FilesExpand file tree

 php72-scripts

/

iap.php

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

89 lines (79 loc) · 3.73 KB

 php72-scripts

/

iap.php

Copy path

Top

File metadata and controls

• Code
• Blame

89 lines (79 loc) · 3.73 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

<?php

/**

* Copyright 2017 Google Inc.

*

* Licensed under the Apache License, Version 2.0 (the "License");

* you may not use this file except in compliance with the License.

* You may obtain a copy of the License at

*

* http://www.apache.org/licenses/LICENSE-2.0

*

* Unless required by applicable law or agreed to in writing, software

* distributed under the License is distributed on an "AS IS" BASIS,

* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

* See the License for the specific language governing permissions and

* limitations under the License.

*/

namespace Google\Cloud\Samples\Iap;

use Symfony\Component\Console\Application;

use Symfony\Component\Console\Command\Command;

use Symfony\Component\Console\Input\InputArgument;

# Includes the autoloader for libraries installed with composer

require __DIR__ . '/vendor/autoload.php';

$application = new Application('Iap');

// Create request Command.

$application->add((new Command('request'))

->addArgument('url', InputArgument::REQUIRED, 'The Identity-Aware Proxy-protected URL to fetch.')

->addArgument('clientId', InputArgument::REQUIRED, 'The client ID used by Identity-Aware Proxy.')

->addArgument('serviceAccountPath', InputArgument::REQUIRED, 'Path for the service account you want to use.')

->setDescription('Make a request to an IAP-protected resource using a service account.')

->setHelp(<<<EOF

The <info>%command.name%</info> command makes a request to an IAP-protected resource.

<info>php %command.full_name%</info>

EOF

)

->setCode(function ($input, $output) {

$response = make_iap_request(

$input->getArgument('url'),

$input->getArgument('clientId'),

$input->getArgument('serviceAccountPath'));

$response_body = (string)$response->getBody();

$output->writeln('Printing out response body:');

$output->writeln($response_body);

})

);

// Create a validate Command.

$application->add((new Command('validate'))

->addArgument('url', InputArgument::REQUIRED, 'The Identity-Aware Proxy-protected URL to fetch.')

->addArgument('clientId', InputArgument::REQUIRED, 'The client ID used by Identity-Aware Proxy.')

->addArgument('serviceAccountPath', InputArgument::REQUIRED, 'Path for the service account you want to use.')

->addArgument('projectNumber', InputArgument::REQUIRED, 'The project *number* for your Google Cloud project. This is returned by gcloud projects describe $PROJECT_ID or in the Project Info card in Cloud Console.')

->addArgument('projectId', InputArgument::REQUIRED, 'The project ID for your Google Cloud Platform project.')

->setDescription('Makes a request to an IAP-protected resource using a service account and then validates the JWT.')

->setHelp(<<<EOF

The <info>%command.name%</info> command makes a request to an IAP-protected resource and then validates the JWT.

<info>php %command.full_name%</info>

EOF

)

->setCode(function ($input, $output) {

$response = make_iap_request(

$input->getArgument('url'),

$input->getArgument('clientId'),

$input->getArgument('serviceAccountPath'));

$response_body = (string)$response->getBody();

$iap_jwt = explode(': ', $response_body)[1];

$user_identity = validate_jwt_from_app_engine(

$iap_jwt,

$input->getArgument('projectNumber'),

$input->getArgument('projectId'));

$output->writeln([

'Printing user identity information from ID token payload:',

sprintf('sub: %s', $user_identity['sub']),

sprintf('email: %s', $user_identity['email'])

]);

})

);

if (getenv('PHPUNIT_TESTS') === '1') {

return $application;

}

$application->run();