class.ilCASSettingsGUI.php

Go to the documentation of this file.

<?php

declare(strict_types=1);

class ilCASSettingsGUI
{
    public const SYNC_DISABLED = 0;
    public const SYNC_CAS = 1;
    public const SYNC_LDAP = 2;

    private ilCASSettings $settings;

    private int $ref_id;

    private \ilGlobalTemplateInterface $tpl;
    private ilCtrl $ctrl;
    private ilLanguage $lng;
    private ilRbacSystem $rbacSystem;
    private ilRbacReview $rbacReview;
    private ilErrorHandling $ilErr;
    private \ILIAS\UI\Renderer $renderer;
    private \ILIAS\UI\Factory $factory;

    public function __construct(int $a_auth_ref_id)
    {
        global $DIC;
        $this->tpl = $DIC->ui()->mainTemplate();

        $this->ctrl = $DIC->ctrl();
        $this->rbacSystem = $DIC->rbac()->system();
        $this->rbacReview = $DIC->rbac()->review();
        $this->ilErr = $DIC['ilErr'];
        $this->lng = $DIC->language();
        $this->lng->loadLanguageModule('registration');
        $this->lng->loadLanguageModule('auth');

        $this->renderer = $DIC->ui()->renderer();
        $this->factory = $DIC->ui()->factory();

        $this->ref_id = $a_auth_ref_id;

        $this->settings = ilCASSettings::getInstance();
    }

    protected function getSettings(): ilCASSettings
    {
        return $this->settings;
    }

    public function executeCommand(): bool
    {
        $next_class = $this->ctrl->getNextClass($this);
        $cmd = $this->ctrl->getCmd("settings");

        if (!$this->rbacSystem->checkAccess("visible,read", $this->ref_id)) {
            $this->ilErr->raiseError($this->lng->txt('msg_no_perm_read'), $this->ilErr->WARNING);
        }

        switch ($next_class) {
            default:
                if (!$cmd) {
                    $cmd = "settings";
                }
                $this->$cmd();
                break;
        }
        return true;
    }

    protected function initFormSettings(): ilPropertyFormGUI
    {
        $this->lng->loadLanguageModule('auth');

        $form = new ilPropertyFormGUI();
        $form->setFormAction($this->ctrl->getFormAction($this));

        $form->setTitle($this->lng->txt('auth_cas_auth'));

        $has_write_permissions = $this->rbacSystem->checkAccess('write', $this->ref_id);

        $drop_in_replacements_url = 'https://github.com/ILIAS-eLearning/ILIAS/tree/trunk/components/ILIAS/HTTP#dropinreplacements';
        $drop_in_replacements_link = $this->factory->link()->standard(
            $this->lng->txt("auth_cas_auth_desc"),
            $drop_in_replacements_url
        );
        $form->setDescription($this->renderer->render(
            $drop_in_replacements_link
        ));

        // Form checkbox
        $check = new ilCheckboxInputGUI($this->lng->txt("active"), 'active');
        $check->setDisabled(!$has_write_permissions);
        $check->setChecked($this->getSettings()->isActive());
        $check->setValue("1");
        $form->addItem($check);

        $text = new ilTextInputGUI($this->lng->txt('server'), 'server');
        $text->setDisabled(!$has_write_permissions);
        $text->setValue($this->getSettings()->getServer());
        $text->setRequired(true);
        $text->setInfo($this->lng->txt('auth_cas_server_desc'));
        $text->setSize(64);
        $text->setMaxLength(255);
        $form->addItem($text);

        $port = new ilNumberInputGUI($this->lng->txt("port"), 'port');
        $port->setDisabled(!$has_write_permissions);
        $port->setValue((string) $this->getSettings()->getPort());
        $port->setRequired(true);
        $port->setMinValue(0);
        $port->setMaxValue(65535);
        $port->setSize(5);
        $port->setMaxLength(5);
        $port->setInfo($this->lng->txt('auth_cas_port_desc'));
        $form->addItem($port);

        $text = new ilTextInputGUI($this->lng->txt('uri'), 'uri');
        $text->setDisabled(!$has_write_permissions);
        $text->setValue($this->getSettings()->getUri());
        $text->setRequired(true);
        $text->setInfo($this->lng->txt('auth_cas_uri_desc'));
        $text->setSize(64);
        $text->setMaxLength(255);
        $form->addItem($text);

        // User synchronization
        // 0: Disabled
        // 1: CAS
        // 2: LDAP
        $sync = new ilRadioGroupInputGUI($this->lng->txt('auth_sync'), 'sync');
        $sync->setDisabled(!$has_write_permissions);
        $sync->setRequired(true);
        $form->addItem($sync);

        // Disabled
        $dis = new ilRadioOption(
            $this->lng->txt('disabled'),
            (string) self::SYNC_DISABLED,
            ''
        );
        $dis->setDisabled(!$has_write_permissions);
        $sync->addOption($dis);

        // CAS
        $rad = new ilRadioOption(
            $this->lng->txt('auth_sync_cas'),
            (string) self::SYNC_CAS,
            ''
        );
        $rad->setDisabled(!$has_write_permissions);
        $rad->setInfo($this->lng->txt('auth_sync_cas_info'));
        $sync->addOption($rad);

