class_LoginHTTPHeader.inc

<?php
/*
  This code is part of FusionDirectory (http://www.fusiondirectory.org/)
  Copyright (C) 2017-2018  FusionDirectory

  This program is free software; you can redistribute it and/or modify
  it under the terms of the GNU General Public License as published by
  the Free Software Foundation; either version 2 of the License, or
  (at your option) any later version.

  This program is distributed in the hope that it will be useful,
  but WITHOUT ANY WARRANTY; without even the implied warranty of
  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  GNU General Public License for more details.

  You should have received a copy of the GNU General Public License
  along with this program; if not, write to the Free Software
  Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA.
*/

class LoginHTTPHeader extends LoginMethod
{
  static function getLabel ()
  {
    return _('HTTP Header');
  }

  static function loginProcess ()
  {
    global $config, $message, $ui;

    static::init();

    /* Reset error messages */
    $message = '';

    $header = $config->get_cfg_value('httpHeaderAuthHeaderName', 'AUTH_USER');

    static::$username = $_SERVER['HTTP_'.$header];

    if (!static::$username) {
      throw new FatalError(
        htmlescape(sprintf(
          _('No value found in HTTP header "%s"'),
          $header
        ))
      );
    }

    $ui = userinfo::getLdapUser(static::$username);

    if ($ui === FALSE) {
      throw new FatalError(
        htmlescape(sprintf(
          _('Header user "%s" could not be found in LDAP'),
          static::$username
        ))
      );
    } elseif (is_string($ui)) {
      throw new FatalError(
        htmlescape(sprintf(
          _('Login with user "%s" triggered error: %s'),
          static::$username,
          $ui
        ))
      );
    }

    $ui->loadACL();

    $success = static::runSteps([
      'checkForLockingBranch',
      'loginAndCheckExpired',
      'runSchemaCheck',
    ]);

    if ($success) {
      /* Everything went well, redirect to main.php */
      static::redirect();
    } else {
      echo msg_dialog::get_dialogs();
      if (!empty($message)) {
        throw new FatalError(
          htmlescape(sprintf(
            _('Login with user "%s" triggered error: %s'),
            static::$username,
            $message
          ))
        );
      }
      exit();
    }
  }
}