From 3354d45762bbe0db33e3d26d8997e6f6624f24d7 Mon Sep 17 00:00:00 2001 From: winter Sparkles Date: Sun, 9 Aug 2026 02:26:33 +0100 Subject: implement sessions and also log in/out session data is stored in sqlite, not using php sessions --- routes/index.php | 12 +++++++ routes/login.php | 83 ++++++++++++++++++++++++++++++++++++++++++++++ routes/logout.php | 24 ++++++++++++++ routes/test-challenges.php | 67 ------------------------------------- 4 files changed, 119 insertions(+), 67 deletions(-) create mode 100644 routes/login.php create mode 100644 routes/logout.php delete mode 100644 routes/test-challenges.php (limited to 'routes') diff --git a/routes/index.php b/routes/index.php index 685ab92..f884be5 100644 --- a/routes/index.php +++ b/routes/index.php @@ -1,8 +1,20 @@ doc->addChild('content'); $content->addChild('p', 'Welcome to Pleasant SSO!'); + $identity = $session->getIdentity(); + $content->addChild('pre', 'Your identity: ' . print_r($identity, true)); + if ($identity === null) { + $link = $content->addChild('a', L('login.title')); + $link->addAttribute('href', '/login'); + } else { + $link = $content->addChild('a', L('logout.title')); + $link->addAttribute('href', '/logout'); + } $resp->send(); } diff --git a/routes/login.php b/routes/login.php new file mode 100644 index 0000000..2f73271 --- /dev/null +++ b/routes/login.php @@ -0,0 +1,83 @@ +setChallenges(null); + $session->setIdentity( + new Psso\Identity($context->user, $context->groups) + ); + header('Location: /'); //temporary crap for testing + return; + } + if (count($challengeTypes) == 0) { + throw new RuntimeException('no more challenges available!! auth fail'); + } + + // create challenges as indicated by the auth flow + $challenges = []; + foreach ($challengeTypes as $type) { + $c = $type::create($context); + $challenges[$c->serial] = $c; + } + + // send challenges to user + $resp = new Psso\XMLResponse; + $resp->doc->addAttribute('title', L('login.title')); + if (isset($message)) { + $resp->doc->addChild('challenge-message', L($message)); + } + foreach ($challenges as $challenge) { + $challenge->addAsHtml($resp->doc); + } + $resp->send(); + + // and store the challenges (actual instances!) for next request + $session->setChallenges($challenges); +} + +function GET() { + $session = Psso\Session::get(); + if ($session->getIdentity() !== null) { + // already logged in + header('Location: /'); // change this to return continue page + } + + $context = new Psso\Context; + presentChallenges($session, $context); +} + +function POST(array $config) { + $session = Psso\Session::get(); + + // we are receiving results of a previous challenge... load it in + $challenges = $session->getChallenges(); + $answeredChallenge = $challenges[$_POST['challenge']]; + + // match up the given input responses to their original Inputs + $inputData = []; + foreach ($_POST as $name => $value) { + if ($name == 'challenge') continue; + $serial = explode('__', $name, 2)[1]; + $input = $answeredChallenge->findInput($serial); + $inputData[$input->id] = $value; + } + + // check provided inputs against the challenge, are they correct? + $providerClass = 'Psso\\AuthProvider\\' . $config['auth']['provider']; + $provider = new $providerClass($config); + $result = $answeredChallenge->validate($provider, $inputData); + + // append the new result to the context so the auth flow can see it + $context = $answeredChallenge->context; + $context->addResult($result); + + // also set the user in context if we're able to + if ($result->successful && isset($result->user) && !isset($context->user)) { + $context->user = $result->user; + } + presentChallenges($session, $context, $result->message); +} diff --git a/routes/logout.php b/routes/logout.php new file mode 100644 index 0000000..21b2179 --- /dev/null +++ b/routes/logout.php @@ -0,0 +1,24 @@ +getIdentity() === null) { + // not actually logged in anyway + header('Location: /'); + return; + } + + $resp = new Psso\XMLResponse; + $resp->doc->addAttribute('title', L('logout.title')); + $form = $resp->doc->addChild('form'); + $form->addChild('p', L('logout.warning')); + $form->addAttribute('method', 'post'); + $form->addChild('button', L('logout.confirm')); + $resp->send(); +} + +function POST() { + $session = Psso\Session::get(); + $session->setIdentity(null); + header('Location: /'); +} diff --git a/routes/test-challenges.php b/routes/test-challenges.php deleted file mode 100644 index 32aad7e..0000000 --- a/routes/test-challenges.php +++ /dev/null @@ -1,67 +0,0 @@ -serial] = $c; - } - - $resp = new Psso\XMLResponse; - $resp->doc->addAttribute('title', L('login.title')); - if (isset($message)) { - $resp->doc->addChild('challenge-message', L($message)); - } - foreach ($challenges as $challenge) { - $challenge->addAsHtml($resp->doc); - } - $resp->send(); - // instead of just saving this to a file, it needs to be associated with the - // user's session somehow - file_put_contents('challenges-data', serialize($challenges)); -} - -function GET() { - $context = new Psso\Context; - presentChallenges($context); -} - -function POST(array $config) { - // we are receiving results of a previous challenge... load it in - $challenges = unserialize(file_get_contents('challenges-data')); - $answeredChallenge = $challenges[$_POST['challenge']]; - // match up the given input responses to their original Inputs - $inputData = []; - foreach ($_POST as $name => $value) { - if ($name == 'challenge') continue; - $serial = explode('__', $name, 2)[1]; - $input = $answeredChallenge->findInput($serial); - $inputData[$input->id] = $value; - } - - $providerClass = 'Psso\\AuthProvider\\' . $config['auth']['provider']; - $provider = new $providerClass($config); - $result = $answeredChallenge->validate($provider, $inputData); - - $context = $answeredChallenge->context; - $context->addResult($result); - - if ($result->successful) { - if (isset($result->user) && !isset($context->user)) { - $context->user = $result->user; - } - } - presentChallenges($context, $result->message); -} -- cgit v1.3