        $select = new ilSelectInputGUI($this->lng->txt('auth_user_default_role'), 'role');
        $select->setOptions($this->prepareRoleSelection());
        $select->setValue($this->getSettings()->getDefaultRole());
        $select->setDisabled(!$has_write_permissions);
        $rad->addSubItem($select);


        // LDAP
        $server_ids = ilLDAPServer::getAvailableDataSources(ilAuthUtils::AUTH_CAS);

        if (count($server_ids)) {
            $ldap = new ilRadioOption(
                $this->lng->txt('auth_css_ldap'),
                (string) ilCASSettings::SYNC_LDAP,
                ''
            );
            $ldap->setDisabled(!$has_write_permissions);
            $ldap->setInfo($this->lng->txt('auth_cas_ldap_info'));
            $sync->addOption($ldap);

            $ldap_server_select = new ilSelectInputGUI($this->lng->txt('auth_ldap_server_ds'), 'ldap_sid');
            $ldap_server_select->setDisabled(!$has_write_permissions);
            $options[0] = $this->lng->txt('select_one');
            foreach ($server_ids as $ldap_sid) {
                $ldap_server = new ilLDAPServer($ldap_sid);
                $options[$ldap_sid] = $ldap_server->getName();
            }
            $ldap_server_select->setOptions($options);
            $ldap_server_select->setRequired(true);
            $ds = ilLDAPServer::getDataSource(ilAuthUtils::AUTH_CAS);
            $ldap_server_select->setValue($ds);

            $ldap->addSubItem($ldap_server_select);
        }

        if (ilLDAPServer::isDataSourceActive(ilAuthUtils::AUTH_CAS)) {
            $sync->setValue((string) ilCASSettings::SYNC_LDAP);
        } else {
            $sync->setValue(
                $this->getSettings()->isUserCreationEnabled() ?
                    (string) ilCASSettings::SYNC_CAS :
                    (string) ilCASSettings::SYNC_DISABLED
            );
        }

        $instruction = new ilTextAreaInputGUI($this->lng->txt('auth_login_instructions'), 'instruction');
        $instruction->setCols(80);
        $instruction->setRows(6);
        $instruction->setDisabled(!$has_write_permissions);
        $instruction->setValue($this->getSettings()->getLoginInstruction());
        $form->addItem($instruction);

        $create = new ilCheckboxInputGUI($this->lng->txt('auth_allow_local'), 'local');
        $create->setInfo($this->lng->txt('auth_cas_allow_local_desc'));
        $create->setChecked($this->getSettings()->isLocalAuthenticationEnabled());
        $create->setValue("1");
        $create->setDisabled(!$has_write_permissions);
        $form->addItem($create);

        if ($this->rbacSystem->checkAccess('write', $this->ref_id)) {
            $form->addCommandButton('save', $this->lng->txt('save'));
        }

        return $form;
    }

    public function settings(): void
    {
        $form = $this->initFormSettings();
        $this->tpl->setContent($form->getHTML());
    }

    public function save(): void
    {
        if (!$this->rbacSystem->checkAccess('write', $this->ref_id)) {
            $this->ilErr->raiseError($this->lng->txt('permission_denied'), $this->ilErr->WARNING);
        }

        $form = $this->initFormSettings();
        if ($form->checkInput()) {
            $this->getSettings()->setActive((bool) $form->getInput('active'));
            $this->getSettings()->setServer($form->getInput('server'));
            $this->getSettings()->setPort((int) $form->getInput('port'));
            $this->getSettings()->setUri($form->getInput('uri'));
            $this->getSettings()->setDefaultRole((int) $form->getInput('role'));
            $this->getSettings()->enableLocalAuthentication((bool) $form->getInput('local'));
            $this->getSettings()->setLoginInstruction($form->getInput('instruction'));
            $this->getSettings()->enableUserCreation((int) $form->getInput('sync') === ilCASSettings::SYNC_CAS);
            $this->getSettings()->save();

            switch ((int) $form->getInput('sync')) {
                case ilCASSettings::SYNC_CAS:
                case ilCASSettings::SYNC_DISABLED:
                    ilLDAPServer::disableDataSourceForAuthMode(ilAuthUtils::AUTH_CAS);
                    break;

                case ilCASSettings::SYNC_LDAP:
                    if (!(int) $form->getInput('ldap_sid')) {
                        $this->tpl->setOnScreenMessage('failure', $this->lng->txt('err_check_input'));
                        $this->settings();
                        //TODO do we need return false?
                        return;
                    }

                    ilLDAPServer::toggleDataSource((int) $form->getInput('ldap_sid'), ilAuthUtils::AUTH_CAS, 1);
                    break;
            }

            $this->tpl->setOnScreenMessage('success', $this->lng->txt('settings_saved'), true);
            $this->ctrl->redirect($this, 'settings');
        }

        $form->setValuesByPost();
        $this->tpl->setOnScreenMessage('failure', $this->lng->txt('err_ceck_input'));
        $this->tpl->setContent($form->getHTML());
    }

    private function prepareRoleSelection(): array
    {
        $global_roles = ilUtil::_sortIds(
            $this->rbacReview->getGlobalRoles(),
            'object_data',
            'title',
            'obj_id'
        );

        $select[0] = $this->lng->txt('links_select_one');
        foreach ($global_roles as $role_id) {
            $select[$role_id] = ilObject::_lookupTitle((int) $role_id);
        }

        return $select;
    }
}