class.ilAuthFrontendCredentialsApache.php

Go to the documentation of this file.

<?php
/* Copyright (c) 1998-2010 ILIAS open source, Extended GPL, see docs/LICENSE */

include_once './Services/Authentication/classes/Frontend/class.ilAuthFrontendCredentials.php';
include_once './Services/Authentication/interfaces/interface.ilAuthCredentials.php';

class ilAuthFrontendCredentialsApache extends ilAuthFrontendCredentials implements ilAuthCredentials
{
    private $settings = null;

    public function __construct()
    {
        parent::__construct();

        include_once './Services/Administration/classes/class.ilSetting.php';
        $this->settings = new ilSetting('apache_auth');
    }
    
    public function tryAuthenticationOnLoginPage()
    {
        if (strcmp((string) $_REQUEST['cmd'], 'force_login') === 0) {
            return false;
        }

        if (!$this->getSettings()->get('apache_enable_auth', false)) {
            return false;
        }

        if (!$this->getSettings()->get('apache_auth_authenticate_on_login_page', false)) {
            return false;
        }

        if (
            !ilContext::supportsRedirects() ||
            isset($_GET['passed_sso']) ||
            (defined('IL_CERT_SSO') && IL_CERT_SSO == '1')
        ) {
            return false;
        }

        $path = $_SERVER['REQUEST_URI'];
        if (substr($path, 0, 1) === '/') {
            $path = substr($path, 1);
        }

        if (substr($path, 0, 4) !== 'http') {
            $parts = parse_url(ILIAS_HTTP_PATH);
            $path = $parts['scheme'] . '://' . $parts['host'] . '/' . $path;
        }

        ilUtil::redirect(
            ilUtil::getHtmlPath(
                './sso/index.php?force_mode_apache=1&' .
                'r=' . urlencode($path) .
                '&cookie_path=' . urlencode(IL_COOKIE_PATH) .
                '&ilias_path=' . urlencode(ILIAS_HTTP_PATH)
            )
        );
    }

    protected function getSettings()
    {
        return $this->settings;
    }

    public function initFromRequest()
    {
        $this->getLogger()->dump($_SERVER, ilLogLevel::DEBUG);
        $this->getLogger()->debug($this->getSettings()->get('apache_auth_username_direct_mapping_fieldname', ''));

        include_once './Services/AuthApache/classes/class.ilAuthProviderApache.php';

        switch ($this->getSettings()->get('apache_auth_username_config_type')) {
            case ilAuthProviderApache::APACHE_AUTH_TYPE_DIRECT_MAPPING:
                if (array_key_exists($this->getSettings()->get('apache_auth_username_direct_mapping_fieldname'), $_SERVER)) {
                    $this->setUsername($_SERVER[$this->getSettings()->get('apache_auth_username_direct_mapping_fieldname', '')]);
                }
                break;

            case ilAuthProviderApache::APACHE_AUTH_TYPE_BY_FUNCTION:
                include_once 'Services/AuthApache/classes/custom_username_func.php';
                $this->setUsername(ApacheCustom::getUsername());
                break;
        }
    }

    public function hasValidTargetUrl()
    {
        if (!isset($_GET['r']) || 0 == strlen(trim($_GET['r']))) {
            return false;
        }

        $url = trim($_GET['r']);

        $validDomains = array();
        $path         = ILIAS_DATA_DIR . '/' . CLIENT_ID . '/apache_auth_allowed_domains.txt';
        if (file_exists($path) && is_readable($path)) {
            foreach (file($path) as $line) {
                if (trim($line)) {
                    $validDomains[] = trim($line);
                }
            }
        }

        $urlParts       = parse_url($url);
        $redirectDomain = $urlParts['host'];

        $validRedirect = false;
        foreach ($validDomains as $validDomain) {
            if ($redirectDomain === $validDomain) {
                $validRedirect = true;
                break;
            }

            if (strlen($redirectDomain) > (strlen($validDomain) + 1)) {
                if (substr($redirectDomain, (0 - strlen($validDomain) - 1)) === '.' . $validDomain) {
                    $validRedirect = true;
                    break;
                }
            }
        }

        return $validRedirect;
    }

    public function getTargetUrl()
    {
        return ilUtil::appendUrlParameterString(trim($_GET['r']), 'passed_sso=1');
    }
}