ilOpenIdConnectSettingsGUI Class Reference

Class ilOpenIdConnectSettingsGUI. More...

Collaboration diagram for ilOpenIdConnectSettingsGUI:

Public Member Functions
	__construct (int $a_ref_id)
	executeCommand ()

Protected Member Functions
	checkAccess (string $a_permission)
	checkAccessBool (string $a_permission)
	settings (ilPropertyFormGUI $form=null)
	initSettingsForm ()
	saveSettings ()
	saveImageFromHttpRequest ()
	prepareRoleSelection (bool $a_with_select_option=true)
	profile (ilPropertyFormGUI $form=null)
	initProfileForm ()
	saveProfile ()
	roles (ilPropertyFormGUI $form=null)
	initRolesForm ()
	saveRoles ()
	setSubTabs (string $active_tab)

Private Attributes
const	STAB_SETTINGS = 'settings'
const	STAB_PROFILE = 'profile'
const	STAB_ROLES = 'roles'
const	DEFAULT_CMD = 'settings'
int	$ref_id
	$body
ilOpenIdConnectSettings	$settings
ilLanguage	$lng
ilCtrl	$ctrl
ilLogger	$logger
ilAccessHandler	$access
ilRbacReview	$review
ilErrorHandling	$error
ilGlobalTemplateInterface	$mainTemplate
ilTabsGUI	$tabs
FileUpload	$upload

Detailed Description

Class ilOpenIdConnectSettingsGUI.

Author

Stefan Meyer smeye.nosp@m.r.il.nosp@m.ias@g.nosp@m.mx.d.nosp@m.e

Definition at line 27 of file class.ilOpenIdConnectSettingsGUI.php.

Constructor & Destructor Documentation

__construct()

ilOpenIdConnectSettingsGUI::__construct

(

int

$a_ref_id

)

Definition at line 48 of file class.ilOpenIdConnectSettingsGUI.php.

References $DIC, ILIAS\Repository\access(), ILIAS\Repository\ctrl(), ilOpenIdConnectSettings\getInstance(), ILIAS\Repository\lng(), ILIAS\Repository\logger(), ILIAS\Repository\mainTemplate(), settings(), ILIAS\Repository\tabs(), and ILIAS\Repository\upload().

    {
        global $DIC;

        $this->ref_id = $a_ref_id;

        $this->lng = $DIC->language();
        $this->lng->loadLanguageModule('auth');

        $this->mainTemplate = $DIC->ui()->mainTemplate();
        $this->tabs = $DIC->tabs();
        $this->ctrl = $DIC->ctrl();
        $this->logger = $DIC->logger()->auth();

        $this->access = $DIC->access();
        $this->review = $DIC->rbac()->review();
        $this->error = $DIC['ilErr'];
        $this->upload = $DIC->upload();
        $this->body = $DIC->http()->request()->getParsedBody();
        $this->settings = ilOpenIdConnectSettings::getInstance();
    }

Here is the call graph for this function:

Member Function Documentation

checkAccess()

ilOpenIdConnectSettingsGUI::checkAccess ( string  $a_permission )

protected

Definition at line 70 of file class.ilOpenIdConnectSettingsGUI.php.

References checkAccessBool(), and ILIAS\Repository\lng().

Referenced by executeCommand(), profile(), roles(), saveRoles(), saveSettings(), and settings().

                                                        : void
    {
        if (!$this->checkAccessBool($a_permission)) {
            $this->error->raiseError($this->lng->txt('msg_no_perm_read'), $this->error->WARNING);
        }
    }

Here is the call graph for this function:

Here is the caller graph for this function:

checkAccessBool()

ilOpenIdConnectSettingsGUI::checkAccessBool ( string  $a_permission )

protected

Definition at line 77 of file class.ilOpenIdConnectSettingsGUI.php.

References ILIAS\Repository\access().

Referenced by checkAccess(), initProfileForm(), initRolesForm(), initSettingsForm(), and saveProfile().

                                                            : bool
    {
        return $this->access->checkAccess($a_permission, '', $this->ref_id);
    }

Here is the call graph for this function:

Here is the caller graph for this function:

executeCommand()

ilOpenIdConnectSettingsGUI::executeCommand

(

)

Definition at line 82 of file class.ilOpenIdConnectSettingsGUI.php.

References checkAccess(), and ILIAS\Repository\ctrl().

