From a583351ac4f4fa60bebd4c199796c675da77522c Mon Sep 17 00:00:00 2001
From: Markus Birth <mbirth@gmail.com>
Date: Fri, 20 May 2016 19:06:02 +0200
Subject: [PATCH] Split templates for logged out and logged in state. Added
 Logout option. Added rewriting to allow cleaner URLs.

---
 .htaccess                            |  3 +++
 css/frs.css                          |  5 +++++
 index.php                            | 25 +++++++++++++++++++++++--
 templates/index_html.mustache        |  4 ++--
 templates/loggedin_html.mustache     | 23 +++++++++++++++++++++++
 templates/partials/mdl_head.mustache | 13 +++++++++++++
 6 files changed, 69 insertions(+), 4 deletions(-)
 create mode 100644 templates/loggedin_html.mustache

diff --git a/.htaccess b/.htaccess
index ba24195..d8b93ba 100644
--- a/.htaccess
+++ b/.htaccess
@@ -1,3 +1,6 @@
 <Files ~ "\.json$">
     Require all denied
 </Files>
+
+RewriteEngine on
+RewriteRule ^([^.]+)/?$ index.php?action=$1 [L,NC]
diff --git a/css/frs.css b/css/frs.css
index 19c6b8c..c81cc11 100644
--- a/css/frs.css
+++ b/css/frs.css
@@ -64,3 +64,8 @@
   display: block;
   background: url(../img/btn_google_signin_dark_focus_web.png);
 }
+
+.mdl-layout a {
+    color: inherit !important;
+    text-decoration: inherit !important;
+}
\ No newline at end of file
diff --git a/index.php b/index.php
index 3937e55..69f617b 100644
--- a/index.php
+++ b/index.php
@@ -17,8 +17,22 @@ $client->addScope(Google_Service_Oauth2::USERINFO_EMAIL);
 
 session_start();
 
+if (isset($_GET['action']) && $_GET['action'] == 'logout') {
+    // Delete session and redirect to self
+    #$client->setAccessToken($_SESSION['access_token']);
+    #$client->revokeToken();   // removed granted permissions from account
+    $_SESSION = array();
+    if (ini_get('session.use_cookies')) {
+        $params = session_get_cookie_params();
+        setcookie(session_name(), '', time()-42000, $params['path'], $params['domain'], $params['secure'], $params['httponly']);
+    }
+    session_destroy();
+    header('Location: ' . $client->getRedirectUri());
+    exit(0);
+}
+
 if (isset($_GET['code']) && $_GET['code']) {
-    // OAuth2 result
+    // Validate OAuth2 result, set access token and redirect to self
     $client->authenticate($_GET['code']);
     $_SESSION['access_token'] = $client->getAccessToken();
     header('Location: ' . $client->getRedirectUri());
@@ -33,12 +47,19 @@ if (isset($_SESSION['access_token']) && $_SESSION['access_token']) {
 
     $oauth = new Google_Service_Oauth2($client);
     $userdata = $oauth->userinfo->get();
+    $data['user']['name_first'] = $userdata->givenName;
     $data['userdata'] = print_r($userdata, true);
+
+
+    // TODO: Check $userdata->verifiedEmail and deny if not verified.
+
+    $tpl = $m->loadTemplate('loggedin_html');
 } else {
     // Not authenticated
     $data['auth_needed'] = true;
     $data['auth_url'] = $client->createAuthUrl();
+    $tpl = $m->loadTemplate('index_html');
 }
 
-$tpl = $m->loadTemplate('index_html');
+$data['action'] = $_GET['action'];
 echo $tpl->render($data);
diff --git a/templates/index_html.mustache b/templates/index_html.mustache
index 2110c91..8f0db43 100644
--- a/templates/index_html.mustache
+++ b/templates/index_html.mustache
@@ -21,7 +21,7 @@
 {{/ userdata}}
 
 <p>
-            Hello, world!
+            Hello, world! ({{action}})
 </p>
 <p>
             Hello, world!
@@ -215,5 +215,5 @@
 
 {{> mdl_content_foot}}
 {{> mdl_foot}}
-<a href="https://github.com/google/material-design-lite/blob/master/templates/article/" target="_blank" id="view-source" class="mdl-button mdl-js-button mdl-button--raised mdl-js-ripple-effect mdl-color--accent mdl-color-text--accent-contrast">View Source</a>
+<a href="https://github.com/mbirth/php-frs/" target="_blank" id="view-source" class="mdl-button mdl-js-button mdl-button--raised mdl-js-ripple-effect mdl-color--accent mdl-color-text--accent-contrast">View Source</a>
 {{> html_foot}}
diff --git a/templates/loggedin_html.mustache b/templates/loggedin_html.mustache
new file mode 100644
index 0000000..5322f86
--- /dev/null
+++ b/templates/loggedin_html.mustache
@@ -0,0 +1,23 @@
+{{> html_head}}
+{{> mdl_head}}
+{{> mdl_content_head}}
+
+<div class="frs-crumbs mdl-color-text--grey-500">
+  Not Google &gt; Not Google Now &gt; Fake Reservation System
+</div>
+
+<h3>What is this?</h3>
+
+{{# userdata}}
+<p>
+<pre>{{userdata}}</pre>
+</p>
+{{/ userdata}}
+
+<p>
+    Welcome, to the <strong>Fake Reservation System</strong>. Where you can book travels you'll never attend.
+</p>
+
+{{> mdl_content_foot}}
+{{> mdl_foot}}
+{{> html_foot}}
diff --git a/templates/partials/mdl_head.mustache b/templates/partials/mdl_head.mustache
index 3a317d9..213e7e3 100644
--- a/templates/partials/mdl_head.mustache
+++ b/templates/partials/mdl_head.mustache
@@ -2,6 +2,19 @@
   <header class="frs-header mdl-layout__header mdl-layout__header--scroll mdl-color--grey-100 mdl-color-text--grey-800">
     <div class="mdl-layout__header-row">
       <span class="mdl-layout-title">Fake Reservation System</span>
+      <div class="mdl-layout-spacer"></div>
+      <!-- Navigation -->
+      <nav class="mdl-navigation">
+        {{# user.name_first}}
+        <span class="mdl-navigation__link mdl-color-text--grey-800">Hello, {{user.name_first}}!</span>
+        {{/ user.name_first}}
+        <button id="frs-menu-top" class="mdl-button mdl-js-button mdl-button--icon">
+            <span class="material-icons">more_vert</span>
+        </button>
+        <ul class="mdl-menu mdl-menu--bottom-right mdl-js-menu mdl-js-ripple-effect" for="frs-menu-top">
+            <li id="frs-menuitem-logout" class="mdl-menu__item" onclick="location.href='?action=logout';">Logout</li>
+        </ul>
+      </nav>
     </div>
   </header>
   <div class="frs-ribbon"></div>