. * */ header("X-Frame-Options: Sameorigin"); // Do not load FS ... $RUNTIME_NOSETUPFS = true; OCP\App::checkAppEnabled('remoteStorage'); require_once('Sabre/autoload.php'); require_once('lib_remoteStorage.php'); require_once('oauth_ro_auth.php'); ini_set('default_charset', 'UTF-8'); #ini_set('error_reporting', ''); @ob_clean(); foreach($_GET as $k => $v) { if($k=='userid'){ $userId=$v; } else if($k=='redirect_uri'){ $appUrlParts=explode('/', $v); $appUrl = htmlentities($appUrlParts[2]);//TODO: check if this is equal to client_id } else if($k=='scope'){ $categories=htmlentities($v); } } $currUser = OCP\USER::getUser(); if($userId && $appUrl && $categories) { if($currUser == $userId) { if(isset($_POST['allow'])) { //TODO: check if this can be faked by editing the cookie in firebug! $token=OC_remoteStorage::createCategories($appUrl, $categories); header('Location: '.$_GET['redirect_uri'].'#access_token='.$token.'&token_type=bearer'); } else if($existingToken = OC_remoteStorage::getTokenFor($appUrl, $categories)) { header('Location: '.$_GET['redirect_uri'].'#access_token='.$existingToken.'&token_type=bearer'); } else { //params ok, logged in ok, but need to click Allow still: ?> ownCloud

remoteStorage

requests read & write access to your '.$categories[0].''; if(count($categories)==2) { echo ' and '.$categories[1].''; } else if(count($categories)>2) { for($i=1; $i'.$categories[$i].''; } echo ', and '.$categories[$i].''; } } ?>.