                                    : void
    {
        $this->checkAccess('read');

        switch ($this->ctrl->getNextClass()) {
            default:
                $cmd = $this->ctrl->getCmd(self::DEFAULT_CMD);
                $this->$cmd();
                break;
        }
    }

Here is the call graph for this function:

initProfileForm()

ilOpenIdConnectSettingsGUI::initProfileForm ( )

protected

Definition at line 518 of file class.ilOpenIdConnectSettingsGUI.php.

References checkAccessBool(), ILIAS\Repository\ctrl(), ILIAS\Repository\lng(), and settings().

Referenced by profile(), and saveProfile().

                                        : ilPropertyFormGUI
    {
        $form = new ilPropertyFormGUI();
        $form->setTitle($this->lng->txt('auth_oidc_mapping_table'));
        $form->setFormAction($this->ctrl->getFormAction($this, 'saveProfile'));

        foreach ($this->settings->getProfileMappingFields() as $field => $lng_key) {
            $text_form = new ilTextInputGUI($this->lng->txt($lng_key));
            $text_form->setPostVar($field . "_value");
            $text_form->setValue($this->settings->getProfileMappingFieldValue($field));
            $form->addItem($text_form);

            $checkbox_form = new ilCheckboxInputGUI('');
            $checkbox_form->setValue("1");
            $checkbox_form->setPostVar($field . "_update");
            $checkbox_form->setChecked($this->settings->getProfileMappingFieldUpdate($field));
            $checkbox_form->setOptionTitle($this->lng->txt('auth_oidc_update_field_info'));
            $form->addItem($checkbox_form);
        }

        if ($this->checkAccessBool('write')) {
            $form->addCommandButton('saveProfile', $this->lng->txt('save'));
        }

        return $form;
    }

Here is the call graph for this function:

Here is the caller graph for this function:

initRolesForm()

ilOpenIdConnectSettingsGUI::initRolesForm ( )

protected

Definition at line 583 of file class.ilOpenIdConnectSettingsGUI.php.

References $update, checkAccessBool(), ILIAS\Repository\ctrl(), ILIAS\Repository\lng(), prepareRoleSelection(), and settings().

Referenced by roles(), and saveRoles().

                                      : ilPropertyFormGUI
    {
        $form = new ilPropertyFormGUI();
        $form->setTitle($this->lng->txt('auth_oidc_role_mapping_table'));
        $form->setFormAction($this->ctrl->getFormAction($this, self::STAB_ROLES));

        foreach ($this->prepareRoleSelection(false) as $role_id => $role_title) {
            $role_map = new ilTextInputGUI(
                $role_title,
                'role_map_' . $role_id
            );
            $role_map->setInfo($this->lng->txt('auth_oidc_role_info'));
            $role_map->setValue($this->settings->getRoleMappingValueForId((int) $role_id));
            $form->addItem($role_map);

            $update = new ilCheckboxInputGUI(
                '',
                'role_map_update_' . $role_id
            );
            $update->setOptionTitle($this->lng->txt('auth_oidc_update_role_info'));
            $update->setValue("1");
            $update->setChecked(!$this->settings->getRoleMappingUpdateForId((int) $role_id));
            $form->addItem($update);
        }

        if ($this->checkAccessBool('write')) {
            $form->addCommandButton('saveRoles', $this->lng->txt('save'));
        }
        return $form;
    }

Here is the call graph for this function:

Here is the caller graph for this function:

initSettingsForm()

ilOpenIdConnectSettingsGUI::initSettingsForm ( )

protected

Definition at line 107 of file class.ilOpenIdConnectSettingsGUI.php.

References $client_id, $provider, $scopes, ILIAS\LTI\ToolProvider\$secret, $session, checkAccessBool(), ILIAS\Repository\ctrl(), ilOpenIdConnectSettings\DEFAULT_SCOPE, ILIAS\Repository\lng(), ilOpenIdConnectSettings\LOGIN_ELEMENT_TYPE_IMG, ilOpenIdConnectSettings\LOGIN_ELEMENT_TYPE_TXT, ilOpenIdConnectSettings\LOGIN_ENFORCE, ilOpenIdConnectSettings\LOGIN_STANDARD, ilOpenIdConnectSettings\LOGOUT_SCOPE_GLOBAL, ilOpenIdConnectSettings\LOGOUT_SCOPE_LOCAL, prepareRoleSelection(), ilCheckboxInputGUI\setChecked(), ilCheckboxInputGUI\setOptionTitle(), ilFormPropertyGUI\setRequired(), settings(), ilRadioGroupInputGUI\setValue(), ilOpenIdConnectSettings\URL_VALIDATION_CUSTOM, ilOpenIdConnectSettings\URL_VALIDATION_NONE, and ilOpenIdConnectSettings\URL_VALIDATION_PROVIDER.

