--- loncom/lontrans.pm 2023/07/05 19:22:09 1.14.10.2.2.4
+++ loncom/lontrans.pm 2018/01/12 13:34:08 1.18
@@ -1,7 +1,7 @@
# The LearningOnline Network
# URL translation for User Files
#
-# $Id: lontrans.pm,v 1.14.10.2.2.4 2023/07/05 19:22:09 raeburn Exp $
+# $Id: lontrans.pm,v 1.18 2018/01/12 13:34:08 raeburn Exp $
#
# Copyright Michigan State University Board of Trustees
#
@@ -29,118 +29,114 @@
package Apache::lontrans;
use strict;
-use Apache::Constants qw(:common :remotehost);
+use Apache::Constants qw(:common :remotehost REDIRECT :http);
use Apache::lonnet;
-use Apache::loncommon;
use Apache::File();
use LONCAPA qw(:DEFAULT :match);
sub handler {
my $r = shift;
- # FIXME line remove when mod_perl fixes BUG#4948
+ # FIXME line remove when mod_perl fixes BUG#4948
$r->notes->set('error-notes' => '');
- if (($r->uri eq '/adm/service/passback') ||
- ($r->uri eq '/adm/service/roster')) {
- return OK;
- }
- my $alias = &Apache::lonnet::get_proxy_alias();
- if ($alias) {
- my $hdrhost = $r->headers_in->get('Host');
- my $lonhost = $r->dir_config('lonHostID');
- my $hostname = &Apache::lonnet::hostname($lonhost);
- my $ssourl = '/adm/sso';
- if ($r->dir_config('lonOtherAuthenUrl') ne '') {
- $ssourl = $r->dir_config('lonOtherAuthenUrl');
- }
- if (($hdrhost eq $alias) || ($hdrhost eq $hostname)) {
- my $proxyinfo = &Apache::lonnet::get_proxy_settings($r->dir_config('lonDefDomain'));
- my ($vpnint,$vpnext);
- if (ref($proxyinfo) eq 'HASH') {
- $vpnint = $proxyinfo->{'vpnint'};
- $vpnext = $proxyinfo->{'vpnext'};
+ if ($r->uri =~ m{^/adm/lti/(.+)$}) {
+ my $realuri = $1;
+ my %user;
+ my $handle = &Apache::lonnet::check_for_valid_session($r,undef,\%user);
+ if (($handle ne '') && ($user{'lti'})) {
+ if ($realuri =~ m{^uploaded/$match_domain/$match_courseid/(default|supplemental)(|_\d+)\.(?:sequence|page)___\d+___.+$}) {
+ my ($map,$resid,$url) = split(/___/,$realuri);
+ $realuri = &Apache::lonnet::clutter($url).'?symb='.$realuri;
+ } elsif ($realuri =~ m{^tiny/$match_domain/\w+$}) {
+ $realuri = '/'.$realuri;
+ } elsif ($realuri =~ m{($match_domain)/($match_courseid)$}) {
+ $realuri = '/adm/navmaps';
+ } else {
+ $realuri = '/'.$realuri;
+ if ($realuri =~ m{/default_\d+\.sequence$}) {
+ $realuri .= (($realuri =~/\?/)?'&':'?').'navmap=1';
+ }
}
- my ($redirect,$remote_ip);
- if ($hdrhost eq $alias) {
- $remote_ip = &Apache::lonnet::get_requestor_ip($r,REMOTE_NOLOOKUP);
- if (($vpnext && &Apache::lonnet::ip_match($remote_ip,$vpnext)) &&
- ($r->uri !~ m{^/adm/(lti|launch)/})) {
- $redirect = $hostname;
+ my $host = $r->headers_in->get('Host');
+ if ($host) {
+ my $protocol = 'http';
+ if ($r->get_server_port == 443) {
+ $protocol = 'https';
}
- if ($r->uri eq $ssourl) {
- if (&Apache::lonnet::alias_sso($lonhost)) {
- undef($redirect);
+ my $location = $protocol.'://'.$host.$realuri;
+ $r->headers_out->set(Location => $location);
+ return REDIRECT;
+ }
+ }
