53 lines
		
	
	
		
			2.2 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
			
		
		
	
	
			53 lines
		
	
	
		
			2.2 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
| <?php
 | |
| 	error_reporting(E_ALL ^ E_NOTICE);
 | |
| 
 | |
| 	include_once('../include/lucidAuth.functions.php');
 | |
| 	
 | |
| 	echo $settings->Debug['Verbose'];
 | |
|   
 | |
| 	if ($_POST['do'] == 'login') {
 | |
| 		$result = authenticateLDAP($_POST['username'], $_POST['password']);
 | |
| 		if ($result['status'] == 'Success') {
 | |
| 			// Store authentication token; in database serverside & in cookie clientside
 | |
| 			if (storeToken($result['token'], $settings->LDAP['Domain'] . '\\' . $_POST['username'], $_SERVER['HTTP_HOST'])['status'] !== 'Success') {
 | |
| 				// Since this action is only ever called through an AJAX-request; return JSON object
 | |
| 				echo '{"Result":"Fail","Reason":"Failed storing authentication token in database and/or cookie"}' . PHP_EOL;
 | |
| 				exit;
 | |
| 			}
 | |
|             
 | |
| 			// Convert base64 encoded string back from JSON;
 | |
| 			//   forcing it into an associative array (instead of javascript's default StdClass object)
 | |
| 			try {
 | |
| 				$proxyHeaders = json_decode(base64_decode($_POST['ref']), JSON_OBJECT_AS_ARRAY);
 | |
| 			}
 | |
| 			catch (Exception $e) {
 | |
| 				// Since this action is only ever called through an AJAX-request; return JSON object
 | |
| 				echo '{"Result":"Fail","Reason":"Original request URI lost in transition"}' . PHP_EOL;
 | |
| 				exit;
 | |
| 			}
 | |
| 			$originalUri = !empty($proxyHeaders) ? $proxyHeaders['XForwardedProto'] . '://' . $proxyHeaders['XForwardedHost'] . $proxyHeaders['XForwardedUri'] : 'lucidAuth.manage.php';
 | |
| 
 | |
| 			// Since this request is only ever called through an AJAX-request; return JSON object
 | |
| 			header('Content-Type: application/json');
 | |
| 			echo json_encode([
 | |
| 				"Result"			=>	"Success",
 | |
| 				"Location"			=>	$originalUri,
 | |
| 				"CrossDomainLogin"	=>	$settings->Session['CrossDomainLogin']
 | |
| 			]);
 | |
| #			echo sprintf('{"Result":"Success","Location":"%1$s","CrossDomainLogin":%2$s}', $originalUri, $settings->Session['CrossDomainLogin'] ? 'True' : 'False') . PHP_EOL;
 | |
| 		} else {
 | |
| 			switch ($result['reason']) {
 | |
| 				case '1':
 | |
| 					echo '{"Result":"Fail","Reason":"Invalid username and/or password"}' . PHP_EOL;
 | |
| 					break;
 | |
| 				default:
 | |
| 					echo '{"Result":"Fail","Reason":"Uncaught error"}' . PHP_EOL;
 | |
| 			}
 | |
| 		}
 | |
| 	} else {
 | |
| 		include_once('../include/lucidAuth.template.php');
 | |
| 
 | |
| 		echo sprintf($pageLayout['full'], $contentLayout['login']);
 | |
| 	}
 | |
| 
 | |
| ?>
 | 