Referenced by saveSettings(), and settings().

                                         : ilPropertyFormGUI
    {
        $form = new ilPropertyFormGUI();
        $form->setTitle($this->lng->txt('auth_oidc_settings_title'));
        $form->setFormAction($this->ctrl->getFormAction($this));

        // activation
        $activation = new ilCheckboxInputGUI(
            $this->lng->txt('auth_oidc_settings_activation'),
            'activation'
        );
        $activation->setChecked($this->settings->getActive());
        $form->addItem($activation);

        // provider
        $provider = new ilTextInputGUI(
            $this->lng->txt('auth_oidc_settings_provider'),
            'provider'
        );
        $provider->setRequired(true);
        $provider->setValue($this->settings->getProvider());
        $form->addItem($provider);

        $client_id = new ilTextInputGUI(
            $this->lng->txt('auth_oidc_settings_client_id'),
            'client_id'
        );
        $client_id->setRequired(true);
        $client_id->setValue($this->settings->getClientId());
        $form->addItem($client_id);

        // secret
        $secret = new ilPasswordInputGUI(
            $this->lng->txt('auth_oidc_settings_secret'),
            'secret'
        );
        $secret->setSkipSyntaxCheck(true);
        $secret->setRetype(false);
        $secret->setRequired(false);
        if ($this->settings->getSecret() !== '') {
            $secret->setValue('******');
        }
        $form->addItem($secret);

        $default_scope = new ilTextInputGUI(
            $this->lng->txt('auth_oidc_settings_additional_scopes'),
            "default_scope"
        );
        $default_scope->setValue(ilOpenIdConnectSettings::DEFAULT_SCOPE);
        $default_scope->setDisabled(true);
        $form->addItem($default_scope);

        $scopes = new ilTextInputGUI(
            "",
            "scopes"
        );
        $scopes->setMulti(true);
        $scopeValues = $this->settings->getAdditionalScopes();
        if (isset($scopeValues[0])) {
            $scopes->setValue($scopeValues[0]);
        }
        $scopes->setMultiValues($scopeValues);
        $form->addItem($scopes);


        // validation options
        $validation_options = new ilRadioGroupInputGUI(
            $this->lng->txt('auth_oidc_settings_validate_scopes'),
            'validate_scopes'
        );
        $validation_options->setValue((string) $this->settings->getValidateScopes());
        $form->addItem($validation_options);

        $base_valid_url_option = new ilRadioOption(
            $this->lng->txt('auth_oidc_settings_validate_scope_default'),
            (string) ilOpenIdConnectSettings::URL_VALIDATION_PROVIDER
        );

        $validation_options->addOption($base_valid_url_option);

        $custom_validation_url = new ilTextInputGUI(
            '',
            'custom_discovery_url'
        );

        $custom_valid_url_option = new ilRadioOption(
            $this->lng->txt('auth_oidc_settings_validate_scope_custom'),
            (string) ilOpenIdConnectSettings::URL_VALIDATION_CUSTOM
        );
        $validation_options->addOption($custom_valid_url_option);
        $custom_validation_url->setValue($this->settings->getCustomDiscoveryUrl() ?? '');
        $custom_validation_url->setMaxLength(120);
        $custom_validation_url->setInfo($this->lng->txt('auth_oidc_settings_discovery_url'));
        $custom_valid_url_option->addSubItem($custom_validation_url);
        $no_validation_option = new ilRadioOption(
            $this->lng->txt('auth_oidc_settings_validate_scope_none'),
            (string) ilOpenIdConnectSettings::URL_VALIDATION_NONE
        );
        $validation_options->addOption($no_validation_option);

        // login element
        $login_element = new ilRadioGroupInputGUI(
            $this->lng->txt('auth_oidc_settings_le'),
            'le'
        );
        $login_element->setRequired(true);
        $login_element->setValue((string) $this->settings->getLoginElementType());
        $form->addItem($login_element);

        // le -> type text
        $text_option = new ilRadioOption(
            $this->lng->txt('auth_oidc_settings_txt'),
            (string) ilOpenIdConnectSettings::LOGIN_ELEMENT_TYPE_TXT
        );
        $login_element->addOption($text_option);

