File:  [LON-CAPA] / loncom / auth / checkauthen.pm
Revision 1.19: download - view: text, annotated - select for diffs
Mon Sep 21 14:25:03 2015 UTC (8 years, 7 months ago) by raeburn
Branches: MAIN
CVS tags: version_2_11_X, version_2_11_4_uiuc, version_2_11_4, version_2_11_3_uiuc, version_2_11_3, version_2_11_2_uiuc, version_2_11_2_msu, version_2_11_2_educog, version_2_11_2, HEAD
- Bug 6800
  - Move HTML files used for pop-up window in reactionresponse to
    /adm/reactionresponse directory to support public access.
  - Replace use of &EXT('query.') with javascript to retrieve values for
    reaction, field and id from query string, and replace call to &xmlparse()
    with HTML entity to provide rightarrow.

    1: # The LearningOnline Network
    2: # checks for a cookie to authenticate a user
    3: #
    4: # $Id: checkauthen.pm,v 1.19 2015/09/21 14:25:03 raeburn Exp $
    5: #
    6: # Copyright Michigan State University Board of Trustees
    7: #
    8: # This file is part of the LearningOnline Network with CAPA (LON-CAPA).
    9: #
   10: # LON-CAPA is free software; you can redistribute it and/or modify
   11: # it under the terms of the GNU General Public License as published by
   12: # the Free Software Foundation; either version 2 of the License, or
   13: # (at your option) any later version.
   14: #
   15: # LON-CAPA is distributed in the hope that it will be useful,
   16: # but WITHOUT ANY WARRANTY; without even the implied warranty of
   17: # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   18: # GNU General Public License for more details.
   19: #
   20: # You should have received a copy of the GNU General Public License
   21: # along with LON-CAPA; if not, write to the Free Software
   22: # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
   23: #
   24: # /home/httpd/html/adm/gpl.txt
   25: #
   26: # http://www.lon-capa.org/
   27: #
   28: ###
   29: 
   30: package Apache::checkauthen;
   31: 
   32: use strict;
   33: use Apache::Constants qw(:common);
   34: use Apache::lonnet;
   35: 
   36: sub handler {
   37:     my ($r) = @_;
   38: 
   39:     if ($r->uri() =~ m{^/res/adm/pages/[^/]+\.(gif|png)$}) {
   40:         if ($r->user() eq '') {
   41:             $r->user('public:public');
   42:         }
   43:         return OK;
   44:     }
   45: 
   46:     if (&Apache::lonnet::is_domainimage($r->uri)) {
   47:         if ($r->user() eq '') {
   48:             $r->user('public:public');
   49:         }
   50:         return OK;
   51:     }
   52: 
   53:     if ($r->auth_type() ne 'LONCAPA') {
   54: 	return DECLINED;
   55:     }
   56:     my $fail = FORBIDDEN; 
   57:     if ($r->dir_config('lonOtherAuthen') eq 'yes') {
   58: 	if (defined($r->dir_config('lonOtherAuthenType'))) {
   59:             $r->auth_type($r->dir_config('lonOtherAuthenType'));
   60:         }
   61: 	#&Apache::lonnet::logthis("other authen");
   62: 	$fail = DECLINED;
   63:     }
   64: 
   65:     if ($env{'user.name'} eq 'public' 
   66: 	&& $env{'user.domain'} eq 'public') {
   67: 	if ($env{'request.publicaccess'} ) {
   68:             if ($r->user() eq '') {
   69:                 $r->user('public:public');
   70:             }
   71: 	    return OK;
   72: 	} else {
   73: 	    return $fail;
   74: 	}
   75:     }
   76: 
   77:     my %user;
   78:     my $handle = &Apache::lonnet::check_for_valid_session($r,undef,\%user);
   79:     if ($handle eq '') {
   80:         $handle = $env{'user.environment'};
   81:         if (($handle ne '') && ($r->user() eq '')) {
   82:             if ($env{'user.domain'} eq $r->dir_config('lonDefDomain')) {
   83:                 $r->user($env{'user.name'});
   84:             } else {
   85:                 $r->user($env{'user.name'}.':'.$env{'user.domain'});
   86:             }
   87:         }
   88:     }
   89: 
   90:     if ($handle ne '') {
   91:         if ($r->user() eq '') {
   92:             if ($user{'domain'} eq $r->dir_config('lonDefDomain')) {
   93:                 $r->user($user{'name'});
   94:             } else {
   95:                 $r->user($user{'name'}.':'.$user{'domain'});
   96:             }
   97:         }
   98:         return OK;
   99:     }
  100:     if (($fail == FORBIDDEN) &&
  101:         (($r->uri eq '/adm/email') || ($r->uri eq '/adm/preferences') ||
  102:          ($r->uri eq '/adm/requestcourse'))) {
  103:         $env{'form.firsturl'} = $r->uri;
  104:     }
  105:     return $fail;
  106: }
  107: 
  108: 1;

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>