ilOpenIdConnectSettingsGUI Class Reference

Class ilOpenIdConnectSettingsGUI. More...

Collaboration diagram for ilOpenIdConnectSettingsGUI:

Public Member Functions
	__construct ($a_ref_id)
	ilOpenIdConnectSettingsGUI constructor. More...
	executeCommand ()
	Execute command. More...

Data Fields
const	STAB_SETTINGS = 'settings'
const	STAB_PROFILE = 'profile'
const	STAB_ROLES = 'roles'
const	DEFAULT_CMD = 'settings'

Protected Member Functions
	checkAccess ($a_permission)
	checkAccessBool ($a_permission)
	settings (ilPropertyFormGUI $form=null)
	initSettingsForm ()
	Init general settings form. More...
	saveSettings ()
	Save settings. More...
	saveImageFromHttpRequest ()
	Save image from http request. More...
	prepareRoleSelection ($a_with_select_option=true)
	profile (ilPropertyFormGUI $form=null)
	initProfileForm ()
	saveProfile ()
	roles (\ilPropertyFormGUI $form=null)
	initRolesForm ()
	saveRoles ()
	save role selection More...
	setSubTabs (string $active_tab)
	Set sub tabs. More...

Protected Attributes
	$lng = null
	$ctrl = null
	$logger = null
	$access = null
	$review
	$error = null
	$mainTemplate = null
	$tabs = null

Private Attributes
	$ref_id = 0
	$settings = null

Detailed Description

Class ilOpenIdConnectSettingsGUI.

Author

Stefan Meyer smeye.nosp@m.r.il.nosp@m.ias@g.nosp@m.mx.d.nosp@m.e

Definition at line 11 of file class.ilOpenIdConnectSettingsGUI.php.

Constructor & Destructor Documentation

__construct()

ilOpenIdConnectSettingsGUI::__construct

(

$a_ref_id

)

ilOpenIdConnectSettingsGUI constructor.

Definition at line 73 of file class.ilOpenIdConnectSettingsGUI.php.

References $DIC, ilOpenIdConnectSettings\getInstance(), and settings().

    {
        global $DIC;

        $this->ref_id = $a_ref_id;

        $this->lng = $DIC->language();
        $this->lng->loadLanguageModule('auth');

        $this->mainTemplate = $DIC->ui()->mainTemplate();
        $this->tabs = $DIC->tabs();
        $this->ctrl = $DIC->ctrl();
        $this->logger = $DIC->logger()->auth();

        $this->access = $DIC->access();
        $this->review = $DIC->rbac()->review();
        $this->error = $DIC['ilErr'];


        $this->settings = ilOpenIdConnectSettings::getInstance();
    }

Here is the call graph for this function:

Member Function Documentation

checkAccess()

ilOpenIdConnectSettingsGUI::checkAccess (   $a_permission )

protected

Parameters

string

$a_permission

Definition at line 98 of file class.ilOpenIdConnectSettingsGUI.php.

References checkAccessBool().

Referenced by executeCommand(), profile(), roles(), saveRoles(), saveSettings(), and settings().

    {
        if (!$this->checkAccessBool($a_permission)) {
            $this->error->raiseError($this->lng->txt('msg_no_perm_read'), $this->error->WARNING);
        }
    }

Here is the call graph for this function:

Here is the caller graph for this function:

checkAccessBool()

ilOpenIdConnectSettingsGUI::checkAccessBool (   $a_permission )

protected

Parameters

string

$a_permission

Returns

bool

Definition at line 109 of file class.ilOpenIdConnectSettingsGUI.php.

Referenced by checkAccess(), initProfileForm(), initRolesForm(), initSettingsForm(), and saveProfile().

    {
        return $this->access->checkAccess($a_permission, '', $this->ref_id);
    }

Here is the caller graph for this function:

executeCommand()

ilOpenIdConnectSettingsGUI::executeCommand

(

)

Execute command.

Definition at line 118 of file class.ilOpenIdConnectSettingsGUI.php.

References checkAccess().

