Skip to content
Snippets Groups Projects
Select Git revision
  • develop
  • 6.0
  • 5.0
  • 4.0
  • scrutinizer-patch-4
  • 3.9 default
  • scrutinizer-patch-3
  • scrutinizer-patch-2
  • scrutinizer-patch-1
  • 3.7
  • 3.8
  • 3.6
  • 3.9_backported
  • 3.8_backported
  • 3.7_backported
  • 3.5
  • 3.6_backported
  • 3.5_backported
  • 3.4
  • 3.3_backported
  • 6.0.4
  • 6.0.3
  • 5.0.7
  • 6.0.2
  • 6.0.1
  • 5.0.6
  • 6.0.0
  • 5.0.5
  • 6.0.0-rc
  • 5.0.4
  • 6.0.0-beta
  • 5.0.3
  • 4.0.6
  • 5.0.2
  • 5.0.1
  • 4.0.5
  • 5.0.0
  • 4.0.4
  • 5.0.0-rc2
  • 5.0.0-rc1
40 results

oauthlogintokens.php

Blame
  • oauthlogintokens.php 13.10 KiB
    <?php
    /* Copyright (C) 2013-2016  Laurent Destailleur  <eldy@users.sourceforge.net>
     * Copyright (C) 2014-2015  Frederic France      <frederic.france@free.fr>
     *
     * This program is free software; you can redistribute it and/or modify
     * it under the terms of the GNU General Public License as published by
     * the Free Software Foundation; either version 3 of the License, or
     * (at your option) any later version.
     *
     * This program is distributed in the hope that it will be useful,
     * but WITHOUT ANY WARRANTY; without even the implied warranty of
     * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
     * GNU General Public License for more details.
     *
     * You should have received a copy of the GNU General Public License
     * along with this program. If not, see <http://www.gnu.org/licenses/>.
     */
    
    /**
     * \file        htdocs/admin/oauthlogintoken.php
     * \ingroup     oauth
     * \brief       Setup page to configure oauth access to login information
     */
    
    require '../main.inc.php';
    require_once DOL_DOCUMENT_ROOT.'/core/lib/admin.lib.php';
    require_once DOL_DOCUMENT_ROOT.'/core/lib/oauth.lib.php';
    require_once DOL_DOCUMENT_ROOT.'/core/class/doleditor.class.php';
    use OAuth\Common\Storage\DoliStorage;
    
    $langs->load("admin");
    $langs->load("printing");
    $langs->load("oauth");
    
    if (! $user->admin) accessforbidden();
    
    $action = GETPOST('action','alpha');
    $mode = GETPOST('mode','alpha');
    $value = GETPOST('value','alpha');
    $varname = GETPOST('varname', 'alpha');
    $driver = GETPOST('driver', 'alpha');
    
    if (! empty($driver)) $langs->load($driver);
    
    if (!$mode) $mode='setup';
    
    
    /*
     * Action
     */
    
    /*if (($mode == 'test' || $mode == 'setup') && empty($driver))
    {
        setEventMessages($langs->trans('PleaseSelectaDriverfromList'), null);
        header("Location: ".$_SERVER['PHP_SELF'].'?mode=config');
        exit;
    }*/
    
    if ($action == 'setconst' && $user->admin)
    {
        $error=0;
        $db->begin();
        foreach ($_POST['setupdriver'] as $setupconst) {
            //print '<pre>'.print_r($setupconst, true).'</pre>';
            $result=dolibarr_set_const($db, $setupconst['varname'],$setupconst['value'],'chaine',0,'',$conf->entity);
            if (! $result > 0) $error++;
        }
    
        if (! $error)
        {
            $db->commit();
            setEventMessages($langs->trans("SetupSaved"), null);
        }
        else
        {
            $db->rollback();
            dol_print_error($db);
        }
        $action='';
    }
    
    if ($action == 'setvalue' && $user->admin)
    {
        $db->begin();
    
