core-smauth.php

<?php
/*
 SPDX-FileCopyrightText: © 2011-2013 Hewlett-Packard Development Company, L.P.
 
 SPDX-License-Identifier: GPL-2.0-only
*/
 
use Fossology\Lib\Auth\Auth;
use Symfony\Component\HttpFoundation\Session\Session;
 
define("TITLE_CORE_SMAUTH", _("SiteMinder_Login"));
 
class core_smauth extends FO_Plugin
{
  var $Name = "smauth";
  var $Title = TITLE_CORE_SMAUTH;
  var $Version = "1.0";
  var $Dependency = array();
  var $PluginLevel = 1000; /* make this run first! */
  var $LoginFlag = 0;
 
  function Install()
  {
    global $PG_CONN;
    if (empty($PG_CONN)) {
      return (1);
    } /* No DB */
    return (0);
  } // Install()
 
  function PostInitialize()
  {
    global $PG_CONN;
    global $SysConf;
 
    if (siteminder_check() == -1) {
      return;
    }
 
    $UID = siteminder_check();
 
    global $container;
    $session = $container->get('session');
    $session->setName('Login');
    $session->start();
 
    if (array_key_exists(Auth::USER_ID, $_SESSION)) {
      $SysConf['auth'][Auth::USER_ID] = $_SESSION[Auth::USER_ID];
    }
    $Now = time();
    /* Logins older than 60 secs/min * 480 min = 8 hr are auto-logout */
    if (! empty($_SESSION['time']) && @$_SESSION['time'] + (60 * 480) < $Now) {
      $_SESSION['User'] = NULL;
      $_SESSION[Auth::USER_ID] = NULL;
      $_SESSION[Auth::USER_LEVEL] = NULL;
      $SysConf['auth'][Auth::USER_ID] = NULL;
      $_SESSION['UserEmail'] = NULL;
      $_SESSION['Folder'] = NULL;
      $_SESSION['UiPref'] = NULL;
      /* TODO: need to clear SiteMinder session */
    }
 
    /* check db connection */
    if (! $PG_CONN) {
      DBconnect();
      if (!$PG_CONN) {
        echo "NO DB connection";
      }
    }
 
    /* Enable or disable plugins based on login status */
    $Level = PLUGIN_DB_NONE;
    if (@$_SESSION['User']) {  //TODO: also need to check SiteMinder session
      /* If you are logged in, then the default level is "Download". */
      if ("X" . $_SESSION[Auth::USER_LEVEL] == "X") {
        $Level = PLUGIN_DB_WRITE;
      } else {
        $Level = $_SESSION[Auth::USER_LEVEL];
      }
      /* Recheck the user in case he is suddenly blocked or changed. */
      if (empty($_SESSION['time_check'])) {
        $_SESSION['time_check'] = time() + (480 * 60);
      }
      if (time() >= @$_SESSION['time_check']) {
        $sql = "SELECT * FROM users WHERE user_pk='" . @$_SESSION['UserId'] . "';";
        $result = pg_query($PG_CONN, $sql);
        DBCheckResult($result, $sql, __FILE__, __LINE__);
        $R = pg_fetch_assoc($result);
        pg_free_result($result);
        $_SESSION['User'] = $R['user_name'];
        $_SESSION['Folder'] = $R['root_folder_fk'];
        $_SESSION[Auth::USER_LEVEL] = $R['user_perm'];
        $_SESSION['UserEmail'] = $R['user_email'];
        $_SESSION['UserEnote'] = $R['email_notify'];
        if (empty($R['ui_preference'])) {
          $_SESSION['UiPref'] = 'simple';
        } else {
          $_SESSION['UiPref'] = $R['ui_preference'];
        }
        $Level = $_SESSION[Auth::USER_LEVEL];
      }
    } else {
      $this->CheckUser($UID);
      $Level = $_SESSION[Auth::USER_LEVEL];
    }
 
    /* Disable all plugins with >= $Level access */
    plugin_disable($Level);
 