        // le -> type text -> text
        $text = new ilTextInputGUI(
            '',
            'le_text'
        );
        $text->setValue($this->settings->getLoginElemenText());
        $text->setMaxLength(120);
        $text->setInfo($this->lng->txt('auth_oidc_settings_txt_val_info'));
        $text_option->addSubItem($text);

        // le -> type img
        $img_option = new ilRadioOption(
            $this->lng->txt('auth_oidc_settings_img'),
            (string) ilOpenIdConnectSettings::LOGIN_ELEMENT_TYPE_IMG
        );
        $login_element->addOption($img_option);

        $image = new ilImageFileInputGUI(
            '',
            'le_img'
        );
        $image->setAllowDeletion(false);

        if ($this->settings->hasImageFile()) {
            $image->setImage($this->settings->getImageFilePath());
        }
        $image->setInfo($this->lng->txt('auth_oidc_settings_img_file_info'));
        $img_option->addSubItem($image);

        // login options
        $login_options = new ilRadioGroupInputGUI(
            $this->lng->txt('auth_oidc_settings_login_options'),
            'login_prompt'
        );
        $login_options->setValue((string) $this->settings->getLoginPromptType());

        // enforce login
        $enforce = new ilRadioOption(
            $this->lng->txt('auth_oidc_settings_login_option_enforce'),
            (string) ilOpenIdConnectSettings::LOGIN_ENFORCE
        );
        $enforce->setInfo($this->lng->txt('auth_oidc_settings_login_option_enforce_info'));
        $login_options->addOption($enforce);

        // default login
        $default = new ilRadioOption(
            $this->lng->txt('auth_oidc_settings_login_option_default'),
            (string) ilOpenIdConnectSettings::LOGIN_STANDARD
        );
        $default->setInfo($this->lng->txt('auth_oidc_settings_login_option_default_info'));
        $login_options->addOption($default);

        $form->addItem($login_options);

        // logout scope
        $logout_scope = new ilRadioGroupInputGUI(
            $this->lng->txt('auth_oidc_settings_logout_scope'),
            'logout_scope'
        );
        $logout_scope->setValue((string) $this->settings->getLogoutScope());

        // scope global
        $global_scope = new ilRadioOption(
            $this->lng->txt('auth_oidc_settings_logout_scope_global'),
            (string) ilOpenIdConnectSettings::LOGOUT_SCOPE_GLOBAL
        );
        $global_scope->setInfo($this->lng->txt('auth_oidc_settings_logout_scope_global_info'));
        $logout_scope->addOption($global_scope);

        // ilias scope
        $ilias_scope = new ilRadioOption(
            $this->lng->txt('auth_oidc_settings_logout_scope_local'),
            (string) ilOpenIdConnectSettings::LOGOUT_SCOPE_LOCAL
        );
        $ilias_scope->setInfo($this->lng->txt('auth_oidc_settings_logout_scope_local_info'));
        $logout_scope->addOption($ilias_scope);

        $form->addItem($logout_scope);

        $use_custom_session = new ilCheckboxInputGUI(
            $this->lng->txt('auth_oidc_settings_custom_session_duration_type'),
            'custom_session'
        );
        $use_custom_session->setOptionTitle(
            $this->lng->txt('auth_oidc_settings_custom_session_duration_option')
        );
        $use_custom_session->setChecked($this->settings->isCustomSession());
        $form->addItem($use_custom_session);

        // session duration
        $session = new ilNumberInputGUI(
            $this->lng->txt('auth_oidc_settings_session_duration'),
            'session_duration'
        );
        $session->setValue((string) $this->settings->getSessionDuration());
        $session->setSuffix($this->lng->txt('minutes'));
        $session->setMinValue(5);
        $session->setMaxValue(1440);
        $session->setRequired(true);
        $use_custom_session->addSubItem($session);

        if ($this->checkAccessBool('write')) {
            // save button
            $form->addCommandButton('saveSettings', $this->lng->txt('save'));
        }

        // User sync settings --------------------------------------------------------------
        $user_sync = new ilFormSectionHeaderGUI();
        $user_sync->setTitle($this->lng->txt('auth_oidc_settings_section_user_sync'));
        $form->addItem($user_sync);

        $sync = new ilCheckboxInputGUI(
            $this->lng->txt('auth_oidc_settings_user_sync'),
            'sync'
        );
        $sync->setChecked($this->settings->isSyncAllowed());
        $sync->setInfo($this->lng->txt('auth_oidc_settings_user_sync_info'));
        $sync->setValue("1");
        $form->addItem($sync);

