version 1.25.2.5.2.8, 2023/01/23 00:59:22
|
version 1.25.2.5.2.10, 2024/02/10 14:55:02
|
Line 33 use LONCAPA qw(:DEFAULT :match);
|
Line 33 use LONCAPA qw(:DEFAULT :match);
|
use Apache::Constants qw(:common :http :methods :remotehost); |
use Apache::Constants qw(:common :http :methods :remotehost); |
use Apache::lonauth; |
use Apache::lonauth; |
use Apache::lonnet; |
use Apache::lonnet; |
|
use Apache::loncommon; |
use Apache::lonlocal; |
use Apache::lonlocal; |
use Apache::lonlogin(); |
use Apache::lonlogin(); |
|
use Apache::ltiauth; |
|
use Apache::switchserver; |
use CGI::Cookie; |
use CGI::Cookie; |
|
|
sub goto_login { |
sub goto_login { |
my ($r,$domain,$data) = @_; |
my ($r,$domain,$data) = @_; |
my $write_to_opener; |
my $write_to_opener; |
if (ref($data) eq 'HASH') { |
if (ref($data) eq 'HASH') { |
$write_to_opener = $data->{'lcssowin'}; |
if ($data->{'lti.login'}) { |
|
&Apache::ltiauth::invalid_request($r,'22'); |
|
} else { |
|
$write_to_opener = $data->{'lcssowin'}; |
|
} |
} |
} |
&Apache::loncommon::content_type($r,'text/html'); |
&Apache::loncommon::content_type($r,'text/html'); |
$r->send_http_header; |
$r->send_http_header; |
Line 72 sub sso_check {
|
Line 79 sub sso_check {
|
return \%extra_env; |
return \%extra_env; |
} |
} |
|
|
|
sub lti_check { |
|
my ($data) = @_; |
|
my %lti_env; |
|
if (ref($data) eq 'HASH') { |
|
if ($data->{'lti.login'}) { |
|
$lti_env{'request.lti.login'} = $data->{'lti.login'}; |
|
if ($data->{'lti.reqcrs'}) { |
|
$lti_env{'request.lti.reqcrs'} = $data->{'lti.reqcrs'}; |
|
} |
|
if ($data->{'lti.reqrole'}) { |
|
$lti_env{'request.lti.reqrole'} = $data->{'lti.reqrole'}; |
|
} |
|
if ($data->{'lti.selfenrollrole'}) { |
|
$lti_env{'request.lti.selfenrollrole'} = $data->{'lti.selfenrollrole'}; |
|
} |
|
if ($data->{'lti.uri'}) { |
|
$lti_env{'request.lti.uri'} = $data->{'lti.uri'}; |
|
} |
|
if ($data->{'lti.target'}) { |
|
$lti_env{'request.lti.target'} = $data->{'lti.target'}; |
|
} |
|
if ($data->{'lti.sourcecrs'}) { |
|
$lti_env{'request.lti.sourcecrs'} = $data->{'lti.sourcecrs'}; |
|
} |
|
} |
|
if ($data->{'lti.passbackid'}) { |
|
$lti_env{'request.lti.passbackid'} = $data->{'lti.passbackid'}; |
|
} |
|
if ($data->{'lti.passbackurl'}) { |
|
$lti_env{'request.lti.passbackurl'} = $data->{'lti.passbackurl'}; |
|
} |
|
if ($data->{'lti.rosterid'}) { |
|
$lti_env{'request.lti.rosterid'} = $data->{'lti.rosterid'}; |
|
} |
|
if ($data->{'lti.rosterurl'}) { |
|
$lti_env{'request.lti.rosterurl'} = $data->{'lti.rosterurl'}; |
|
} |
|
} |
|
return \%lti_env; |
|
} |
|
|
sub ip_changed { |
sub ip_changed { |
my ($r,$udom,$camefrom,$dataref) = @_; |
my ($r,$udom,$camefrom,$dataref) = @_; |
&Apache::loncommon::content_type($r,'text/html'); |
&Apache::loncommon::content_type($r,'text/html'); |
Line 197 sub ip_changed {
|
Line 245 sub ip_changed {
|
'username' => $dataref->{'username'}, |
'username' => $dataref->{'username'}, |
'sessionserver' => $lonhost, |
'sessionserver' => $lonhost, |