    $this->State = PLUGIN_STATE_READY;
  } // PostInitialize()
 
  function CheckUser($Email)
  {
    global $PG_CONN;
    global $SysConf;
 
    if (empty($Email)) {
      return;
    }
    $Email = str_replace("'", "''", $Email); /* protect DB */
    $FolderName = substr($Email, 0, strpos($Email,'@'));
    $FolderName = trim($FolderName);
    if (empty($FolderName)) {
      return;
    }
    $FolderDes = "Folder created for " . $FolderName;
 
    /* Get default User description and bucketpool from sysconf table */
    $UserDesc = 'null';
    $BucketPool = 'null';
    $sql = "SELECT typlen  FROM pg_type where typname='sysconfig' limit 1";
    $result = pg_query($PG_CONN, $sql);
    DBCheckResult($result, $sql, __FILE__, __LINE__);
    if (pg_num_rows($result) > 0) {
      pg_free_result($result);
      // Get UserDesc from sysconfig
      $sql = "SELECT conf_value FROM sysconfig WHERE variablename = 'UserDesc';";
      $result = pg_query($PG_CONN, $sql);
      DBCheckResult($result, $sql, __FILE__, __LINE__);
      $R = pg_fetch_assoc($result);
      pg_free_result($result);
      if (!empty($R['conf_value'])) {
        $UserDesc = "'".$R['conf_value']."'";
      }
 
      // Get BucketPool from sysconfig
      $sql = "SELECT conf_value FROM sysconfig WHERE variablename = 'BucketPool';";
      $result = pg_query($PG_CONN, $sql);
      DBCheckResult($result, $sql, __FILE__, __LINE__);
      $R = pg_fetch_assoc($result);
      pg_free_result($result);
      if (!empty($R['conf_value'])) {
        $BucketPool = $R['conf_value'];
        //Check if the bucketpool defined in sysconfig exist in bucketpool table
        $sql = "SELECT bucketpool_pk  FROM bucketpool WHERE bucketpool_pk=$BucketPool AND active='Y'";
        $result = pg_query($PG_CONN, $sql);
        DBCheckResult($result, $sql, __FILE__, __LINE__);
        if (pg_num_rows($result) < 1) {
          $BucketPool = 'null';       //didn't exist in bucketpool table, set it 'null'
        }
      } else {
        /* if didn't define bucketpool from sycconf.And only a single bucketpool record, get bucketpool from bucketpool table. If more than one, set it null*/
        $sql = "SELECT bucketpool_pk FROM bucketpool;";
        $result = pg_query($PG_CONN, $sql);
        DBCheckResult($result, $sql, __FILE__, __LINE__);
        if (pg_num_rows($result) == 1) {
          $R = pg_fetch_assoc($result);
          if (!empty($R['bucketpool_pk'])) {
            $BucketPool = $R['bucketpool_pk'];
          }
        } else {
          $BucketPool = 'null';
        }
      }
      pg_free_result($result);
    } else {
      pg_free_result($result);
    }
 
    /* See if the user exists */
    $sql = "SELECT * FROM users WHERE user_email = '$Email';";
    $result = pg_query($PG_CONN, $sql);
    DBCheckResult($result, $sql, __FILE__, __LINE__);
    $R = pg_fetch_assoc($result);
    pg_free_result($result);
    if (empty($R['user_name'])) {
      //check if folder name exists under the parent?
      pg_exec("BEGIN;");
      $sql = "SELECT * FROM folderlist WHERE name = '$FolderName' AND parent = '1' AND foldercontents_mode = '1';";
      $result = pg_query($PG_CONN, $sql);
      DBCheckResult($result, $sql, __FILE__, __LINE__);
      $row = pg_fetch_assoc($result);
      pg_free_result($result);
      if (empty($row['name'])) {
        //create folder for the user
        $sql = "INSERT INTO folder (folder_name, folder_desc) VALUES ('$FolderName', '$FolderDes');";
        $result = pg_query($PG_CONN, $sql);
        DBCheckResult($result, $sql, __FILE__, __LINE__);
        pg_free_result($result);
        $sql = "SELECT folder_pk FROM folder WHERE folder_name='$FolderName' AND folder_desc = '$FolderDes';";
        $result = pg_query($PG_CONN, $sql);
        DBCheckResult($result, $sql, __FILE__, __LINE__);
        $row = pg_fetch_assoc($result);
        pg_free_result($result);
        //print_r($row);
        if (empty($row['folder_pk'])) {
          return;
        }
        $FolderPk = $row['folder_pk'];
        //echo $FolderPk;
 
