1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
|
# Main auto-protected PSGI adapter for LLNG handler
#
# See https://lemonldap-ng.org/documentation/latest/handlerarch
package Lemonldap::NG::Handler::PSGI::Main;
use strict;
use base 'Lemonldap::NG::Handler::Main';
our $VERSION = '2.19.0';
# Specific modules and constants for Test or CGI
use constant FORBIDDEN => 403;
use constant HTTP_UNAUTHORIZED => 401;
use constant REDIRECT => 302;
use constant OK => 0;
use constant DECLINED => 0;
use constant DONE => 0;
use constant SERVER_ERROR => 500;
use constant AUTH_REQUIRED => 401;
use constant MAINTENANCE => 503;
use constant defaultLogger => 'Lemonldap::NG::Common::Logger::Std';
## @method void thread_share(string $variable)
# share or not the variable (if authorized by specific module)
# @param $variable the name of the variable to share
sub thread_share {
# nothing to do in PSGI
}
## @method void setServerSignature(string sign)
# modifies web server signature
# @param $sign String to add to server signature
sub setServerSignature {
}
## @method void set_user(string user)
# sets remote_user in response headers
# @param user string username
sub set_user {
my ( $class, $req, $user ) = @_;
push @{ $req->{respHeaders} }, 'Lm-Remote-User' => $user;
}
## @method void set_custom(string custom)
# sets remote_custom in response headers
# @param custom string custom_value
sub set_custom {
my ( $class, $req, $custom ) = @_;
push @{ $req->{respHeaders} }, 'Lm-Remote-Custom' => $custom
if defined $custom;
}
## @method void set_header_in(hash headers)
# sets or modifies request headers
# @param headers hash containing header names => header value
sub set_header_in {
my ( $class, $req, %headers ) = @_;
while ( my ( $h, $v ) = each %headers ) {
$req->{env}->{ cgiName($h) } = $v if ( defined $v );
}
}
## @method void unset_header_in(array headers)
# removes request headers
# @param headers array with header names to remove
sub unset_header_in {
my ( $class, $req, @headers ) = @_;
foreach my $h (@headers) {
delete $req->{env}->{ cgiName($h) };
}
}
## @method void set_header_out(hash headers)
# sets response headers
# @param headers hash containing header names => header value
sub set_header_out {
my ( $class, $req, %headers ) = @_;
while ( my ( $h, $v ) = each %headers ) {
push @{ $req->{respHeaders} }, $h => $v;
}
}
## @method boolean is_initial_req
# always returns true
# @return is_initial_req boolean
sub is_initial_req {
return 1;
}
## @method void print(string data)
# write data in HTTP response body
# @param data Text to add in response body
sub print {
my ( $class, $req, $data ) = @_;
$req->{respBody} .= $data;
}
sub addToHtmlHead {
my $self = shift;
$self->logger->error(
'Features like form replay or logout_app can only be used with Apache');
}
sub cgiName {
my $h = uc(shift);
$h =~ s/-/_/g;
return "HTTP_$h";
}
sub logout_app {
my $class = shift;
my $u = shift;
$class->logger->debug("Nginx logout_app redirect to $u");
return (
sub {
my ( $req, $session ) = @_;
my $dest = $u || $class->tsv->{portal}->($req);
$class->logger->debug(
"logout_app_sso: sending internal_lemonldap_logout_url with $dest"
);
$class->set_header_out( $req,
( "internal_lemonldap_logout_url" => "$dest" ) );
1;
},
0
);
}
sub logout_app_sso {
my $class = shift;
my $u = shift;
$class->logger->debug("Nginx logout_app_sso redirect to $u");
return (
sub {
my ( $req, $session ) = @_;
$class->localUnlog( $req, @_ );
my $portal = $class->tsv->{portal}->($req);
my $dest = $u || $portal;
my $rurl =
$portal . "?url="
. $class->encodeUrl( $req, $dest )
. "&logout=1";
$class->logger->debug(
"logout_app: sending internal_lemonldap_logout_url with $rurl");
$class->set_header_out( $req,
( "internal_lemonldap_logout_url" => "$rurl" ) );
1;
},
0
);
}
*setPostParams = *addToHtmlHead;
1;
|
