3 class xorgAuth
extends dcAuth
{
4 public $xorg_infos = array('forlife' => null
,
9 static public function behavior_coreBlogConstruct(&$blog) {
11 $core->auth
->sudo(array($core->auth
, 'updateUserPerms'), $blog);
15 public function __construct(&$core) {
16 parent
::__construct($core);
17 $core->addBehavior('coreBlogConstruct', array('xorgAuth', 'behavior_coreBlogConstruct'));
20 public function buildFromSession() {
22 @header
('Last-Modified:');
23 if (!isset($core) ||
!isset($core->session
)) {
27 $core->session
->start();
29 $user = @$_SESSION['auth-xorg'];
30 if ($user && is_null($this->xorg_infos
['forlife'])) {
31 foreach ($this->xorg_infos
as $key => $val) {
32 $this->xorg_infos
[$key] = $_SESSION['auth-xorg-' . $key];
34 $this->user_id
= $user;
35 parent
::checkUser($this->user_id
);
36 $core->getUserBlogs();
40 public function createUser() {
42 if (!$core->userExists($_SESSION['auth-xorg'])) {
43 $cur = new cursor($this->con
, 'dc_user');
44 $cur->user_id
= $_SESSION['auth-xorg'];
45 $cur->user_pwd
= md5(rand());
46 $cur->user_lang
= 'fr';
47 $cur->user_name
= $_SESSION['auth-xorg-nom'];
48 $cur->user_firstname
= $_SESSION['auth-xorg-prenom'];
49 $cur->user_displayname
= $cur->user_firstname
. ' ' . $cur->user_name
;
50 $cur->user_email
= $_SESSION['auth-xorg'] . '@polytechnique.org';
51 $cur->user_options
= $core->userDefaults();
52 $cur->user_options
['post_xorg_perms'] = 'public';
53 $cur->user_default_blog
= 'default'; // FIXME
58 public function updateUserPerms(&$blog) {
60 $this->buildFromSession();
61 if (!isset($_SESSION['auth-xorg'])) {
64 $type = $blog->settings
->get('xorg_blog_type');
65 $owner = $blog->settings
->get('xorg_blog_owner');
66 $level = $this->xorg_infos
['grpauth'];
67 if (($type == 'group-admin' ||
$type == 'group-member') && $level == 'admin') {
68 if ($owner != $_SESSION['xorg-group']) {
71 $perms = array('usage' => true
,
72 'contentadmin' => true
,
74 } else if ($type == 'group-member' && $level == 'membre') {
75 if ($owner != $_SESSION['xorg-group']) {
78 $perms = array('usage' => true
);
79 } else if ($type == 'user' && $owner == $this->xorg_infos
['forlife']) {
80 $perms = array('usage' => true
,
81 'contentadmin' => true
,
87 echo "Setting perms : " . $_SESSION['auth-xorg'] . ' ' . $blog->id . '<br/>';
89 $core->setUserBlogPermissions($_SESSION['auth-xorg'],
97 public function callXorg($path = null
) {
99 $path = $_SERVER['REQUEST_URI'];
101 $this->buildFromSession();
102 if (@$_SESSION['auth-xorg']) {
107 $core->session
->start();
109 $_SESSION["auth-x-challenge"] = md5(uniqid(rand(), 1));
110 $url = "https://www.polytechnique.org/auth-groupex/utf8";
111 $url .= "?session=" . session_id();
112 $url .= "&challenge=" . $_SESSION["auth-x-challenge"];
113 $url .= "&pass=" . md5($_SESSION["auth-x-challenge"] . XORG_AUTH_KEY
);
114 $type = $core->blog
->settings
->get('xorg_blog_type');
115 if ($type == 'group-member' ||
$type == 'group-admin') {
116 $_SESSION['xorg-group'] = $core->blog
->settings
->get('xorg_blog_owner');
117 $url .= '&group=' . $core->blog
->settings
->get('xorg_blog_owner');
119 unset($_SESSION['xorg-group']);
121 $url .= "&url=" . urlencode($core->blog
->url
. "auth/XorgReturn?path=" . $path);
122 session_write_close();
123 header("Location: $url");
127 public function returnXorg() {
128 if (!isset($_GET['auth'])) {
133 $_COOKIE[DC_SESSION_NAME
] = $_GET['PHPSESSID'];
134 unset($_GET['PHPSESSID']);
136 $core->session
->start();
138 foreach($this->xorg_infos
as $key => $val) {
139 if(!isset($_GET[$key])) {
142 $_SESSION['auth-xorg-' . $key] = $_GET[$key];
143 $params .= $_GET[$key];
145 if (md5('1' . $_SESSION['auth-x-challenge'] . XORG_AUTH_KEY
. $params . '1') == $_GET['auth']) {
146 unset($_GET['auth']);
147 $_SESSION['sess_user_id'] = $_SESSION['auth-xorg'] = $_GET['forlife'];
148 $_SESSION['sess_browser_uid'] = http
::browserUID(DC_MASTER_KEY
);
149 $_SESSION['sess_blog_id'] = 'default';
150 $this->sudo(array($this, 'createUser'));
151 $path = $_GET['path'];
152 header("Location: http://murphy.m4x.org" . $_GET['path']);
155 unset($_SESSION['auth-xorg']);
156 unset($_SESSION['sess_user_id']);
157 unset($_GET['auth']);
162 public function killSession() {
165 $core->session
->start();
167 $core->session
->destroy();
168 header('Location: ' . $core->blog
->url
);
173 /** Dotclear dcAuth API */
175 public function checkUser($user_id, $pwd = null
, $user_key = null
) {
176 return $this->callXorg();
179 public function check($permissions, $blog_id) {
180 $this->buildFromSession();
181 return $this->isSuperAdmin() || parent
::check($permissions, $blog_id);
184 public function checkPassword($pwd) {
185 $this->buildFromSession();
186 return !empty($this->user_id
);
189 public function allowPassChange() {
193 public function userID() {
194 $this->buildFromSession();
195 return parent
::userID();
198 public function getPermissions() {
199 $this->buildFromSession();
200 return parent
::getPermissions();
203 public function getInfo($n) {
204 $this->buildFromSession();
205 if ($n == 'xorg_group_member') {
207 if ($core->blog
->settings('xorg_blog_owner') != $_SESSION['xorg-group']) {
210 $perm = $this->xorg_infos
['grpauth'];
211 return $this->isSuperAdmin() ||
$perm == 'admin' ||
$perm == 'membre';
213 return parent
::getInfo($n);
216 public function getOption($n) {
217 $this->buildFromSession();
218 return parent
::getOption($n);
221 public function isSuperAdmin() {
222 // var_dump($this->xorg_infos);
223 return parent
::isSuperAdmin() ||
$this->xorg_infos
['perms'] == 'admin';
226 public function getOptions() {
227 $this->buildFromSession();
228 return parent
::getOptions();
231 public function authForm() {
233 $path = "http://murphy.m4x.org/~x2003bruneau/dotclear/";
235 '<p><a href="' . $path . 'auth/Xorg?path=/~x2003bruneau/dotclear/admin/index.php">Via Polytechnique.org</a></p>' .
237 '<p>'.__('You must accept cookies in order to use the private area.').'</p>';