Functions
catch(ilCmiXapiException $e)	send ($response)

Variables
	$tokenRestriction = true
	see: https://github.com/AICC/CMI-5_Spec_Current/blob/quartz/cmi5_spec.md#fetch_url response should always be a valid json object check oneway fetching is optional: More...

	$origParam = $_GET['param']

if(!isset($origParam)\|\|!strlen($origParam))	try

	$param

	$_COOKIE [session_name()] = $param[session_name()]

	$_COOKIE ['ilClientId'] = $param['ilClientId']

	$objId = $param['obj_id']

	$refId = $param['ref_id']

	$DIC = $GLOBALS['DIC']

	$token = ilCmiXapiAuthToken::getInstanceByObjIdAndRefIdAndUsrId($objId, $refId, $DIC->user()->getId())

if( $object->getContentType()==ilObjCmiXapi::CONT_TYPE_CMI5) if($object->isBypassProxyEnabled())	else

	$response = array("auth-token" => $authToken)

Function Documentation

◆ send()

catch(ilCmiXapiException $e) send ( $response )

Definition at line 100 of file xapitoken.php.

                        : void
{
    if (isset($_SERVER["HTTP_ORIGIN"]) && $_SERVER["HTTP_ORIGIN"] != "") {
        header('Access-Control-Allow-Origin: ' . $_SERVER["HTTP_ORIGIN"]);
    }
    header('Access-Control-Allow-Credentials: true');
    header('Content-type:application/json;charset=utf-8');
    echo json_encode($response);
    exit;
}

References $_SERVER, $response, and exit.

Referenced by ilBlockGUI\getHTMLNew(), ilNewsTimelineGUI\loadMore(), ilNewsTimelineGUI\remove(), ILIAS\Export\PrintProcessGUI\sendForm(), and ILIAS\Export\PrintProcessGUI\sendPrintView().

Here is the caller graph for this function:

Variable Documentation

◆ $_COOKIE [1/2]

$_COOKIE[ 'ilClientId'] = $param['ilClientId']

Definition at line 56 of file xapitoken.php.

◆ $_COOKIE [2/2]

$_COOKIE[session_name()] = $param[session_name()]

Definition at line 54 of file xapitoken.php.

Referenced by ilTinyMCE\addCustomRTESupport(), ilTestInfoScreenToolbarGUI\buildSessionLockString(), ilContainerGUI\cloneAllObject(), ilObjectCopyGUI\copyContainer(), ilDclContentExporter\exportAsync(), ilDelegatingHandler\handle(), ilSoapUserAdministration\login(), ilCalendarRemoteAccessHandler\parseRequest(), ilInitialisation\resumeUserSession(), ilPlainTextHandler\tables(), and ilLoggingErrorFileStorage\tables().

◆ $DIC

$DIC = $GLOBALS['DIC']

Definition at line 62 of file xapitoken.php.

◆ $objId

$objId = $param['obj_id']

Definition at line 57 of file xapitoken.php.

◆ $origParam

$origParam = $_GET['param']

Definition at line 36 of file xapitoken.php.

◆ $param

$param

Initial value:

= json_decode(openssl_decrypt(
        $param,
        ilCmiXapiAuthToken::OPENSSL_ENCRYPTION_METHOD,
        ilCmiXapiAuthToken::getWacSalt(),
        0,
        ilCmiXapiAuthToken::OPENSSL_IV
    ), true)

Definition at line 46 of file xapitoken.php.

