Link to the X.org production environement.

[wikifarm.git] / install / cookbook / xorgauth.php

<?php

$AuthFunction = 'XorgAuth';
$HandleActions['attr'] = 'XorgAuthHandleAttr';
$HandleActions['postattr'] = 'XorgAuthHandlePostAttr';
$HandleActions['connect'] = 'XorgAuthConnectPlatal';

if (isset($_POST['action']) && isset($_GET['action'])) {
    $action = $_REQUEST['action'] = $_GET['action'] = $_POST['action'];
}

Markup('grpattributes','inline','/\\(:groupattributes:\\)/e',"Keep(XorgAuthGroupAttributes())");

require_once("$FarmD/cookbook/autocreate.php");
AutoCreatePage('$Group.GroupAttributes', '(:groupattributes:)');

$HTMLHeaderFmt['xorg'] = '<script type="text/javascript" src="http://www.polytechnique.org/javascript/xorg.js"></script>';
$HTMLHeaderFmt['xorgcustomauth'] = '<script type="text/javascript">
  function AddCustomAuth(f){
    if (f.value == \'...\')
    {
      var newval =prompt(\'Sépare les différents autorisations par des espaces\\n\\tx,membre ou admin\\n\\tprenom.nom.promo d\\\'une personne\\n\\tle numéro d\\\'une promo\\nPar exemple pour autoriser les membres et Pascal Corpet :\\n\\tmembre pascal.corpet.2001\');
      f.value = newval;
      if (f.value != newval && newval)
      {
        var op = document.createElement(\'option\');
        op.appendChild(document.createTextNode(newval));
        f.insertBefore(op,f.childNodes[f.childNodes.length-1]);
        f.value = newval;
      }
    }
  }
  </script>';

Markup('[[~|','<[[~','/\\[\\[~(.*?)\|(.*?)\\]\\]/e',"Keep('<a href=\"http://www.polytechnique.org/profile/$1\" class=\"popup2\">$2</a>')");

Markup('xorgpage','inline','/\\(:xorgpage\\s*(.*?):\\)/e', "Keep('<iframe style=\"width:100%;height:400px;border:none\" src=\"http://www.polytechnique.org/$1\"></iframe>')");
Markup('xnetpage','inline','/\\(:xnetpage\\s*(.*?):\\)/e', "XnetPage('$1')");
function XnetPage($page) {
  global $XnetWikiGroup;
  if (!$XnetWikiGroup) return;
  return Keep('<iframe style="width:100%;height:400px;border:none" src="http://www.polytechnique.net/'.($_SESSION['xorgauth']?'login/':'').$XnetWikiGroup.'/'.$page.'"></iframe>');
}

// Récupère les droits au niveau du dossier (Group PmWiki)
function XorgAuthGetGroupAuth($pagename,$since) {
	global $GroupPasswords;
 	if (!isset($GroupPasswords)) {
 		$GroupPasswords = array();
 	}
 	$group = substr($pagename, 0, strpos($pagename, '.'));
 	if (!isset($GroupPasswords[$group])) {
 		$GroupPasswords[$group] = ReadPage($group.'.GroupAttributes', $since);
	}
	return $GroupPasswords[$group];
}

// essaie de se connecter via xorg
function XorgAuthConnectPlatal() {
  $privkey = '6e9c9fa9bac23541fe67697c4eff5be6';
	global $XnetWikiGroup;
	$returl = 'http://'.$_SERVER['SERVER_NAME'].str_replace('action=connect', '', $_SERVER['REQUEST_URI']);
	if (isset($_REQUEST['oldaction'])) {
		$returl .= '&action='.$_REQUEST['oldaction'];
	}
	@session_destroy();
	session_start();
 	$challenge = md5(rand());
	$_SESSION['challenge'] = $challenge; 
	$_SESSION['authsite'] = $XnetWikiGroup;
 	$url = "https://www.polytechnique.org/auth-groupex.php";
 	$url .= "?session=".session_id();
 	$url .= "&challenge=".$challenge;
 	$url .= "&pass=".md5($challenge.$privkey);
 	$returl .= "&challenge=".$challenge;
 	$url .= "&url=".urlencode($returl);
 	if ($XnetWikiGroup) {
 		$url .= "&group=".$XnetWikiGroup;
	}
 	header('Location: '.$url);
	exit();
}