    {
        $this->checkAccess('read');

        switch ($this->ctrl->getNextClass()) {
            default:
                $cmd = $this->ctrl->getCmd(self::DEFAULT_CMD);
                $this->$cmd();
                break;
        }
    }

Here is the call graph for this function:

initProfileForm()

ilOpenIdConnectSettingsGUI::initProfileForm ( )

protected

Returns

ilPropertyFormGUI

Definition at line 562 of file class.ilOpenIdConnectSettingsGUI.php.

References checkAccessBool(), and settings().

Referenced by profile(), and saveProfile().

                                         : \ilPropertyFormGUI
    {
        $form = new ilPropertyFormGUI();
        $form->setTitle($this->lng->txt('auth_oidc_mapping_table'));
        $form->setFormAction($this->ctrl->getFormAction($this, 'saveProfile'));

        foreach ($this->settings->getProfileMappingFields() as $field => $lng_key) {
            $text_form = new ilTextInputGUI($this->lng->txt($lng_key));
            $text_form->setPostVar($field . "_value");
            $text_form->setValue($this->settings->getProfileMappingFieldValue($field));
            $form->addItem($text_form);

            $checkbox_form = new ilCheckboxInputGUI('');
            $checkbox_form->setValue(1);
            $checkbox_form->setPostVar($field . "_update");
            $checkbox_form->setChecked($this->settings->getProfileMappingFieldUpdate($field));
            $checkbox_form->setOptionTitle($this->lng->txt('auth_oidc_update_field_info'));
            $form->addItem($checkbox_form);
        }

        if ($this->checkAccessBool('write')) {
            $form->addCommandButton('saveProfile', $this->lng->txt('save'));
        }
        return $form;
    }

Here is the call graph for this function:

Here is the caller graph for this function:

initRolesForm()

ilOpenIdConnectSettingsGUI::initRolesForm ( )

protected

Returns

Definition at line 635 of file class.ilOpenIdConnectSettingsGUI.php.

References checkAccessBool(), prepareRoleSelection(), and settings().

Referenced by roles(), and saveRoles().

    {
        $form = new ilPropertyFormGUI();
        $form->setTitle($this->lng->txt('auth_oidc_role_mapping_table'));
        $form->setFormAction($this->ctrl->getFormAction($this, self::STAB_ROLES));

        foreach ($this->prepareRoleSelection(false) as $role_id => $role_title) {
            $role_map = new ilTextInputGUI(
                $role_title,
                'role_map_' . $role_id
            );
            $role_map->setInfo($this->lng->txt('auth_oidc_role_info'));
            $role_map->setValue($this->settings->getRoleMappingValueForId($role_id));
            $form->addItem($role_map);

            $update = new ilCheckboxInputGUI(
                '',
                'role_map_update_' . $role_id
            );
            $update->setOptionTitle($this->lng->txt('auth_oidc_update_role_info'));
            $update->setValue(1);
            $update->setChecked(!$this->settings->getRoleMappingUpdateForId($role_id));
            $form->addItem($update);
        }

        if ($this->checkAccessBool('write')) {
            $form->addCommandButton('saveRoles', $this->lng->txt('save'));
        }
        return $form;
    }

Here is the call graph for this function:

Here is the caller graph for this function:

initSettingsForm()

ilOpenIdConnectSettingsGUI::initSettingsForm ( )

protected

Init general settings form.

Definition at line 149 of file class.ilOpenIdConnectSettingsGUI.php.

References $client_id, $session, checkAccessBool(), ilOpenIdConnectSettings\DEFAULT_SCOPE, ilOpenIdConnectSettings\LOGIN_ELEMENT_TYPE_IMG, ilOpenIdConnectSettings\LOGIN_ELEMENT_TYPE_TXT, ilOpenIdConnectSettings\LOGIN_ENFORCE, ilOpenIdConnectSettings\LOGIN_STANDARD, ilOpenIdConnectSettings\LOGOUT_SCOPE_GLOBAL, ilOpenIdConnectSettings\LOGOUT_SCOPE_LOCAL, prepareRoleSelection(), ilCheckboxInputGUI\setChecked(), ilRadioOption\setInfo(), ilCheckboxInputGUI\setOptionTitle(), ilFormPropertyGUI\setRequired(), ilPasswordInputGUI\setSkipSyntaxCheck(), settings(), ilRadioGroupInputGUI\setValue(), ilOpenIdConnectSettings\URL_VALIDATION_CUSTOM, ilOpenIdConnectSettings\URL_VALIDATION_NONE, and ilOpenIdConnectSettings\URL_VALIDATION_PROVIDER.

Referenced by saveSettings(), and settings().

    {
        $form = new ilPropertyFormGUI();
        $form->setTitle($this->lng->txt('auth_oidc_settings_title'));
        $form->setFormAction($this->ctrl->getFormAction($this));

        // activation
        $activation = new ilCheckboxInputGUI(
            $this->lng->txt('auth_oidc_settings_activation'),
            'activation'
        );
        $activation->setChecked($this->settings->getActive());
        $form->addItem($activation);

        // provider
        $provider = new ilTextInputGUI(
            $this->lng->txt('auth_oidc_settings_provider'),
            'provider'
        );
        $provider->setRequired(true);
        $provider->setValue($this->settings->getProvider());
        $form->addItem($provider);

        $client_id = new ilTextInputGUI(
            $this->lng->txt('auth_oidc_settings_client_id'),
            'client_id'
        );
        $client_id->setRequired(true);
        $client_id->setValue($this->settings->getClientId());
        $form->addItem($client_id);

        // secret
        $secret = new ilPasswordInputGUI(
            $this->lng->txt('auth_oidc_settings_secret'),
            'secret'
        );
        $secret->setSkipSyntaxCheck(true);
        $secret->setRetype(false);
        $secret->setRequired(false);
        if (strlen($this->settings->getSecret())) {
            $secret->setValue('******');
        }
        $form->addItem($secret);

        $default_scope = new ilTextInputGUI(
            $this->lng->txt('auth_oidc_settings_additional_scopes'),
            "default_scope"
        );
        $default_scope->setValue(ilOpenIdConnectSettings::DEFAULT_SCOPE);
        $default_scope->setDisabled(true);
        $form->addItem($default_scope);

        $scopes = new ilTextInputGUI(
            "",
            "scopes"
        );
        $scopes->setMulti(true);
        $scopeValues = $this->settings->getAdditionalScopes();
        $scopes->setValue($scopeValues[0]);
        $scopes->setMultiValues($scopeValues);
        $form->addItem($scopes);

        // validation options
        $validation_options = new ilRadioGroupInputGUI(
            $this->lng->txt('auth_oidc_settings_validate_scopes'),
            'validate_scopes'
        );
        $validation_options->setValue((string) $this->settings->getValidateScopes());
        $form->addItem($validation_options);

        $base_valid_url_option = new ilRadioOption(
            $this->lng->txt('auth_oidc_settings_validate_scope_default'),
            (string) ilOpenIdConnectSettings::URL_VALIDATION_PROVIDER
        );

        $validation_options->addOption($base_valid_url_option);

        $custom_validation_url = new ilTextInputGUI(
            '',
            'custom_discovery_url'
        );

        $custom_valid_url_option = new ilRadioOption(
            $this->lng->txt('auth_oidc_settings_validate_scope_custom'),
            (string) ilOpenIdConnectSettings::URL_VALIDATION_CUSTOM
        );
        $validation_options->addOption($custom_valid_url_option);
        $custom_validation_url->setValue($this->settings->getCustomDiscoveryUrl() ?? '');
        $custom_validation_url->setMaxLength(120);
        $custom_validation_url->setInfo($this->lng->txt('auth_oidc_settings_discovery_url'));
        $custom_valid_url_option->addSubItem($custom_validation_url);
        $no_validation_option = new ilRadioOption(
            $this->lng->txt('auth_oidc_settings_validate_scope_none'),
            (string) ilOpenIdConnectSettings::URL_VALIDATION_NONE
        );
        $validation_options->addOption($no_validation_option);

        // login element
        $login_element = new ilRadioGroupInputGUI(
            $this->lng->txt('auth_oidc_settings_le'),
            'le'
        );
        $login_element->setRequired(true);
        $login_element->setValue($this->settings->getLoginElementType());
        $form->addItem($login_element);

        // le -> type text
        $text_option = new ilRadioOption(
            $this->lng->txt('auth_oidc_settings_txt'),
            ilOpenIdConnectSettings::LOGIN_ELEMENT_TYPE_TXT
        );
        $login_element->addOption($text_option);

        // le -> type text -> text
        $text = new ilTextInputGUI(
            '',
            'le_text'
        );
        $text->setValue($this->settings->getLoginElemenText());
        $text->setMaxLength(120);
        $text->setInfo($this->lng->txt('auth_oidc_settings_txt_val_info'));
        $text_option->addSubItem($text);

        // le -> type img
        $img_option = new ilRadioOption(
            $this->lng->txt('auth_oidc_settings_img'),
            ilOpenIdConnectSettings::LOGIN_ELEMENT_TYPE_IMG
        );
        $login_element->addOption($img_option);

        $image = new ilImageFileInputGUI(
            '',
            'le_img'
        );
        $image->setALlowDeletion(false);

        if ($this->settings->hasImageFile()) {
            $image->setImage($this->settings->getImageFilePath());
        }
        $image->setInfo($this->lng->txt('auth_oidc_settings_img_file_info'));
        $img_option->addSubItem($image);

        // login options
        $login_options = new ilRadioGroupInputGUI(
            $this->lng->txt('auth_oidc_settings_login_options'),
            'login_prompt'
        );
        $login_options->setValue($this->settings->getLoginPromptType());

        // enforce login
        $enforce = new ilRadioOption(
            $this->lng->txt('auth_oidc_settings_login_option_enforce'),
            ilOpenIdConnectSettings::LOGIN_ENFORCE
        );
        $enforce->setInfo($this->lng->txt('auth_oidc_settings_login_option_enforce_info'));
        $login_options->addOption($enforce);

        // default login
        $default = new ilRadioOption(
            $this->lng->txt('auth_oidc_settings_login_option_default'),
            ilOpenIdConnectSettings::LOGIN_STANDARD
        );
        $default->setInfo($this->lng->txt('auth_oidc_settings_login_option_default_info'));
        $login_options->addOption($default);

        $form->addItem($login_options);

        // logout scope
        $logout_scope = new ilRadioGroupInputGUI(
            $this->lng->txt('auth_oidc_settings_logout_scope'),
            'logout_scope'
        );
        $logout_scope->setValue($this->settings->getLogoutScope());

        // scope global
        $global_scope = new ilRadioOption(
            $this->lng->txt('auth_oidc_settings_logout_scope_global'),
            ilOpenIdConnectSettings::LOGOUT_SCOPE_GLOBAL
        );
        $global_scope->setInfo($this->lng->txt('auth_oidc_settings_logout_scope_global_info'));
        $logout_scope->addOption($global_scope);

        // ilias scope
        $ilias_scope = new ilRadioOption(
            $this->lng->txt('auth_oidc_settings_logout_scope_local'),
            ilOpenIdConnectSettings::LOGOUT_SCOPE_LOCAL
        );
        $logout_scope->addOption($ilias_scope);

        $form->addItem($logout_scope);

        $use_custom_session = new ilCheckboxInputGUI(
            $this->lng->txt('auth_oidc_settings_custom_session_duration_type'),
            'custom_session'
        );
        $use_custom_session->setOptionTitle(
            $this->lng->txt('auth_oidc_settings_custom_session_duration_option')
        );
        $use_custom_session->setChecked($this->settings->isCustomSession());
        $form->addItem($use_custom_session);

        // session duration
        $session = new ilNumberInputGUI(
            $this->lng->txt('auth_oidc_settings_session_duration'),
            'session_duration'
        );
        $session->setValue($this->settings->getSessionDuration());
        $session->setSuffix($this->lng->txt('minutes'));
        $session->setMinValue(5);
        $session->setMaxValue(1440);
        $session->setRequired(true);
        $use_custom_session->addSubItem($session);

        if ($this->checkAccessBool('write')) {
            // save button
            $form->addCommandButton('saveSettings', $this->lng->txt('save'));
        }


        // User sync settings --------------------------------------------------------------
        $user_sync = new ilFormSectionHeaderGUI();
        $user_sync->setTitle($this->lng->txt('auth_oidc_settings_section_user_sync'));
        $form->addItem($user_sync);

        $sync = new ilCheckboxInputGUI(
            $this->lng->txt('auth_oidc_settings_user_sync'),
            'sync'
        );
        $sync->setChecked($this->settings->isSyncAllowed());
        $sync->setInfo($this->lng->txt('auth_oidc_settings_user_sync_info'));
        $sync->setValue(1);
        $form->addItem($sync);

        $roles = new ilSelectInputGUI(
            $this->lng->txt('auth_oidc_settings_default_role'),
            'role'
        );
        $roles->setValue($this->settings->getRole());
        $roles->setInfo($this->lng->txt('auth_oidc_settings_default_role_info'));
        $roles->setOptions($this->prepareRoleSelection());
        $roles->setRequired(true);
        $sync->addSubItem($roles);

        $user_attr = new ilTextInputGUI(
            $this->lng->txt('auth_oidc_settings_user_attr'),
            'username'
        );
        $user_attr->setValue($this->settings->getUidField());
        $user_attr->setRequired(true);
        $form->addItem($user_attr);

        return $form;
    }

Here is the call graph for this function:

Here is the caller graph for this function:

prepareRoleSelection()

ilOpenIdConnectSettingsGUI::prepareRoleSelection (   $a_with_select_option = true )

protected

Parameters

bool

$a_with_select_option

Returns

mixed

Definition at line 522 of file class.ilOpenIdConnectSettingsGUI.php.

References ilObject\_lookupTitle(), ilUtil\_sortIds(), and ANONYMOUS_ROLE_ID.

Referenced by initRolesForm(), initSettingsForm(), and saveRoles().

                                                                          : array
    {
        $global_roles = ilUtil::_sortIds(
            $this->review->getGlobalRoles(),
            'object_data',
            'title',
            'obj_id'
        );

        $select = [];
        if ($a_with_select_option) {
            $select[0] = $this->lng->txt('links_select_one');
        }
        foreach ($global_roles as $role_id) {
            if ($role_id == ANONYMOUS_ROLE_ID) {
                continue;
            }
            $select[$role_id] = ilObject::_lookupTitle($role_id);
        }
        return $select;
    }

Here is the call graph for this function:

Here is the caller graph for this function:

profile()

ilOpenIdConnectSettingsGUI::profile ( ilPropertyFormGUI  $form = null )

protected

Parameters

ilPropertyFormGUI | null

$form

Definition at line 548 of file class.ilOpenIdConnectSettingsGUI.php.

References checkAccess(), initProfileForm(), and setSubTabs().

Referenced by saveProfile().

    {
        $this->checkAccess('read');
        $this->setSubTabs(self::STAB_PROFILE);

        if (!$form instanceof ilPropertyFormGUI) {
            $form = $this->initProfileForm();
        }
        $this->mainTemplate->setContent($form->getHTML());
    }

Here is the call graph for this function:

Here is the caller graph for this function:

roles()

ilOpenIdConnectSettingsGUI::roles ( \ilPropertyFormGUI  $form = null )

protected

Parameters

ilPropertyFormGUI

$form

Definition at line 621 of file class.ilOpenIdConnectSettingsGUI.php.

References checkAccess(), initRolesForm(), and setSubTabs().

Referenced by saveRoles().

    {
        $this->checkAccess('read');
        $this->setSubTabs(self::STAB_ROLES);

        if (!$form instanceof ilPropertyFormGUI) {
            $form = $this->initRolesForm();
        }
        $this->mainTemplate->setContent($form->getHTML());
    }

Here is the call graph for this function:

Here is the caller graph for this function:

saveImageFromHttpRequest()

ilOpenIdConnectSettingsGUI::saveImageFromHttpRequest ( )

protected

Save image from http request.

Definition at line 494 of file class.ilOpenIdConnectSettingsGUI.php.

References $DIC, Vendor\Package\$e, ilOpenIdConnectSettings\FILE_STORAGE, ILIAS\FileUpload\DTO\ProcessingStatus\OK, and settings().

Referenced by saveSettings().

    {
        global $DIC;

        try {
            $upload = $DIC->upload();
            if (!$upload->hasBeenProcessed()) {
                $upload->process();
            }
            foreach ($upload->getResults() as $single_file_upload) {
                if ($single_file_upload->getStatus() == \ILIAS\FileUpload\DTO\ProcessingStatus::OK) {
                    $this->settings->deleteImageFile();
                    $upload->moveFilesTo(
                        ilOpenIdConnectSettings::FILE_STORAGE,
                        \ILIAS\FileUpload\Location::WEB
                    );
                    $this->settings->setLoginElementImage($single_file_upload->getName());
                }
            }
        } catch (\ILIAS\Filesystem\Exception\IllegalStateException $e) {
            $this->logger->warning('Upload failed with message: ' . $e->getMessage());
        }
    }

Here is the call graph for this function:

Here is the caller graph for this function:

saveProfile()

ilOpenIdConnectSettingsGUI::saveProfile ( )

protected

Returns

bool

Definition at line 591 of file class.ilOpenIdConnectSettingsGUI.php.

References checkAccessBool(), initProfileForm(), profile(), ilUtil\sendFailure(), and settings().

    {
        $this->checkAccessBool('write');

        $form = $this->initProfileForm();
        if (!$form->checkInput()) {
            ilUtil::sendFailure($this->lng->txt('err_check_input'));
            $form->setValuesByPost();
            $this->profile($form);
            return false;
        }

        foreach ($this->settings->getProfileMappingFields() as $field => $lng_key) {
            $this->settings->setProfileMappingFieldValue(
                $field,
                $form->getInput($field . '_value')
            );
            $this->settings->setProfileMappingFieldUpdate(
                $field,
                $form->getInput($field . '_update')
            );
        }
        $this->settings->save();
        ilUtil::sendSuccess($this->lng->txt('settings_saved'), true);
        $this->ctrl->redirect($this, self::STAB_PROFILE);
    }

Here is the call graph for this function:

saveRoles()

ilOpenIdConnectSettingsGUI::saveRoles ( )

protected

save role selection

Definition at line 669 of file class.ilOpenIdConnectSettingsGUI.php.

References $_POST, checkAccess(), ilLogLevel\DEBUG, initRolesForm(), prepareRoleSelection(), roles(), ilUtil\sendFailure(), and settings().

    {
        $this->checkAccess('write');
        $form = $this->initRolesForm();
        if ($form->checkInput()) {
            $this->logger->dump($_POST, \ilLogLevel::DEBUG);


            $role_settings = [];
            $role_valid = true;
            foreach ($this->prepareRoleSelection(false) as $role_id => $role_title) {
                if (!strlen(trim($form->getInput('role_map_' . $role_id)))) {
                    continue;
                }

                $role_params = explode('::', $form->getInput('role_map_' . $role_id));
                $this->logger->dump($role_params, \ilLogLevel::DEBUG);

                if (count($role_params) !== 2) {
                    $form->getItemByPostVar('role_map_' . $role_id)->setAlert($this->lng->txt('msg_wrong_format'));
                    $role_valid = false;
                    continue;
                }
                $role_settings[$role_id]['update'] = (bool) !$form->getInput('role_map_update_' . $role_id);
                $role_settings[$role_id]['value'] = (string) $form->getInput('role_map_' . $role_id);
            }

            if (!$role_valid) {
                $form->setValuesByPost();
                \ilUtil::sendFailure($this->lng->txt('err_check_input'));
                $this->roles($form);
                return;
            }

            $this->settings->setRoleMappings($role_settings);
            $this->settings->save();
            ilUtil::sendSuccess($this->lng->txt('settings_saved'), true);
            $this->ctrl->redirect($this, 'roles');
        }

        $form->setValuesByPost();
        \ilUtil::sendFailure($this->lng->txt('err_check_input'));
        $this->roles($form);
    }

Here is the call graph for this function:

saveSettings()

ilOpenIdConnectSettingsGUI::saveSettings ( )

protected

Save settings.

Definition at line 406 of file class.ilOpenIdConnectSettingsGUI.php.

