From 1ffa1641607821c543deb2292e5a7dd1d88eca2d Mon Sep 17 00:00:00 2001
From: djpbessems <github.com.danny@spamasaurus.com>
Date: Mon, 25 Feb 2019 15:00:32 +0100
Subject: [PATCH] Added placeholder management page (usermanagement,
 dbmanagement)

---
 README.md                      |  2 +-
 include/lucidAuth.template.php |  3 +--
 public/lucidAuth.login.php     | 22 +++++++++++++++-------
 public/lucidAuth.manage.php    | 19 +++++++++++++++++++
 public/misc/script.manage.js   |  0
 5 files changed, 36 insertions(+), 10 deletions(-)
 create mode 100644 public/lucidAuth.manage.php
 create mode 100644 public/misc/script.manage.js

diff --git a/README.md b/README.md
index c8c5c49..18d6b8f 100644
--- a/README.md
+++ b/README.md
@@ -29,4 +29,4 @@ Forward Authentication for use with proxies (caddy, nginx, traefik, etc)
   The domainname of the website made in step 3, needs to match the domainname (*ignoring subdomains, if any*) of the resource utilizing this authentication proxy.
 
 ## Questions or bugs
-Feel free to open issues in this repository (or in its mirror on [GitHub](#)).
\ No newline at end of file
+Feel free to open issues in this repository.
\ No newline at end of file
diff --git a/include/lucidAuth.template.php b/include/lucidAuth.template.php
index f0ce42a..cedb154 100644
--- a/include/lucidAuth.template.php
+++ b/include/lucidAuth.template.php
@@ -81,7 +81,7 @@ $contentLayout['login'] = <<<LOGIN
           <img src="/images/tag_lock.png" style="position: absolute; top: 175px; left: 20px;" alt="Secure!" />
 LOGIN;
 
-$contentLayout['manage'] = <<<MANAGE
+$contentLayout['manage'] = <<<'MANAGE'
 		  <script src="misc/script.manage.js"></script>
           <span id="user"><span data-translation="span_loggedinas">Ingelogd als</span>&nbsp;{$_SESSION['fullname']}&nbsp;---&nbsp;[<a id="linkplugindialog" tabindex="600" data-translation="link_plugin">Browser plugin</a><div id="pluginlogos"><span data-translation="label_selectbrowser" style="float: left; margin-left: 5px;">Select browser:</span><span style="font-size: 8px; float: right; margin-right: 5px; margin-top: 2px;">[v0.2.122.4]</span><br /><img id="linkpluginchrome" src="images/chrome_256x256.png" /><img id="linkpluginfirefox" src="images/firefox_256x256.png" /><img id="linkpluginopera" src="images/opera_256x256.png" /></div>]&nbsp;[<a id="linklanguage-en" href="#" tabindex="700">EN</a>&nbsp;<a id="linklanguage-nl" class="current" href="#" tabindex="700">NL</a>]&nbsp;[<a href="index.php?do=logout" tabindex="800" data-translation="link_logout">Log uit</a>]</span>
 <!--          <fieldset style="clear: both;">
@@ -119,5 +119,4 @@ $contentLayout['dialog'] = <<<DIALOG
           </ul>
 DIALOG;
 
-
 ?>
\ No newline at end of file
diff --git a/public/lucidAuth.login.php b/public/lucidAuth.login.php
index 062394b..005013a 100644
--- a/public/lucidAuth.login.php
+++ b/public/lucidAuth.login.php
@@ -2,12 +2,10 @@
 	error_reporting(E_ALL ^ E_NOTICE);
 
 	include_once('../include/lucidAuth.functions.php');
-	
-	echo $settings->Debug['Verbose'];
-  
+
 	if ($_POST['do'] == 'login') {
 		$result = authenticateLDAP($_POST['username'], $_POST['password']);
-		if ($result['status'] == 'Success') {
+		if ($result['status'] === 'Success') {
 			// Store authentication token; in database serverside & in cookie clientside
 			if (storeToken($result['token'], $settings->LDAP['Domain'] . '\\' . $_POST['username'], $_SERVER['HTTP_HOST'])['status'] !== 'Success') {
 				// Since this action is only ever called through an AJAX-request; return JSON object
@@ -34,14 +32,24 @@
 				"Location"			=>	$originalUri,
 				"CrossDomainLogin"	=>	$settings->Session['CrossDomainLogin']
 			]);
-#			echo sprintf('{"Result":"Success","Location":"%1$s","CrossDomainLogin":%2$s}', $originalUri, $settings->Session['CrossDomainLogin'] ? 'True' : 'False') . PHP_EOL;
 		} else {
 			switch ($result['reason']) {
 				case '1':
-					echo '{"Result":"Fail","Reason":"Invalid username and/or password"}' . PHP_EOL;
+					header('Content-Type: application/json');
+					echo json_encode([
+						"Result"	=>	"Failure",
+						"Reason"	=>	"Invalid username and/or password"
+					]);
+#					echo '{"Result":"Fail","Reason":"Invalid username and/or password"}' . PHP_EOL;
 					break;
 				default:
-					echo '{"Result":"Fail","Reason":"Uncaught error"}' . PHP_EOL;
+					header('Content-Type: application/json');
+					echo json_encode([
+						"Result"	=>	"Failure",
+						"Reason"	=>	"Uncaught error"
+					]);
+#					echo '{"Result":"Fail","Reason":"Uncaught error"}' . PHP_EOL;
+					break;
 			}
 		}
 	} else {
diff --git a/public/lucidAuth.manage.php b/public/lucidAuth.manage.php
new file mode 100644
index 0000000..4d82869
--- /dev/null
+++ b/public/lucidAuth.manage.php
@@ -0,0 +1,19 @@
+<?php
+	error_reporting(E_ALL ^ E_NOTICE);
+
+	include_once('../include/lucidAuth.functions.php');
+
+	if (!empty($_COOKIE['JWT']) && validateToken($_COOKIE['JWT'])['status'] === "Success") {
+		include_once('../include/lucidAuth.template.php');
+
+		echo sprintf($pageLayout['full'], $contentLayout['manage']);
+	} else {
+		// No cookie containing valid authentication token found;
+		//   explicitly deleting any remaining cookie, then redirecting to loginpage
+		setcookie('JWT', FALSE);
+
+		header("HTTP/1.1 401 Unauthorized");
+		header("Location: lucidAuth.login.php");
+	}
+
+?>
\ No newline at end of file
diff --git a/public/misc/script.manage.js b/public/misc/script.manage.js
new file mode 100644
index 0000000..e69de29