 // comes back from auth
 @session_start();
 if (isset($_GET['auth']) && !$_SESSION['xorgauth'] && $_SESSION['challenge']) {
	$tohash = '1'.$_SESSION['challenge'].'6e9c9fa9bac23541fe67697c4eff5be6';
	$fields = explode(',','forlife,nom,prenom,promo,grpauth,perms');
	foreach ($fields as $f) if (isset($_GET[$f])) {
		$tohash .= $_GET[$f];
	}
	$tohash .= '1';
	if ($_GET['auth'] == md5($tohash)) {
		$_SESSION['xorgauth'] = 1;
		foreach ($fields as $f) if (isset($_GET[$f])) {
			$_SESSION[$f] = $_GET[$f];
		}
	} else {
		$_SESSION['xorgauth'] = 0;
	}
 }
 if (isset($_SESSION['forlife']) && $_SESSION['forlife']) {
  $AuthId = $_SESSION['forlife'];
  $Author = $_SESSION['forlife'].' | '.$_SESSION['prenom'].' '.$_SESSION['nom'];
 }
$Conditions['connected'] = 'isset($_SESSION["xorgauth"])';

function XorgAuthTestPassword($password) {
  if (!$password) {
    return true;
  }
  if ($_SESSION['perms'] == 'admin') {
	// administrateur du site d'authentification et donc super user ici aussi
	return true;
  }
  $parts = explode(' ',$password);
  foreach ($parts as $pass) {
  	if ($pass == 'all' || $pass == 'public') {
  	 return true;
    }
    if ($pass == 'x' && $_SESSION['xorgauth']) {
    	return true;
    }
    if ($_SESSION['grpauth'] && $pass == $_SESSION['grpauth']) {
    	return true;
    }
    if ($_SESSION['forlife'] && $pass == $_SESSION['forlife']) {
    	return true;
    }
    if ($_SESSION['promo'] && $pass == $_SESSION['promo']) {
    	return true;
    }
  }
  return false;
}

// test if user has admin rights on this wiki field
function XorgAuthIsSiteAdmin() {
  global $DefaultPasswords;
  return XorgAuthTestPassword($DefaultPasswords['admin']);
}

// fonction d'authentification : appellée avant tout accès à une page
function XorgAuth($pagename, $level, $authprompt, $since) {
 global $XnetWikiGroup;
  // user was authenticaed to another site, but the site has changed
  if (isset($_SESSION['authsite']) && $XnetWikiGroup != $_SESSION['authsite']) {
    XorgAuthConnectPlatal();
   	return false;
  }
 $group = substr($pagename, 0, strpos($pagename, '.'));
 $page = ReadPage($pagename, $since);
 if (!$page) { return false; }
 if (XorgAuthIsSiteAdmin()) { return $page; }
 global $AuthCascade, $DefaultPasswords, $GroupPasswords;
 $password = "";
 do
 {
 	if (isset($page["passwd".$level])) {
	 	$password = $page["passwd".$level];
 	}
 	if (!$password) {
 		$gpAuth = XorgAuthGetGroupAuth($pagename,$since);
 		if (isset($gpAuth["passwd".$level])) {
 			$password = $gpAuth["passwd".$level];
 		}
 	}
 	if (!$password) {
 		if (isset($DefaultPasswords[$level])) {
 			$password = $DefaultPasswords[$level];
 		}
 	}
 } while (!$password && isset($AuthCascade[$level]) && $level = $AuthCascade[$level]);
 if (XorgAuthTestPassword($password)) {
 	return $page;
 }
 if (!$authprompt) {
 	return false;
}
 global $AuthPromptFmt, $PageStartFmt, $PageEndFmt;
  $postvars = '';
  foreach($_POST as $k=>$v) {
    if ($k == 'authpw' || $k == 'authid') continue;
    $v = str_replace('$', '&#036;', 
             htmlspecialchars(stripmagic($v), ENT_COMPAT));
    $postvars .= "<input type='hidden' name='$k' value=\"$v\" />\n";
  }
  $FmtV['action'] = $_REQUEST['action'];
  SDV($AuthPromptFmt, array(&$PageStartFmt, "page:Site.AuthForm", &$PageEndFmt));
 PrintFmt($pagename,$AuthPromptFmt);
 exit;
}
$XorgAuthLevels = array('read' => 'lecture','edit' => 'modification','attr' => 'administration');

