ilWACSignedPath Class Reference

Class ilWACSignedPath. More...

Collaboration diagram for ilWACSignedPath:

Public Member Functions
	__construct (ilWACPath $ilWACPath, GlobalHttpState $httpState, CookieFactory $cookieFactory)
	ilWACSignedPath constructor. More...
	getSignedPath ()
	isFolderSigned ()
	isFolderTokenValid ()
	revalidatingFolderToken ()
	isSignedPath ()
	isSignedPathValid ()
	getTokenInstance ()
	setTokenInstance (ilWACToken $token_instance)
	getType ()
	setType ($type)
	getPathObject ()
	setPathObject (ilWACPath $path_object)
	buildAndSetTokenInstance ($timestamp=0, $ttl=0)
	isChecked ()
	setChecked ($checked)

Static Public Member Functions
static	signFile ($path_to_file)
static	signFolderOfStartFile ($start_file_path)
static	getTokenMaxLifetimeInSeconds ()
static	setTokenMaxLifetimeInSeconds ($token_max_lifetime_in_seconds)
static	getCookieMaxLifetimeInSeconds ()
static	setCookieMaxLifetimeInSeconds ($cookie_max_lifetime_in_seconds)

Data Fields
const	WAC_TOKEN_ID = 'il_wac_token'
const	WAC_TIMESTAMP_ID = 'il_wac_ts'
const	WAC_TTL_ID = 'il_wac_ttl'
const	TS_SUFFIX = 'ts'
const	TTL_SUFFIX = 'ttl'
const	MAX_LIFETIME = 600

Protected Member Functions
	saveFolderToken ()
	checkToken ()
	buildTokenInstance ($timestamp=0, $ttl=0)
	getRelevantLifeTime ()

Protected Attributes
	$path_object = null
	$token_instance = null
	$type = PathType::FILE
	$checked = false

Static Protected Attributes
static	$token_max_lifetime_in_seconds = 3
static	$cookie_max_lifetime_in_seconds = 300

Private Attributes
	$httpService
	$cookieFactory

Detailed Description

Class ilWACSignedPath.

Author

Fabian Schmid fs@st.nosp@m.uder.nosp@m.-raim.nosp@m.ann..nosp@m.ch

Version

1.0.0

Definition at line 23 of file class.ilWACSignedPath.php.

Constructor & Destructor Documentation

__construct()

ilWACSignedPath::__construct	(	ilWACPath	$ilWACPath,
		GlobalHttpState	$httpState,
		CookieFactory	$cookieFactory
	)

ilWACSignedPath constructor.

Parameters

\ilWACPath	$ilWACPath
GlobalHttpState	$httpState
CookieFactory	$cookieFactory

Definition at line 73 of file class.ilWACSignedPath.php.

References $cookieFactory, and setPathObject().

    {
        $this->setPathObject($ilWACPath);
        $this->httpService = $httpState;
        $this->cookieFactory = $cookieFactory;
    }

Here is the call graph for this function:

Member Function Documentation

buildAndSetTokenInstance()

ilWACSignedPath::buildAndSetTokenInstance	(		$timestamp = 0,
			$ttl = 0
	)

Parameters

int	$timestamp
int	$ttl

Returns

void

Exceptions

Definition at line 395 of file class.ilWACSignedPath.php.

References $timestamp, buildTokenInstance(), and setTokenInstance().

Referenced by isFolderSigned(), isSignedPathValid(), and revalidatingFolderToken().

    {
        assert(is_int($timestamp));
        assert(is_int($ttl));

        $this->setTokenInstance($this->buildTokenInstance($timestamp, $ttl));
    }

Here is the call graph for this function:

Here is the caller graph for this function:

buildTokenInstance()

ilWACSignedPath::buildTokenInstance (   $timestamp = 0,   $ttl = 0  )

protected

Parameters

int	$timestamp
int	$ttl

Returns

ilWACToken

Exceptions

ilWACException

Definition at line 360 of file class.ilWACSignedPath.php.

References $client, $path, $timestamp, ilWACException\CODE_NO_TYPE, getPathObject(), and getType().

Referenced by buildAndSetTokenInstance(), checkToken(), and isFolderSigned().

