class.ilOpenIdConnectSettings.php

Go to the documentation of this file.

<?php
/* Copyright (c) 1998-2009 ILIAS open source, Extended GPL, see docs/LICENSE */

class ilOpenIdConnectSettings
{
    const FILE_STORAGE = 'openidconnect/login_form_image';
    const STORAGE_ID = 'oidc';

    const LOGIN_ELEMENT_TYPE_TXT = 0;
    const LOGIN_ELEMENT_TYPE_IMG = 1;

    const LOGIN_ENFORCE = 0;
    const LOGIN_STANDARD = 1;

    const LOGOUT_SCOPE_GLOBAL = 0;
    const LOGOUT_SCOPE_LOCAL = 1;

    private static $instance = null;


    private $storage = null;

    private $filesystem = null;


    private $active = false;

    private $provider = '';

    private $client_id = '';

    private $secret = '';

    private $login_element_type = self::LOGIN_ELEMENT_TYPE_TXT;

    private $login_element_img_name;

    private $login_element_text;

    private $login_prompt_type = self::LOGIN_ENFORCE;


    private $logout_scope;

    private $custom_session = false;

    private $session_duration = 60;

    private $allow_sync;

    private $role;

    private $uid = '';

    private $profile_map = [];

    private $profile_update_map = [];

    private $role_mappings = [];


    private function __construct()
    {
        global $DIC;

        $this->storage = new ilSetting(self::STORAGE_ID);
        $this->filesystem = $DIC->filesystem()->web();
        $this->load();
    }

    public static function getInstance() : \ilOpenIdConnectSettings
    {
        if (!self::$instance) {
            self::$instance = new self();
        }
        return new self::$instance;
    }

    public function setActive(bool $active)
    {
        $this->active = $active;
    }

    public function getActive() : bool
    {
        return $this->active;
    }

    public function setProvider(string $url)
    {
        $this->provider = $url;
    }

    public function getProvider() : string
    {
        return $this->provider;
    }

    public function setClientId(string $client_id)
    {
        $this->client_id = $client_id;
    }

    public function getClientId() : string
    {
        return $this->client_id;
    }

    public function setSecret(string $secret)
    {
        $this->secret = $secret;
    }

    public function getSecret() : string
    {
        return $this->secret;
    }

    public function setLoginElementType(int $type)
    {
        $this->login_element_type = $type;
    }

    public function getLoginElementType() : int
    {
        return $this->login_element_type;
    }

    public function setLoginElementImage(string $a_img_name)
    {
        $this->login_element_img_name = $a_img_name;
    }

    public function getLoginElementImage() : string
    {
        return $this->login_element_img_name;
    }

    public function setLoginElementText(string $text)
    {
        $this->login_element_text = $text;
    }


    public function getLoginElemenText() : string
    {
        return $this->login_element_text;
    }

    public function setLoginPromptType(int $a_type)
    {
        $this->login_prompt_type = $a_type;
    }

    public function getLoginPromptType() : int
    {
        return $this->login_prompt_type;
    }

    public function setLogoutScope(int $a_scope)
    {
        $this->logout_scope = $a_scope;
    }

    public function getLogoutScope() : int
    {
        return $this->logout_scope;
    }

    public function useCustomSession(bool $a_stat)
    {
        $this->custom_session = $a_stat;
    }

    public function isCustomSession() : bool
    {
        return $this->custom_session;
    }

    public function setSessionDuration(int $a_duration)
    {
        $this->session_duration = $a_duration;
    }

    public function getSessionDuration() : int
    {
        return $this->session_duration;
    }

    public function isSyncAllowed() : bool
    {
        return $this->allow_sync;
    }

    public function allowSync(bool $a_stat)
    {
        $this->allow_sync = $a_stat;
    }

    public function setRole(int $role)
    {
        $this->role = $role;
    }

    public function getRole() : int
    {
        return $this->role;
    }

    public function setUidField(string $field)
    {
        $this->uid = $field;
    }

    public function getUidField() : string
    {
        return $this->uid;
    }

    public function deleteImageFile()
    {
        if ($this->filesystem->has(self::FILE_STORAGE . '/' . $this->getLoginElementImage())) {
            $this->filesystem->delete(self::FILE_STORAGE . '/' . $this->getLoginElementImage());
        }
    }

    public function hasImageFile() : bool
    {
        return
            strlen($this->getLoginElementImage()) &&
            $this->filesystem->has(self::FILE_STORAGE . '/' . $this->getLoginElementImage());
    }

