-
Notifications
You must be signed in to change notification settings - Fork 0
/
auth.php
164 lines (140 loc) · 4.39 KB
/
auth.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
<?php
// This file is part of Moodle - http://moodle.org/
//
// Moodle is free software: you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// (at your option) any later version.
//
// Moodle is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with Moodle. If not, see <http://www.gnu.org/licenses/>.
/**
* Authorization by direct link.
*
* @package auth_link
* @copyright 2017 Valentin Popov (https://valentineus.link/)
* @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
*/
defined('MOODLE_INTERNAL') || die();
require_once($CFG->libdir.'/authlib.php');
/**
* Plugin for no authentication.
*/
class auth_plugin_link extends auth_plugin_base {
/**
* Constructor.
*/
public function __construct() {
$this->authtype = 'link';
}
/**
* Old syntax of class constructor. Deprecated in PHP7.
* @deprecated since Moodle 3.1
*/
public function auth_plugin_link() {
debugging('Use of class name as constructor is deprecated', DEBUG_DEVELOPER);
self::__construct();
}
/**
* Returns true if the username and password work or don't exist and false
* if the user exists and the password is wrong.
* @param string $username The username
* @param string $password The password
* @return bool Authentication success or failure.
*/
public function user_login($username, $password) {
global $CFG, $DB;
if ($user = $DB->get_record('user', array('username' => $username, 'mnethostid' => $CFG->mnet_localhost_id))) {
return validate_internal_user_password($user, $password);
}
return true;
}
/**
* No password updates.
*/
public function user_update_password($user, $newpassword) {
return false;
}
public function prevent_local_passwords() {
return false;
}
/**
* Returns true if this authentication plugin is 'internal'.
* @return bool
*/
public function is_internal() {
return true;
}
/**
* No changing of password.
*/
public function can_change_password() {
return false;
}
/**
* Returns the URL for changing the user's pw, or empty if the default can
* be used.
* @return moodle_url
*/
public function change_password_url() {
return null;
}
/**
* No password resetting.
*/
public function can_reset_password() {
return true;
}
/**
* Returns true if plugin can be manually set.
* @return bool
*/
public function can_be_manually_set() {
return true;
}
/**
* Hook for overriding behaviour before going to the login page.
*/
public function pre_loginpage_hook() {
$this->loginpage_hook();
}
/**
* Hook for overriding behaviour of login page.
*/
public function loginpage_hook() {
global $DB;
$username = optional_param('username', '', PARAM_RAW);
$password = optional_param('password', '', PARAM_RAW);
if (!isloggedin()) {
if (!empty($username) && !empty($password)) {
// User existence check.
if ($user = $DB->get_record('user', array('username' => $username) )) {
// Verification of authorization data.
if (validate_internal_user_password($user, $password)) {
complete_user_login($user);
$this->redirect_user();
}
}
}
}
}
/**
* Redirect client to the original target.
*/
public function redirect_user() {
global $CFG, $SESSION;
$wantsurl = optional_param('wantsurl', '', PARAM_URL);
$redirect = new moodle_url($CFG->wwwroot, $_GET);
if (isset($SESSION->wantsurl)) {
$redirect = new moodle_url($SESSION->wantsurl, $_GET);
} else if (!empty($wantsurl)) {
$redirect = new moodle_url($wantsurl);
}
redirect($redirect);
}
}