    {
        assert(is_int($timestamp));
        assert(is_int($ttl));
        if (!$this->getType()) {
            throw new ilWACException(ilWACException::CODE_NO_TYPE);
        }

        switch ($this->getType()) {
            case PathType::FOLDER:
                $path = $this->getPathObject()->getModulePath();
                break;
            case PathType::FILE:
                $path = $this->getPathObject()->getPathWithoutQuery();
                break;
            default:
                $path = $this->getPathObject()->getPathWithoutQuery();
                break;
        }

        $client = $this->getPathObject()->getClient();
        $timestamp = $timestamp ? $timestamp : $this->getPathObject()->getTimestamp();
        $ttl = $ttl ? $ttl : $this->getPathObject()->getTTL();

        return new ilWACToken($path, $client, $timestamp, $ttl);
    }

Here is the call graph for this function:

Here is the caller graph for this function:

checkToken()

ilWACSignedPath::checkToken ( )

protected

Returns

bool

Exceptions

Definition at line 325 of file class.ilWACSignedPath.php.

References buildTokenInstance(), getPathObject(), setChecked(), and time.

Referenced by isFolderTokenValid(), and isSignedPathValid().

    {
        $request_token = $this->getPathObject()->getToken();
        $request_ttl = $this->getPathObject()->getTTL();
        $request_timestamp = $this->getPathObject()->getTimestamp();
        $current_timestamp = time();

        $timestamp_valid = ($current_timestamp < ($request_timestamp + $request_ttl));

        if (!$timestamp_valid) {
            $this->setChecked(true);

            return false;
        }

        $simulatedTokenInstance = $this->buildTokenInstance($request_timestamp, $request_ttl);
        $token_valid = ($simulatedTokenInstance->getToken() == $request_token);

        if (!$token_valid) {
            $this->setChecked(true);

            return false;
        }

        return true;
    }

Here is the call graph for this function:

Here is the caller graph for this function:

getCookieMaxLifetimeInSeconds()

static ilWACSignedPath::getCookieMaxLifetimeInSeconds ( )

static

Returns

int

Definition at line 432 of file class.ilWACSignedPath.php.

Referenced by ilObjSCORMInitData\getIliasScormVars(), ilSCORM13Player\getPlayer(), ilWACTokenTest\testFolderToken(), and ilWACTokenTest\testFolderTokenWithSecondFile().

    {
        return self::$cookie_max_lifetime_in_seconds;
    }

Here is the caller graph for this function:

getPathObject()

ilWACSignedPath::getPathObject

(

)

Returns

ilWACPath

Definition at line 305 of file class.ilWACSignedPath.php.

References $path_object.

Referenced by buildTokenInstance(), checkToken(), getRelevantLifeTime(), getSignedPath(), isFolderSigned(), isSignedPath(), and isSignedPathValid().

    {
        return $this->path_object;
    }

Here is the caller graph for this function:

getRelevantLifeTime()

ilWACSignedPath::getRelevantLifeTime ( )

protected

Returns

int

Definition at line 458 of file class.ilWACSignedPath.php.

References getPathObject(), and getType().

    {
        $request_ttl = $this->getPathObject()->getTTL();
        if ($request_ttl > 0) {
            return $request_ttl;
        }
        switch ($this->getType()) {
            case PathType::FOLDER:
                $life_time = self::getCookieMaxLifetimeInSeconds();
                break;
            case PathType::FILE:
                $life_time = self::getTokenMaxLifetimeInSeconds();
                break;
            default:
                $life_time = 0;
                break;
        }

        return $life_time;
    }

Here is the call graph for this function:

getSignedPath()

ilWACSignedPath::getSignedPath

(

)

Returns

string

Exceptions

ilWACException

Definition at line 85 of file class.ilWACSignedPath.php.

References $path, getPathObject(), getTokenInstance(), getType(), and ilWACException\WRONG_PATH_TYPE.

