class.ScalrAPICore.php

/demo/scalr_newui/app/src/api/2.3.0/class.ScalrAPICore.php

https://github.com/kennethjiang/Wolke
PHP | 362 lines | 323 code | 31 blank | 8 comment | 16 complexity | 45426b8260bd26df7b58e6b3b1931d3c MD5 | raw file

<?php



	define("API_SERVER_IP", "174.132.108.66");



	abstract class ScalrAPICore

	{

		const HASH_ALGO = 'SHA256';

		

		protected $Request;

		

		/**

		 * 

		 * @var Client

		 */

		protected $Client;

		

		/**

		 * 

		 * @var Scalr_Environment

		 */

		protected $Environment;

		protected $DB;

    	protected $Logger;

		

    	public $Version;

    	

    	protected $debug = array();

    	

    	protected $LastTransactionID;

    	

		function __construct($version)

		{

			$this->DB = Core::GetDBInstance();

			$this->Logger = Logger::getLogger(__CLASS__);			

			$this->Version = $version;

		}

		

		protected function insensitiveUksort($a,$b) { 

		    return strtolower($a)>strtolower($b); 

		}

		

		private function AuthenticateRESTv3($request)

		{

			if (!$request['Signature'])

				throw new Exception("Signature is missing");



			if (!$request['KeyID'])

				throw new Exception("KeyID is missing");

				

			if (!$request['Timestamp'] && !$request['TimeStamp'])

				throw new Exception("Timestamp is missing");

			

			if ($request['Timestamp'])

				$request['TimeStamp'] = $request['Timestamp'];

				

			$string_to_sign = "{$request['Action']}:{$request['KeyID']}:{$request['TimeStamp']}";

    		

    		$this->debug['stringToSign'] = $string_to_sign;

    		

    		$this->Environment = Scalr_Model::init(Scalr_Model::ENVIRONMENT)->loadByApiKeyId($request['KeyID']);

    		

    		$auth_key = $this->Environment->getPlatformConfigValue(ENVIRONMENT_SETTINGS::API_ACCESS_KEY, false);

    		

    		$valid_sign = base64_encode(hash_hmac(self::HASH_ALGO, trim($string_to_sign), $auth_key, 1));



    		$request['Signature'] = str_replace(" ", "+", $request['Signature']);

    		

    		$this->debug['reqSignature'] = $request['Signature'];

    		$this->debug['validSignature'] = $valid_sign;

    		$this->debug['usedAuthVersion'] = 3;

    		$this->debug['md5AccessKey'] = md5($auth_key);

    		

    		if ($valid_sign != $request['Signature'])

    			throw new Exception("Signature doesn't match");

		}

		

		private function AuthenticateRESTv2($request)

		{

			if (!$request['Signature'])

				throw new Exception("Signature is missing");



			if (!$request['KeyID'])

				throw new Exception("KeyID is missing");

				

			if (!$request['Timestamp'] && !$request['TimeStamp'])

				throw new Exception("Timestamp is missing");

			

			foreach ($request as $k=>$v)

	    	{

	    		if (is_array($v))

	    		{

	    			foreach ($v as $kk => $vv)

	    				$request["{$k}[{$kk}]"] = $vv;

	

	    			unset($request[$k]);

	    		}

	    	}

			

			uksort($request, array($this, 'insensitiveUksort'));

				

			$string_to_sign = "";

			foreach ($request as $k=>$v)

    		{

    			if (!in_array($k, array("Signature", "SysDebug"))) {

    				if (is_array($v)) {

    					foreach ($v as $kk => $vv) {

    						$string_to_sign.= "{$k}[{$kk}]{$vv}";

    					}

    				}

    				else {

    					$string_to_sign.= "{$k}{$v}";

    				}

    			}

    		}

    		

    		$this->debug['stringToSign'] = $string_to_sign;

    		

    		$this->Environment = Scalr_Model::init(Scalr_Model::ENVIRONMENT)->loadByApiKeyId($request['KeyID']);

    		$this->Client = Client::Load($this->Environment->clientId);

    		

    		$auth_key = $this->Environment->getPlatformConfigValue(ENVIRONMENT_SETTINGS::API_ACCESS_KEY, false);

    		

    		$valid_sign = base64_encode(hash_hmac(self::HASH_ALGO, trim($string_to_sign), $auth_key, 1));



