From f70c741807d9b4204d0710f07aee6b8413634dde Mon Sep 17 00:00:00 2001
From: flashwave <me@flash.moe>
Date: Sun, 3 Jul 2022 21:15:44 +0000
Subject: [PATCH] Forgot the authentication URLs...

---
 src/CustomAJAXChat.php | 8 ++++++--
 src/SockChatAuth.php   | 6 ++----
 2 files changed, 8 insertions(+), 6 deletions(-)

diff --git a/src/CustomAJAXChat.php b/src/CustomAJAXChat.php
index 565a253..2493b09 100644
--- a/src/CustomAJAXChat.php
+++ b/src/CustomAJAXChat.php
@@ -13,11 +13,15 @@ class CustomAJAXChat extends AJAXChat {
     // Returns null if login is invalid
     function getValidLoginUserData() {
         if(empty($_COOKIE['msz_auth'])) {
-            header('Location: https://flashii.net/auth/login.php');
+            header('Location: ' . $this->getConfig('flashiiAuth', 'login'));
             exit;
         }
 
-        $userInfo = SockChatAuth::attempt($this->getConfig('flashiiSecret'), (string)filter_input(INPUT_COOKIE, 'msz_auth'));
+        $userInfo = SockChatAuth::attempt(
+            $this->getConfig('flashiiAuth', 'verify'),
+            $this->getConfig('flashiiSecret'),
+            (string)filter_input(INPUT_COOKIE, 'msz_auth')
+        );
 
         if($userInfo->success) {
             // Check if we have a valid registered user:
diff --git a/src/SockChatAuth.php b/src/SockChatAuth.php
index a02a642..d126410 100644
--- a/src/SockChatAuth.php
+++ b/src/SockChatAuth.php
@@ -1,8 +1,6 @@
 <?php
 final class SockChatAuth {
-    private const ENDPOINT = 'https://flashii.net/_sockchat/verify';
-
-    public static function attempt(string $secret, string $cookie): object {
+    public static function attempt(string $endPoint, string $secret, string $cookie): object {
         if(!empty($cookie)) {
             $decoded = str_pad(base64_decode(str_pad(strtr($cookie, '-_', '+/'), strlen($cookie) % 4, '=', STR_PAD_RIGHT)), 37, "\0");
             $unpacked = unpack('Cversion/Nuser/H*token', $decoded);
@@ -16,7 +14,7 @@ final class SockChatAuth {
                 ];
                 $loginSignature = hash_hmac('sha256', implode('#', $loginRequest), $secret);
 
-                $login = curl_init(self::ENDPOINT);
+                $login = curl_init($endPoint);
                 curl_setopt_array($login, [
                     CURLOPT_AUTOREFERER => false,
                     CURLOPT_FAILONERROR => false,