Try to get an access token using the authorization code grant.
      $accessToken = $provider->getAccessToken('authorization_code', [
        'code' => $_GET['code']
      ]);
           
      $config = XeroAPI\XeroPHP\Configuration::getDefaultConfiguration()->setAccessToken( (string)$accessToken->getToken() );
      $identityApi = new XeroAPI\XeroPHP\Api\IdentityApi(
        new GuzzleHttp\Client(),
        $config
      );
       
      $result = $identityApi->getConnections();
      
      error_log($accessToken->getToken());
      
      $dbhost = "localhost";
	$dbuser = "desid573_inquiri";
	    		$dbpass = "@G&{)0*&Ts^V";
	    		$dbname = "desid573_eway_codes";
        
        $conn = new mysqli($dbhost , $dbuser , $dbpass , $dbname );
        
      $sql = "INSERT INTO `xero_token`(`id`, `token`, `expires`, `tenant_id`, `refresh_token`, `id_token`) VALUES (NULL,'".$accessToken->getToken()."',".$accessToken->getExpires().",'".$result[0]->getTenantId()."','".$accessToken->getRefreshToken()."','".$accessToken->getValues()["id_token"]."')";
        error_log($sql);
        $query = $conn->query($sql);
        
        if(!$query) {
            error_log($conn->error);
        }

// Save my tokens, expiration tenant_id
      $storage->setToken(
          $accessToken->getToken(),
          $accessToken->getExpires(),
          $result[0]->getTenantId(),  
          $accessToken->getRefreshToken(),
          $accessToken->getValues()["id_token"]
      );
   
      header('Location: ' . './authorizedResource.php');
      exit();
     
    } catch (\League\OAuth2\Client\Provider\Exception\IdentityProviderException $e) {
      echo "Callback failed";
      exit();
    }
  }
?>

cmd: