YunoHost/SSOwat
1
0
Fork 0
mirror of https://github.com/YunoHost/SSOwat.git synced 2024-09-03 20:06:27 +02:00
Code Issues Projects Releases Packages Wiki Activity

Merge branch 'master' of https://github.com/Kloadut/SSOwat

Browse source
This commit is contained in:
opi 2014-02-19 13:21:08 +01:00
commit 5d2b7fba32
1 changed files with 25 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

30
access.lua
View file

@ -145,6 +145,23 @@ function has_access (user, url)
end end
function authenticate (user, password) function authenticate (user, password)
if string.find(user, "@") then
ldap = lualdap.open_simple("localhost")
for dn, attribs in ldap:search {
base = "ou=users,dc=yunohost,dc=org",
scope = "onelevel",
sizelimit = 1,
filter = "(mail="..user..")",
attrs = {"uid"}
} do
if attribs["uid"] then
user = attribs["uid"]
else
return false
end
end
ldap:close()
end
connected = lualdap.open_simple ( connected = lualdap.open_simple (
"localhost", "localhost",
"uid=".. user ..",ou=users,dc=yunohost,dc=org", "uid=".. user ..",ou=users,dc=yunohost,dc=org",
@ -154,9 +171,10 @@ function authenticate (user, password)
cache:flush_expired() cache:flush_expired()
if connected then if connected then
cache:add(user.."-password", password, oneweek) cache:add(user.."-password", password, oneweek)
return user
else
return false
end end
return connected
end end
function set_headers (user) function set_headers (user)
@ -479,9 +497,10 @@ function do_login ()
local args = ngx.req.get_post_args() local args = ngx.req.get_post_args()
local uri_args = ngx.req.get_uri_args() local uri_args = ngx.req.get_uri_args()
if authenticate(args.user, args.password) then user = authenticate(args.user, args.password)
if user then
ngx.status = ngx.HTTP_CREATED ngx.status = ngx.HTTP_CREATED
set_auth_cookie(args.user, ngx.var.host) set_auth_cookie(user, ngx.var.host)
if uri_args.r then if uri_args.r then
return redirect(portal_url.."?r="..uri_args.r) return redirect(portal_url.."?r="..uri_args.r)
else else
@ -641,7 +660,8 @@ local auth_header = ngx.req.get_headers()["Authorization"]
if auth_header then if auth_header then
_, _, b64_cred = string.find(auth_header, "^Basic%s+(.+)$") _, _, b64_cred = string.find(auth_header, "^Basic%s+(.+)$")
_, _, user, password = string.find(ngx.decode_base64(b64_cred), "^(.+):(.+)$") _, _, user, password = string.find(ngx.decode_base64(b64_cred), "^(.+):(.+)$")
if authenticate(user, password) then user = authenticate(user, password)
if user then
set_headers(user) set_headers(user)
return pass() return pass()
end end