); |
); |
my @names = ('origurl','symb','role','linkprotuser','linkprotexit','linkprot','linkkey'); |
my @names = ('origurl','symb','role','linkprotuser','linkprotexit','linkprot','linkkey','linkprotpbid','linkprotpburl'); |
foreach my $name (@names) { |
foreach my $name (@names) { |
if ($dataref->{$name} ne '') { |
if ($dataref->{$name} ne '') { |
$info{$name} = $dataref->{$name}; |
$info{$name} = $dataref->{$name}; |
Line 345 sub handler {
|
Line 393 sub handler {
|
return &ip_changed($r,$data{'domain'},$data{'server'},\%data); |
return &ip_changed($r,$data{'domain'},$data{'server'},\%data); |
} |
} |
|
|
&Apache::lonnet::logthis("Allowing access for $data{'username'}:$data{'domain'} to $data{'role'}"); |
|
my $home=&Apache::lonnet::homeserver($data{'username'},$data{'domain'}); |
my $home=&Apache::lonnet::homeserver($data{'username'},$data{'domain'}); |
my $udom; |
my $udom; |
if (&Apache::lonnet::domain($data{'domain'})) { |
if (&Apache::lonnet::domain($data{'domain'})) { |
Line 353 sub handler {
|
Line 400 sub handler {
|
} |
} |
if ($home =~ /(con_lost|no_such_host)/) { return &goto_login($r,$udom,\%data); } |
if ($home =~ /(con_lost|no_such_host)/) { return &goto_login($r,$udom,\%data); } |
|
|
my $extra_env = &sso_check(\%data); |
my $rolemsg; |
|
if ($data{'role'}) { |
|
$rolemsg = "role: $data{'role'}"; |
|
} else { |
|
$rolemsg = '(no role)'; |
|
} |
|
|
|
&Apache::lonnet::logthis("Allowing access for $data{'username'}:$data{'domain'} $rolemsg"); |
|
|
|
my $sso_env = &sso_check(\%data); |
|
my $lti_env = <i_check(\%data); |
|
|
|
my $extra_env; |
|
if ((ref($sso_env) eq 'HASH') && (keys(%{$sso_env}))) { |
|
$extra_env = $sso_env; |
|
} elsif ((ref($lti_env) eq 'HASH') && (keys(%{$lti_env}))) { |
|
$extra_env = $lti_env; |
|
} |
|
|
if (($data{'balancer'}) && ($data{'server'}) && ($data{'balcookie'})) { |
if (($data{'balancer'}) && ($data{'server'}) && ($data{'balcookie'})) { |
if (ref($extra_env) eq 'HASH') { |
if (ref($extra_env) eq 'HASH') { |
$extra_env->{'request.balancercookie'} = $data{'server'}.':'.$data{'balcookie'}; |
$extra_env->{'request.balancercookie'} = $data{'server'}.':'.$data{'balcookie'}; |
Line 410 sub handler {
|
Line 475 sub handler {
|
if ($handle) { |
if ($handle) { |
&Apache::lonnet::transfer_profile_to_env($r->dir_config('lonIDsDir'), |
&Apache::lonnet::transfer_profile_to_env($r->dir_config('lonIDsDir'), |
$handle); |
$handle); |
my $checklaunch; |
my ($checklaunch,$prevlaunch); |
if ($data{'origurl'} =~ m{^/tiny/$match_domain/\w+$}) { |
if ($data{'origurl'} =~ m{^/tiny/$match_domain/\w+$}) { |
unless ($env{'request.linkprot'} eq $data{'linkprot'}) { |
unless ($env{'request.linkprot'} eq $data{'linkprot'}) { |
$checklaunch = 1; |
$checklaunch = 1; |
Line 418 sub handler {
|
Line 483 sub handler {
|
unless ($env{'request.linkprotexit'} eq $data{'linkprotexit'}) { |
unless ($env{'request.linkprotexit'} eq $data{'linkprotexit'}) { |
$checklaunch = 1; |
$checklaunch = 1; |
} |
} |
|
