Merge pull request #3 from docusign/consolidated-launcher

Major refactoring to implement OAuth methods and an entry-point script to use all the examples
docusign · Jun 23, 2020 · a685e44 · a685e44
2 parents a572e61 + 871b96e
commit a685e44
Show file tree

Hide file tree

Showing 38 changed files with 1,605 additions and 501 deletions.
diff --git a/.gitignore b/.gitignore
@@ -1,3 +1,8 @@
 .DS_Store
 **/.DS_Store
+*.pem
+ENVELOPE_ID
+TEMPLATE_ID
+config/
 
+debug.log
diff --git a/OAuth/code_grant.php b/OAuth/code_grant.php
@@ -0,0 +1,58 @@
+<?php
+
+require 'utils.php';
+
+$authorizationURL = $authorizationEndpoint . 'auth?' . http_build_query([
+  'redirect_uri'  => $redirectURI,
+  'scope'         => 'signature',
+  'client_id'     => $clientID,
+  'state'         => $state,
+  'response_type' => 'code'
+]);
+
+echo "\nOpen the following URL in a browser to continue:\n" . $authorizationURL . "\n";
+
+
+// on windows I cannot seem to escape the Ampersand so it throws the additional get parametrs as commads and errors the php script
+// if(stripos(PHP_OS, 'WIN') === 0){
+
+//   shell_exec("start $authorizationURL");
+
+// }
+
+// else {
+
+//   shell_exec("xdg-open $authorizationURL");
+// }
+
+
+
+$auth = startHttpServer($socket);
+
+if ($auth['state'] != $state) {
+  echo "\nWrong 'state' parameter returned\n";
+  exit(2);
+}
+
+$code = $auth['code'];
+echo "\nGetting an access token...\n";
+
+$response = http($authorizationEndpoint . 'token', [
+    'grant_type'   => 'authorization_code',
+    'redirect_uri' => $redirectURI,
+    'code'         => $code
+  ], [
+    'Authorization: Basic ' . base64_encode($clientID . ':' .$clientSecret),
+  ], true
+);
+
+if (!isset($response->access_token)) {
+  echo "\nError fetching access token\n";
+  exit(2);
+}
+
+$accessToken = $response->access_token;
+file_put_contents($outputFile, $accessToken);
+echo "\nAccess token has been written to " . $outputFile . "\n\n";
+
+?>
diff --git a/OAuth/jwt.php b/OAuth/jwt.php
@@ -0,0 +1,90 @@
+<?php
+
+require 'utils.php';
+
+$authorizationURL = $authorizationEndpoint . 'auth?' . http_build_query([
+  'scope'         => 'signature impersonation',
+  'redirect_uri'  => $redirectURI,
+  'client_id'     => $clientID,
+  'state'         => $state,
+  'response_type' => 'code'
+]);
+
+echo "\nOpen the following URL in a browser to continue:\n" . $authorizationURL . "\n";
+
+
+
+
+
+$auth = startHttpServer($socket);
+
+if ($auth['state'] != $state) {
+  echo "\nWrong 'state' parameter returned\n";
+  exit(2);
+}
+
+$code = $auth['code'];
+echo "\nGetting an access token...\n";
+
+$response = http($authorizationEndpoint . 'token', [
+    'grant_type'    => 'authorization_code',
+    'redirect_uri'  => $redirectURI,
+    'code'          => $code
+  ], [
+    'Authorization: Basic ' . base64_encode($clientID . ':' . $clientSecret),
+  ], true
+);
+
+if (!isset($response->access_token)) {
+  echo "\nError fetching access token\n";
+  exit(2);
+}
+
+$accessToken = $response->access_token;
+echo "\nGetting user info...\n";
+
+$userInfo = http($authorizationEndpoint . 'userinfo', false, [
+  'Authorization: Bearer ' . $accessToken
+]);
+
+$timestamp = date_timestamp_get(date_create());
+$userID    = $userInfo->sub;
+$signature = '';
+
+$header = encodeBase64URL(
+  json_encode([
+    'typ' => 'JWT',
+    'alg' => 'RS256'
+  ])
+);
+
+$payload = encodeBase64URL(
+  json_encode([
+    'sub'   => $userID,
+    'iss'   => $clientID,
+    'iat'   => $timestamp,
+    'exp'   => $timestamp + 3000,
+    'aud'   => 'account-d.docusign.com',
+    'scope' => 'signature impersonation'
+  ])
+);
+
+$privateKey = file_get_contents("config/private.key");
+openssl_sign($header . '.' . $payload, $signature, $privateKey, 'sha256');
+echo "\nGetting a JWT access token...\n";
+
+$response = http($authorizationEndpoint . 'token', [
+  'grant_type' => 'urn:ietf:params:oauth:grant-type:jwt-bearer',
+  'assertion'  => $header . '.' . $payload . '.' . encodeBase64URL($signature)
+], false, true);
+
+if(!$response->access_token){
+  var_dump($response);
+}
+
+
+$accessToken = $response->access_token;
+file_put_contents($outputFile, $accessToken);
+echo "\nAccess token has been written to " . $outputFile . "\n\n";