    		$request['Signature'] = str_replace(" ", "+", $request['Signature']);

    		

    		$this->debug['reqSignature'] = $request['Signature'];

    		$this->debug['validSignature'] = $valid_sign;

    		

    		if ($valid_sign != $request['Signature'])

    			throw new Exception("Signature doesn't match");

		}

		

		private function AuthenticateREST($request)

		{

			if (!$request['Signature'])

				throw new Exception("Signature is missing");



			if (!$request['KeyID'])

				throw new Exception("KeyID is missing");

				

			if (!$request['Timestamp'] && !$request['TimeStamp'])

				throw new Exception("Timestamp is missing");

			

			ksort($request);

				

			$string_to_sign = "";

			foreach ($request as $k=>$v) {

    			if (!in_array($k, array("Signature"))) {

    				if (is_array($v)) {

    					foreach ($v as $kk => $vv) {

    						$string_to_sign.= "{$k}[{$kk}]{$vv}";

    					}

    				}

    				else {

    					$string_to_sign.= "{$k}{$v}";

    				}

    			}

    		}

    		

    		$this->debug['stringToSign'] = $string_to_sign;

    		

    		$this->Environment = Scalr_Model::init(Scalr_Model::ENVIRONMENT)->loadByApiKeyId($request['KeyID']);

    		$this->Client = Client::Load($this->Environment->clientId);

    		

    		$auth_key = $this->Environment->getPlatformConfigValue(ENVIRONMENT_SETTINGS::API_ACCESS_KEY, false);

    		

    		$valid_sign = base64_encode(hash_hmac(self::HASH_ALGO, trim($string_to_sign), $auth_key, 1));    		

    		if ($valid_sign != $request['Signature'])

    			throw new Exception("Signature doesn't match");

		}

		

		public function BuildRestServer($request)

		{

			try

			{

				$Reflect = new ReflectionObject($this);

				if ($Reflect->hasMethod($request['Action']))

				{

					//Authenticate

					if ($request['AuthVersion'] == 2)

						$this->AuthenticateRESTv2($request);

					elseif ($request['AuthVersion'] == 3)

						$this->AuthenticateRESTv3($request);

					else

						$this->AuthenticateREST($request);

						

					if ($this->Environment->getPlatformConfigValue(ENVIRONMENT_SETTINGS::API_ENABLED) != 1)

						throw new Exception(_("API disabled for you. You can enable it at 'Settings -> Environments'"));

					

					//Check IP Addresses

					if ($this->Environment->getPlatformConfigValue(ENVIRONMENT_SETTINGS::API_ALLOWED_IPS))

					{

						$ips = explode(",", $this->Environment->getPlatformConfigValue(ENVIRONMENT_SETTINGS::API_ALLOWED_IPS));

						if (!$this->IPAccessCheck($ips) && $_SERVER['REMOTE_ADDR'] != API_SERVER_IP)

							throw new Exception(sprintf(_("Access to the API is not allowed from your IP '%s'"), $_SERVER['REMOTE_ADDR']));

					}

						

						

					//Execute API call

					$ReflectMethod = $Reflect->getMethod($request['Action']);

					$args = array();

					foreach ($ReflectMethod->getParameters() as $param)

					{

						if (!$param->isOptional() && !isset($request[$param->getName()]))

							throw new Exception(sprintf("Missing required parameter '%s'", $param->getName()));

						else

							$args[$param->getName()] = $request[$param->getName()];

					}

					

					$result = $ReflectMethod->invokeArgs($this, $args);

					

					$this->LastTransactionID = $result->TransactionID;

					

					// Create response

					$DOMDocument = new DOMDocument('1.0', 'UTF-8');

					$DOMDocument->loadXML("<{$request['Action']}Response></{$request['Action']}Response>");

					$this->ObjectToXML($result, $DOMDocument->documentElement, $DOMDocument);

					

					$retval = $DOMDocument->saveXML();

				}

				else

					throw new Exception(sprintf("Action '%s' is not defined", $request['Action']));

			}

			catch(Exception $e)

			{

				

				if (!$this->LastTransactionID)

					$this->LastTransactionID = Scalr::GenerateUID();

				

				if ($request['SysDebug'])

				{

					$debugInfo = "<StringToSign>{$this->debug['stringToSign']}</StringToSign>";

					$debugInfo .= "<reqSignature>{$this->debug['reqSignature']}</reqSignature>";

					$debugInfo .= "<validSignature>{$this->debug['validSignature']}</validSignature>";

					$debugInfo .= "<md5AccessKey>{$this->debug['md5AccessKey']}</md5AccessKey>";

					$debugInfo .= "<usedAuthVersion>{$this->debug['usedAuthVersion']}</usedAuthVersion>";

				}

					

				$retval = "<?xml version=\"1.0\"?>\n".