        $roles = new ilSelectInputGUI(
            $this->lng->txt('auth_oidc_settings_default_role'),
            'role'
        );
        $roles->setValue($this->settings->getRole());
        $roles->setInfo($this->lng->txt('auth_oidc_settings_default_role_info'));
        $roles->setOptions($this->prepareRoleSelection());
        $roles->setRequired(true);
        $sync->addSubItem($roles);

        $user_attr = new ilTextInputGUI(
            $this->lng->txt('auth_oidc_settings_user_attr'),
            'username'
        );
        $user_attr->setValue($this->settings->getUidField());
        $user_attr->setRequired(true);
        $form->addItem($user_attr);

        return $form;
    }

Here is the call graph for this function:

Here is the caller graph for this function:

prepareRoleSelection()

ilOpenIdConnectSettingsGUI::prepareRoleSelection ( bool  $a_with_select_option = true )

protected

Parameters

bool

$a_with_select_option

Returns

array<string, string>

Definition at line 484 of file class.ilOpenIdConnectSettingsGUI.php.

References ilObject\_lookupTitle(), ilUtil\_sortIds(), ANONYMOUS_ROLE_ID, and ILIAS\Repository\lng().

Referenced by initRolesForm(), initSettingsForm(), and saveRoles().

                                                                              : array
    {
        $global_roles = ilUtil::_sortIds(
            $this->review->getGlobalRoles(),
            'object_data',
            'title',
            'obj_id'
        );

        $select = [];
        if ($a_with_select_option) {
            $select[0] = $this->lng->txt('links_select_one');
        }
        foreach ($global_roles as $role_id) {
            if ($role_id === ANONYMOUS_ROLE_ID) {
                continue;
            }
            $select[(string) $role_id] = ilObject::_lookupTitle((int) $role_id);
        }

        return $select;
    }

Here is the call graph for this function:

Here is the caller graph for this function:

profile()

ilOpenIdConnectSettingsGUI::profile ( ilPropertyFormGUI  $form = null )

protected

Definition at line 507 of file class.ilOpenIdConnectSettingsGUI.php.

References checkAccess(), initProfileForm(), ILIAS\Repository\mainTemplate(), and setSubTabs().

Referenced by saveProfile().

                                                              : void
    {
        $this->checkAccess('read');
        $this->setSubTabs(self::STAB_PROFILE);

        if (!$form instanceof ilPropertyFormGUI) {
            $form = $this->initProfileForm();
        }
        $this->mainTemplate->setContent($form->getHTML());
    }

Here is the call graph for this function:

Here is the caller graph for this function:

roles()

ilOpenIdConnectSettingsGUI::roles ( ilPropertyFormGUI  $form = null )

protected

Definition at line 572 of file class.ilOpenIdConnectSettingsGUI.php.

References checkAccess(), initRolesForm(), ILIAS\Repository\mainTemplate(), and setSubTabs().

Referenced by saveRoles().

                                                            : void
    {
        $this->checkAccess('read');
        $this->setSubTabs(self::STAB_ROLES);

        if (!$form instanceof ilPropertyFormGUI) {
            $form = $this->initRolesForm();
        }
        $this->mainTemplate->setContent($form->getHTML());
    }

Here is the call graph for this function:

Here is the caller graph for this function:

saveImageFromHttpRequest()

ilOpenIdConnectSettingsGUI::saveImageFromHttpRequest ( )

protected

Definition at line 459 of file class.ilOpenIdConnectSettingsGUI.php.

References Vendor\Package\$e, ilOpenIdConnectSettings\FILE_STORAGE, ILIAS\Repository\logger(), settings(), and ILIAS\Repository\upload().

Referenced by saveSettings().

                                                 : void
    {
        try {
            if (!$this->upload->hasBeenProcessed()) {
                $this->upload->process();
            }
            foreach ($this->upload->getResults() as $single_file_upload) {
                if ($single_file_upload->isOK()) {
                    $this->settings->deleteImageFile();
                    $this->upload->moveFilesTo(
                        ilOpenIdConnectSettings::FILE_STORAGE,
                        \ILIAS\FileUpload\Location::WEB
                    );
                    $this->settings->setLoginElementImage($single_file_upload->getName());
                }
            }
        } catch (\ILIAS\Filesystem\Exception\IllegalStateException $e) {
            $this->logger->warning('Upload failed with message: ' . $e->getMessage());
        }
    }

Here is the call graph for this function:

Here is the caller graph for this function:

saveProfile()

ilOpenIdConnectSettingsGUI::saveProfile ( )

protected

Definition at line 545 of file class.ilOpenIdConnectSettingsGUI.php.

