version 1.49, 2020/12/18 15:23:03
|
version 1.58, 2022/02/24 00:13:54
|
Line 30 package Apache::migrateuser;
|
Line 30 package Apache::migrateuser;
|
|
|
use strict; |
use strict; |
use LONCAPA qw(:DEFAULT :match); |
use LONCAPA qw(:DEFAULT :match); |
use Apache::Constants qw(:common :http :methods); |
use Apache::Constants qw(:common :http :methods :remotehost); |
use Apache::lonauth; |
use Apache::lonauth; |
use Apache::lonnet; |
use Apache::lonnet; |
use Apache::loncommon; |
use Apache::loncommon; |
Line 253 sub ip_changed {
|
Line 253 sub ip_changed {
|
if ($hostname) { |
if ($hostname) { |
my $protocol = $Apache::lonnet::protocol{$switchto}; |
my $protocol = $Apache::lonnet::protocol{$switchto}; |
$protocol = 'http' if ($protocol ne 'https'); |
$protocol = 'http' if ($protocol ne 'https'); |
|
my $alias = &Apache::lonnet::use_proxy_alias($r,$switchto); |
|
$hostname = $alias if ($alias ne ''); |
$url = $protocol.'://'.$hostname; |
$url = $protocol.'://'.$hostname; |
if ($rule_in_effect eq 'balancer') { |
if ($rule_in_effect eq 'balancer') { |
$message .= '<br />'. |
$message .= '<br />'. |
Line 281 sub ip_changed {
|
Line 283 sub ip_changed {
|
my %info= ( |
my %info= ( |
'domain' => $udom, |
'domain' => $udom, |
'username' => $dataref->{'username'}, |
'username' => $dataref->{'username'}, |
'role' => $dataref->{'role'}, |
|
'sessionserver' => $lonhost, |
'sessionserver' => $lonhost, |
); |
); |
if ($dataref->{'origurl'}) { |
my @names = ('origurl','symb','role','linkprot','linkkey'); |
$info{'origurl'} = $dataref->{'origurl'}; |
foreach my $name (@names) { |
} |
if ($dataref->{$name} ne '') { |
if ($dataref->{'symb'}) { |
$info{$name} = $dataref->{$name}; |
$info{'symb'} = $dataref->{'symb'}; |
} |
} |
} |
my $iptoken = &Apache::lonnet::tmpput(\%info,$switchto); |
my $iptoken = &Apache::lonnet::tmpput(\%info,$switchto,'link'); |
unless ($iptoken eq 'conlost') { |
unless ($iptoken eq 'conlost') { |
$url .= ($url =~ /\?/) ? '&' : '?'; |
$url .= (($url =~ /\?/) ? '&' : '?') . 'iptoken='.$iptoken; |
$url .= 'iptoken='.$iptoken; |
|
} |
} |
$r->print(&Apache::loncommon::start_page($title,undef, |
$r->print(&Apache::loncommon::start_page($title,undef, |
{'redirect' => |
{'redirect' => |
Line 308 sub ip_changed {
|
Line 308 sub ip_changed {
|
} |
} |
|
|
sub logout { |
sub logout { |
my ($r,$handle,$data,$lti_env) = @_; |
my ($r,$ip,$handle,$data,$lti_env) = @_; |
my $lonidsdir=$r->dir_config('lonIDsDir'); |
my $lonidsdir=$r->dir_config('lonIDsDir'); |
if (unlink("$lonidsdir/$handle.id")) { |
if (unlink("$lonidsdir/$handle.id")) { |
if (($env{'user.linkedenv'} =~ /^[a-f0-9]+_linked$/) && |
if (($env{'user.linkedenv'} =~ /^[a-f0-9]+_linked$/) && |
Line 319 sub logout {
|
Line 319 sub logout {
|
} |
} |
my %temp=('logout' => time); |
my %temp=('logout' => time); |
&Apache::lonnet::put('email_status',\%temp); |
&Apache::lonnet::put('email_status',\%temp); |
my $ip = &Apache::lonnet::get_requestor_ip(); |