        $result=dolibarr_set_const($db, $varname, $value,'chaine',0,'',$conf->entity);
        if (! $result > 0) $error++;
    
        if (! $error)
        {
            $db->commit();
            setEventMessages($langs->trans("SetupSaved"), null);
        }
        else
        {
            $db->rollback();
            dol_print_error($db);
        }
        $action = '';
    }
    
    
    /*
     * View
     */
    
    // Define $urlwithroot
    $urlwithouturlroot=preg_replace('/'.preg_quote(DOL_URL_ROOT,'/').'$/i','',trim($dolibarr_main_url_root));
    $urlwithroot=$urlwithouturlroot.DOL_URL_ROOT;		// This is to use external domain name found into config file
    //$urlwithroot=DOL_MAIN_URL_ROOT;					// This is to use same domain name than current
    
    $form = new Form($db);
    
    llxHeader('',$langs->trans("PrintingSetup"));
    
    $linkback='<a href="'.DOL_URL_ROOT.'/admin/modules.php">'.$langs->trans("BackToModuleList").'</a>';
    print load_fiche_titre($langs->trans('ConfigOAuth'),$linkback,'title_setup');
    
    $head=oauthadmin_prepare_head($mode);
    
    dol_fiche_head($head, 'tokengeneration', '', 0, 'technic');
    
    
    if ($mode == 'setup' && $user->admin)
    {
    
        print $langs->trans("OAuthSetupForLogin")."<br><br>\n";
    
        foreach($list as $key)
        {
            $supported=0;
            if (in_array($key[0], array_keys($supportedoauth2array))) $supported=1;
            if (! $supported) continue;     // show only supported
            
            
            $OAUTH_SERVICENAME='Unknown';
            if ($key[0] == 'OAUTH_GITHUB_NAME')
            {
                $OAUTH_SERVICENAME='GitHub';
                $urltorenew=$urlwithroot.'/core/modules/oauth/github_oauthcallback.php?state=user,public_repo&backtourl='.urlencode(DOL_URL_ROOT.'/admin/oauthlogintokens.php');
                $urltodelete=$urlwithroot.'/core/modules/oauth/github_oauthcallback.php?action=delete&backtourl='.urlencode(DOL_URL_ROOT.'/admin/oauthlogintokens.php');
                $urltocheckperms='https://github.com/settings/applications/';
            }
            if ($key[0] == 'OAUTH_GOOGLE_NAME')
            {
                $OAUTH_SERVICENAME='Google';
                $urltorenew=$urlwithroot.'/core/modules/oauth/google_oauthcallback.php?state=userinfo_email,userinfo_profile,cloud_print&backtourl='.urlencode(DOL_URL_ROOT.'/admin/oauthlogintokens.php');
                $urltodelete=$urlwithroot.'/core/modules/oauth/google_oauthcallback.php?action=delete&backtourl='.urlencode(DOL_URL_ROOT.'/admin/oauthlogintokens.php');
                $urltocheckperms='https://security.google.com/settings/security/permissions';
            }
            
            // Show value of token
            $tokenobj=null;
            // Token
            require_once DOL_DOCUMENT_ROOT.'/includes/OAuth/bootstrap.php';
            require_once DOL_DOCUMENT_ROOT.'/includes/OAuth/bootstrap.php';
            // Dolibarr storage
            $storage = new DoliStorage($db, $conf);
            try
            {
                $tokenobj = $storage->retrieveAccessToken($OAUTH_SERVICENAME);
            }
            catch(Exception $e)
            {
                // Return an error if token not found
            }
            
            // Set other properties
            $refreshtoken=false;
            $expiredat='';
            
            $expire = false;
            // Is token expired or will token expire in the next 30 seconds
            if (is_object($tokenobj)) {
                $expire = ($tokenobj->getEndOfLife() !== $tokenobj::EOL_NEVER_EXPIRES && $tokenobj->getEndOfLife() !== $tokenobj::EOL_UNKNOWN && time() > ($tokenobj->getEndOfLife() - 30));
            }
            
            if ($key[1] != '' && $key[2] != '') {
                if (is_object($tokenobj)) {
                    $refreshtoken = $tokenobj->getRefreshToken();
                    