        $sql = "INSERT INTO foldercontents (parent_fk,foldercontents_mode,child_id) VALUES ('1','1','$FolderPk');";
        $result = pg_query($PG_CONN, $sql);
        DBCheckResult($result, $sql, __FILE__, __LINE__);
        pg_free_result($result);
      } else {
        $sql = "SELECT folder_pk FROM folder WHERE folder_name='$FolderName' AND folder_desc = '$FolderDes';";
        $result = pg_query($PG_CONN, $sql);
        DBCheckResult($result, $sql, __FILE__, __LINE__);
        $row = pg_fetch_assoc($result);
        pg_free_result($result);
        //print_r($row);
        if (empty($row['folder_pk'])) {
          return;
        }
        $FolderPk = $row['folder_pk'];
        //echo $FolderPk;
      }
 
      //create user
      add_user($Email,$UserDesc,null,null,5,$Email,y,"agent_bucket,agent_copyright",$FolderPk,$BucketPool);
 
      pg_exec("COMMIT;");
    } /* no user */
 
    $sql = "SELECT * FROM users WHERE user_email = '$Email';";
    $result = pg_query($PG_CONN, $sql);
    DBCheckResult($result, $sql, __FILE__, __LINE__);
    $R = pg_fetch_assoc($result);
    pg_free_result($result);
 
    /* Check the email */
    if (strcmp($Email, $R['user_email']) != 0) {
      return;
    }
    /* If you make it here, then username and email were good! */
    $_SESSION['User'] = $R['user_name'];
    $_SESSION['UserId'] = $R['user_pk'];
    $SysConf['auth'][Auth::USER_ID] = $R['user_pk'];
    $_SESSION['UserEmail'] = $R['user_email'];
    $_SESSION['UserEnote'] = $R['email_notify'];
    if (empty($R['ui_preference'])) {
      $_SESSION['UiPref'] = 'simple';
    } else {
      $_SESSION['UiPref'] = $R['ui_preference'];
    }
    $_SESSION['Folder'] = $R['root_folder_fk'];
    $_SESSION['time_check'] = time() + (480 * 60);
    /* No specified permission means ALL permission */
    if ("X" . $R['user_perm'] == "X") {
      $_SESSION[Auth::USER_LEVEL] = PLUGIN_DB_ADMIN;
    } else {
      $_SESSION[Auth::USER_LEVEL] = $R['user_perm'];
    }
    /* Check for the no-popup flag */
    if (GetParm("nopopup", PARM_INTEGER) == 1) {
      $_SESSION['NoPopup'] = 1;
    } else {
      $_SESSION['NoPopup'] = 0;
    }
  } // CheckUser()
 
  function Output()
  {
    global $SysConf;
    if ($this->State != PLUGIN_STATE_READY) {
      return;
    }
    $V = "";
    if (siteminder_check() == -1) {
      return;
    }
 
    $UID = siteminder_check();
 
    if ($this->OutputType=="HTML") {
      /* TODO:logout need to clear SiteMinder session */
      $_SESSION['User'] = NULL;
      $_SESSION[Auth::USER_ID] = NULL;
      $SysConf['auth'][Auth::USER_ID] = NULL;
      $_SESSION[Auth::USER_LEVEL] = NULL;
      $_SESSION['UserEmail'] = NULL;
      $_SESSION['Folder'] = NULL;
      $_SESSION['UiPref'] = NULL;
      $Uri = Traceback_uri() . "logout.html?" . random_int(0, getrandmax());
      //$Uri = Traceback_uri() . "?mod=refresh&remod=default";
      $V.= "<script language='javascript'>\n";
      $V.= "window.open('$Uri','_top');\n";
      $V.= "</script>\n";
    }
    if (!$this->OutputToStdout) {
      return ($V);
    }
    print ($V);
    return;
  } // Output()
}
 
$NewPlugin = new core_smauth();
$NewPlugin->Initialize();