tripit_link.php

<?php

require_once "locale.php";
require_once "db_pdo.php";
require_once "tripit_common.php";

$uid = $_SESSION["uid"];
if (!$uid || empty($uid)) {
    print _("Session expired. Please try re-linking after logging back in.");
    exit();
}

if (!isset($_SESSION["tripit_rendezvous"])) {
    print _("Invalid token, giving up.");
    error_log("$uid attempted to rendezvous, but no rendezvous token was found in the session.");
    exit();
}

$rendezvous = $_SESSION["tripit_rendezvous"];

if (!$_GET["oauth_token"] || empty($_GET["oauth_token"]) || $_GET["oauth_token"] !== $rendezvous["token"]) {
    print _("Invalid token, giving up.");
    error_log("$uid attempted to rendezvous, but no token was passed in.");
    exit();
}

// We have the token and secret; attempt to get a request token.
$oauth_credential = new OAuthConsumerCredential(
    $tripit_app_id,
    $tripit_app_secret,
    $rendezvous["token"],
    $rendezvous["secret"]
);
$tripit = new TripIt($oauth_credential, $tripit_api_url);
try {
    $access_token = $tripit->get_access_token();
} catch (Exception $e) {
    error_log("Could not get access token: " . $e);
    die(_("Could not connect to TripIt. Please try again later."));
}

if ($access_token == null || !is_array($access_token)) {
    print _("Invalid token, giving up.");
    error_log("$uid attempted to rendezvous, but TripIt said the token was not authorized: " . $access_token);
    exit();
}

// Make sure it's not the same token as what we already have in the db.
$existing_tripit_tokens = get_request_tokens($dbh, $uid);
if ($existing_tripit_tokens == null || $existing_tripit_tokens["token"] !== $access_token["oauth_token"]) {
    // No tokens or different token; add a new one.

    // Disable any existing TripIt links for this user.
    try {
        $sth = $dbh->prepare("UPDATE tripit_tokens SET active='N' WHERE uid = ?");
        $sth->execute([$uid]);
    } catch (PDOException $e) {
        die(_("Failed to disable old TripIt links."));
    }

    // Add the new link.
    try {
        $sth = $dbh->prepare(
            "INSERT INTO tripit_tokens (uid, auth_token, auth_token_secret, active) VALUES(?, ?, ?, 'Y')"
        );
        $sth->execute([$uid, $access_token["oauth_token"], $access_token["oauth_token_secret"]]);
    } catch (PDOException $e) {
        die(_("Failed to link new TripIt account."));
    }
}

// All good, redirect back to listing
header("Location: /php/tripit_list_trips.php");