class.ilShibbolethSettingsForm.php

Go to the documentation of this file.

<?php
 
use ILIAS\Refinery\Transformation;
use ILIAS\UI\Factory as UIFactory;
use ILIAS\UI\Renderer;
use ILIAS\UI\Component\Input\Container\Form\Standard as StandardForm;
use Psr\Http\Message\RequestInterface;
use ILIAS\Refinery\Factory as Refinery;
 
class ilShibbolethSettingsForm
{
    protected ilCtrl $ctrl;
    protected ?StandardForm $form = null;
    protected ilLanguage $lng;
    protected ilRbacReview $rbac_review;
    protected Refinery $refinery;
    protected Renderer $renderer;
    protected RequestInterface $request;
    protected UIFactory $ui;
    protected ilRbacSystem $rbac_system;
 
    public function __construct(
        private readonly int $ref_id,
        private readonly object $parentObject,
        protected ilShibbolethSettings $settings,
        protected readonly string $action,
        protected readonly string $show_command = ''
    ) {
        global $DIC;
        $this->ctrl = $DIC->ctrl();
        $this->lng = $DIC->language();
        $this->rbac_review = $DIC->rbac()->review();
        $this->refinery = $DIC->refinery();
        $this->renderer = $DIC->ui()->renderer();
        $this->request = $DIC->http()->request();
        $this->ui = $DIC->ui()->factory();
        $this->rbac_system = $DIC->rbac()->system();
 
        $this->initForm();
    }
 
    protected function txt(string $var): string
    {
        return $this->lng->txt($var);
    }
 
    protected function infoTxt(string $var): string
    {
        return $this->txt($var . '_info');
    }
 
    public function getHTML(): string
    {
        return $this->renderer->render($this->form);
    }
 
    public function initForm(): void
    {
        $field = $this->ui->input()->field();
        $custom_trafo = fn(callable $c): Transformation => $this->refinery->custom()->transformation($c);
        $active = $field->checkbox($this->txt('shib_active'), $this->lng->txt("auth_shib_instructions"))
                        ->withValue($this->settings->isActive())
                        ->withAdditionalTransformation($custom_trafo(function ($v): void {
                            $this->settings->setActive((bool) $v);
                        }));
 
        $auth_allow_local = $field->checkbox($this->txt('auth_allow_local'))
                                  ->withValue($this->settings->isLocalAuthAllowed())
                                  ->withAdditionalTransformation($custom_trafo(function ($v): void {
                                      $this->settings->setAllowLocalAuth((bool) $v);
                                  }));
 
        $account_creation = $field->switchableGroup(
            [
                ilShibbolethSettings::ACCOUNT_CREATION_ENABLED => $field->group(
                    [],
                    $this->lng->txt("shib_account_creation_enabled"),
                    $this->lng->txt("shib_account_creation_enabled_info")
                ),
                ilShibbolethSettings::ACCOUNT_CREATION_WITH_APPROVAL => $field->group(
                    [],
                    $this->lng->txt("shib_account_creation_with_approval"),
                    $this->lng->txt("shib_account_creation_with_approval_info")
                ),
                ilShibbolethSettings::ACCOUNT_CREATION_DISABLED => $field->group(
                    [],
                    $this->lng->txt("shib_account_creation_disabled"),
                    $this->lng->txt("shib_account_creation_disabled_info")
                )
            ],
            $this->lng->txt("shib_account_creation"),
            $this->lng->txt("shib_account_creation_info")
        )->withValue(
            $this->settings->getAccountCreation()
        )->withRequired(
            true
        )->withAdditionalTransformation($custom_trafo(function ($v): void {
            $this->settings->setAccountCreation((string) $v[0]);
        }));
 
        $default_user_role = $field->select($this->txt('shib_user_default_role'), $this->getRoles())
                                   ->withRequired(true)
                                   ->withValue($this->settings->getDefaultRole())
                                   ->withAdditionalTransformation($custom_trafo(function ($v): void {
                                       $this->settings->setDefaultRole((int) $v);
                                   }));
 
        $basic_section = $field->section([
            $active,
            $auth_allow_local,
            $account_creation,
            $default_user_role,
        ], $this->txt('shib'));
 
        // Federation
        $federation_name = $field->text($this->txt('shib_federation_name'))
                                 ->withRequired(true)
                                 ->withValue($this->settings->getFederationName())
                                 ->withAdditionalTransformation($custom_trafo(function ($v): void {
                                     $this->settings->setFederationName((string) $v);
                                 }));
 