+
+?>
diff --git a/OAuth/jwt2.php b/OAuth/jwt2.php
@@ -0,0 +1,152 @@
+<?php
+
+$PORT                  = '8080';
+$IP                    = 'localhost';
+
+$outputFile            = 'ds_access_token.txt';
+$state                 = bin2hex(random_bytes(5));
+
+$clientID              = getenv("CLIENT_ID");
+$clientSecret          = getenv("CLIENT_SECRET");
+$authorizationEndpoint = 'https://account-d.docusign.com/oauth/';
+// $userID                = '2448759b-xxxx-xxxx-xxxx-xxxxxxxxxxxx';
+// echo getenv("USERID");
+$userID = getenv('USERID');
+
+$socket                =  'tcp://' . $IP . ':' . $PORT;
+$redirectURI           = 'http://' . $IP . ':' . $PORT . '/authorization-code/callback';
+
+function startHttpServer ($socket) {
+  $responseOk = "HTTP/1.0 200 OK\r\n"
+    . "Content-Type: text/plain\r\n\r\n"
+    . "Ok. You may close this tab and return to the shell.\r\n";
+
+  $responseErr = "HTTP/1.0 400 Bad Request\r\n"
+    . "Content-Type: text/plain\r\n\r\n"
+    . "Bad Request\r\n";
+
+  ini_set('default_socket_timeout', 60 * 5);
+  $server = stream_socket_server($socket, $errno, $errstr);
+
+  if (!$server) {
+    Log::err('Error starting HTTP server');
+    return false;
+  }
+
+  do {
+    $sock = stream_socket_accept($server);
+
+    if (!$sock) {
+      Log::err('Error accepting socket connection');
+      exit(1);
+    }
+
+    $contentLength = 0;
+    $headers       = [];
+    $body          = null;
+
+    while (false !== ($line = trim(fgets($sock)))) {
+      if ($line === '') break;
+      $regex = '#^Content-Length:\s*([[:digit:]]+)\s*$#i';
+
+      if (preg_match($regex, $line, $matches)) {
+        $contentLength = (int)$matches[1];
+      }
+
+      $headers[] = $line;
+    }
+
+    if ($contentLength > 0) {
+      $body = fread($sock, $contentLength);
+    }
+
+    list($method, $url, $httpver) = explode(' ', $headers[0]);
+
+    if ($method == 'GET') {
+      $parts = parse_url($url);
+
+      if (isset($parts['path']) && $parts['path'] == '/authorization-code/callback' && isset($parts['query'])) {
+        parse_str($parts['query'], $query);
+
+        if (isset($query['code']) && isset($query['state'])) {
+          fwrite($sock, $responseOk);
+          fclose($sock);
+          return $query;
+        }
+      }
+    }
+
+    fwrite($sock, $responseErr);
+    fclose($sock);
+  } while (true);
+}
+
+function http ($url, $params = false, $headers = false, $post = false) {
+  $ch = curl_init($url);
+
+  curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+  curl_setopt($ch, CURLINFO_HEADER_OUT, true);
+  curl_setopt($ch, CURLOPT_VERBOSE, 1);
+
+  if ($post) curl_setopt($ch, CURLOPT_POST, 1);
+
+  curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
+  curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
+
+  if ($params) {
+    curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($params));
+  }
+
+  if ($headers) {
+    curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
+  }
+
+  $resp = curl_exec($ch);
+  return json_decode($resp);
+}
+
+function encodeBase64URL ($data) {
+  return rtrim(strtr(base64_encode($data), '+/', '-_'), '=');
+}
+
+$timestamp = date_timestamp_get(date_create());
+$signature = '';
+
+$header = encodeBase64URL(
+  json_encode([
+    'typ' => 'JWT',
+    'alg' => 'RS256'
+  ])
+);
+
+$payload = encodeBase64URL(
+  json_encode([
+    'sub'   => $userID,
+    'iss'   => $clientID,
+    'iat'   => $timestamp,
+    'exp'   => $timestamp + 3000,
+    'aud'   => 'account-d.docusign.com',
+    'scope' => 'signature impersonation'
+  ])
+);
+
+$privateKey = file_get_contents("../private.key");
+$signature = openssl_sign($header . '.' . $payload, $signature, $privateKey, 'sha256');
+echo "\nGetting a JWT access token...\n";
+
+$response = http($authorizationEndpoint . 'token', [
+  'grant_type' => 'urn:ietf:params:oauth:grant-type:jwt-bearer',
+  'assertion'  => $header . '.' . $payload . '.' . encodeBase64URL($signature)
+], false, true);
+
+
+if(!$response->access_token){
+  var_dump($response);
+}
+
+
+$accessToken = $response->access_token;
+file_put_contents($outputFile, $accessToken);
+echo "\nAccess token has been written to " . $outputFile . "\n\n";
+
+?>