    {
        if ($this->getType() !== PathType::FILE) {
            throw new ilWACException(ilWACException::WRONG_PATH_TYPE);
        }
        if (!$this->getPathObject()->getOriginalRequest()) {
            return '';
        }
        if (!$this->getPathObject()->fileExists()) {
            //                  return $this->getPathObject()->getOriginalRequest();
        }

        if (strpos($this->getPathObject()->getPath(), '?')) {
            $path = $this->getPathObject()->getPath() . '&' . self::WAC_TOKEN_ID . '='
                    . $this->getTokenInstance()->getToken();
        } else {
            $path = $this->getPathObject()->getPath() . '?' . self::WAC_TOKEN_ID . '='
                    . $this->getTokenInstance()->getToken();
        }

        $path = $path . '&' . self::WAC_TTL_ID . '=' . $this->getTokenInstance()->getTTL();
        $path = $path . '&' . self::WAC_TIMESTAMP_ID . '='
                . $this->getTokenInstance()->getTimestamp();

        return $path;
    }

Here is the call graph for this function:

getTokenInstance()

ilWACSignedPath::getTokenInstance

(

)

Returns

ilWACToken

Definition at line 266 of file class.ilWACSignedPath.php.

References $token_instance.

Referenced by getSignedPath(), and saveFolderToken().

    {
        return $this->token_instance;
    }

Here is the caller graph for this function:

getTokenMaxLifetimeInSeconds()

static ilWACSignedPath::getTokenMaxLifetimeInSeconds ( )

static

Returns

int

Definition at line 407 of file class.ilWACSignedPath.php.

Referenced by ilWACToken\__construct(), ilOnScreenChatUserDataProvider\getDataByUserIds(), and ilWACTokenTest\testFileToken().

    {
        return self::$token_max_lifetime_in_seconds;
    }

Here is the caller graph for this function:

getType()

ilWACSignedPath::getType

(

)

Returns

int

Definition at line 285 of file class.ilWACSignedPath.php.

References $type.

Referenced by buildTokenInstance(), getRelevantLifeTime(), getSignedPath(), and revalidatingFolderToken().

    {
        return (int) $this->type;
    }

Here is the caller graph for this function:

isChecked()

ilWACSignedPath::isChecked

(

)

Returns

bool

Definition at line 483 of file class.ilWACSignedPath.php.

References $checked.

    {
        return (bool) $this->checked;
    }

isFolderSigned()

ilWACSignedPath::isFolderSigned

(

)

Returns

bool

Definition at line 116 of file class.ilWACSignedPath.php.

References $name, buildAndSetTokenInstance(), buildTokenInstance(), getPathObject(), and setType().

Referenced by isFolderTokenValid().

    {
        $cookieJar = $this->httpService->cookieJar();

        $this->setType(PathType::FOLDER);
        $plain_token = $this->buildTokenInstance();
        $name = $plain_token->getHashedId();

        $tokenCookie = $cookieJar->get($name);
        $timestampCookie = $cookieJar->get($name . self::TS_SUFFIX);
        $ttlCookie = $cookieJar->get($name . self::TTL_SUFFIX);

        $defaultToken = '';
        $tokenCookieValue = is_null($tokenCookie) ? $defaultToken : is_a($tokenCookie->getValue(), Cookie::class) ? $tokenCookie->getValue() : $defaultToken;

        $defaultTimestamp = 0;
        $timestampCookieValue = is_null($timestampCookie) ? $defaultTimestamp : is_a($timestampCookie->getValue(), Cookie::class) ? $timestampCookie->getValue() : $defaultTimestamp;
        $timestampCookieValue = intval($timestampCookieValue);

        $defaultTtl = 0;
        $ttlCookieValue = is_null($ttlCookie) ? $defaultTtl : is_a($ttlCookie->getValue(), Cookie::class) ? $ttlCookie->getValue() : $defaultTtl;
        $ttlCookieValue = intval($ttlCookieValue);

        $this->getPathObject()->setToken($tokenCookieValue);
        $this->getPathObject()->setTimestamp($timestampCookieValue);
        $this->getPathObject()->setTTL($ttlCookieValue);
        $this->buildAndSetTokenInstance();

        return $this->getPathObject()->hasToken();
    }

Here is the call graph for this function:

Here is the caller graph for this function:

isFolderTokenValid()

ilWACSignedPath::isFolderTokenValid

(

)

Returns

bool

Exceptions

ilWACException

Definition at line 152 of file class.ilWACSignedPath.php.

References checkToken(), and isFolderSigned().

