Annotation of loncom/auth/lonuploadedacc.pm, revision 1.7

1.1       www         1: # The LearningOnline Network
                      2: # Access Handler for User Files
                      3: #
1.7     ! www         4: # $Id: lonuploadedacc.pm,v 1.6 2002/11/12 22:37:18 albertel Exp $
1.1       www         5: #
                      6: # Copyright Michigan State University Board of Trustees
                      7: #
                      8: # This file is part of the LearningOnline Network with CAPA (LON-CAPA).
                      9: #
                     10: # LON-CAPA is free software; you can redistribute it and/or modify
                     11: # it under the terms of the GNU General Public License as published by
                     12: # the Free Software Foundation; either version 2 of the License, or
                     13: # (at your option) any later version.
                     14: #
                     15: # LON-CAPA is distributed in the hope that it will be useful,
                     16: # but WITHOUT ANY WARRANTY; without even the implied warranty of
                     17: # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
                     18: # GNU General Public License for more details.
                     19: #
                     20: # You should have received a copy of the GNU General Public License
                     21: # along with LON-CAPA; if not, write to the Free Software
                     22: # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
                     23: #
                     24: # /home/httpd/html/adm/gpl.txt
                     25: #
                     26: # http://www.lon-capa.org/
                     27: #
                     28: 
                     29: package Apache::lonuploadedacc;
                     30: 
1.7     ! www        31: #
        !            32: # The way this is supposed to work:
        !            33: #
        !            34: # User A has client machine C
        !            35: # User A is logged into LON-CAPA server S
        !            36: # needs file from user B
        !            37: # homeserver for user B is H
        !            38: # 
        !            39: # This handler runs on H
        !            40: # To access a userfile:
        !            41: # Server S generates a token and puts it into the query string of URL for H
        !            42: # Client box C asks H for file with token issued by C
        !            43: # H now must ask S if token is valid, uses S's lond-command tokenauthuserfile
        !            44: 
1.1       www        45: use strict;
1.7     ! www        46: use Apache::Constants qw(:common);
1.1       www        47: use Apache::lonnet();
                     48: 
                     49: sub handler {
                     50:     my $r = shift;
1.2       www        51:     my $args=$r->args;
1.7     ! www        52:     &Apache::loncommon::get_unprocessed_cgi($args,['token','tokenissued']); 
1.3       albertel   53:     my (undef,undef,$udom,$uname,$ufile)=split(/\//,$r->uri);
1.2       www        54:     $ufile=~s/^[\~\.]+//;
1.7     ! www        55:     my $remoteserver=$ENV{'form.tokenissued'};
1.2       www        56:     my $reply=&Apache::lonnet::reply('tokenauthuserfile:'.
                     57:                  $udom.'/'.$uname.'/'.$ufile.':'.$ENV{'form.token'},
1.4       albertel   58: 				     $remoteserver);
1.2       www        59:     if ($reply eq 'ok') {
                     60:        return OK;
                     61:    } else {
                     62:        &Apache::lonnet::logthis(
1.7     ! www        63: "Refused userfile access $uname at $udom for $ufile with $remoteserver token $ENV{'form.token'}: $reply");
1.2       www        64:        return FORBIDDEN;
                     65:    }
1.1       www        66: }
                     67: 
                     68: 1;
                     69: __END__
                     70: 
                     71: 
                     72: 
                     73: 
                     74: 
                     75: 
                     76: 

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>