2019-01-16 10:37:35 +00:00
|
|
|
<?php
|
|
|
|
error_reporting(E_ALL ^ E_NOTICE);
|
|
|
|
|
|
|
|
include_once('../include/lucidAuth.functions.php');
|
|
|
|
|
2019-02-22 10:45:50 +00:00
|
|
|
echo $settings->Debug['Verbose'];
|
|
|
|
|
|
|
|
if ($_POST['do'] == 'login') {
|
2019-01-16 10:37:35 +00:00
|
|
|
$result = authenticateLDAP($_POST['username'], $_POST['password']);
|
2019-02-22 10:45:50 +00:00
|
|
|
if ($result['status'] == 'Success') {
|
2019-02-25 13:27:25 +00:00
|
|
|
// Store authentication token; in database serverside & in cookie clientside
|
|
|
|
if (storeToken($result['token'], $settings->LDAP['Domain'] . '\\' . $_POST['username'], $_SERVER['HTTP_HOST'])['status'] !== 'Success') {
|
|
|
|
// Since this action is only ever called through an AJAX-request; return JSON object
|
|
|
|
echo '{"Result":"Fail","Reason":"Failed storing authentication token in database and/or cookie"}' . PHP_EOL;
|
|
|
|
exit;
|
|
|
|
}
|
|
|
|
|
|
|
|
// Convert base64 encoded string back from JSON;
|
|
|
|
// forcing it into an associative array (instead of javascript's default StdClass object)
|
|
|
|
try {
|
|
|
|
$proxyHeaders = json_decode(base64_decode($_POST['ref']), JSON_OBJECT_AS_ARRAY);
|
|
|
|
}
|
|
|
|
catch (Exception $e) {
|
|
|
|
// Since this action is only ever called through an AJAX-request; return JSON object
|
|
|
|
echo '{"Result":"Fail","Reason":"Original request URI lost in transition"}' . PHP_EOL;
|
|
|
|
exit;
|
|
|
|
}
|
|
|
|
$originalUri = !empty($proxyHeaders) ? $proxyHeaders['XForwardedProto'] . '://' . $proxyHeaders['XForwardedHost'] . $proxyHeaders['XForwardedUri'] : 'lucidAuth.manage.php';
|
|
|
|
|
2019-02-22 10:45:50 +00:00
|
|
|
// Since this request is only ever called through an AJAX-request; return JSON object
|
2019-02-25 13:27:25 +00:00
|
|
|
header('Content-Type: application/json');
|
|
|
|
echo json_encode([
|
|
|
|
"Result" => "Success",
|
|
|
|
"Location" => $originalUri,
|
|
|
|
"CrossDomainLogin" => $settings->Session['CrossDomainLogin']
|
|
|
|
]);
|
|
|
|
# echo sprintf('{"Result":"Success","Location":"%1$s","CrossDomainLogin":%2$s}', $originalUri, $settings->Session['CrossDomainLogin'] ? 'True' : 'False') . PHP_EOL;
|
2019-01-16 10:37:35 +00:00
|
|
|
} else {
|
|
|
|
switch ($result['reason']) {
|
|
|
|
case '1':
|
|
|
|
echo '{"Result":"Fail","Reason":"Invalid username and/or password"}' . PHP_EOL;
|
|
|
|
break;
|
|
|
|
default:
|
|
|
|
echo '{"Result":"Fail","Reason":"Uncaught error"}' . PHP_EOL;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
} else {
|
|
|
|
include_once('../include/lucidAuth.template.php');
|
|
|
|
|
2019-02-25 13:27:25 +00:00
|
|
|
echo sprintf($pageLayout['full'], $contentLayout['login']);
|
2019-01-16 10:37:35 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
?>
|