                    $endoflife = $tokenobj->getEndOfLife();
                    if ($endoflife == $tokenobj::EOL_NEVER_EXPIRES)
                    {
                        $expiredat = $langs->trans("Never");
                    }
                    elseif ($endoflife == $tokenobj::EOL_UNKNOWN)
                    {
                        $expiredat = $langs->trans("Unknown");
                    }
                    else
                    {
                        $expiredat=dol_print_date($endoflife, "dayhour");
                    }
                }
            }
    
            $submit_enabled=0;
            
            print '<form method="post" action="'.$_SERVER["PHP_SELF"].'?mode=setup&amp;driver='.$driver.'" autocomplete="off">';
            print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
            print '<input type="hidden" name="action" value="setconst">';
        
            
            print '<table class="noborder" width="100%">'."\n";
            
            $var=false;
            print '<tr class="liste_titre">';
            print '<th class="titlefieldcreate">'.$langs->trans($key[0]).'</th>';
            print '<th></th>';
            print '<th></th>';
            print "</tr>\n";
            
            print '<tr '.$bc[$var].'>';
            print '<td'.($key['required']?' class="required"':'').'>';
            //var_dump($key);
            print $langs->trans("OAuthIDSecret").'</td>';
            print '<td>';
            print $langs->trans("SeePreviousTab");
            print '</td>';
            print '<td>';
            print '</td>';
            print '</tr>'."\n";
            
            $var = ! $var;
            print '<tr '.$bc[$var].'>';
            print '<td'.($key['required']?' class="required"':'').'>';
            //var_dump($key);
            print $langs->trans("IsTokenGenerated");
            print '</td>';
            print '<td>';
            if (is_object($tokenobj)) print $langs->trans("HasAccessToken");
            else print $langs->trans("NoAccessToken");
            print '</td>';
            print '<td>';
            // Links to delete/checks token
            if (is_object($tokenobj))
            {
                //test on $storage->hasAccessToken($OAUTH_SERVICENAME) ?
                print '<a class="button" href="'.$urltodelete.'">'.$langs->trans('DeleteAccess').'</a><br><br>';
            }
            // Request remote token
            print '<a class="button" href="'.$urltorenew.'">'.$langs->trans('RequestAccess').'</a><br><br>';
            // Check remote access
            if ($urltocheckperms)
            {
                print $langs->trans("ToCheckDeleteTokenOnProvider", $OAUTH_SERVICENAME).': <a href="'.$urltocheckperms.'" target="_'.strtolower($OAUTH_SERVICENAME).'">'.$urltocheckperms.'</a>';
            }
            print '</td>';
            print '</tr>';
            
            $var = ! $var;
            print '<tr '.$bc[$var].'>';
            print '<td'.($key['required']?' class="required"':'').'>';
            //var_dump($key);
            print $langs->trans("Token").'</td>';
            print '<td colspan="2">';
            if (is_object($tokenobj))
            {
                //var_dump($tokenobj);
                print $tokenobj->getAccessToken().'<br>';
                //print 'Refresh: '.$tokenobj->getRefreshToken().'<br>';
                //print 'EndOfLife: '.$tokenobj->getEndOfLife().'<br>';
                //var_dump($tokenobj->getExtraParams());
                /*print '<br>Extra: <br><textarea class="quatrevingtpercent">';
                print ''.join(',',$tokenobj->getExtraParams());
                print '</textarea>';*/
            }        
            print '</td>';
            print '</tr>'."\n";
    
            if (is_object($tokenobj))
            {
                // Token refresh
                $var = ! $var;
                print '<tr '.$bc[$var].'>';
                print '<td'.($key['required']?' class="required"':'').'>';
                //var_dump($key);
                print $langs->trans("TOKEN_REFRESH").'</td>';
                print '<td colspan="2">';
                print yn($refreshtoken);
                print '</td>';
                print '</tr>';
        