References checkAccessBool(), ILIAS\Repository\ctrl(), initProfileForm(), ILIAS\Repository\lng(), ILIAS\Repository\mainTemplate(), profile(), and settings().

                                    : void
    {
        $this->checkAccessBool('write');

        $form = $this->initProfileForm();
        if (!$form->checkInput()) {
            $this->mainTemplate->setOnScreenMessage('failure', $this->lng->txt('err_check_input'));
            $form->setValuesByPost();
            $this->profile($form);
            return;
        }

        foreach ($this->settings->getProfileMappingFields() as $field => $lng_key) {
            $this->settings->setProfileMappingFieldValue(
                $field,
                $form->getInput($field . '_value')
            );
            $this->settings->setProfileMappingFieldUpdate(
                $field,
                (bool) $form->getInput($field . '_update')
            );
        }
        $this->settings->save();
        $this->mainTemplate->setOnScreenMessage('success', $this->lng->txt('settings_saved'), true);
        $this->ctrl->redirect($this, self::STAB_PROFILE);
    }

Here is the call graph for this function:

saveRoles()

ilOpenIdConnectSettingsGUI::saveRoles ( )

protected

Definition at line 614 of file class.ilOpenIdConnectSettingsGUI.php.

References checkAccess(), ILIAS\Repository\ctrl(), ilLogLevel\DEBUG, initRolesForm(), ILIAS\Repository\int(), ILIAS\Repository\lng(), ILIAS\Repository\logger(), ILIAS\Repository\mainTemplate(), prepareRoleSelection(), roles(), and settings().

                                  : void
    {
        $this->checkAccess('write');
        $form = $this->initRolesForm();
        if ($form->checkInput()) {
            $this->logger->dump($this->body, ilLogLevel::DEBUG);


            $role_settings = [];
            $role_valid = true;
            foreach ($this->prepareRoleSelection(false) as $role_id => $role_title) {
                $role_settings[(int) $role_id]['update'] = !$form->getInput('role_map_update_' . $role_id);
                $role_settings[(int) $role_id]['value'] = '';

                $input_role = trim($form->getInput('role_map_' . $role_id));
                if ($input_role === '') {
                    continue;
                }

                $role_params = explode('::', $input_role);
                $this->logger->dump($role_params, ilLogLevel::DEBUG);

                if (count($role_params) !== 2) {
                    if ($form->getItemByPostVar('role_map_' . $role_id)) {
                        $form->getItemByPostVar('role_map_' . $role_id)->setAlert($this->lng->txt('msg_wrong_format'));
                    }
                    $role_valid = false;
                    continue;
                }
                $role_settings[(int) $role_id]['value'] = $input_role;
            }

            if (!$role_valid) {
                $form->setValuesByPost();
                $this->mainTemplate->setOnScreenMessage('failure', $this->lng->txt('err_check_input'));
                $this->roles($form);
                return;
            }

            $this->settings->setRoleMappings($role_settings);
            $this->settings->save();
            $this->mainTemplate->setOnScreenMessage('success', $this->lng->txt('settings_saved'), true);
            $this->ctrl->redirect($this, 'roles');
        }

        $form->setValuesByPost();
        $this->mainTemplate->setOnScreenMessage('failure', $this->lng->txt('err_check_input'));
        $this->roles($form);
    }

Here is the call graph for this function:

saveSettings()

ilOpenIdConnectSettingsGUI::saveSettings ( )

protected

Definition at line 364 of file class.ilOpenIdConnectSettingsGUI.php.

References Vendor\Package\$e, ILIAS\LTI\ToolProvider\$key, $scopes, checkAccess(), ILIAS\Repository\ctrl(), initSettingsForm(), ILIAS\Repository\lng(), ILIAS\Repository\mainTemplate(), saveImageFromHttpRequest(), settings(), ilOpenIdConnectSettings\URL_VALIDATION_CUSTOM, ilOpenIdConnectSettings\URL_VALIDATION_PROVIDER, and ilOpenIdConnectSettings\VALIDATION_ISSUE_INVALID_SCOPE.