unless ($env{'request.linkprotpbid'} eq $data{'linkprotpbid'}) { |
|
$checklaunch = 1; |
|
} |
|
unless ($env{'request.linkprotpburl'} eq $data{'linkprotpburl'}) { |
|
$checklaunch = 1; |
|
} |
unless ($env{'request.linkkey'} eq $data{'linkkey'}) { |
unless ($env{'request.linkkey'} eq $data{'linkkey'}) { |
$checklaunch = 1; |
$checklaunch = 1; |
} |
} |
Line 429 sub handler {
|
Line 500 sub handler {
|
if (($env{'user.name'} ne $data{'username'}) || |
if (($env{'user.name'} ne $data{'username'}) || |
($env{'user.domain'} ne $data{'domain'})) { |
($env{'user.domain'} ne $data{'domain'})) { |
my %linkprot_env; |
my %linkprot_env; |
foreach my $item ('linkprot','linkprotexit','deeplink.login') { |
foreach my $item ('linkprot','linkprotexit','linkprotpbid','linkprotpburl','deeplink.login') { |
if ($data{$item}) { |
if ($data{$item}) { |
$linkprot_env{$item} = $data{$item}; |
$linkprot_env{$item} = $data{$item}; |
} |
} |
Line 498 sub handler {
|
Line 569 sub handler {
|
if ($env{'environment.remote'} eq 'on') { |
if ($env{'environment.remote'} eq 'on') { |
&Apache::lonnet::appenv({'environment.remote' => 'off'}); |
&Apache::lonnet::appenv({'environment.remote' => 'off'}); |
} |
} |
|
} elsif ($env{'request.deeplink.login'}) { |
|
$prevlaunch = $env{'request.deeplink.login'}; |
} |
} |
if ($data{'origurl'} ne '') { |
if ($data{'lti.login'}) { |
|
if ($env{'environment.remote'} eq 'on') { |
|
&Apache::lonnet::appenv({'environment.remote' => 'off'}); |
|
} |
|
my $needslogout; |
|
if ($env{'request.lti.login'}) { |
|
if (($env{'user.name'} ne $data{'username'}) || |
|
($env{'user.domain'} ne $data{'domain'})) { |
|
$needslogout = 1; |
|
} |
|
} else { |
|
$needslogout = 1; |
|
} |
|
# If access is via LTI, and user already has a non-LTI session cookie |
|
# (and session) or has an LTI session cookie for a different username, |
|
# logout the existing session, and start a new one |
|
if ($needslogout) { |
|
&logout($r,$ip,$handle,\%data,$lti_env); |
|
} elsif (($data{'lti.reqcrs'}) && ($data{'lti.reqrole'} eq 'cc')) { |
|
$form{'lti.reqcrs'} = $data{'lti.reqcrs'}; |
|
$form{'lti.reqrole'} = $data{'lti.reqrole'}; |
|
$form{'lti.sourcecrs'} = $data{'lti.sourcecrs'}; |
|
$form{'lti.uri'} = $data{'lti.uri'}; |
|
if ($data{'lti.passbackid'}) { |
|
$form{'lti.passbackid'} = $data{'lti.passbackid'}; |
|
} |
|
if ($data{'lti.passbackurl'}) { |
|
$form{'lti.passbackurl'} = $data{'lti.passbackurl'}; |
|
} |
|
if ($data{'lti.rosterid'}) { |
|
$form{'lti.rosterid'} = $data{'lti.rosterid'}; |
|
} |
|
if ($data{'lti.rosterurl'}) { |
|
$form{'lti.rosterurl'} = $data{'lti.rosterurl'}; |
|
} |
|
if ($data{'lti.target'}) { |
|
$form{'lti.target'} = $data{'lti.target'}; |
|
} |
|
&Apache::loncommon::content_type($r,'text/html'); |
|
$r->send_http_header; |
|
&Apache::ltiauth::lti_reqcrs($r,$data{'domain'},\%form,$data{'username'},$data{'domain'}); |
|
} else { |
|
if (ref($lti_env) eq 'HASH') { |
|
delete($lti_env->{'reqcrs'}); |
|