    public function getImageFilePath() : string
    {
        return implode(
            '/',
            [
                \ilUtil::getWebspaceDir(),
                self::FILE_STORAGE . '/' . $this->getLoginElementImage()
            ]
        );
    }

    public function setRoleMappings(array $a_role_mappings)
    {
        $this->role_mappings = $a_role_mappings;
    }

    public function getRoleMappings() : array
    {
        return (array) $this->role_mappings;
    }

    public function getRoleMappingValueForId($a_role_id) : string
    {
        if (
            isset($this->role_mappings[$a_role_id]) &&
            isset($this->role_mappings[$a_role_id]['value'])
        ) {
            return (string) $this->role_mappings[$a_role_id]['value'];
        }
        return '';
    }

    public function getRoleMappingUpdateForId($a_role_id) : bool
    {
        if (
            isset($this->role_mappings[$a_role_id]) &&
            isset($this->role_mappings[$a_role_id]['update'])
        ) {
            return (bool) $this->role_mappings[$a_role_id]['update'];
        }
        return '';
    }

    public function save()
    {
        $this->storage->set('active', (int) $this->getActive());
        $this->storage->set('provider', $this->getProvider());
        $this->storage->set('client_id', $this->getClientId());
        $this->storage->set('secret', $this->getSecret());
        $this->storage->set('le_img', $this->getLoginElementImage());
        $this->storage->set('le_text', $this->getLoginElemenText());
        $this->storage->set('le_type', $this->getLoginElementType());
        $this->storage->set('prompt_type', $this->getLoginPromptType());
        $this->storage->set('logout_scope', $this->getLogoutScope());
        $this->storage->set('custom_session', (int) $this->isCustomSession());
        $this->storage->set('session_duration', (int) $this->getSessionDuration());
        $this->storage->set('allow_sync', (int) $this->isSyncAllowed());
        $this->storage->set('role', (int) $this->getRole());
        $this->storage->set('uid', (string) $this->getUidField());

        foreach ($this->getProfileMappingFields() as $field => $lang_key) {
            $this->storage->set('pmap_' . $field, $this->getProfileMappingFieldValue($field));
            $this->storage->set('pumap_' . $field, $this->getProfileMappingFieldUpdate($field));
        }
        $this->storage->set('role_mappings', (string) serialize($this->getRoleMappings()));
    }

    protected function load()
    {
        foreach ($this->getProfileMappingFields() as $field => $lang_key) {
            $this->profile_map[$field] = (string) $this->storage->get('pmap_' . $field, '');
            $this->profile_update_map[$field] = (bool) $this->storage->get('pumap_' . $field, '');
        }

        $this->setActive((bool) $this->storage->get('active', 0));
        $this->setProvider($this->storage->get('provider', ''));
        $this->setClientId($this->storage->get('client_id', ''));
        $this->setSecret($this->storage->get('secret', ''));
        $this->setLoginElementImage($this->storage->get('le_img', ''));
        $this->setLoginElementText($this->storage->get('le_text'));
        $this->setLoginElementType($this->storage->get('le_type'));
        $this->setLoginPromptType((int) $this->storage->get('prompt_type', self::LOGIN_ENFORCE));
        $this->setLogoutScope((int) $this->storage->get('logout_scope', self::LOGOUT_SCOPE_GLOBAL));
        $this->useCustomSession((bool) $this->storage->get('custom_session'), false);
        $this->setSessionDuration((int) $this->storage->get('session_duration', 60));
        $this->allowSync((bool) $this->storage->get('allow_sync'), false);
        $this->setRole((int) $this->storage->get('role'), 0);
        $this->setUidField((string) $this->storage->get('uid'), '');
        $this->setRoleMappings((array) unserialize($this->storage->get('role_mappings', serialize([]))));
    }

    public function getProfileMappingFieldValue(string $field) : string
    {
        return (string) $this->profile_map[$field];
    }

    public function setProfileMappingFieldValue(string $field, string $value)
    {
        $this->profile_map[$field] = $value;
    }

    public function getProfileMappingFieldUpdate(string $field) : bool
    {
        return (bool) $this->profile_update_map[$field];
    }

    public function setProfileMappingFieldUpdate(string $field, bool $value)
    {
        $this->profile_update_map[$field] = $value;
    }


    public function getProfileMappingFields() : array
    {
        return [
            'firstname' => 'firstname',
            'lastname' => 'lastname',
            'email' => 'email',
            'birthday' => 'birthday'
        ];
    }
}