                // Token expired
                $var = ! $var;
                print '<tr '.$bc[$var].'>';
                print '<td'.($key['required']?' class="required"':'').'>';
                //var_dump($key);
                print $langs->trans("TOKEN_EXPIRED").'</td>';
                print '<td colspan="2">';
                print yn($expire);
                print '</td>';
                print '</tr>';
                
                // Token expired at
                $var = ! $var;
                print '<tr '.$bc[$var].'>';
                print '<td'.($key['required']?' class="required"':'').'>';
                //var_dump($key);
                print $langs->trans("TOKEN_EXPIRE_AT").'</td>';
                print '<td colspan="2">';
                print $expiredat;
                print '</td>';
                print '</tr>';        
            }
            
            print '</table>';
    
            if (! empty($driver))
            {
                if ($submit_enabled) {
                    print '<div class="center"><input type="submit" class="button" value="'.dol_escape_htmltag($langs->trans("Modify")).'"></div>';
                }
            }
    
            
            print '</form>';
        }
        
    }
    
    if ($mode == 'test' && $user->admin)
    {
        print $langs->trans('PrintTestDesc'.$driver)."<br><br>\n";
    
        print '<table class="noborder" width="100%">';
        if (! empty($driver))
        {
            require_once DOL_DOCUMENT_ROOT.'/core/modules/printing/'.$driver.'.modules.php';
            $classname = 'printing_'.$driver;
            $langs->load($driver);
            $printer = new $classname($db);
            //print '<pre>'.print_r($printer, true).'</pre>';
            if (count($printer->getlist_available_printers())) {
                if ($printer->listAvailablePrinters()==0) {
                    print $printer->resprint;
                } else {
                    setEventMessages($printer->error, $printer->errors, 'errors');
                }
            }
            else {
                print $langs->trans('PleaseConfigureDriverfromList');
            }
    
        }
        
        print '</table>';
    
    }
    
    if ($mode == 'userconf' && $user->admin)
    {
        print $langs->trans('PrintUserConfDesc'.$driver)."<br><br>\n";
    
        print '<table class="noborder" width="100%">';
        $var=true;
        print '<tr class="liste_titre">';
        print '<th>'.$langs->trans("User").'</th>';
        print '<th>'.$langs->trans("PrintModule").'</th>';
        print '<th>'.$langs->trans("PrintDriver").'</th>';
        print '<th>'.$langs->trans("Printer").'</th>';
        print '<th>'.$langs->trans("PrinterLocation").'</th>';
        print '<th>'.$langs->trans("PrinterId").'</th>';
        print '<th>'.$langs->trans("NumberOfCopy").'</th>';
        print '<th class="center">'.$langs->trans("Delete").'</th>';
        print "</tr>\n";
        $sql = 'SELECT p.rowid, p.printer_name, p.printer_location, p.printer_id, p.copy, p.module, p.driver, p.userid, u.login FROM '.MAIN_DB_PREFIX.'printing as p, '.MAIN_DB_PREFIX.'user as u WHERE p.userid=u.rowid';
        $resql = $db->query($sql);
        while ($row=$db->fetch_array($resql)) {
            $var=!$var;
            print '<tr '.$bc[$var].'>';
            print '<td>'.$row['login'].'</td>';
            print '<td>'.$row['module'].'</td>';
            print '<td>'.$row['driver'].'</td>';
            print '<td>'.$row['printer_name'].'</td>';
            print '<td>'.$row['printer_location'].'</td>';
            print '<td>'.$row['printer_id'].'</td>';
            print '<td>'.$row['copy'].'</td>';
            print '<td class="center">'.img_picto($langs->trans("Delete"), 'delete').'</td>';
            print "</tr>\n";
        }
        print '</table>';
    }
    
    dol_fiche_end();
    
    llxFooter();
    
    $db->close();