2015-08-07 17:04:27 +03:00
|
|
|
<?php
|
|
|
|
/**
|
2016-07-21 17:49:16 +03:00
|
|
|
* @copyright Copyright (c) 2016, ownCloud, Inc.
|
|
|
|
*
|
|
|
|
* @author Joas Schilling <coding@schilljs.com>
|
2016-07-21 19:13:36 +03:00
|
|
|
* @author Robin Appelman <robin@icewind.nl>
|
2016-01-12 17:02:16 +03:00
|
|
|
* @author Thomas Müller <thomas.mueller@tmit.eu>
|
|
|
|
*
|
|
|
|
* @license AGPL-3.0
|
|
|
|
*
|
|
|
|
* This code is free software: you can redistribute it and/or modify
|
|
|
|
* it under the terms of the GNU Affero General Public License, version 3,
|
|
|
|
* as published by the Free Software Foundation.
|
|
|
|
*
|
|
|
|
* This program is distributed in the hope that it will be useful,
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
* GNU Affero General Public License for more details.
|
|
|
|
*
|
|
|
|
* You should have received a copy of the GNU Affero General Public License, version 3,
|
2019-12-03 21:57:53 +03:00
|
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>
|
2016-01-12 17:02:16 +03:00
|
|
|
*
|
2015-08-07 17:04:27 +03:00
|
|
|
*/
|
|
|
|
|
2016-05-25 17:04:15 +03:00
|
|
|
namespace OCA\DAV\Tests\unit\Connector\Sabre\RequestTest;
|
2015-08-07 17:04:27 +03:00
|
|
|
|
|
|
|
use Sabre\DAV\Auth\Backend\BackendInterface;
|
2015-11-20 15:35:23 +03:00
|
|
|
use Sabre\HTTP\RequestInterface;
|
|
|
|
use Sabre\HTTP\ResponseInterface;
|
2015-08-07 17:04:27 +03:00
|
|
|
|
|
|
|
class Auth implements BackendInterface {
|
|
|
|
/**
|
|
|
|
* @var string
|
|
|
|
*/
|
|
|
|
private $user;
|
|
|
|
|
|
|
|
/**
|
|
|
|
* @var string
|
|
|
|
*/
|
|
|
|
private $password;
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Auth constructor.
|
|
|
|
*
|
|
|
|
* @param string $user
|
|
|
|
* @param string $password
|
|
|
|
*/
|
|
|
|
public function __construct($user, $password) {
|
|
|
|
$this->user = $user;
|
|
|
|
$this->password = $password;
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
2015-11-20 15:35:23 +03:00
|
|
|
* When this method is called, the backend must check if authentication was
|
|
|
|
* successful.
|
|
|
|
*
|
|
|
|
* The returned value must be one of the following
|
|
|
|
*
|
|
|
|
* [true, "principals/username"]
|
|
|
|
* [false, "reason for failure"]
|
|
|
|
*
|
|
|
|
* If authentication was successful, it's expected that the authentication
|
|
|
|
* backend returns a so-called principal url.
|
|
|
|
*
|
|
|
|
* Examples of a principal url:
|
2015-08-07 17:04:27 +03:00
|
|
|
*
|
2015-11-20 15:35:23 +03:00
|
|
|
* principals/admin
|
|
|
|
* principals/user1
|
|
|
|
* principals/users/joe
|
|
|
|
* principals/uid/123457
|
2015-08-07 17:04:27 +03:00
|
|
|
*
|
2015-11-20 15:35:23 +03:00
|
|
|
* If you don't use WebDAV ACL (RFC3744) we recommend that you simply
|
|
|
|
* return a string such as:
|
|
|
|
*
|
|
|
|
* principals/users/[username]
|
|
|
|
*
|
|
|
|
* @param RequestInterface $request
|
|
|
|
* @param ResponseInterface $response
|
|
|
|
* @return array
|
2015-08-07 17:04:27 +03:00
|
|
|
*/
|
2015-11-20 15:35:23 +03:00
|
|
|
function check(RequestInterface $request, ResponseInterface $response) {
|
2015-08-07 17:04:27 +03:00
|
|
|
$userSession = \OC::$server->getUserSession();
|
|
|
|
$result = $userSession->login($this->user, $this->password);
|
|
|
|
if ($result) {
|
|
|
|
//we need to pass the user name, which may differ from login name
|
|
|
|
$user = $userSession->getUser()->getUID();
|
|
|
|
\OC_Util::setupFS($user);
|
|
|
|
//trigger creation of user home and /files folder
|
|
|
|
\OC::$server->getUserFolder($user);
|
2015-11-20 15:35:23 +03:00
|
|
|
return [true, "principals/$user"];
|
2015-08-07 17:04:27 +03:00
|
|
|
}
|
2015-11-20 15:35:23 +03:00
|
|
|
return [false, "login failed"];
|
2015-08-07 17:04:27 +03:00
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
2015-11-20 15:35:23 +03:00
|
|
|
* This method is called when a user could not be authenticated, and
|
|
|
|
* authentication was required for the current request.
|
|
|
|
*
|
|
|
|
* This gives you the opportunity to set authentication headers. The 401
|
|
|
|
* status code will already be set.
|
|
|
|
*
|
|
|
|
* In this case of Basic Auth, this would for example mean that the
|
|
|
|
* following header needs to be set:
|
|
|
|
*
|
|
|
|
* $response->addHeader('WWW-Authenticate', 'Basic realm=SabreDAV');
|
2015-08-07 17:04:27 +03:00
|
|
|
*
|
2015-11-20 15:35:23 +03:00
|
|
|
* Keep in mind that in the case of multiple authentication backends, other
|
|
|
|
* WWW-Authenticate headers may already have been set, and you'll want to
|
|
|
|
* append your own WWW-Authenticate header instead of overwriting the
|
|
|
|
* existing one.
|
2015-08-07 17:04:27 +03:00
|
|
|
*
|
2015-11-20 15:35:23 +03:00
|
|
|
* @param RequestInterface $request
|
|
|
|
* @param ResponseInterface $response
|
|
|
|
* @return void
|
2015-08-07 17:04:27 +03:00
|
|
|
*/
|
2015-11-20 15:35:23 +03:00
|
|
|
function challenge(RequestInterface $request, ResponseInterface $response) {
|
|
|
|
// TODO: Implement challenge() method.
|
2015-08-07 17:04:27 +03:00
|
|
|
}
|
|
|
|
}
|