    {
        if (!$this->isFolderSigned()) {
            return false;
        }

        return $this->checkToken();
    }

Here is the call graph for this function:

isSignedPath()

ilWACSignedPath::isSignedPath

(

)

Returns

bool

Definition at line 207 of file class.ilWACSignedPath.php.

References getPathObject().

    {
        return ($this->getPathObject()->hasToken() && $this->getPathObject()->hasTimestamp()
                && $this->getPathObject()->hasTTL());
    }

Here is the call graph for this function:

isSignedPathValid()

ilWACSignedPath::isSignedPathValid

(

)

Returns

bool

Exceptions

ilWACException

Definition at line 218 of file class.ilWACSignedPath.php.

References buildAndSetTokenInstance(), checkToken(), and getPathObject().

    {
        $this->buildAndSetTokenInstance($this->getPathObject()->getTimestamp(), $this->getPathObject()->getTTL());

        return $this->checkToken();
    }

Here is the call graph for this function:

revalidatingFolderToken()

ilWACSignedPath::revalidatingFolderToken

(

)

Returns

bool

Definition at line 192 of file class.ilWACSignedPath.php.

References buildAndSetTokenInstance(), getType(), saveFolderToken(), and time.

    {
        if ($this->getType() !== PathType::FOLDER) {
            return false;
        }
        $this->buildAndSetTokenInstance(time(), self::getCookieMaxLifetimeInSeconds());
        $this->saveFolderToken();

        return true;
    }

Here is the call graph for this function:

saveFolderToken()

ilWACSignedPath::saveFolderToken ( )

protected

Returns

void

Definition at line 165 of file class.ilWACSignedPath.php.

References $expire, $id, $response, getTokenInstance(), and time.

Referenced by revalidatingFolderToken().

    {
        $cookie_lifetime = self::getCookieMaxLifetimeInSeconds();
        //$str = 'save folder token for folder: ' . $this->getPathObject()->getDirName() . ', valid for ' . $cookie_lifetime . 's';
        $id = $this->getTokenInstance()->getHashedId();
        $expire = time() + $cookie_lifetime;

        $tokenCookie = $this->cookieFactory->create($id, $this->getTokenInstance()->getToken())->withExpires(time()
                                                                                                             + 24
                                                                                                               * 3600)->withPath('/')->withSecure(false)->withDomain(null)->withSecure(false)->withHttpOnly(false);

        $timestampCookie = $this->cookieFactory->create($id
                                                        . self::TS_SUFFIX, time())->withExpires($expire)->withPath('/')->withDomain(null)->withSecure(false)->withHttpOnly(false);

        $ttlCookie = $this->cookieFactory->create($id
                                                  . self::TTL_SUFFIX, self::getCookieMaxLifetimeInSeconds())->withExpires($expire)->withPath('/')->withDomain(null)->withSecure(false)->withHttpOnly(false);

        $cookieJar = $this->httpService->cookieJar();
        $response = $cookieJar->with($tokenCookie)->with($timestampCookie)->with($ttlCookie)->renderIntoResponseHeader($this->httpService->response());

        $this->httpService->saveResponse($response);
    }

Here is the call graph for this function:

Here is the caller graph for this function:

setChecked()

ilWACSignedPath::setChecked

(

$checked

)

Parameters

bool

$checked

Returns

void

Definition at line 493 of file class.ilWACSignedPath.php.

References $checked.

Referenced by checkToken().

    {
        assert(is_bool($checked));
        $this->checked = $checked;
    }

Here is the caller graph for this function:

setCookieMaxLifetimeInSeconds()

static ilWACSignedPath::setCookieMaxLifetimeInSeconds (   $cookie_max_lifetime_in_seconds )

static

Parameters

int

$cookie_max_lifetime_in_seconds

Returns

void

Exceptions

Definition at line 445 of file class.ilWACSignedPath.php.

References $cookie_max_lifetime_in_seconds, and ilWACException\MAX_LIFETIME.

Referenced by ilWACTokenTest\testFolderToken(), and ilWACTokenTest\testFolderTokenWithSecondFile().