delete($lti_env->{'reqrole'}); |
|
delete($lti_env->{'selfenrollrole'}); |
|
} |
|
if ($data{'lti.selfenrollrole'}) { |
|
if (&Apache::ltiauth::lti_enroll($data{'username'},$data{'domain'}, |
|
$data{'lti.selfenrollrole'}) eq 'ok') { |
|
my $url = '/adm/roles?selectrole=1&'. |
|
&escape($data{'lti.selfenrollrole'}).'=1'; |
|
if ($data{'origurl'} =~ m{/default_\d+\.sequence$}) { |
|
$url .= '&orgurl='.$data{'origurl'}.'&navmap=1'; |
|
} elsif ($data{'origurl'} ne '') { |
|
$url .= '&orgurl='.$data{'origurl'}; |
|
} |
|
if (ref($lti_env) eq 'HASH') { |
|
&Apache::lonnet::appenv($lti_env); |
|
} |
|
$r->internal_redirect($url); |
|
} else { |
|
&Apache::ltiauth::invalid_request($r,23); |
|
} |
|
} elsif ($data{'origurl'} ne '') { |
|
my $url = $data{'origurl'}; |
|
if ($url =~ m{/default_\d+\.sequence$}) { |
|
$url .= (($url =~/\?/)?'&':'?').'navmap=1'; |
|
} |
|
if (ref($lti_env) eq 'HASH') { |
|
&Apache::lonnet::appenv($lti_env); |
|
} |
|
$r->internal_redirect($url); |
|
} else { |
|
if (ref($lti_env) eq 'HASH') { |
|
&Apache::lonnet::appenv($lti_env); |
|
} |
|
} |
|
} |
|
} elsif ($data{'origurl'} ne '') { |
my $dest = $data{'origurl'}; |
my $dest = $data{'origurl'}; |
if (($env{'request.deeplink.login'} eq $data{'origurl'}) && |
if (($env{'request.deeplink.login'} eq $data{'origurl'}) && |
(($env{'request.linkprot'}) || ($env{'request.linkkey'} ne ''))) { |
(($env{'request.linkprot'}) || ($env{'request.linkkey'} ne ''))) { |
my %info; |
my %info; |
if ($env{'request.linkprot'}) { |
if ($env{'request.linkprot'}) { |
$info{'linkprot'} = $env{'request.linkprot'}; |
$info{'linkprot'} = $env{'request.linkprot'}; |
foreach my $item ('linkprotuser','linkprotexit') { |
foreach my $item ('linkprotuser','linkprotexit','linkprotpbid','linkprotpburl') { |
if ($data{$item}) { |
if ($data{$item}) { |
$info{$item} = $data{$item}; |
$info{$item} = $data{$item}; |
} |
} |
Line 518 sub handler {
|
Line 670 sub handler {
|
if ($checklaunch) { |
if ($checklaunch) { |
$info{'checklaunch'} = 1; |
$info{'checklaunch'} = 1; |
} |
} |
|
if ($prevlaunch) { |
|
$info{'prevlaunch'} = $prevlaunch; |
|
} |
my $token = &Apache::lonnet::tmpput(\%info,$r->dir_config('lonHostID'),'link'); |
my $token = &Apache::lonnet::tmpput(\%info,$r->dir_config('lonHostID'),'link'); |
unless (($token eq 'con_lost') || ($token eq 'refused') || ($token =~ /^error:/) || |
unless (($token eq 'con_lost') || ($token eq 'refused') || ($token =~ /^error:/) || |
($token eq 'unknown_cmd') || ($token eq 'no_such_host')) { |
($token eq 'unknown_cmd') || ($token eq 'no_such_host')) { |
Line 532 sub handler {
|
Line 687 sub handler {
|
} |
} |
} else { |
} else { |
my $desturl = '/adm/roles'; |
my $desturl = '/adm/roles'; |
if ($data{'origurl'} ne '') { |
if ($data{'lti.login'}) { |
|
if ($data{'lti.selfenrollrole'}) { |
|
$desturl .= '?selectrole=1&'. |
|
&escape($data{'lti.selfenrollrole'}).'=1'; |
|
if ($data{'origurl'} ne '') { |
|
$desturl .= '&orgurl='.$data{'origurl'}; |
|