|
&Apache::lonnet::log($env{'user.domain'}, |
&Apache::lonnet::log($env{'user.domain'}, |
$env{'user.name'}, |
$env{'user.name'}, |
$env{'user.home'}, |
$env{'user.home'}, |
Line 588 sub handler {
|
Line 587 sub handler {
|
} |
} |
my ($home,@ids); |
my ($home,@ids); |
@ids=&Apache::lonnet::current_machine_ids(); |
@ids=&Apache::lonnet::current_machine_ids(); |
my $ip = &Apache::lonnet::get_requestor_ip(); |
my $ip = &Apache::lonnet::get_requestor_ip($r,REMOTE_NOLOOKUP); |
if ($data{'ip'} ne $ip) { |
if ($data{'ip'} ne $ip) { |
&Apache::lonnet::logthis('IP change when session migration requested -- was: '. |
&Apache::lonnet::logthis('IP change when session migration requested -- was: '. |
$data{'ip'}.'; now: '.$ip.' for '.$data{'username'}.':'.$data{'domain'}); |
$data{'ip'}.'; now: '.$ip.' for '.$data{'username'}.':'.$data{'domain'}); |
Line 704 sub handler {
|
Line 703 sub handler {
|
} |
} |
} |
} |
} else { |
} else { |
my $handle = &Apache::lonnet::check_for_valid_session($r); |
my ($handle,$expirepub); |
|
$handle = &Apache::lonnet::check_for_valid_session($r); |
|
|
|
# For "public user" - remove any existing "public" cookie so actual user is logged in. |
|
if ($handle) { |
|
if ($handle=~/^publicuser\_/) { |
|
my $lonidsdir=$r->dir_config('lonIDsDir'); |
|
if ($lonidsdir ne '') { |
|
unlink("$lonidsdir/$handle.id"); |
|
} |
|
undef($handle); |
|
$expirepub = 1; |
|
} |
|
} |
if ($handle) { |
if ($handle) { |
&Apache::lonnet::transfer_profile_to_env($r->dir_config('lonIDsDir'), |
&Apache::lonnet::transfer_profile_to_env($r->dir_config('lonIDsDir'), |
$handle); |
$handle); |
|
my $checklaunch; |
|
if ($data{'origurl'} =~ m{^/tiny/$match_domain/\w+$}) { |
|
unless ($env{'request.linkprot'} eq $data{'linkprot'}) { |
|
$checklaunch = 1; |
|
} |
|
unless ($env{'request.linkkey'} eq $data{'linkkey'}) { |
|
$checklaunch = 1; |
|
} |
|
unless ($env{'request.deeplink.login'} eq $data{'deeplink.login'}) { |
|
$checklaunch = 1; |
|
} |
|
} |
if ($data{'linkprot'} ne '') { |
if ($data{'linkprot'} ne '') { |
my ($linkprotector,$deeplink) = split(/:/,$data{'linkprot'},2); |
if (($env{'user.name'} ne $data{'username'}) || |
if ($deeplink ne '') { |
($env{'user.domain'} ne $data{'domain'})) { |
&Apache::lonnet::appenv({'request.deeplink.login' => $deeplink}); |
my %linkprot_env; |
|
foreach my $item ('linkprot','deeplink.login') { |
|
if ($data{$item}) { |
|
$linkprot_env{'request.'.$item} = $data{$item}; |
|
} |
|
} |
|
&logout($r,$ip,$handle,\%data,\%linkprot_env); |
|
return OK; |
|
} |
|
&Apache::lonnet::appenv({'request.linkprot' => $data{'linkprot'}}); |
|
if ($env{'request.linkkey'}) { |
|
&Apache::lonnet::delenv('request.linkkey'); |
} |
} |
|
my ($linkprotector,$deeplink) = split(/:/,$data{'linkprot'},2); |
if ($env{'user.linkprotector'}) { |
if ($env{'user.linkprotector'}) { |
my @protectors = split(/,/,$env{'user.linkprotector'}); |
my @protectors = split(/,/,$env{'user.linkprotector'}); |