Referenced by ilCombinationInputGUI\__call(), ILIAS\Notifications\ilNotificationOSDHandler\appendParamToLink(), ILIAS\UI\examples\ViewControl\Mode\base(), ILIAS\UI\examples\ViewControl\Section\base(), ILIAS\GlobalScreen\Scope\Layout\Factory\AbstractLayoutModification\checkClosure(), ilOrgUnitStaffGUI\confirmRemoveUser(), ilErrorHandling\devmodeHandler(), ilWebResourceEditableLinkTableGUI\fillRow(), ilCmiXapiLaunchGUI\getAuthTokenFetchLink(), ilObjTestListGUI\getCommandLink(), ilObjQuestionPoolListGUI\getCommandLink(), ilObjLTIConsumer\getCustomParamsArray(), LSUrlBuilder\getHref(), ilForumXMLParser\getIdAndAliasArray(), ILIAS\Data\URI\getParameter(), ilObjLTIConsumer\getProviderCustomParamsArray(), ilObjQuestionPoolGUI\getQueryParamInt(), ilObjQuestionPoolGUI\getQueryParamString(), ILIAS\LTI\ToolProvider\Util\getRequestParameters(), LSUrlBuilder\getURL(), ilWACPath\handleParameters(), ILIAS\CI\Rector\DIC\DICDependencyManipulator\hasMethodParameter(), ilObjLinkResourceGUI\initFormLink(), nusoap_server\invoke_method(), ilPortfolioPageGUI\makePlaceHoldersClickable(), ILIAS\Notes\NotificationsManager\notifyObserver(), ilICalParser\parseLine(), ilVirusScannerICapRemote\parseResponse(), ilLSPlayer\play(), ilLanguageFile\read(), ILIAS\LTI\ToolProvider\Tool\sendAuthenticationRequest(), ilICalParser\storeItems(), ilWebResourceParameterTest\testAppendToLink(), ilWebResourceParameterTest\testAppendToLinkException(), ilWebResourceParameterTest\testGetInfo(), ilWebResourceParameterTest\testGetInfoException(), ilWebResourceParameterTest\testToXML(), ilObjLinkResourceGUI\updateLinks(), ilLSPlayer\updateViewState(), and ilICalParser\writeEvent().

◆ $refId

$refId = $param['ref_id']

Definition at line 58 of file xapitoken.php.

Referenced by ilObjTestGUI\__construct(), ilObjEmployeeTalkGUI\__construct(), ilObjEmployeeTalkSeriesGUI\__construct(), ilSoapRepositoryStructureObject\__construct(), ilObjDataCollectionGUI\_goto(), ilObjEmployeeTalkSeriesGUI\_goto(), ilObjContentPageGUI\_goto(), ilDataCollectionUiAdapter\addDataCollectionEndpointToNavigationHistory(), ilDataCollectionUiAdapter\addPermaLinkTableView(), ILIAS\Certificate\API\Data\UserCertificateDto\addRefId(), ilObjTestDynamicQuestionSetConfig\areDepenciesInVulnerableState(), ilObjLTIConsumer\buildContentSelectionParameters(), ilLTIConsumerProviderUsageTableGUI\buildLinkToUsedBy(), ilObjEmployeeTalkAccess\canDelete(), ilObjEmployeeTalkAccess\canEditTalkLockStatus(), ilObjLTIConsumerGUI\checkContentSelection(), ilChatroom\checkPermissions(), ilPollBlockGUI\commentJSCall(), ilObjEmployeeTalkGUI\confirmedDeleteObject(), ilObjLTIConsumerGUI\contentSelection(), ilMailTest\create(), ilForumNotificationDataProvider\createRecipientArray(), ilCmiXapiAuthToken\deleteTokenByObjIdAndRefIdAndUsrId(), ilObjDataCollectionGUI\editObject(), ilCertificateCourseLearningProgressEvaluation\evaluate(), ilObjChatroomGUI\executeCommand(), ilObjSAHSLearningModuleGUI\executeCommand(), ilChatroomInfoGUI\executeDefault(), ilCmiXapiAuthToken\fillToken(), ilEmployeeTalkMyStaffListGUI\getActions(), ilCmiXapiAuthToken\getCmi5SessionByUsrIdAndObjIdAndRefId(), ilTestRandomQuestionSetConfig\getCommaSeparatedSourceQuestionPoolLinks(), ilBlogDraftsDerivedTaskProvider\getFirstRefIdWithPermission(), ilForumDraftsDerivedTaskProvider\getFirstRefIdWithPermission(), ilCmiXapiAuthToken\getInstanceByObjIdAndRefIdAndUsrId(), ilMailAddressTypeHelperImpl\getInstanceByRefId(), ilPDSelectedItemsBlockMembershipsProvider\getObjectsByMembership(), ilEmployeeTalkAppointmentGUI\getPendingTalksInSeries(), ilTestQuestionBrowserTableGUI\getQuestionParentObjIds(), ilTestExpressPage\getReturnToPageLink(), ilObjTestDynamicQuestionSetConfig\getSourceQuestionPoolLink(), ilObjTestDynamicQuestionSetConfig\getSourceQuestionPoolSummaryString(), ilBlogDraftsDerivedTaskProvider\getTasks(), ilForumDraftsDerivedTaskProvider\getTasks(), ilObjEmployeeTalkSeriesGUI\getTemplateRefId(), ilSoapTestAdministration\getTestAccess(), ilCertificateAppEventListener\handleLPUpdate(), ilDataCollectionAccessAdapter\hasEditPermissionPermission(), ilDataCollectionAccessAdapter\hasReadPermission(), ilDataCollectionAccessAdapter\hasVisiblePermission(), ilDataCollectionAccessAdapter\hasWritePermission(), ilObjChatroomGUI\insertObject(), ilCmiXapiAuthToken\insertToken(), ilObjChatroomAccess\isActivated(), ilObjEmployeeTalkAccess\isPermittedToExecuteOperation(), ilPDSelectedItemsBlockViewGUI\isRootNode(), ilUserCertificateGUI\listCertificates(), ilEmployeeTalkMyStaffListGUI\loadActionBar(), ilEmployeeTalkMyStaffUserGUI\loadActionBar(), ilCertificateObjectHelper\lookupObjId(), ilPDSelectedItemsBlockMembershipsViewGUI\mayRemoveItem(), ilMailGroupAddressType\resolve(), ilCertificateSettingsCourseFormRepository\save(), ilObjLTIConsumerGUI\saveContentSelection(), ilSCORM2004StoreData\scormPlayerUnload(), ilHelpGUI\setCtrlPar(), ilObjDataCollectionGUI\setTabs(), ilObjSAHSLearningModuleGUI\setTabs(), ilObjSCORMTracking\storeJsApi(), ilObjSCORMTracking\syncGlobalStatus(), ilSCORM2004StoreData\syncGlobalStatus(), ilObjChatroomAccessTest\testAccessChecksFail(), ilObjChatroomAccessTest\testAccessChecksSucceed(), ilForumNotificationTest\testCheckForumsExistsInsert(), ilMailTest\testGetMailObjectReferenceId(), ilObjSAHSLearningModuleGUI\uploadObject(), ilObjEmployeeTalkGUI\validateCustom(), and ilSCORMItemGUI\view().

◆ $response

$response = array("auth-token" => $authToken)

Definition at line 93 of file xapitoken.php.

Referenced by send().

◆ $token

$token = ilCmiXapiAuthToken::getInstanceByObjIdAndRefIdAndUsrId($objId, $refId, $DIC->user()->getId())

Definition at line 70 of file xapitoken.php.

◆ $tokenRestriction

$tokenRestriction = true

see: https://github.com/AICC/CMI-5_Spec_Current/blob/quartz/cmi5_spec.md#fetch_url response should always be a valid json object check oneway fetching is optional:

The AU SHOULD NOT attempt to retrieve the authorization token more than once. The fetch URL is a "one-time use" URL and subsequent uses SHOULD generate an error (see Section 8.2.3).

On reloading the initial content page it will send the exact url twice, should we really restrict this behavior? If there are issues on page reload it might be useful to set $tokenRestriction = false .

Definition at line 34 of file xapitoken.php.