if ($data{'origurl'} =~ m{/default_\d+\.sequence$}) { |
|
$desturl .= '&navmap=1'; |
|
} |
|
} |
|
} elsif ($data{'origurl'} ne '') { |
|
$desturl = $data{'origurl'}; |
|
if ($desturl =~ m{/default_\d+\.sequence$}) { |
|
$desturl .= (($desturl =~/\?/)?'&':'?').'navmap=1'; |
|
} |
|
} |
|
} elsif ($data{'origurl'} ne '') { |
$desturl = $data{'origurl'}; |
$desturl = $data{'origurl'}; |
if ($data{'linkprot'}) { |
if ($data{'linkprot'}) { |
my ($linkprotector,$linkuri) = split(/:/,$data{'linkprot'},2); |
my ($linkprotector,$linkuri) = split(/:/,$data{'linkprot'},2); |
Line 549 sub handler {
|
Line 720 sub handler {
|
if ($data{'linkprotexit'}) { |
if ($data{'linkprotexit'}) { |
$extra_env->{'request.linkprotexit'} = $data{'linkprotexit'}; |
$extra_env->{'request.linkprotexit'} = $data{'linkprotexit'}; |
} |
} |
|
if ($data{'linkprotpbid'}) { |
|
$extra_env->{'request.linkprotpbid'} = $data{'linkprotpbid'}; |
|
} |
|
if ($data{'linkprotpburl'}) { |
|
$extra_env->{'request.linkprotpburl'} = $data{'linkprotpburl'}; |
|
} |
} |
} |
foreach my $item ('linkprotuser','linkprotexit') { |
foreach my $item ('linkprotuser','linkprotexit','linkprotpbid','linkprotpburl') { |
if ($data{$item} ne '') { |
if ($data{$item} ne '') { |
$form{$item} = $data{$item}; |
$form{$item} = $data{$item}; |
} |
} |
} |
} |
} elsif ($data{'linkkey'}) { |
} elsif ($data{'linkkey'} ne '') { |
if (ref($extra_env) eq 'HASH') { |
if (ref($extra_env) eq 'HASH') { |
$extra_env->{'user.deeplinkkey'} = $data{'linkkey'}; |
$extra_env->{'user.deeplinkkey'} = $data{'linkkey'}; |
$extra_env->{'user.keyedlinkuri'} = $data{'deeplink.login'}; |
$extra_env->{'user.keyedlinkuri'} = $data{'deeplink.login'}; |
Line 581 sub handler {
|
Line 758 sub handler {
|
} |
} |
} |
} |
} |
} |
|
my $skipcritical; |
|
if ($data{'lti.login'}) { |
|
if ((($data{'lti.reqcrs'}) && |
|
($data{'lti.reqrole'} eq 'cc')) || |
|
($data{'lti.selfenrollrole'})) { |
|
$skipcritical = 1; |
|
} |
|
} |
&Apache::lonauth::success($r,$data{'username'},$data{'domain'}, |
&Apache::lonauth::success($r,$data{'username'},$data{'domain'}, |
$home,$desturl,$extra_env,\%form,'', |
$home,$desturl,$extra_env,\%form,$skipcritical,'', |
$expirepub,$data{'lcssowin'}); |
$expirepub,$data{'lcssowin'}); |
} |
} |
return OK; |
return OK; |
} |
} |
|
|
my $next_url='/adm/roles?selectrole=1&'.&escape($data{'role'}).'=1'; |
if ($data{'lti.login'}) { |
if ($data{'origurl'} ne '') { |
my $handle = &Apache::lonnet::check_for_valid_session($r); |
$next_url .= '&orgurl='.&escape($data{'origurl'}); |
if ($handle) { |
|
&Apache::lonnet::transfer_profile_to_env($r->dir_config('lonIDsDir'), |
|
$handle); |
|
my $needslogout; |
|
if ($env{'request.lti.login'}) { |
|
if (($env{'user.name'} ne $data{'username'}) || |
|
($env{'user.domain'} ne $data{'domain'})) { |
|
$needslogout = 1; |
|
} |
|
} else { |
|
$needslogout = 1; |
|
} |
|
if ($needslogout) { |
|
&logout($r,$ip,$handle,\%data,$lti_env); |
|
return OK; |
|
} |
|
} |
} |
} |