unless (grep(/^\Q$linkprotector\E$/,@protectors)) { |
unless (grep(/^\Q$linkprotector\E$/,@protectors)) { |
Line 733 sub handler {
|
Line 769 sub handler {
|
} else { |
} else { |
&Apache::lonnet::appenv({'user.linkproturi' => $deeplink}); |
&Apache::lonnet::appenv({'user.linkproturi' => $deeplink}); |
} |
} |
} elsif ($data{'deeplink.login'}) { |
} elsif ($data{'linkkey'} ne '') { |
|
&Apache::lonnet::appenv({'request.linkkey' => $data{'linkkey'}}); |
|
if ($env{'request.linkprot'}) { |
|
&Apache::lonnet::delenv('request.linkprot'); |
|
} |
my $deeplink = $data{'deeplink.login'}; |
my $deeplink = $data{'deeplink.login'}; |
if ($data{'linkkey'}) { |
my $linkkey = $data{'linkkey'}; |
my $linkkey = $data{'linkkey'}; |
if ($env{'user.deeplinkkey'} ne '') { |
if ($env{'user.deeplinkkey'}) { |
my @linkkeys = split(/,/,$env{'user.deeplinkkey'}); |
my @linkkeys = split(/,/,$env{'user.deeplinkkey'}); |
unless (grep(/^\Q$linkkey\E$/,@linkkeys)) { |
unless (grep(/^\Q$linkkey\E$/,@linkkeys)) { |
push(@linkkeys,$linkkey); |
push(@linkkeys,$linkkey); |
&Apache::lonnet::appenv({'user.deeplinkkey' => join(',',sort(@linkkeys))}); |
&Apache::lonnet::appenv({'user.deeplinkkey' => join(',',sort(@linkkeys))}); |
|
} |
|
} else { |
|
&Apache::lonnet::appenv({'user.deeplinkkey' => $linkkey}); |
|
} |
} |
|
} else { |
|
&Apache::lonnet::appenv({'user.deeplinkkey' => $linkkey}); |
|
} |
|
if ($deeplink) { |
if ($env{'user.keyedlinkuri'}) { |
if ($env{'user.keyedlinkuri'}) { |
my @keyeduris = split(/,/,$env{'user.keyedlinkuri'}); |
my @keyeduris = split(/,/,$env{'user.keyedlinkuri'}); |
unless (grep(/^\Q$deeplink\E$/,@keyeduris)) { |
unless (grep(/^\Q$deeplink\E$/,@keyeduris)) { |
Line 756 sub handler {
|
Line 796 sub handler {
|
&Apache::lonnet::appenv({'user.keyedlinkuri' => $deeplink}); |
&Apache::lonnet::appenv({'user.keyedlinkuri' => $deeplink}); |
} |
} |
} |
} |
|
} |
|
if ($data{'deeplink.login'}) { |
&Apache::lonnet::appenv({'request.deeplink.login' => $data{'deeplink.login'}}); |
&Apache::lonnet::appenv({'request.deeplink.login' => $data{'deeplink.login'}}); |
} |
} |
if ($data{'lti.login'}) { |
if ($data{'lti.login'}) { |
Line 772 sub handler {
|
Line 814 sub handler {
|
# (and session) or has an LTI session cookie for a different username, |
# (and session) or has an LTI session cookie for a different username, |
# logout the existing session, and start a new one |
# logout the existing session, and start a new one |
if ($needslogout) { |
if ($needslogout) { |
&logout($r,$handle,\%data,$lti_env); |
&logout($r,$ip,$handle,\%data,$lti_env); |
} elsif (($data{'lti.reqcrs'}) && ($data{'lti.reqrole'} eq 'cc')) { |
} elsif (($data{'lti.reqcrs'}) && ($data{'lti.reqrole'} eq 'cc')) { |
$form{'lti.reqcrs'} = $data{'lti.reqcrs'}; |
$form{'lti.reqcrs'} = $data{'lti.reqcrs'}; |
$form{'lti.reqrole'} = $data{'lti.reqrole'}; |
$form{'lti.reqrole'} = $data{'lti.reqrole'}; |
Line 835 sub handler {
|
Line 877 sub handler {