                                     : void
    {
        $this->checkAccess('write');

        $form = $this->initSettingsForm();
        if (!$form->checkInput()) {
            $this->mainTemplate->setOnScreenMessage('failure', $this->lng->txt('err_check_input'));
            $form->setValuesByPost();
            $this->settings($form);
            return;
        }

        $scopes = [];
        if (!empty($form->getInput('scopes'))) {
            $scopes = $form->getInput('scopes');
            foreach ($scopes as $key => $value) {
                if (empty($value)) {
                    array_splice($scopes, $key, 1);
                }
            }
        }

        try {
            switch ((int) $form->getInput('validate_scopes')) {
                case ilOpenIdConnectSettings::URL_VALIDATION_PROVIDER:
                    $discoveryURL = $form->getInput('provider') . '/.well-known/openid-configuration';
                    break;
                case ilOpenIdConnectSettings::URL_VALIDATION_CUSTOM:
                    $discoveryURL = $form->getInput('custom_discovery_url');
                    break;
                default:
                    $discoveryURL = null;
                    break;
            }
            $validation_result = !is_null($discoveryURL) ? $this->settings->validateScopes($discoveryURL, (array) $scopes) : [];

            if (!empty($validation_result)) {
                if (ilOpenIdConnectSettings::VALIDATION_ISSUE_INVALID_SCOPE === $validation_result[0]) {
                    $this->mainTemplate->setOnScreenMessage(
                        'failure',
                        sprintf($this->lng->txt('auth_oidc_settings_invalid_scopes'), implode(",", $validation_result[1]))
                    );
                } else {
                    $this->mainTemplate->setOnScreenMessage(
                        'failure',
                        sprintf($this->lng->txt('auth_oidc_settings_discovery_error'), $validation_result[1])
                    );
                }
                $form->setValuesByPost();
                $this->settings($form);
                return;
            }
        } catch (ilCurlConnectionException $e) {
            $this->mainTemplate->setOnScreenMessage(
                'failure',
                $e->getMessage()
            );
            $form->setValuesByPost();
            $this->settings($form);
            return;
        }

        $this->settings->setActive((bool) $form->getInput('activation'));
        $this->settings->setProvider((string) $form->getInput('provider'));
        $this->settings->setClientId((string) $form->getInput('client_id'));
        if ((string) $form->getInput('secret') !== '' && strcmp($form->getInput('secret'), '******') !== 0) {
            $this->settings->setSecret((string) $form->getInput('secret'));
        }
        $this->settings->setAdditionalScopes((array) $scopes);
        $this->settings->setLoginElementType((int) $form->getInput('le'));
        $this->settings->setLoginElementText((string) $form->getInput('le_text'));
        $this->settings->setLoginPromptType((int) $form->getInput('login_prompt'));
        $this->settings->setLogoutScope((int) $form->getInput('logout_scope'));
        $this->settings->useCustomSession((bool) $form->getInput('custom_session'));
        $this->settings->setSessionDuration((int) $form->getInput('session_duration'));
        $this->settings->allowSync((bool) $form->getInput('sync'));
        $this->settings->setRole((int) $form->getInput('role'));
        $this->settings->setUidField((string) $form->getInput('username'));

        $fileData = (array) $form->getInput('le_img');

        if ((string) ($fileData['tmp_name'] ?? '') !== '') {
            $this->saveImageFromHttpRequest();
        }

        $this->settings->setValidateScopes((int) $form->getInput('validate_scopes'));
        if (ilOpenIdConnectSettings::URL_VALIDATION_CUSTOM === $this->settings->getValidateScopes()) {
            $this->settings->setCustomDiscoveryUrl($form->getInput('custom_discovery_url'));
        }
        $this->settings->save();

        $this->mainTemplate->setOnScreenMessage('success', $this->lng->txt('settings_saved'), true);
        $this->ctrl->redirect($this, 'settings');
    }

Here is the call graph for this function:

setSubTabs()

ilOpenIdConnectSettingsGUI::setSubTabs ( string  $active_tab )

protected

Definition at line 664 of file class.ilOpenIdConnectSettingsGUI.php.

References ILIAS\Repository\ctrl(), ILIAS\Repository\lng(), and ILIAS\Repository\tabs().

Referenced by profile(), roles(), and settings().