if ($data{'deeplink.login'}) { |
|
if (ref($extra_env) eq 'HASH') { |
# check if current user, and role match those expected. |
$extra_env->{'request.deeplink.login'} = $data{'deeplink.login'}; |
my ($next_url,$reuse_session); |
|
if (($env{'user.name'} eq $data{'username'}) && ($env{'user.domain'} eq $data{'domain'}) && |
|
($env{'request.role'} eq $data{'role'}) && ($data{'origurl'} ne '')) { |
|
$next_url = $data{'origurl'}; |
|
$reuse_session = 1; |
|
} elsif ($data{'origurl'} =~ m{^/tiny/$match_domain/\w+$}) { |
|
$next_url=$data{'origurl'}; |
|
} else { |
|
if ($data{'lti.login'}) { |
|
$next_url='/adm/roles?selectrole=1&'.&escape($data{'role'}).'=1'; |
|
if ($data{'origurl'} ne '') { |
|
$next_url .= '&orgurl='.&escape($data{'origurl'}); |
|
} |
} else { |
} else { |
$extra_env = {'request.deeplink.login' => $data{'deeplink.login'}}; |
$next_url='/adm/roles?selectrole=1&'.&escape($data{'role'}).'=1'; |
|
if ($data{'origurl'} ne '') { |
|
$next_url .= '&orgurl='.&escape($data{'origurl'}); |
|
} |
} |
} |
if ($data{'linkprot'}) { |
} |
$extra_env->{'request.linkprot'} = $data{'linkprot'}; |
if ($data{'lti.login'}) { |
if ($data{'linkprotexit'}) { |
if (($data{'origurl'} =~ m{/default_\d+\.sequence$}) || |
$extra_env->{'request.linkprotexit'} = $data{'linkprotexit'}; |
($data{'origurl'} =~ m{^/res/.+\.sequence$})) { |
|
if ($reuse_session) { |
|
$next_url .= '&navmap=1'; |
|
} else { |
|
$next_url .= '&navmap=1'; |
} |
} |
foreach my $item ('linkprotuser','linkprotexit') { |
} |
if ($data{$item}) { |
} |
$form{'request.'.$item} = $data{$item}; |
if ($reuse_session) { |
|
$r->internal_redirect($next_url); |
|
} else { |
|
if ($data{'deeplink.login'}) { |
|
if (ref($extra_env) eq 'HASH') { |
|
$extra_env->{'request.deeplink.login'} = $data{'deeplink.login'}; |
|
} else { |
|
$extra_env = {'request.deeplink.login' => $data{'deeplink.login'}}; |
|
} |
|
if ($data{'linkprot'}) { |
|
$extra_env->{'request.linkprot'} = $data{'linkprot'}; |
|
if ($data{'linkprotexit'}) { |
|
$extra_env->{'request.linkprotexit'} = $data{'linkprotexit'}; |
} |
} |
|
if ($data{'linkprotpbid'}) { |
|
$extra_env->{'request.linkprotpassbid'} = $data{'linkprotpbid'}; |
|
} |
|
if ($data{'linkprotpburl'}) { |
|
$extra_env->{'request.linkprotpassburl'} = $data{'linkprotpburl'}; |
|
} |
|
foreach my $item ('linkprotuser','linkprotexit','linkprotpbid','linkprotpburl') { |
|
if ($data{$item}) { |
|
$form{'request.'.$item} = $data{$item}; |
|
} |
|
} |
|
} elsif ($data{'linkkey'} ne '') { |
|
$extra_env->{'request.linkkey'} = $data{'linkkey'}; |
} |
} |
} elsif ($data{'linkkey'} ne '') { |
|
$extra_env->{'request.linkkey'} = $data{'linkkey'}; |
|
} |
} |
|
&Apache::lonauth::success($r,$data{'username'},$data{'domain'},$home, |
|
$next_url,$extra_env,\%form,'',$cid,'',$data{'lcssowin'}); |
} |
} |
&Apache::lonauth::success($r,$data{'username'},$data{'domain'},$home, |
|
$next_url,$extra_env,\%form,$cid,'',$data{'lcssowin'}); |
|
return OK; |
return OK; |
} |
} |
|
|