function XorgAuthUsers() {
	global $XnetWikiGroup;
	if ($XnetWikiGroup) {
		return array('public' => 'tout le monde','x' => 'les X', 'membre' => 'membres du groupe', 'admin' => 'admins du groupe');
	} else {
		return array('public' => 'tout le monde','x' => 'les X', 'admin' => 'admins X.org');
	}
}

function XorgAuthPermissions($pagename) {
	global $XnetWikiGroup,$DefaultPasswords,$XorgAuthLevels;
	$XorgAuthUsers = XorgAuthUsers();
	$group = substr($pagename, 0, strpos($pagename, '.'));
	if ($pagename != $group.'.GroupAttributes')
		$groupAttr = XorgAuthGetGroupAuth($pagename, 0); 
	$page = ReadPage($pagename, 0);
	$attrshtml = '';
	foreach ($XorgAuthLevels as $level => $action) {
		$html = $action.' : <select name="passwd'.$level.'" onchange="AddCustomAuth(this)">';
		if (isset($groupAttr['passwd'.$level]) && $groupAttr['passwd'.$level]) {
			$text = 'comme le dossier ('.$XorgAuthUsers[$groupAttr['passwd'.$level]].')';
		} else {
			$text = 'comme le site ('.$XorgAuthUsers[$DefaultPasswords[$level]].')';
		}
		$htmloptions = '<option value="">'.$text.'</option>';
		foreach ($XorgAuthUsers as $passwd => $user) {
			$htmloptions .= '<option value="'.$passwd.'">'.$user.'</option>';
		}
		$htmloptionsselected = str_replace(' value="'.$page['passwd'.$level].'"', ' value="'.$page['passwd'.$level].'" selected="selected"', $htmloptions);
		$html .= $htmloptionsselected;
		if ($htmloptionsselected == $htmloptions) {
		  $html .= '<option value="'.$page['passwd'.$level].'" selected="selected">'.$page['passwd'.$level].'</option>';
    }
    $html .= '<option value="...">...</option>';
		$html .= '</select> ';
		if ($attrshtml) {
			$attrshtml .= ' - ';
		}

		$attrshtml .= $html;
	}
	return '<form action="?action=postattr" method="post">'.$attrshtml.'<input type="submit" value="ok"/></form>';
}

function XorgAuthHandleAttr($pagename, $auth = 'attr') {
  $page = RetrieveAuthPage($pagename, $auth, true);
  global $PageAttrFmt, $PageStartFmt, $PageEndFmt;
  SDV($PageAttrFmt,"<div class='wikiattr'>
    <h2 class='wikiaction'>$[{\$FullName} Attributes]</h2>
    <p>".XorgAuthPermissions($pagename)."</p></div>");
  SDV($HandleAttrFmt,array(&$PageStartFmt,&$PageAttrFmt,&$PageEndFmt));
  PrintFmt($pagename,$HandleAttrFmt);
}