+ } elsif ($r->uri =~ m{^/+tiny/+($match_domain)/+(\w+)$}) {
+ my ($cdom,$key) = ($1,$2);
+ if (&Apache::lonnet::domain($cdom) ne '') {
+ my %user;
+ my $handle = &Apache::lonnet::check_for_valid_session($r,undef,\%user);
+ if ($handle ne '') {
+ my $lonidsdir=$r->dir_config('lonIDsDir');
+ &Apache::lonnet::transfer_profile_to_env($lonidsdir,$handle);
+ if ($env{'request.course.id'}) {
+ my $tinyurl;
+ my ($result,$cached)=&Apache::lonnet::is_cached_new('tiny',$cdom."\0".$key);
+ if (defined($cached)) {
+ $tinyurl = $result;
} else {
- $redirect = $hostname;
- }
- }
- if ($redirect eq $hdrhost) {
- undef($redirect);
- }
- } elsif ($hdrhost eq $hostname) {
- $remote_ip = &Apache::lonnet::get_requestor_ip($r,REMOTE_NOLOOKUP,1);
- unless (($remote_ip eq '127.0.0.1') || ($remote_ip eq '::1') ||
- ($remote_ip eq &Apache::lonnet::get_host_ip($lonhost)) ||
- ($r->uri=~m{^/adm/(lti|launch)/}) ||
- ($vpnint && &Apache::lonnet::ip_match($remote_ip,$vpnint))) {
- $redirect = $alias;
- if (($r->uri=~m{^/raw/}) || ($r->uri=~m{^/adm/dns/})) {
- my %iphost = &Apache::lonnet::get_iphost();
- if (exists($iphost{$remote_ip})) {
- undef($redirect);
- }
- } elsif ($r->uri eq $ssourl) {
- unless (&Apache::lonnet::alias_sso($lonhost)) {
- undef($redirect);
+ my $configuname = &Apache::lonnet::get_domainconfiguser($cdom);
+ my %currtiny = &Apache::lonnet::get('tiny',[$key],$cdom,$configuname);
+ if ($currtiny{$key} ne '') {
+ $tinyurl = $currtiny{$key};
+ &Apache::lonnet::do_cache_new('tiny',$cdom."\0".$key,$currtiny{$key},600);
}
}
- }
- }
- if ($redirect) {
- my $uri = $r->uri;
- if (($uri eq '/adm/switchserver') || ($uri =~ m{^/Shibboleth.sso/})) {
- return DECLINED;
- }
- unless (($uri eq '/adm/migrateuser') || ($uri eq $ssourl)) {
- my %user;
- my $handle = &Apache::lonnet::check_for_valid_session($r,undef,\%user);
- if (($handle) && ($user{'name'} ne '') && ($user{'domain'} ne '')) {
- unless (($user{'name'} eq 'public') && ($user{'domain'} eq 'public')) {
- my $dest = '/adm/migrateuser';
- my $token = &set_token($r,$dest,$remote_ip,\%user);
- unless ($token eq '') {
- $r->internal_redirect("$dest?token=$token");
- $r->set_handlers('PerlHandler'=> undef);
- return DECLINED;
+ if ($tinyurl ne '') {
+ my ($cnum,$symb) = split(/\&/,$tinyurl);
+ if (($cnum =~ /^$match_courseid$/) &&
+ (&Apache::lonnet::homeserver($cnum,$cdom) ne 'no_host')) {
+ if ($env{'request.course.id'} eq $cdom.'_'.$cnum) {
+ my ($map,$resid,$url) = &Apache::lonnet::decode_symb($symb);
+ if (&Apache::lonnet::is_on_map($url)) {
+ my $realuri;
+ if ((&Apache::lonnet::EXT('resource.0.hiddenresource',$symb) =~ /^yes$/i) &&
+ (!$env{'request.role.adv'})) {
+ $env{'user.error.msg'}=$r->uri.':bre:1:1:Access to resource denied';
+ return HTTP_NOT_ACCEPTABLE;
+ }
+ if ((&Apache::lonnet::EXT('resource.0.encrypturl',$symb) =~ /^yes$/i) &&
+ (!$env{'request.role.adv'})) {
+ $realuri = &Apache::lonenc::encrypted(&Apache::lonnet::clutter($url)).