        $login_type = $field->switchableGroup([
            'internal_wayf' => $field->group([
                $field->textarea('', $this->txt('shib_idp_list'))
                      ->withValue($this->settings->getIdPList())
                      ->withAdditionalTransformation($custom_trafo(function ($v): void {
                          $this->settings->setIdPList((string) $v);
                      }))
            ], $this->txt('shib_login_internal_wayf')),
            'external_wayf' => $field->group([
                $field->text('', $this->txt('shib_login_button'))
                      ->withValue($this->settings->getLoginButton())
                      ->withAdditionalTransformation($custom_trafo(function ($v): void {
                          $this->settings->setLoginButton((string) $v);
                      }))
            ], $this->txt('shib_login_external_wayf')),
            'embedded_wayf' => $field->group([], $this->txt('shib_login_embedded_wayf'))
                                     ->withByline($this->txt('shib_login_embedded_wayf_description')),
        ], $this->txt('shib_login_type'))
                            ->withRequired(true)
                            ->withValue($this->settings->getOrganisationSelectionType())
                            ->withAdditionalTransformation($custom_trafo(function ($v): void {
                                $this->settings->setOrganisationSelectionType($v[0]);
                            }));
 
        $instructions = $field->textarea($this->txt('auth_login_instructions'))
                              ->withValue($this->settings->get('login_instructions', ''))
                              ->withAdditionalTransformation($custom_trafo(function ($v): void {
                                  $this->settings->set('login_instructions', htmlspecialchars_decode($v));
                              }));
 
        $data_manipulation = $field->text($this->txt('shib_data_conv'))
                                   ->withValue($this->settings->get('data_conv'))
                                   ->withAdditionalTransformation($custom_trafo(function ($v): void {
                                       $this->settings->set('data_conv', (string) $v);
                                   }));
 
        $federation_section = $field->section([
            $federation_name,
            $login_type,
            $instructions,
            $data_manipulation
        ], '');
 
        // User Fields
        $fields = [];
        $fields[] = $field->text($this->txt('shib_login'))
                          ->withValue($this->settings->get('shib_login'))
                          ->withRequired(true)
                          ->withAdditionalTransformation($custom_trafo(function ($v): void {
                              $this->settings->set('shib_login', (string) $v);
                          }));
        foreach ($this->settings->getUserFields() as $field_name => $required) {
            $fields[] = $field->text($this->txt($field_name))
                              ->withValue($this->settings->get($field_name))
                              ->withRequired($required)
                              ->withAdditionalTransformation($custom_trafo(function ($v) use ($field_name): void {
                                  $this->settings->set($field_name, (string) $v);
                              }));
            $fields[] = $field->checkbox($this->txt('shib_update'))
                              ->withValue((bool) $this->settings->get('update_' . $field_name))
                              ->withAdditionalTransformation($custom_trafo(function ($v) use ($field_name): void {
                                  $this->settings->set('update_' . $field_name, (string) $v);
                              }));
        }
 
        $user_fields = $field->section(
            $fields,
            ''
        );
 
        // COMPLETE FORM
        $access = $this->rbac_system->checkAccess('write', $this->ref_id);
        if (!$access) {
            $basic_section = $basic_section->withDisabled(true);
            $federation_section = $federation_section->withDisabled(true);
            $user_fields = $user_fields->withDisabled(true);
        }
 
        $this->form = $this->ui->input()->container()->form()->standard(
            $this->ctrl->getFormAction($this->parentObject, $access ? $this->action : $this->show_command),
            [
                $basic_section,
                $federation_section,
                $user_fields
            ]
        );
 
        if (!$access) {
            $this->form = $this->form->withSubmitLabel($this->lng->txt('refresh'));
        }
    }
 
    public function setValuesByPost(): void
    {
        $request = $this->request->withParsedBody(array_map('htmlspecialchars', $this->request->getParsedBody()));
        $this->form = $this->form->withRequest($request);
    }
 
    protected function fillObject(): bool
    {
        return $this->form->getData() !== null;
    }
 
    public function saveObject(): bool
    {
        if (!$this->fillObject()) {
            return false;
        }
        $this->settings->store();
        return true;
    }
 
    protected function getRoles(int $filter = ilRbacReview::FILTER_ALL_GLOBAL): array
    {
        $opt = [];
        foreach ($this->rbac_review->getRolesByFilter($filter) as $role) {
            $opt[$role['obj_id']] = $role['title'] . ' (' . $role['obj_id'] . ')';
        }
 
        return $opt;
    }
}