                                                     : void
    {
        $this->tabs->addSubTab(
            self::STAB_SETTINGS,
            $this->lng->txt('auth_oidc_' . self::STAB_SETTINGS),
            $this->ctrl->getLinkTarget($this, self::STAB_SETTINGS)
        );
        $this->tabs->addSubTab(
            self::STAB_PROFILE,
            $this->lng->txt('auth_oidc_' . self::STAB_PROFILE),
            $this->ctrl->getLinkTarget($this, self::STAB_PROFILE)
        );
        $this->tabs->addSubTab(
            self::STAB_ROLES,
            $this->lng->txt('auth_oidc_' . self::STAB_ROLES),
            $this->ctrl->getLinkTarget($this, self::STAB_ROLES)
        );

        $this->tabs->activateSubTab($active_tab);
    }

Here is the call graph for this function:

Here is the caller graph for this function:

settings()

ilOpenIdConnectSettingsGUI::settings ( ilPropertyFormGUI  $form = null )

protected

Definition at line 94 of file class.ilOpenIdConnectSettingsGUI.php.

References checkAccess(), initSettingsForm(), ILIAS\Repository\mainTemplate(), and setSubTabs().

Referenced by __construct(), initProfileForm(), initRolesForm(), initSettingsForm(), saveImageFromHttpRequest(), saveProfile(), saveRoles(), and saveSettings().

                                                               : void
    {
        $this->checkAccess('read');
        $this->setSubTabs(self::STAB_SETTINGS);


        if (!$form instanceof ilPropertyFormGUI) {
            $form = $this->initSettingsForm();
        }

        $this->mainTemplate->setContent($form->getHTML());
    }

Here is the call graph for this function:

Here is the caller graph for this function:

Field Documentation

$access

ilAccessHandler ilOpenIdConnectSettingsGUI::$access

private

Definition at line 41 of file class.ilOpenIdConnectSettingsGUI.php.

$body

ilOpenIdConnectSettingsGUI::$body

private

Definition at line 36 of file class.ilOpenIdConnectSettingsGUI.php.

$ctrl

ilCtrl ilOpenIdConnectSettingsGUI::$ctrl

private

Definition at line 39 of file class.ilOpenIdConnectSettingsGUI.php.

$error

ilErrorHandling ilOpenIdConnectSettingsGUI::$error

private

Definition at line 43 of file class.ilOpenIdConnectSettingsGUI.php.

$lng

ilLanguage ilOpenIdConnectSettingsGUI::$lng

private

Definition at line 38 of file class.ilOpenIdConnectSettingsGUI.php.

$logger

ilLogger ilOpenIdConnectSettingsGUI::$logger

private

Definition at line 40 of file class.ilOpenIdConnectSettingsGUI.php.

$mainTemplate

ilGlobalTemplateInterface ilOpenIdConnectSettingsGUI::$mainTemplate

private

Definition at line 44 of file class.ilOpenIdConnectSettingsGUI.php.

$ref_id

int ilOpenIdConnectSettingsGUI::$ref_id

private

Definition at line 34 of file class.ilOpenIdConnectSettingsGUI.php.

$review

ilRbacReview ilOpenIdConnectSettingsGUI::$review

private

Definition at line 42 of file class.ilOpenIdConnectSettingsGUI.php.

$settings

ilOpenIdConnectSettings ilOpenIdConnectSettingsGUI::$settings

private

Definition at line 37 of file class.ilOpenIdConnectSettingsGUI.php.

$tabs

ilTabsGUI ilOpenIdConnectSettingsGUI::$tabs

private

Definition at line 45 of file class.ilOpenIdConnectSettingsGUI.php.

$upload

FileUpload ilOpenIdConnectSettingsGUI::$upload

private

Definition at line 46 of file class.ilOpenIdConnectSettingsGUI.php.

DEFAULT_CMD

const ilOpenIdConnectSettingsGUI::DEFAULT_CMD = 'settings'

private

Definition at line 33 of file class.ilOpenIdConnectSettingsGUI.php.

STAB_PROFILE

const ilOpenIdConnectSettingsGUI::STAB_PROFILE = 'profile'

private

Definition at line 30 of file class.ilOpenIdConnectSettingsGUI.php.

STAB_ROLES

const ilOpenIdConnectSettingsGUI::STAB_ROLES = 'roles'

private

Definition at line 31 of file class.ilOpenIdConnectSettingsGUI.php.

STAB_SETTINGS

const ilOpenIdConnectSettingsGUI::STAB_SETTINGS = 'settings'

private

Definition at line 29 of file class.ilOpenIdConnectSettingsGUI.php.

---

The documentation for this class was generated from the following file:

• Services/OpenIdConnect/classes/class.ilOpenIdConnectSettingsGUI.php