				"<Error>\n".

					"\t<TransactionID>{$this->LastTransactionID}</TransactionID>\n".

					"\t<Message>{$e->getMessage()}</Message>\n".

					$debugInfo.

				"</Error>\n";

			}



			$this->LogRequest(

				$this->LastTransactionID,

				$request['Action'],

				(($_SERVER['REMOTE_ADDR'] == API_SERVER_IP) ? 'Mobile app' : $_SERVER['REMOTE_ADDR']),

				$request,

				$retval

			);

			

			header("Content-type: text/xml");

			header("Content-length: ".strlen($retval));

			print $retval;

		}

		

		protected function LogRequest($trans_id, $action, $ipaddr, $request, $response)

		{

			if ($request['debug'] == 1 || $request['Debug'] == 1 || $request['Action'] == 'DNSZoneRecordAdd')

			{

				try

				{

					$this->DB->Execute("INSERT INTO api_log SET

						transaction_id	= ?,

						dtadded			= ?,

						action			= ?,

						ipaddress		= ?,

						request			= ?,

						response		= ?,

						clientid		= ?,

						env_id			= ?

					",array(

						$trans_id,

						time(),

						$action,

						$ipaddr,

						http_build_query($request),

						$response,

						$this->Client->ID,

						$this->Environment->id

					));

				}

				catch(Exception $e) {}

			}

		}

		

		protected function IPAccessCheck($allowed_ips)

		{

			$current_ip = $_SERVER['REMOTE_ADDR'];

			$current_ip_parts = explode(".", $current_ip);

			

			foreach ($allowed_ips as $allowed_ip)

			{

				$allowedhost = trim($allowed_ip);

				if ($allowedhost == '')

					continue;

	    	    

	    	    if (preg_match("/^[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}$/si", $allowedhost))

	    	    {

	    	        if (ip2long($allowedhost) == ip2long($current_ip))

	    	           return true;

	    	    }

	    	    elseif (stristr($allowedhost, "*"))

	    	    {

	    	        $ip_parts = explode(".", trim($allowedhost));

	    	        if (

	    				($ip_parts[0] == "*" || $ip_parts[0] == $current_ip_parts[0]) &&

	    				($ip_parts[1] == "*" || $ip_parts[1] == $current_ip_parts[1]) &&

	    				($ip_parts[2] == "*" || $ip_parts[2] == $current_ip_parts[2]) &&

	    				($ip_parts[3] == "*" || $ip_parts[3] == $current_ip_parts[3])

	    			   )

	    			return true;

	    	    }

	    	    else 

	    	    {

	    	        $ip = @gethostbyname($allowedhost);

	    	        if ($ip != $allowedhost)

	    	        {

	    	            if (ip2long($ip) == ip2long($current_ip))

	    	               return true;

	    	        }

	    	    }

			}

			

			return false;

		}

		

		protected function ObjectToXML($obj, &$DOMElement, &$DOMDocument)

		{

			if (is_object($obj) || is_array($obj))

			{

				foreach ($obj as $k=>$v)

				{

					if (is_object($v))

						$this->ObjectToXML($v, $DOMElement->appendChild($DOMDocument->createElement($k)), $DOMDocument);

					elseif (is_array($v))

						foreach ($v as $vv)

						{

							$e = &$DOMElement->appendChild($DOMDocument->createElement($k));

							$this->ObjectToXML($vv, $e, $DOMDocument);

						}

					else

						$DOMElement->appendChild($DOMDocument->createElement($k, $v));

				}

			}

			else

				$DOMElement->appendChild($DOMDocument->createTextNode($obj));

		}

		

		protected function CreateInitialResponse()

		{

			$response = new stdClass();

			$response->{"TransactionID"} = Scalr::GenerateUID();

			

			return $response;

		}

	}

?>