forked from Wavyzz/dolibarr
425 lines
14 KiB
PHP
425 lines
14 KiB
PHP
<?php
|
|
/* Copyright (C) 2013-2016 Laurent Destailleur <eldy@users.sourceforge.net>
|
|
* Copyright (C) 2014-2018 Frederic France <frederic.france@netlogic.fr>
|
|
* Copyright (C) 2020 Nicolas ZABOURI <info@inovea-conseil.com>
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program. If not, see <https://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
/**
|
|
* \file htdocs/admin/oauthlogintokens.php
|
|
* \ingroup oauth
|
|
* \brief Setup page to configure oauth access to login information
|
|
*/
|
|
|
|
require '../main.inc.php';
|
|
require_once DOL_DOCUMENT_ROOT.'/core/lib/admin.lib.php';
|
|
require_once DOL_DOCUMENT_ROOT.'/core/lib/oauth.lib.php'; // This define $list and $supportedoauth2array
|
|
require_once DOL_DOCUMENT_ROOT.'/core/class/doleditor.class.php';
|
|
use OAuth\Common\Storage\DoliStorage;
|
|
|
|
// Load translation files required by the page
|
|
$langs->loadLangs(array('admin', 'printing', 'oauth'));
|
|
|
|
$action = GETPOST('action', 'aZ09');
|
|
$mode = GETPOST('mode', 'alpha');
|
|
$value = GETPOST('value', 'alpha');
|
|
$varname = GETPOST('varname', 'alpha');
|
|
$driver = GETPOST('driver', 'alpha');
|
|
|
|
if (!empty($driver)) {
|
|
$langs->load($driver);
|
|
}
|
|
|
|
if (!$mode) {
|
|
$mode = 'setup';
|
|
}
|
|
|
|
if (!$user->admin) {
|
|
accessforbidden();
|
|
}
|
|
|
|
|
|
/*
|
|
* Action
|
|
*/
|
|
|
|
/*if (($mode == 'test' || $mode == 'setup') && empty($driver))
|
|
{
|
|
setEventMessages($langs->trans('PleaseSelectaDriverfromList'), null);
|
|
header("Location: ".$_SERVER['PHP_SELF'].'?mode=config');
|
|
exit;
|
|
}*/
|
|
|
|
if ($action == 'setconst' && $user->admin) {
|
|
$error = 0;
|
|
$db->begin();
|
|
|
|
$setupconstarray = GETPOST('setupdriver', 'array');
|
|
|
|
foreach ($setupconstarray as $setupconst) {
|
|
//print '<pre>'.print_r($setupconst, true).'</pre>';
|
|
|
|
$constname = dol_escape_htmltag($setupconst['varname']);
|
|
$constvalue = dol_escape_htmltag($setupconst['value']);
|
|
$consttype = dol_escape_htmltag($setupconst['type']);
|
|
$constnote = dol_escape_htmltag($setupconst['note']);
|
|
|
|
$result = dolibarr_set_const($db, $constname, $constvalue, $consttype, 0, $constnote, $conf->entity);
|
|
if (!$result > 0) {
|
|
$error++;
|
|
}
|
|
}
|
|
|
|
if (!$error) {
|
|
$db->commit();
|
|
setEventMessages($langs->trans("SetupSaved"), null);
|
|
} else {
|
|
$db->rollback();
|
|
dol_print_error($db);
|
|
}
|
|
$action = '';
|
|
}
|
|
|
|
if ($action == 'setvalue' && $user->admin) {
|
|
$db->begin();
|
|
|
|
$result = dolibarr_set_const($db, $varname, $value, 'chaine', 0, '', $conf->entity);
|
|
if (!$result > 0) {
|
|
$error++;
|
|
}
|
|
|
|
if (!$error) {
|
|
$db->commit();
|
|
setEventMessages($langs->trans("SetupSaved"), null);
|
|
} else {
|
|
$db->rollback();
|
|
dol_print_error($db);
|
|
}
|
|
$action = '';
|
|
}
|
|
|
|
|
|
/*
|
|
* View
|
|
*/
|
|
|
|
// Define $urlwithroot
|
|
$urlwithouturlroot = preg_replace('/'.preg_quote(DOL_URL_ROOT, '/').'$/i', '', trim($dolibarr_main_url_root));
|
|
$urlwithroot = $urlwithouturlroot.DOL_URL_ROOT; // This is to use external domain name found into config file
|
|
//$urlwithroot=DOL_MAIN_URL_ROOT; // This is to use same domain name than current
|
|
|
|
$form = new Form($db);
|
|
|
|
llxHeader('', $langs->trans("TokenManager"));
|
|
|
|
$linkback = '<a href="'.DOL_URL_ROOT.'/admin/modules.php?restore_lastsearch_values=1">'.$langs->trans("BackToModuleList").'</a>';
|
|
print load_fiche_titre($langs->trans('ConfigOAuth'), $linkback, 'title_setup');
|
|
|
|
$head = oauthadmin_prepare_head();
|
|
|
|
print dol_get_fiche_head($head, 'tokengeneration', '', -1, 'technic');
|
|
|
|
if (GETPOST('error')) {
|
|
setEventMessages(GETPOST('error'), null, 'errors');
|
|
}
|
|
|
|
if ($mode == 'setup' && $user->admin) {
|
|
print '<span class="opacitymedium">'.$langs->trans("OAuthSetupForLogin")."</span><br><br>\n";
|
|
|
|
foreach ($list as $key) {
|
|
$supported = 0;
|
|
$keyforsupportedoauth2array = $key[0];
|
|
|
|
if (in_array($keyforsupportedoauth2array, array_keys($supportedoauth2array))) {
|
|
$supported = 1;
|
|
}
|
|
if (!$supported) {
|
|
continue; // show only supported
|
|
}
|
|
|
|
|
|
$OAUTH_SERVICENAME = empty($supportedoauth2array[$keyforsupportedoauth2array]['name']) ? 'Unknown' : $supportedoauth2array[$keyforsupportedoauth2array]['name'];
|
|
|
|
// Define $shortscope, $urltorenew, $urltodelete, $urltocheckperms
|
|
// TODO Use array $supportedoauth2array
|
|
if ($keyforsupportedoauth2array == 'OAUTH_GITHUB_NAME') {
|
|
// List of keys that will be converted into scopes (from constants 'SCOPE_state_in_uppercase' in file of service).
