[SUCS Devel] [Git][sucssite/doorkey][master] Switch doorkey to use the SSO system

[Imran Hussain]

Imran Hussain pushed to branch master at sucssite / doorkey


Commits:
279acefa by Imran Hussain at 2019-11-01T11:40:43Z
Switch doorkey to use the SSO system

- - - - -


1 changed file:

- public/index.php


Changes:

=====================================
public/index.php
=====================================
@@ -1,5 +1,9 @@
 <?php
 
+//ini_set('display_errors', 1);
+//ini_set('display_startup_errors', 1);
+//error_reporting(E_ALL);
+
 $bannedUsers = array("vote","signup","cacti","video");
 
 function ip_in_range($ip, $range) {
@@ -24,23 +28,32 @@ if (!ip_in_range($ipAddr, "137.44.10.128/25")){
 	//exit("nah mate");
 }
 
-if(isset($_REQUEST['username'])) {
-	$username = strtolower($_REQUEST['username']);
+$ssoid = $_COOKIE["sucs_sso_id_v1"];
+
+$sso_error = false;
+$not_logged_in = true;
+
+$curlsso = curl_init();
+curl_setopt($curlsso, CURLOPT_URL, "https://sso.sucs.org/api/v1/?id=${ssoid}");
+curl_setopt($curlsso,CURLOPT_RETURNTRANSFER,TRUE);
+$sso_result = json_decode(curl_exec($curlsso));
+curl_close($curlsso);
+
+if (!$sso_result->apistate === "ok") {
+	$sso_error = true;
 }
-if(isset($_REQUEST['password'])) {
-	$password = $_REQUEST['password'];
+
+if ($sso_result->sucs_username !== null) {
+	$not_logged_in = false;
+	$username = $sso_result->sucs_username;
 }
 
-if ( in_array($username,$bannedUsers) ) {
+if ($not_logged_in === false && in_array($sso_result->sucs_username,$bannedUsers) ) {
 	$banned = true;
 	//die("u r b&");
 }
 
-include_once("../ldap-auth.php");
-
-$isAuthd = ldapAuth($username, $password);
-
-if ($isAuthd == "sucs" && !$outsider && !$banned) {
+if ($_POST["unlock"] === "Unlock!" && !$outsider && !$banned) {
 	include_once("../doorkey.php");
 	//curl door
 	$curl = curl_init();
@@ -77,9 +90,9 @@ if ($isAuthd == "sucs" && !$outsider && !$banned) {
 		<div class="h-100 container justify-content-center text-center">
 			<div class="h-100 row d-flex justify-content-center align-items-center">
 				<div class="col-8">
-					<div class="card mb-4">
+					<div class="card mb-4 mt-4">
 						<?php
-							if ($outsider) {
+							if ($outsider || $sso_error) {
 								print('
 							<div class="card-body">
 								<h4 class="card-title">❌</h4>
@@ -93,7 +106,6 @@ if ($isAuthd == "sucs" && !$outsider && !$banned) {
 								<p>You are banned from the room.</p>
 							</div>
 								');
-
 							} elseif ($success) {
 								print('
 							<div class="card-body">
@@ -101,16 +113,22 @@ if ($isAuthd == "sucs" && !$outsider && !$banned) {
 								<p>Door unlocked!</p>
 							</div>
 								');
-
-							} else {
+							} elseif ($not_logged_in) {
 								print('
 							<div class="card-body">
 								<h4 class="card-title">🔑</h4>
+								<p>Hi stranger click the button below to login</p>
+								<a href=https://sso.sucs.org/?callbackapp=doorkey&callbackpath=/ class="btn btn-primary">Login!</a>
+							</div>
+								');
+							} else {
+								print('
+							<div class="card-body">
+								<h4 class="card-title">🔑🚪</h4>
+								<p>Hi '.${username}.' click the button below to unlock the door!</p>
 								<form method="post">
 									<div class="form-group">
-										<input type="text" name="username" size="15" class="form-control" placeholder="Enter username" /><br />
-										<input type="password" name="password" size="15" class="form-control" placeholder="Enter password" /><br />
-										<input type="submit" class="btn btn-primary" value="Unlock Door!" />
+										<input type="submit" name="unlock" class="btn btn-primary" value="Unlock!" />
 									</div>
 								</form>
 							</div>



View it on GitLab: https://projects.sucs.org/sucssite/doorkey/commit/279acefa108109faece94dffa957f9c98575237a

-- 
View it on GitLab: https://projects.sucs.org/sucssite/doorkey/commit/279acefa108109faece94dffa957f9c98575237a
You're receiving this email because of your account on projects.sucs.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sucs.org/pipermail/devel/attachments/20191101/91f4acfe/attachment-0001.html>