98 lines
3.7 KiB
PHP
98 lines
3.7 KiB
PHP
<?php
|
|
/**
|
|
* Microsoft 365 OAuth 2.0 Callback Handler
|
|
* Verwerkt de autorisatiecode, wisselt tokens uit en slaat de verbinding op.
|
|
*/
|
|
|
|
require_once __DIR__ . '/../includes/auth.php';
|
|
require_once __DIR__ . '/../includes/integrations/microsoft.php';
|
|
|
|
$user = require_auth();
|
|
$db = get_db_connection();
|
|
|
|
// 1. Foutafhandeling vanuit Microsoft
|
|
if (!empty($_GET['error'])) {
|
|
$errorDescription = $_GET['error_description'] ?? $_GET['error'];
|
|
header('Location: /integrations.php?error=' . urlencode("Microsoft melding: {$errorDescription}"));
|
|
exit;
|
|
}
|
|
|
|
// 2. CSRF State validatie
|
|
$receivedState = $_GET['state'] ?? '';
|
|
$expectedState = $_SESSION['ms_oauth_state'] ?? '';
|
|
unset($_SESSION['ms_oauth_state']);
|
|
|
|
if (empty($receivedState) || !hash_equals($expectedState, $receivedState)) {
|
|
header('Location: /integrations.php?error=' . urlencode('Ongeldige sessie of CSRF-controle mislukt. Probeer opnieuw in te loggen via Microsoft.'));
|
|
exit;
|
|
}
|
|
|
|
// 3. Autorisatiecode controleren
|
|
$code = $_GET['code'] ?? '';
|
|
if (empty($code)) {
|
|
header('Location: /integrations.php?error=' . urlencode('Geen autorisatiecode ontvangen van Microsoft.'));
|
|
exit;
|
|
}
|
|
|
|
// 4. Instellingen ophalen
|
|
$stmt = $db->prepare("SELECT settings FROM integrations WHERE user_id = ? AND provider = 'OUTLOOK'");
|
|
$stmt->execute([$user['id']]);
|
|
$row = $stmt->fetch();
|
|
$savedSettings = json_decode($row['settings'] ?? '{}', true) ?: [];
|
|
|
|
$clientId = !empty($savedSettings['client_id']) ? $savedSettings['client_id'] : fociz_env('MICROSOFT_CLIENT_ID', '');
|
|
$clientSecret = !empty($savedSettings['client_secret']) ? $savedSettings['client_secret'] : fociz_env('MICROSOFT_CLIENT_SECRET', '');
|
|
$tenantId = !empty($savedSettings['tenant_id']) ? $savedSettings['tenant_id'] : fociz_env('MICROSOFT_TENANT_ID', 'common');
|
|
|
|
if (empty($clientId) || empty($clientSecret)) {
|
|
header('Location: /integrations.php?error=' . urlencode('Client ID of Client Secret ontbreekt in Fociz. Vul deze eerst in bij de Outlook instellingen.'));
|
|
exit;
|
|
}
|
|
|
|
$redirectUri = rtrim(APP_URL, '/') . '/auth/callback_microsoft.php';
|
|
|
|
// 5. Code omwisselen voor access & refresh tokens
|
|
$tokenResult = microsoft_exchange_code($code, $clientId, $clientSecret, $redirectUri, $tenantId);
|
|
|
|
if (!$tokenResult['success']) {
|
|
header('Location: /integrations.php?error=' . urlencode('Token uitwisseling mislukt: ' . $tokenResult['error']));
|
|
exit;
|
|
}
|
|
|
|
$accessToken = $tokenResult['access_token'];
|
|
$refreshToken = $tokenResult['refresh_token'];
|
|
$expiresIn = $tokenResult['expires_in'];
|
|
$expiresAt = time() + $expiresIn;
|
|
|
|
// 6. Microsoft gebruikersprofiel ophalen
|
|
$profile = microsoft_get_user_profile($accessToken);
|
|
$accountEmail = $profile['mail'] ?? ($profile['userPrincipalName'] ?? $user['email']);
|
|
$accountName = $profile['displayName'] ?? 'Microsoft 365 Account';
|
|
|
|
// 7. Opslaan in MariaDB
|
|
$newSettings = array_merge($savedSettings, [
|
|
'client_id' => $clientId,
|
|
'client_secret' => $clientSecret,
|
|
'tenant_id' => $tenantId,
|
|
'expires_at' => $expiresAt,
|
|
'account_email' => $accountEmail,
|
|
'account_name' => $accountName,
|
|
]);
|
|
|
|
$saveStmt = $db->prepare("
|
|
INSERT INTO integrations (user_id, provider, is_enabled, is_demo_mode, access_token, refresh_token, settings, last_sync_at)
|
|
VALUES (?, 'OUTLOOK', 1, 0, ?, ?, ?, NOW())
|
|
ON DUPLICATE KEY UPDATE
|
|
is_enabled = 1,
|
|
is_demo_mode = 0,
|
|
access_token = VALUES(access_token),
|
|
refresh_token = VALUES(refresh_token),
|
|
settings = VALUES(settings),
|
|
last_sync_at = NOW()
|
|
");
|
|
$saveStmt->execute([$user['id'], $accessToken, $refreshToken, json_encode($newSettings)]);
|
|
|
|
// 8. Succesvol terugkeren naar de Integraties Hub
|
|
header('Location: /integrations.php?success=' . urlencode("Microsoft Outlook succesvol gekoppeld als {$accountEmail}!"));
|
|
exit;
|