+ '?symb='.&Apache::lonenc::encrypted($symb);
+ } else {
+ $realuri = &Apache::lonnet::clutter($url).'?symb='.$symb;
+ }
+ my $host = $r->headers_in->get('Host');
+ if ($host) {
+ my $protocol = 'http';
+ if ($r->get_server_port == 443) {
+ $protocol = 'https';
+ }
+ my $location = $protocol.'://'.$host.$realuri;
+ $r->headers_out->set(Location => $location);
+ return REDIRECT;
+ }
+ }
}
}
}
}
- my $protocol = 'http';
- my $port = $r->get_server_port();
- if ($port eq '443') {
- $protocol = 'https';
- }
- if ($uri =~ m{^(/adm/css/)(.+)(.css)$}) {
- $uri = $1.&escape($2).$3;
- }
- my $location = $protocol.'://'.$redirect.$uri;
- if ($r->uri =~ m{^/tiny/$match_domain/\w+$}) {
- my $token = &set_token($r,$r->uri);
- unless ($token eq '') {
- $location .= '?ttoken='.$token;
- }
- } elsif ($r->args) {
- $location .= '?'.$r->args;
- }
- $r->header_out(Location => $location);
- return REDIRECT;
}
}
- }
- if ($r->uri =~ m{^/tiny/$match_domain/\w+$}) {
- my $token = &set_token($r,$r->uri);
- unless ($token eq '') {
- $r->args('ttoken='.$token);
+ } elsif ($r->uri=~m{^/raw/}) {
+ my $host = $r->headers_in->get('Host');
+ if ($host) {
+ unless ($host =~ /^internal\-/) {
+ my $remote_ip = $r->get_remote_host();
+ my $lonhost = $r->dir_config('lonHostID');
+ if (&redirect_raw($remote_ip,$lonhost)) {
+ my $location = 'https://internal-'.$host.$r->uri;
+ $r->headers_out->set(Location => $location);
+ return REDIRECT;
+ }
+ }
}
}
if ($r->uri=~m|^(/raw)?/uploaded/|) {
@@ -157,98 +153,58 @@ sub handler {
'/userfiles/'.(join('/',@ufile)));
}
return OK;
- } elsif ($r->uri =~ m{^\Q/adm/wrapper/ext/https:/\E[^/]}) {
- my $uri = $r->uri;
- $uri =~ s{^(\Q/adm/wrapper/ext/https:/\E)}{$1/};
- $r->uri($uri);
+ } else {
+ return DECLINED;
}
- return DECLINED;
}
-sub set_token {
- my ($r,$dest,$remote_ip,$userref) = @_;
- my (%info,%user);
- if ($dest eq '/adm/migrateuser') {
- return unless (ref($userref) eq 'HASH');
- %user = %{$userref};
- %info = ('ip' => $remote_ip,
- 'domain' => $user{'domain'},
- 'username' => $user{'name'},
- 'server' => $r->dir_config('lonHostID'),
- );
- }
- if ($r->args) {
- foreach my $pair (split(/&/,$r->args)) {
- my ($name,$value) = split(/=/,$pair);
- $name = &LONCAPA::unescape($name);
- next unless (($name eq 'role') || ($name eq 'symb') ||
- ($name eq 'ltoken') || ($name eq 'linkkey') ||
- ($name eq 'ttoken'));
- $value =~ tr/+/ /;
- $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C",hex($1))/eg;
- $info{$name} = $value;
- }
- if ($info{'ttoken'}) {
- my %current = &Apache::lonnet::tmpget($info{'ttoken'});
- delete($info{'ttoken'});
- if ($current{'origurl'} eq $r->uri) {
- return if (keys(%current));
- }
- }
- }
-#
-# To be able to support deep-linking for a shortened URL, i.e.,
-# /tiny/$dom/$id with (a) linkkey included in POSTed data and
-# data and (b) non-Shibboleth SSO in use, ltoken (or linkprot
-# if sending to /adm/migrateuser), or linkkey are written to a
-# .tmp file in /home/httpd/perl/tmp and the query string is
-# replaced with ttoken=tokenid. This does mean other POSTed
-# data will be discarded.