|
} |
} |
} |
} |
} elsif ($data{'origurl'} ne '') { |
} elsif ($data{'origurl'} ne '') { |
$r->internal_redirect($data{'origurl'}); |
my $dest = $data{'origurl'}; |
|
if (($env{'request.deeplink.login'} eq $data{'origurl'}) && |
|
(($env{'request.linkprot'}) || ($env{'request.linkkey'} ne ''))) { |
|
my %info; |
|
if ($env{'request.linkprot'}) { |
|
$info{'linkprot'} = $env{'request.linkprot'}; |
|
} elsif ($env{'request.linkkey'} ne '') { |
|
$info{'linkkey'} = $env{'request.linkkey'}; |
|
} |
|
$info{'origurl'} = $data{'origurl'}; |
|
if ($checklaunch) { |
|
$info{'checklaunch'} = 1; |
|
} |
|
my $token = &Apache::lonnet::tmpput(\%info,$r->dir_config('lonHostID'),'link'); |
|
unless (($token eq 'con_lost') || ($token eq 'refused') || |
|
($token eq 'unknown_cmd') || ($token eq 'no_such_host')) { |
|
$dest .= (($dest =~ /\?/) ? '&' : '?') . 'ttoken='.$token; |
|
} |
|
} |
|
$r->internal_redirect($dest); |
} elsif ($env{'request.course.id'}) { |
} elsif ($env{'request.course.id'}) { |
$r->internal_redirect('/adm/navmaps'); |
$r->internal_redirect('/adm/navmaps'); |
} else { |
} else { |
Line 843 sub handler {
|
Line 904 sub handler {
|
} |
} |
} else { |
} else { |
my $desturl = '/adm/roles'; |
my $desturl = '/adm/roles'; |
if ($data{'lti.login'}) { |
if ($data{'lti.login'}) { |
if ($data{'lti.selfenrollrole'}) { |
if ($data{'lti.selfenrollrole'}) { |
$desturl .= '?selectrole=1&'. |
$desturl .= '?selectrole=1&'. |
&escape($data{'lti.selfenrollrole'}).'=1'; |
&escape($data{'lti.selfenrollrole'}).'=1'; |
Line 867 sub handler {
|
Line 928 sub handler {
|
if (ref($extra_env) eq 'HASH') { |
if (ref($extra_env) eq 'HASH') { |
$extra_env->{'user.linkprotector'} = $linkprotector; |
$extra_env->{'user.linkprotector'} = $linkprotector; |
$extra_env->{'user.linkproturi'} = $linkuri; |
$extra_env->{'user.linkproturi'} = $linkuri; |
|
$extra_env->{'request.linkprot'} = $data{'linkprot'}; |
} else { |
} else { |
$extra_env = {'user.linkprotector' => $linkprotector, |
$extra_env = {'user.linkprotector' => $linkprotector, |
'user.linkproturi' => $linkuri,}; |
'user.linkproturi' => $linkuri, |
} |
'request.linkprot' => $data{'linkprot'}}; |
} |
|
} elsif ($data{'deeplink.login'}) { |
|
if ($data{'linkkey'}) { |
|
if (ref($extra_env) eq 'HASH') { |
|
$extra_env->{'user.deeplinkkey'} = $data{'linkkey'}; |
|
$extra_env->{'user.keyedlinkuri'} = $data{'deeplink.login'}, |
|
} else { |
|
$extra_env = {'user.deeplinkkey' => $data{'linkkey'}, |
|
'user.keyedlinkuri' => $data{'deeplink.login'}}; |
|
} |
} |
} |
} |
|
} elsif ($data{'linkkey'} ne '') { |
if (ref($extra_env) eq 'HASH') { |
if (ref($extra_env) eq 'HASH') { |
$extra_env->{'request.deeplink.login' => $data{'deeplink.login'}}; |
$extra_env->{'user.deeplinkkey'} = $data{'linkkey'}; |
|
$extra_env->{'user.keyedlinkuri'} = $data{'deeplink.login'}; |
|
$extra_env->{'request.linkkey'} = $data{'linkkey'}; |
|
} else { |
|
$extra_env = {'user.deeplinkkey' => $data{'linkkey'}, |