    {
        assert(is_int($cookie_max_lifetime_in_seconds));
        if ($cookie_max_lifetime_in_seconds > self::MAX_LIFETIME) {
            throw new ilWACException(ilWACException::MAX_LIFETIME);
        }
        self::$cookie_max_lifetime_in_seconds = $cookie_max_lifetime_in_seconds;
    }

Here is the caller graph for this function:

setPathObject()

ilWACSignedPath::setPathObject

(

ilWACPath

$path_object

)

Parameters

ilWACPath

$path_object

Returns

void

Definition at line 315 of file class.ilWACSignedPath.php.

References $path_object.

Referenced by __construct().

    {
        $this->path_object = $path_object;
    }

Here is the caller graph for this function:

setTokenInstance()

ilWACSignedPath::setTokenInstance

(

ilWACToken

$token_instance

)

Parameters

ilWACToken

$token_instance

Returns

void

Definition at line 276 of file class.ilWACSignedPath.php.

References $token_instance.

Referenced by buildAndSetTokenInstance().

    {
        $this->token_instance = $token_instance;
    }

Here is the caller graph for this function:

setTokenMaxLifetimeInSeconds()

static ilWACSignedPath::setTokenMaxLifetimeInSeconds (   $token_max_lifetime_in_seconds )

static

Parameters

int

$token_max_lifetime_in_seconds

Returns

void

Exceptions

Definition at line 419 of file class.ilWACSignedPath.php.

References $token_max_lifetime_in_seconds, and ilWACException\MAX_LIFETIME.

Referenced by ilCertificateGUI\certificateEditor(), ilObjPortfolioGUI\exportPDF(), ilOnScreenChatUserDataProvider\getDataByUserIds(), ilWACTokenTest\getModifiedSignedPath(), assQuestion\getSuggestedSolutionOutput(), ilChatroomViewGUI\getUserProfileImages(), ilObjTestGUI\printobject(), ilObjTestGUI\reviewobject(), ilObjCertificateSettingsGUI\settings(), and ilWACTokenTest\testFileToken().

    {
        assert(is_int($token_max_lifetime_in_seconds));
        if ($token_max_lifetime_in_seconds > self::MAX_LIFETIME) {
            throw new ilWACException(ilWACException::MAX_LIFETIME);
        }
        self::$token_max_lifetime_in_seconds = $token_max_lifetime_in_seconds;
    }

Here is the caller graph for this function:

setType()

ilWACSignedPath::setType

(

$type

)

Parameters

int

$type

Returns

void

Definition at line 295 of file class.ilWACSignedPath.php.

References $type.

Referenced by isFolderSigned().

    {
        assert(is_int($type));
        $this->type = $type;
    }

Here is the caller graph for this function:

signFile()

static ilWACSignedPath::signFile (   $path_to_file )

static

Parameters

string

$path_to_file

Returns

string

Exceptions

ilWACException

Definition at line 233 of file class.ilWACSignedPath.php.

References ILIAS\FileDelivery\http(), and time.

Referenced by ilRTE\_replaceMediaObjectImageSrc(), ilCertificateGUI\certificateEditor(), ilMediaCastTableGUI\fillRow(), ilPollBlockGUI\fillRow(), ilObjStyleSheet\getContentStylePath(), ilDclMobRecordRepresentation\getHTML(), ilWACTokenTest\getModifiedSignedPath(), ilObjUser\getPersonalPicturePath(), assImagemapQuestionGUI\getPreview(), ilPreviewGUI\getPreviewHTML(), assMatchingQuestionGUI\getSolutionOutput(), assImagemapQuestionGUI\getSolutionOutput(), assQuestion\getSuggestedSolutionOutput(), assImagemapQuestionGUI\getTestOutput(), ilObjMediaObject\getXML(), ilObjPortfolioBaseGUI\renderFullscreenHeader(), ilObjBlogGUI\renderFullscreenHeader(), ilObjCertificateSettingsGUI\settings(), ilObjMediaCastGUI\showGallery(), ilWACCheckingInstanceTest\testBasicWithFileSigning(), and ilWACTokenTest\testFileToken().

    {
        if (!$path_to_file) {
            return '';
        }
        $ilWACPath = new ilWACPath($path_to_file);
        if (!$ilWACPath->getClient()) {
            return $path_to_file;
        }
        $obj = new self($ilWACPath, self::http(), new CookieFactoryImpl());
        $obj->setType(PathType::FILE);
        $obj->buildAndSetTokenInstance(time(), self::getTokenMaxLifetimeInSeconds());

        return $obj->getSignedPath();
    }

Here is the call graph for this function:

Here is the caller graph for this function:

signFolderOfStartFile()

static ilWACSignedPath::signFolderOfStartFile (   $start_file_path )

static

Parameters

string

$start_file_path

Returns

void

Definition at line 254 of file class.ilWACSignedPath.php.

