Merge pull request #15 from privacybydesign/features/https

fix: changes to make the sessions work with https

build_artifacts.sh

@@ -44,10 +44,6 @@ for lang in 'nl' 'en'; do
   cp "$DIR/start_session.js" "$DIR/build/$lang/start_session.js"
 done
 
-cp -r "$DIR/data" "$DIR/build/data"
-rm "$DIR/build/data/README.md"
-rm "$DIR/build/data/.gitignore"
-
 # Delete potential empty directories
 find "$DIR/build" -type d -empty -delete
 # Delete shell files

config.php

@@ -16,7 +16,3 @@
     define('IRMATUBE_NEXT_SESSION_URL', BASE_URL . '/demo/get_session_request.php');
     define('IRMATUBE_CREDENTIAL', 'pbdf.pbdf.irmatube');
 }
-
-if (JWT_ENABLED) {
-    define('IRMA_SERVER_PUBLICKEY', __DIR__ . '/../data/pk.pem');
-}

get_session_request.php

@@ -8,7 +8,7 @@
 function get_session_request($contents)
 {
     if (JWT_ENABLED) {
-        $jwt_pk = file_get_contents(IRMA_SERVER_PUBLICKEY);
+        $jwt_pk = file_get_contents(IRMA_SERVER_URL . './publickey');
         try {
             $decoded = JWT::decode($contents, new Key($jwt_pk, 'RS256'));
         } catch (Exception $e) {

start_session.php

@@ -2,7 +2,6 @@
 require_once 'config.php';
 
 date_default_timezone_set('UTC');
-$protocol = explode(':', IRMA_SERVER_URL, 2)[0];
 
 $sigrequests = [
     'email-signature' => [
@@ -177,7 +176,7 @@
 ];
 
 function start_session($type, $lang) {
-    global $sprequests, $sigrequests, $protocol;
+    global $sprequests, $sigrequests;
 
     if (array_key_exists($type, $sprequests))
         $sessionrequest = $sprequests[$type];
@@ -189,14 +188,15 @@ function start_session($type, $lang) {
     $jsonsr = json_encode($sessionrequest);
 
     $api_call = array(
-        $protocol => array(
-            'method' => 'POST',
-            'header' => "Content-type: application/json\r\n"
-                . "Content-Length: " . strlen($jsonsr) . "\r\n"
-                . "Authorization: " . API_TOKEN . "\r\n",
-            'content' => $jsonsr
-        )
-    );
+    'http' => array(
+        'method' => 'POST',
+        'header' => "Content-type: application/json\r\n"
+                    . "Content-Length: " . strlen($jsonsr) . "\r\n"
+                    . "Authorization: " . API_TOKEN . "\r\n",
+        'content' => $jsonsr,
+    )
+);
+
 
     $resp = file_get_contents(IRMA_SERVER_URL . '/session', false, stream_context_create($api_call));
     if (! $resp) {