function XorgAuthHandlePostAttr($pagename, $auth = 'attr') {
  global $XorgAuthLevels, $HandleActions;
  Lock(2);
  $page = RetrieveAuthPage($pagename, $auth, true);
  if (!$page) { Abort("?unable to read $pagename"); }
  foreach($XorgAuthLevels as $attr=>$p) {
    $v = stripmagic(@$_REQUEST['passwd'.$attr]);
    if ($v=='') unset($page['passwd'.$attr]);
    else if ($v != '...') $page['passwd'.$attr] = $v;
  }
  WritePage($pagename,$page);
  Lock(0);
  Redirect($pagename);
}

function XorgAuthGroupAttributes() {
	global $XnetWikiGroup,$DefaultPasswords,$XorgAuthLevels;
	$XorgAuthUsers = XorgAuthUsers();
  global $pagename, $WikiDir;
  if (substr($pagename, strpos($pagename, '.') + 1) != 'GroupAttributes') {
    return "";
  }
  if (!XorgAuth($pagename, 'attr', true,0)) {
    return "";
  }
  if (isset($_REQUEST['page']) && isset($_REQUEST['user']) && isset($_REQUEST['attr'])) {
    Lock(2);
    $page = RetrieveAuthPage(stripmagic(@$_REQUEST['page']), 'attr', true);
    if ($page && isset($XorgAuthLevels[stripmagic(@$_REQUEST['attr'])]) && (isset($XorgAuthUsers[stripmagic(@$_REQUEST['user'])]) || !$_REQUEST['user'])) {
      $page['passwd'.stripmagic(@$_REQUEST['attr'])] = stripmagic(@$_REQUEST['user']);
      if ($_REQUEST['user'] == "") {
        unset($page['passwd'.stripmagic(@$_REQUEST['attr'])]);
      }
      WritePage(stripmagic(@$_REQUEST['page']),$page);
    }
    Lock(0);
  }
  $html = '<table>';
  $html .= '<tr><td></td>';
	foreach ($XorgAuthLevels as $level => $action) {
    $html .= '<th>'.$action.'</th>';
  }
  $html .= '</tr>';
  $group = substr($pagename, 0,  strpos($pagename, '.'));
  $pages = $WikiDir->ls($group.'.*');
	$groupAttr = XorgAuthGetGroupAuth($pagename, 0); 
  foreach($pages as $p) if ($p != $pagename) {
  	$html .= '<tr>';
  	$page = ReadPage($p, 0);
  	$html .= '<th>'.substr($p,strpos($p,'.')+1).'</th>';
  	foreach ($XorgAuthLevels as $level => $action) {
  		$html .= '<td><select name="passwd'.$level.'" onchange="AddCustomAuth(this);document.location=\'?page='.$p.'&attr='.$level.'&user=\'+this.value">';
  		if (isset($groupAttr['passwd'.$level]) && $groupAttr['passwd'.$level]) {
  		  $textedossier = $groupAttr['passwd'.$level];
  		  if (isset($XorgAuthUsers[$textedossier])) {
  		    $textedossier = $XorgAuthUsers[$textedossier];
        }
  			$text = 'comme le dossier ('.$textedossier.')';
  		} else {
  			$text = 'comme le site ('.$XorgAuthUsers[$DefaultPasswords[$level]].')';
  		}
  		$htmloptions = '<option value="">'.$text.'</option>';
  		foreach ($XorgAuthUsers as $passwd => $user) {
  			$htmloptions .= '<option value="'.$passwd.'">'.$user.'</option>';
  		}
  		$htmloptionsselected = str_replace(' value="'.$page['passwd'.$level].'"', ' value="'.$page['passwd'.$level].'" selected="selected"', $htmloptions);
  		$html .= $htmloptionsselected;
  		if ($htmloptionsselected == $htmloptions) {
  		  $html .= '<option value="'.$page['passwd'.$level].'" selected="selected">'.$page['passwd'.$level].'</option>';
      }
  		$html .= '<option value="...">...</option></select></td>';
  	}
  	$html .= '</tr>';
  }
  $html .= '</table>';
  return '<h2>Edition des droits du dossier</h2>'.XorgAuthPermissions($pagename).'<h2>Edition des droits des pages du dossier</h2>'.$html;
}
?>