References ILIAS\FileDelivery\http(), and time.

Referenced by ilSCORMPresentationGUI\frameset(), ilSCORM13Player\getPlayer(), ilSCORM13Player\pingSession(), ilSCORMPresentationGUI\pingSession(), ilObjMediaCastGUI\showGallery(), ilObjFileBasedLMGUI\showLearningModule(), ilWACCheckingInstanceTest\testBasicWithFolderSigning(), ilWACTokenTest\testCookieGeneration(), ilWACTokenTest\testFolderToken(), and ilWACTokenTest\testFolderTokenWithSecondFile().

    {
        $obj = new self(new ilWACPath($start_file_path), self::http(), new CookieFactoryImpl());
        $obj->setType(PathType::FOLDER);
        $obj->buildAndSetTokenInstance(time(), self::getCookieMaxLifetimeInSeconds());
        $obj->saveFolderToken();
    }

Here is the call graph for this function:

Here is the caller graph for this function:

Field Documentation

$checked

ilWACSignedPath::$checked = false

protected

Definition at line 55 of file class.ilWACSignedPath.php.

Referenced by isChecked(), and setChecked().

$cookie_max_lifetime_in_seconds

ilWACSignedPath::$cookie_max_lifetime_in_seconds = 300

staticprotected

Definition at line 51 of file class.ilWACSignedPath.php.

Referenced by setCookieMaxLifetimeInSeconds().

$cookieFactory

CookieFactory ilWACSignedPath::$cookieFactory

private

Definition at line 63 of file class.ilWACSignedPath.php.

Referenced by __construct().

$httpService

ILIAS DI HTTPServices ilWACSignedPath::$httpService

private

Definition at line 59 of file class.ilWACSignedPath.php.

$path_object

ilWACSignedPath::$path_object = null

protected

Definition at line 35 of file class.ilWACSignedPath.php.

Referenced by getPathObject(), and setPathObject().

$token_instance

ilWACSignedPath::$token_instance = null

protected

Definition at line 39 of file class.ilWACSignedPath.php.

Referenced by getTokenInstance(), and setTokenInstance().

$token_max_lifetime_in_seconds

ilWACSignedPath::$token_max_lifetime_in_seconds = 3

staticprotected

Definition at line 47 of file class.ilWACSignedPath.php.

Referenced by setTokenMaxLifetimeInSeconds().

$type

ilWACSignedPath::$type = PathType::FILE

protected

Definition at line 43 of file class.ilWACSignedPath.php.

Referenced by getType(), and setType().

MAX_LIFETIME

const ilWACSignedPath::MAX_LIFETIME = 600

Definition at line 31 of file class.ilWACSignedPath.php.

TS_SUFFIX

const ilWACSignedPath::TS_SUFFIX = 'ts'

Definition at line 29 of file class.ilWACSignedPath.php.

TTL_SUFFIX

const ilWACSignedPath::TTL_SUFFIX = 'ttl'

Definition at line 30 of file class.ilWACSignedPath.php.

WAC_TIMESTAMP_ID

const ilWACSignedPath::WAC_TIMESTAMP_ID = 'il_wac_ts'

Definition at line 27 of file class.ilWACSignedPath.php.

Referenced by ilWACPath\handleParameters(), and ilWACPath\setTimestamp().

WAC_TOKEN_ID

const ilWACSignedPath::WAC_TOKEN_ID = 'il_wac_token'

Definition at line 26 of file class.ilWACSignedPath.php.

Referenced by ilWACPath\handleParameters(), and ilWACPath\setToken().

WAC_TTL_ID

const ilWACSignedPath::WAC_TTL_ID = 'il_wac_ttl'

Definition at line 28 of file class.ilWACSignedPath.php.

Referenced by ilWACPath\handleParameters(), and ilWACPath\setTTL().

---

The documentation for this class was generated from the following file:

• Services/WebAccessChecker/classes/class.ilWACSignedPath.php