class.ilAuthFrontendCredentialsApache.php

Go to the documentation of this file.

<?php
/* Copyright (c) 1998-2010 ILIAS open source, Extended GPL, see docs/LICENSE */

include_once './Services/Authentication/classes/Frontend/class.ilAuthFrontendCredentials.php';
include_once './Services/Authentication/interfaces/interface.ilAuthCredentials.php';

class ilAuthFrontendCredentialsApache extends ilAuthFrontendCredentials implements ilAuthCredentials
{
        private $settings = null;

        public function __construct()
        {
                parent::__construct();

                include_once './Services/Administration/classes/class.ilSetting.php';
                $this->settings = new ilSetting('apache_auth');
        }
        
        public function tryAuthenticationOnLoginPage()
        {
                if(strcmp((string) $_REQUEST['cmd'], 'force_login') === 0)
                {
                        return false;
                }

                if(!$this->getSettings()->get('apache_enable_auth',false))
                {
                        return false;
                }

                if(!$this->getSettings()->get('apache_auth_authenticate_on_login_page',false))
                {
                        return false;
                }

                if(
                        !ilContext::supportsRedirects() || 
                        isset($_GET['passed_sso']) ||
                        (defined('IL_CERT_SSO') && IL_CERT_SSO == '1')
                )
                {
                        return false;
                }

                $path = $_SERVER['REQUEST_URI'];
                if(substr($path,0,1) === '/')
                {
                        $path = substr($path, 1);
                }

                if(substr($path, 0, 4) !== 'http')
                {
                        $parts = parse_url(ILIAS_HTTP_PATH);
                        $path = $parts['scheme'] . '://'. $parts['host'] . '/' . $path;
                }

                ilUtil::redirect(
                        ilUtil::getHtmlPath(
                                './sso/index.php?force_mode_apache=1&' .
                                'r=' . urlencode($path) .
                                '&cookie_path=' . urlencode(IL_COOKIE_PATH) .
                                '&ilias_path=' . urlencode(ILIAS_HTTP_PATH)
                        )
                );
        }

        protected function getSettings()
        {
                return $this->settings;
        }

        public function initFromRequest()
        {
                $this->getLogger()->dump($_SERVER, ilLogLevel::DEBUG);
                $this->getLogger()->debug($this->getSettings()->get('apache_auth_username_direct_mapping_fieldname', ''));

                include_once './Services/AuthApache/classes/class.ilAuthProviderApache.php';

                switch($this->getSettings()->get('apache_auth_username_config_type'))
                {
                        case ilAuthProviderApache::APACHE_AUTH_TYPE_DIRECT_MAPPING:
                                if(array_key_exists($this->getSettings()->get('apache_auth_username_direct_mapping_fieldname'), $_SERVER))
                                {
                                        $this->setUsername($_SERVER[$this->getSettings()->get('apache_auth_username_direct_mapping_fieldname', '')]);
                                }
                                break;

                        case ilAuthProviderApache::APACHE_AUTH_TYPE_BY_FUNCTION:
                                include_once 'Services/AuthApache/classes/custom_username_func.php';
                                $this->setUsername(ApacheCustom::getUsername());
                                break;
                }
        }

        public function hasValidTargetUrl()
        {
                if(!isset($_GET['r']) || 0 == strlen(trim($_GET['r'])))
                {
                        return false;
                }

                $url = trim($_GET['r']);

                $validDomains = array();
                $path         = ILIAS_DATA_DIR . '/' . CLIENT_ID . '/apache_auth_allowed_domains.txt';
                if(file_exists($path) && is_readable($path))
                {
                        foreach(file($path) as $line)
                        {
                                if(trim($line))
                                {
                                        $validDomains[] = trim($line);
                                }
                        }
                }

                $urlParts       = parse_url($url);
                $redirectDomain = $urlParts['host'];

                $validRedirect = false;
                foreach($validDomains as $validDomain)
                {
                        if($redirectDomain === $validDomain)
                        {
                                $validRedirect = true;
                                break;
                        }

                        if(strlen($redirectDomain) > (strlen($validDomain) + 1))
                        {
                                if(substr($redirectDomain, (0 - strlen($validDomain) - 1)) === '.' . $validDomain)
                                {
                                        $validRedirect = true;
                                        break;
                                }
                        }
                }

                return $validRedirect;
        }

        public function getTargetUrl()
        {
                return ilUtil::appendUrlParameterString(trim($_GET['r']), 'passed_sso=1');
        }
}