References checkAccess(), initSettingsForm(), saveImageFromHttpRequest(), ilUtil\sendFailure(), settings(), ilOpenIdConnectSettings\URL_VALIDATION_CUSTOM, ilOpenIdConnectSettings\URL_VALIDATION_PROVIDER, and ilOpenIdConnectSettings\VALIDATION_ISSUE_INVALID_SCOPE.

    {
        $this->checkAccess('write');

        $form = $this->initSettingsForm();
        if (!$form->checkInput()) {
            ilUtil::sendFailure(
                $this->lng->txt('err_check_input')
            );
            $form->setValuesByPost();
            $this->settings($form);
            return;
        }

        if (!empty($form->getInput('scopes'))) {
            $scopes = $form->getInput('scopes');
            foreach ($scopes as $key => $value) {
                if (empty($value)) {
                    array_splice($scopes, $key, 1);
                }
            }
        }

        switch ((int) $form->getInput('validate_scopes')) {
            case ilOpenIdConnectSettings::URL_VALIDATION_PROVIDER:
                $discoveryURL = $form->getInput('provider') . '/.well-known/openid-configuration';
                break;
            case ilOpenIdConnectSettings::URL_VALIDATION_CUSTOM:
                $discoveryURL = $form->getInput('custom_discovery_url');
                break;
            default:
                $discoveryURL = null;
                break;
        }
        $validation_result = !is_null($discoveryURL) ? $this->settings->validateScopes($discoveryURL, (array) $scopes) : [];
        if (!empty($validation_result)) {
            if (ilOpenIdConnectSettings::VALIDATION_ISSUE_INVALID_SCOPE === $validation_result[0]) {
                $this->mainTemplate->setOnScreenMessage(
                    'failure',
                    sprintf($this->lng->txt('auth_oidc_settings_invalid_scopes'), implode(",", $validation_result[1]))
                );
            } else {
                $this->mainTemplate->setOnScreenMessage(
                    'failure',
                    sprintf($this->lng->txt('auth_oidc_settings_discovery_error'), $validation_result[1])
                );
            }
            $form->setValuesByPost();
            $this->settings($form);
            return;
        }

        $this->settings->setActive((bool) $form->getInput('activation'));
        $this->settings->setProvider((string) $form->getInput('provider'));
        $this->settings->setClientId((string) $form->getInput('client_id'));
        if (strlen($form->getInput('secret')) && strcmp($form->getInput('secret'), '******') !== 0) {
            $this->settings->setSecret((string) $form->getInput('secret'));
        }
        $this->settings->setAdditionalScopes((array) $scopes);
        $this->settings->setLoginElementType((int) $form->getInput('le'));
        $this->settings->setLoginElementText((string) $form->getInput('le_text'));
        $this->settings->setLoginPromptType((int) $form->getInput('login_prompt'));
        $this->settings->setLogoutScope((int) $form->getInput('logout_scope'));
        $this->settings->useCustomSession((bool) $form->getInput('custom_session'));
        $this->settings->setSessionDuration((int) $form->getInput('session_duration'));
        $this->settings->allowSync((bool) $form->getInput('sync'));
        $this->settings->setRole((int) $form->getInput('role'));
        $this->settings->setUidField((string) $form->getInput('username'));

        $fileData = (array) $form->getInput('le_img');

        if (strlen($fileData['tmp_name'])) {
            $this->saveImageFromHttpRequest();
        }
        $this->settings->setValidateScopes((int) $form->getInput('validate_scopes'));
        if (ilOpenIdConnectSettings::URL_VALIDATION_CUSTOM === $this->settings->getValidateScopes()) {
            $this->settings->setCustomDiscoveryUrl($form->getInput('custom_discovery_url'));
        }

        $this->settings->save();

        ilUtil::sendSuccess($this->lng->txt('settings_saved'), true);
        $this->ctrl->redirect($this, 'settings');
    }

Here is the call graph for this function:

setSubTabs()

ilOpenIdConnectSettingsGUI::setSubTabs ( string  $active_tab )

protected

Set sub tabs.

Definition at line 717 of file class.ilOpenIdConnectSettingsGUI.php.

Referenced by profile(), roles(), and settings().