-#
- if ($r->uri =~ m{^/tiny/$match_domain/\w+$}) {
- unless (($info{'ltoken'}) || ($info{'linkkey'} ne '')) {
- &Apache::lonacc::get_posted_cgi($r,['linkkey']);
- if ($env{'form.linkkey'} ne '') {
- $info{'linkkey'} = $env{'form.linkkey'};
- }
- }
- }
- if ($dest eq '/adm/migrateuser') {
- if ($info{'ltoken'}) {
- my %link_info = &Apache::lonnet::tmpget($info{'ltoken'});
- if ($link_info{'linkprot'}) {
- $info{'linkprot'} = $link_info{'linkprot'};
- foreach my $item ('linkprotuser','linkprotexit','linkprotpbid','linkprotpburl') {
- if ($link_info{$item} ne '') {
- $info{$item} = $link_info{$item};
+sub redirect_raw {
+ my ($remote_ip,$lonhost) = @_;
+ my @remhostids = &Apache::lonnet::get_hosts_from_ip($remote_ip);
+ my $redirect;
+ while (@remhostids) {
+ my $try_server = pop(@remhostids);
+ my $remhostname = &Apache::lonnet::hostname($try_server);
+ if ($remhostname) {
+ my $remoterev = &Apache::lonnet::get_server_loncaparev(undef,$try_server);
+ my ($remmajor,$remminor) = ($remoterev =~ /^(\d+)\.(\d+)/);
+ if (($remmajor > 2) || (($remmajor == 2) && $remminor >= 12)) {
+ my $internet_names = &Apache::lonnet::get_internet_names($try_server);
+ if (ref($internet_names) eq 'ARRAY') {
+ my $intdom = &Apache::lonnet::internet_dom($lonhost);
+ unless (grep(/^\Q$intdom\E$/,@{$internet_names})) {
+ my $lonhostname = &Apache::lonnet::hostname($lonhost);
+ my $serverhomeID = &Apache::lonnet::get_server_homeID($lonhostname);
+ my $serverhomedom = &Apache::lonnet::host_domain($serverhomeID);
+ my %domdefaults = &Apache::lonnet::get_domain_defaults($serverhomedom);
+ my $replication = $domdefaults{'replication'};
+ if (ref($replication) eq 'HASH') {
+ my $remhomeID = &Apache::lonnet::get_server_homeID($remhostname);
+ my $remhomedom = &Apache::lonnet::host_domain($remhomeID);
+ my $remprimary = &Apache::lonnet::domain($remhomedom,'primary');
+ my $remintdom = &Apache::lonnet::internet_dom($remprimary);
+ if (ref($replication->{'certreq'}) eq 'ARRAY') {
+ if (grep(/^\Q$remintdom\E$/,@{$replication->{'certreq'}})) {
+ $redirect = 1;
+ } else {
+ $redirect = 0;
+ }
+ }
+ if (ref($replication->{'nocertreq'}) eq 'ARRAY') {
+ if (grep(/^\Q$remintdom\E$/,@{$replication->{'nocertreq'}})) {
+ $redirect = 0;
+ } else {
+ $redirect = 1;
+ }
+ }
+ }
}
}
}
- &Apache::lonnet::tmpdel($info{'ltoken'});
- delete($info{'ltoken'});
- }
- unless ($info{'role'}) {
- if ($user{'role'} ne '') {
- $info{'role'} = $user{'role'};
- }
- }
- unless ($info{'symb'}) {
- unless ($r->uri eq '/adm/roles') {
- $info{'origurl'} = $r->uri;
- }
- }
- }
- if (($dest eq '/adm/migrateuser') || (keys(%info) > 0)) {
- unless ($dest eq '/adm/migrateuser') {
- $info{'origurl'} = $r->uri;
- }
- my $token = &Apache::lonnet::tmpput(\%info,$r->dir_config('lonHostID'),'link');
- unless (($token eq 'con_lost') || ($token eq 'refused') ||
- ($token eq 'unknown_cmd') || ($token eq 'no_such_host')) {
- return $token;
+ last;
}
}
- return;
+ return $redirect;
}
1;
500 Internal Server Error
Internal Server Error
The server encountered an internal error or
misconfiguration and was unable to complete
your request.
Please contact the server administrator at
root@localhost to inform them of the time this error occurred,
and the actions you performed just before this error.
More information about this error may be available
in the server error log.