sso

conf/application.ini

@@ -17,10 +17,10 @@ allow_themes = On
 allow_user_background = Off
 
 ; Language used by default
-language = "__LANGUAGE__"
+language = "en"
 
 ; Admin Panel interface language
-language_admin = "__LANGUAGE__"
+language_admin = "en"
 
 ; Allow language selection on settings screen
 allow_languages_on_settings = On
@@ -283,6 +283,8 @@ boundary_prefix = ""
 kolab_enabled = Off
 dev_email = ""
 dev_password = ""
+custom_login_link='__PATH__/sso.php'
+custom_logout_link='https://__MAIN_DOMAIN__/yunohost/sso/?action=logout'
 
 [version]
 current = "2.15.0"

manifest.toml

@@ -23,7 +23,7 @@ multi_instance = true
 ldap = false
 sso = false
 disk = "50M"
-ram.build = "50M"
+ram.build = "100M"
 ram.runtime = "50M"
 
 [install]
@@ -55,5 +55,8 @@ ram.runtime = "50M"
     [resources.permissions]
     main.url = "/"
 
+    [resources.database]
+    type = "mysql"
+
     [resources.apt]
-    packages = "php8.2-sqlite3 php8.2-tidy php8.2-dom php8.2-intl php8.2-mysql php8.2-curl php8.2-gd php8.2-cli php8.2-xml php8.2-mbstring"
+    packages = "mariadb-server php8.2-sqlite3 php8.2-tidy php8.2-dom php8.2-intl php8.2-mysql php8.2-curl php8.2-gd php8.2-cli php8.2-xml php8.2-mbstring"

scripts/_common.sh

@@ -4,6 +4,9 @@
 # COMMON VARIABLES
 #=================================================
 
+main_domain=$(cat /etc/yunohost/current_host)
+timezone=$(cat /etc/timezone)
+
 #=================================================
 # PERSONAL HELPERS
 #=================================================

scripts/install

@@ -50,6 +50,28 @@ ynh_add_nginx_config
 # Use logrotate to manage application logfile(s)
 ynh_use_logrotate
 
+#=================================================
+# APP INITIAL CONFIGURATION
+#=================================================
+# ADD A CONFIGURATION
+#=================================================
+ynh_script_progression --message="Adding a configuration file..." --weight=1
+
+mkdir -p "$install_dir/data/_data_/_default_/configs"
+chown $app:$app -R "$install_dir/data/_data_"
+
+ynh_add_config --template="application.ini" --destination="$install_dir/data/_data_/_default_/configs/application.ini"
+
+chmod 400 "$install_dir/data/_data_/_default_/configs/application.ini"
+chown $app:$app "$install_dir/data/_data_/_default_/configs/application.ini"
+
+#=================================================
+# SETUP SSO
+#=================================================
+ynh_script_progression --message="Applying SSO patch..." --weight=1
+
+ynh_add_config --template="../sources/sso.php" --destination="$install_dir/sso.php"
+
 #=================================================
 # END OF SCRIPT
 #=================================================

scripts/upgrade

@@ -67,6 +67,25 @@ ynh_add_nginx_config
 # Use logrotate to manage app-specific logfile(s)
 ynh_use_logrotate --non-append
 
+#=================================================
+# RECONFIGURE THE APP (UPDATE CONF, APPLY MIGRATIONS...)
+#=================================================
+# UPDATE A CONFIG FILE
+#=================================================
+ynh_script_progression --message="Updating a configuration file..." --weight=1
+
+ynh_add_config --template="application.ini" --destination="$install_dir/data/_data_/_default_/configs/application.ini"
+
+chmod 400 "$install_dir/data/_data_/_default_/configs/application.ini"
+chown $app:$app "$install_dir/data/_data_/_default_/configs/application.ini"
+
+#=================================================
+# SETUP SSO
+#=================================================
+ynh_script_progression --message="Applying SSO patch..." --weight=1
+
+ynh_add_config --template="../sources/sso.php" --destination="$install_dir/sso.php"
+
 #=================================================
 # END OF SCRIPT
 #=================================================

sources/sso.php

@@ -0,0 +1,17 @@
+<?php
+
+// Enable SnappyMail Api and include index file 
+$_ENV['SNAPPYMAIL_INCLUDE_AS_API'] = true;
+require 'index.php';
+
+// Retrieve email and password
+if (isset($_SERVER['HTTP_EMAIL']) && isset($_SERVER['PHP_AUTH_PW'])) {
+        $email = $_SERVER['HTTP_EMAIL'];
+        $password = $_SERVER['PHP_AUTH_PW'];
+        $ssoHash = \RainLoop\Api::CreateUserSsoHash($email, $password);
+        // redirect to webmail sso url
+        \header('Location: https://__DOMAIN____PATH__/?sso&hash='.$ssoHash);
+}
+else {
+        \header('Location: https://__DOMAIN____PATH__/snappymail/');
+}