    {
        $this->tabs->addSubTab(
            self::STAB_SETTINGS,
            $this->lng->txt('auth_oidc_' . self::STAB_SETTINGS),
            $this->ctrl->getLinkTarget($this, self::STAB_SETTINGS)
        );
        $this->tabs->addSubTab(
            self::STAB_PROFILE,
            $this->lng->txt('auth_oidc_' . self::STAB_PROFILE),
            $this->ctrl->getLinkTarget($this, self::STAB_PROFILE)
        );
        $this->tabs->addSubTab(
            self::STAB_ROLES,
            $this->lng->txt('auth_oidc_' . self::STAB_ROLES),
            $this->ctrl->getLinkTarget($this, self::STAB_ROLES)
        );

        $this->tabs->activateSubTab($active_tab);
    }

Here is the caller graph for this function:

settings()

ilOpenIdConnectSettingsGUI::settings ( ilPropertyFormGUI  $form = null )

protected

Parameters

\ilPropertyFormGUI | null

$form

Definition at line 133 of file class.ilOpenIdConnectSettingsGUI.php.

References checkAccess(), initSettingsForm(), and setSubTabs().

Referenced by __construct(), initProfileForm(), initRolesForm(), initSettingsForm(), saveImageFromHttpRequest(), saveProfile(), saveRoles(), and saveSettings().

    {
        $this->checkAccess('read');
        $this->setSubTabs(self::STAB_SETTINGS);


        if (!$form instanceof ilPropertyFormGUI) {
            $form = $this->initSettingsForm();
        }

        $this->mainTemplate->setContent($form->getHTML());
    }

Here is the call graph for this function:

Here is the caller graph for this function:

Field Documentation

$access

ilOpenIdConnectSettingsGUI::$access = null

protected

Definition at line 48 of file class.ilOpenIdConnectSettingsGUI.php.

$ctrl

ilOpenIdConnectSettingsGUI::$ctrl = null

protected

Definition at line 38 of file class.ilOpenIdConnectSettingsGUI.php.

$error

ilOpenIdConnectSettingsGUI::$error = null

protected

Definition at line 58 of file class.ilOpenIdConnectSettingsGUI.php.

$lng

ilOpenIdConnectSettingsGUI::$lng = null

protected

Definition at line 33 of file class.ilOpenIdConnectSettingsGUI.php.

$logger

ilOpenIdConnectSettingsGUI::$logger = null

protected

Definition at line 43 of file class.ilOpenIdConnectSettingsGUI.php.

$mainTemplate

ilOpenIdConnectSettingsGUI::$mainTemplate = null

protected

Definition at line 63 of file class.ilOpenIdConnectSettingsGUI.php.

$ref_id

ilOpenIdConnectSettingsGUI::$ref_id = 0

private

Definition at line 22 of file class.ilOpenIdConnectSettingsGUI.php.

$review

ilOpenIdConnectSettingsGUI::$review

protected

Definition at line 53 of file class.ilOpenIdConnectSettingsGUI.php.

$settings

ilOpenIdConnectSettingsGUI::$settings = null

private

Definition at line 28 of file class.ilOpenIdConnectSettingsGUI.php.

$tabs

ilOpenIdConnectSettingsGUI::$tabs = null

protected

Definition at line 68 of file class.ilOpenIdConnectSettingsGUI.php.

DEFAULT_CMD

const ilOpenIdConnectSettingsGUI::DEFAULT_CMD = 'settings'

Definition at line 17 of file class.ilOpenIdConnectSettingsGUI.php.

STAB_PROFILE

const ilOpenIdConnectSettingsGUI::STAB_PROFILE = 'profile'

Definition at line 14 of file class.ilOpenIdConnectSettingsGUI.php.

STAB_ROLES

const ilOpenIdConnectSettingsGUI::STAB_ROLES = 'roles'

Definition at line 15 of file class.ilOpenIdConnectSettingsGUI.php.

STAB_SETTINGS

const ilOpenIdConnectSettingsGUI::STAB_SETTINGS = 'settings'

Definition at line 13 of file class.ilOpenIdConnectSettingsGUI.php.

---

The documentation for this class was generated from the following file:

• Services/OpenIdConnect/classes/class.ilOpenIdConnectSettingsGUI.php