2012-06-03 04:50:34 +04:00
|
|
|
<?php
|
|
|
|
|
|
|
|
/**
|
|
|
|
* ownCloud
|
|
|
|
*
|
|
|
|
* @author Frank Karlitschek
|
|
|
|
* @copyright 2012 Robin Appelman icewind@owncloud.com
|
|
|
|
*
|
|
|
|
* This library is free software; you can redistribute it and/or
|
|
|
|
* modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE
|
|
|
|
* License as published by the Free Software Foundation; either
|
|
|
|
* version 3 of the License, or any later version.
|
|
|
|
*
|
|
|
|
* This library is distributed in the hope that it will be useful,
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
* GNU AFFERO GENERAL PUBLIC LICENSE for more details.
|
|
|
|
*
|
|
|
|
* You should have received a copy of the GNU Affero General Public
|
|
|
|
* License along with this library. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
*
|
|
|
|
*/
|
|
|
|
|
|
|
|
/**
|
|
|
|
* user backend using http auth requests
|
|
|
|
*/
|
2014-12-12 19:25:03 +03:00
|
|
|
class OC_User_HTTP extends OC_User_Backend implements \OCP\IUserBackend {
|
2012-06-03 04:50:34 +04:00
|
|
|
/**
|
|
|
|
* split http://user@host/path into a user and url part
|
2014-05-12 00:51:30 +04:00
|
|
|
* @param string $url
|
2012-06-03 04:50:34 +04:00
|
|
|
* @return array
|
|
|
|
*/
|
2012-09-07 17:22:01 +04:00
|
|
|
private function parseUrl($url) {
|
2012-06-03 04:50:34 +04:00
|
|
|
$parts=parse_url($url);
|
|
|
|
$url=$parts['scheme'].'://'.$parts['host'];
|
2012-09-07 17:22:01 +04:00
|
|
|
if(isset($parts['port'])) {
|
2012-06-03 04:50:34 +04:00
|
|
|
$url.=':'.$parts['port'];
|
|
|
|
}
|
|
|
|
$url.=$parts['path'];
|
2012-09-07 17:22:01 +04:00
|
|
|
if(isset($parts['query'])) {
|
2012-06-03 04:50:34 +04:00
|
|
|
$url.='?'.$parts['query'];
|
|
|
|
}
|
2012-11-02 22:53:02 +04:00
|
|
|
return array($parts['user'], $url);
|
2012-08-29 10:38:33 +04:00
|
|
|
|
2012-06-03 04:50:34 +04:00
|
|
|
}
|
2012-08-29 10:38:33 +04:00
|
|
|
|
2012-06-03 04:50:34 +04:00
|
|
|
/**
|
|
|
|
* check if an url is a valid login
|
2014-05-12 00:51:30 +04:00
|
|
|
* @param string $url
|
2012-06-03 04:50:34 +04:00
|
|
|
* @return boolean
|
|
|
|
*/
|
2012-09-07 17:22:01 +04:00
|
|
|
private function matchUrl($url) {
|
2012-11-04 14:10:46 +04:00
|
|
|
return ! is_null(parse_url($url, PHP_URL_USER));
|
2012-06-03 04:50:34 +04:00
|
|
|
}
|
2012-08-29 10:38:33 +04:00
|
|
|
|
2012-06-03 04:50:34 +04:00
|
|
|
/**
|
2014-05-19 19:50:53 +04:00
|
|
|
* Check if the password is correct
|
2014-05-12 00:51:30 +04:00
|
|
|
* @param string $uid The username
|
|
|
|
* @param string $password The password
|
2014-05-11 21:05:28 +04:00
|
|
|
* @return string
|
2012-06-03 04:50:34 +04:00
|
|
|
*
|
|
|
|
* Check if the password is correct without logging in the user
|
|
|
|
* returns the user id or false
|
|
|
|
*/
|
2012-09-07 17:22:01 +04:00
|
|
|
public function checkPassword($uid, $password) {
|
|
|
|
if(!$this->matchUrl($uid)) {
|
2012-06-03 04:50:34 +04:00
|
|
|
return false;
|
|
|
|
}
|
2012-11-02 22:53:02 +04:00
|
|
|
list($user, $url)=$this->parseUrl($uid);
|
2012-08-29 10:38:33 +04:00
|
|
|
|
2012-06-03 04:50:34 +04:00
|
|
|
$ch = curl_init();
|
|
|
|
curl_setopt($ch, CURLOPT_URL, $url);
|
|
|
|
curl_setopt($ch, CURLOPT_USERPWD, $user.':'.$password);
|
|
|
|
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
|
2014-09-11 21:21:56 +04:00
|
|
|
curl_setopt($ch, CURLOPT_PROTOCOLS, CURLPROTO_HTTP | CURLPROTO_HTTPS);
|
|
|
|
curl_setopt($ch, CURLOPT_REDIR_PROTOCOLS, CURLPROTO_HTTP | CURLPROTO_HTTPS);
|
2012-06-03 04:50:34 +04:00
|
|
|
|
|
|
|
curl_exec($ch);
|
|
|
|
|
|
|
|
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
|
2012-08-29 10:38:33 +04:00
|
|
|
|
2012-06-03 04:50:34 +04:00
|
|
|
curl_close($ch);
|
|
|
|
|
2013-09-24 15:51:33 +04:00
|
|
|
if($status === 200) {
|
2013-09-16 16:15:35 +04:00
|
|
|
return $uid;
|
|
|
|
}
|
|
|
|
|
|
|
|
return false;
|
2012-06-03 04:50:34 +04:00
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
2014-05-19 19:50:53 +04:00
|
|
|
* check if a user exists
|
2012-06-03 04:50:34 +04:00
|
|
|
* @param string $uid the username
|
|
|
|
* @return boolean
|
|
|
|
*/
|
2012-09-07 17:22:01 +04:00
|
|
|
public function userExists($uid) {
|
2012-06-03 04:50:34 +04:00
|
|
|
return $this->matchUrl($uid);
|
|
|
|
}
|
2012-08-26 18:24:25 +04:00
|
|
|
|
|
|
|
/**
|
2014-05-19 19:50:53 +04:00
|
|
|
* get the user's home directory
|
2012-08-26 18:24:25 +04:00
|
|
|
* @param string $uid the username
|
2014-02-06 19:30:58 +04:00
|
|
|
* @return string|false
|
2012-08-26 18:24:25 +04:00
|
|
|
*/
|
2012-09-07 17:22:01 +04:00
|
|
|
public function getHome($uid) {
|
|
|
|
if($this->userExists($uid)) {
|
2012-08-26 23:57:05 +04:00
|
|
|
return OC_Config::getValue( "datadirectory", OC::$SERVERROOT."/data" ) . '/' . $uid;
|
2012-08-26 18:24:25 +04:00
|
|
|
}else{
|
|
|
|
return false;
|
|
|
|
}
|
|
|
|
}
|
2014-12-12 19:25:03 +03:00
|
|
|
|
|
|
|
/**
|
|
|
|
* Backend name to be shown in user management
|
|
|
|
* @return string the name of the backend to be shown
|
|
|
|
*/
|
|
|
|
public function getBackendName(){
|
|
|
|
return 'HTTP';
|
|
|
|
}
|
2013-08-18 13:02:08 +04:00
|
|
|
}
|