streams/Code/Daemon/CurlAuth.php

<?php

namespace Code\Daemon;

// generate a curl compatible cookie file with an authenticated session for the given channel_id.
// If this file is then used with curl and the destination url is sent through zid() or manually
// manipulated to add a zid, it should allow curl to provide zot magic-auth across domains.

// Handles expiration of stale cookies currently by deleting them and rewriting the file.

use App;

class CurlAuth
{

    public static function run($argc, $argv)
    {

        if ($argc != 2) {
            return;
        }

        App::$session->start();

        $_SESSION['authenticated'] = 1;
        $_SESSION['uid'] = $argv[1];

        $x = session_id();

        $f = 'cache/cookie_' . $argv[1];
        $c = 'cache/cookien_' . $argv[1];

        $e = file_exists($f);

        $output = '';

        if ($e) {
            $lines = file($f);
            if ($lines) {
                foreach ($lines as $line) {
                    if (strlen($line) > 0 && $line[0] != '#' && substr_count($line, "\t") == 6) {
                        $tokens = explode("\t", $line);
                        $tokens = array_map('trim', $tokens);
                        if ($tokens[4] > time()) {
                            $output .= $line . "\n";
                        }
                    } else {
                        $output .= $line;
                    }
                }
            }
        }
        $t = time() + (24 * 3600);
        file_put_contents($f, $output . 'HttpOnly_' . App::get_hostname() . "\tFALSE\t/\tTRUE\t$t\tPHPSESSID\t" . $x, (($e) ? FILE_APPEND : 0));

        file_put_contents($c, $x);

        return;
    }
}