|
'user.keyedlinkuri' => $data{'deeplink.login'}, |
|
'request.linkkey' => $data{'linkkey'}}; |
|
} |
|
} |
|
if ($data{'deeplink.login'}) { |
|
if (ref($extra_env) eq 'HASH') { |
|
$extra_env->{'request.deeplink.login'} = $data{'deeplink.login'}; |
} else { |
} else { |
$extra_env = {'request.deeplink.login' => $data{'deeplink.login'}}; |
$extra_env = {'request.deeplink.login' => $data{'deeplink.login'}}; |
} |
} |
Line 898 sub handler {
|
Line 963 sub handler {
|
} |
} |
} |
} |
&Apache::lonauth::success($r,$data{'username'},$data{'domain'}, |
&Apache::lonauth::success($r,$data{'username'},$data{'domain'}, |
$home,$desturl,$extra_env,\%form,$skipcritical); |
$home,$desturl,$extra_env,\%form,$skipcritical,'', |
|
$expirepub); |
} |
} |
return OK; |
return OK; |
} |
} |
Line 918 sub handler {
|
Line 984 sub handler {
|
$needslogout = 1; |
$needslogout = 1; |
} |
} |
if ($needslogout) { |
if ($needslogout) { |
&logout($r,$handle,\%data,$lti_env); |
&logout($r,$ip,$handle,\%data,$lti_env); |
return OK; |
return OK; |
} |
} |
} |
} |
Line 930 sub handler {
|
Line 996 sub handler {
|
($env{'request.role'} eq $data{'role'}) && ($data{'origurl'} ne '')) { |
($env{'request.role'} eq $data{'role'}) && ($data{'origurl'} ne '')) { |
$next_url = $data{'origurl'}; |
$next_url = $data{'origurl'}; |
$reuse_session = 1; |
$reuse_session = 1; |
|
} elsif ($data{'origurl'} =~ m{^/tiny/$match_domain/\w+$}) { |
|
$next_url=$data{'origurl'}; |
} else { |
} else { |
$next_url='/adm/roles?selectrole=1&'.&escape($data{'role'}).'=1'; |
$next_url='/adm/roles?selectrole=1&'.&escape($data{'role'}).'=1'; |
if ($data{'origurl'} ne '') { |
if ($data{'origurl'} ne '') { |
$next_url .= '&orgurl='.&escape($data{'origurl'}); |
$next_url .= '&orgurl='.&escape($data{'origurl'}); |
} |
} |
} |
} |
if ($data{'lti.login'}) { |
if ($data{'lti.login'}) { |
if (($data{'origurl'} =~ m{/default_\d+\.sequence$}) || |
if (($data{'origurl'} =~ m{/default_\d+\.sequence$}) || |
($data{'origurl'} =~ m{^/res/.+\.sequence$})) { |
($data{'origurl'} =~ m{^/res/.+\.sequence$})) { |
$next_url .= '&navmap=1'; |
$next_url .= '&navmap=1'; |
} |
} |
} |
} |
if ($reuse_session) { |
if ($reuse_session) { |
$r->internal_redirect($next_url); |
$r->internal_redirect($next_url); |
} else { |
} elsif ($data{'deeplink.login'}) { |
|
if (ref($extra_env) eq 'HASH') { |
|
$extra_env->{'request.deeplink.login'} = $data{'deeplink.login'}; |
|
} else { |
|
$extra_env = {'request.deeplink.login' => $data{'deeplink.login'}}; |
|
} |
|
if ($data{'linkprot'}) { |
|
$extra_env->{'request.linkprot'} = $data{'linkprot'}; |
|
} elsif ($data{'linkkey'} ne '') { |
|
$extra_env->{'request.linkkey'} = $data{'linkkey'}; |
|
} |
&Apache::lonauth::success($r,$data{'username'},$data{'domain'},$home, |
&Apache::lonauth::success($r,$data{'username'},$data{'domain'},$home, |
$next_url,$extra_env,\%form,'',$cid); |
$next_url,$extra_env,\%form,'',$cid); |
} |
} |