|
|
// We pass this param list in to 'state' because we need it before and after the redirect.
|
|
$shortscope = 'user,public_repo';
|
|
$urltorenew = $urlwithroot.'/core/modules/oauth/github_oauthcallback.php?shortscope='.$shortscope.'&state='.$shortscope.'&backtourl='.urlencode(DOL_URL_ROOT.'/admin/oauthlogintokens.php');
|
|
$urltodelete = $urlwithroot.'/core/modules/oauth/github_oauthcallback.php?action=delete&token='.newToken().'&backtourl='.urlencode(DOL_URL_ROOT.'/admin/oauthlogintokens.php');
|
|
$urltocheckperms = 'https://github.com/settings/applications/';
|
|
} elseif ($keyforsupportedoauth2array == 'OAUTH_GOOGLE_NAME') {
|
|
// List of keys that will be converted into scopes (from constants 'SCOPE_state_in_uppercase' in file of service).
|
|
// List of scopes for Google are here: https://developers.google.com/identity/protocols/oauth2/scopes
|
|
// We pass this key list into the param 'state' because we need it before and after the redirect.
|
|
$shortscope = 'userinfo_email,userinfo_profile';
|
|
$shortscope .= ',openid,email,profile'; // For openid connect
|
|
if (!empty($conf->printing->enabled)) {
|
|
$shortscope .= ',cloud_print';
|
|
}
|
|
if (!empty($conf->global->OAUTH_GOOGLE_GSUITE)) {
|
|
$shortscope .= ',admin_directory_user';
|
|
}
|
|
if (!empty($conf->global->OAUTH_GOOGLE_GMAIL)) {
|
|
$shortscope.=',gmail_full';
|
|
}
|
|
|
|
$oauthstateanticsrf = bin2hex(random_bytes(128/8));
|
|
$_SESSION['oauthstateanticsrf'] = $shortscope.'-'.$oauthstateanticsrf;
|
|
|
|
$urltorenew = $urlwithroot.'/core/modules/oauth/google_oauthcallback.php?shortscope='.$shortscope.'&state='.$shortscope.'-'.$oauthstateanticsrf.'&backtourl='.urlencode(DOL_URL_ROOT.'/admin/oauthlogintokens.php');
|
|
$urltodelete = $urlwithroot.'/core/modules/oauth/google_oauthcallback.php?action=delete&token='.newToken().'&backtourl='.urlencode(DOL_URL_ROOT.'/admin/oauthlogintokens.php');
|
|
$urltocheckperms = 'https://security.google.com/settings/security/permissions';
|
|
} elseif ($keyforsupportedoauth2array == 'OAUTH_STRIPE_TEST_NAME') {
|
|
$urltorenew = $urlwithroot.'/core/modules/oauth/stripetest_oauthcallback.php?backtourl='.urlencode(DOL_URL_ROOT.'/admin/oauthlogintokens.php');
|
|
$urltodelete = '';
|
|
$urltocheckperms = '';
|
|
} elseif ($keyforsupportedoauth2array == 'OAUTH_STRIPE_LIVE_NAME') {
|
|
$urltorenew = $urlwithroot.'/core/modules/oauth/stripelive_oauthcallback.php?backtourl='.urlencode(DOL_URL_ROOT.'/admin/oauthlogintokens.php');
|
|
$urltodelete = '';
|
|
$urltocheckperms = '';
|
|
} else {
|
|
$urltorenew = '';
|
|
$urltodelete = '';
|
|
$urltocheckperms = '';
|
|
}
|
|
|
|
|
|
// Show value of token
|
|
$tokenobj = null;
|
|
// Token
|
|
require_once DOL_DOCUMENT_ROOT.'/includes/OAuth/bootstrap.php';
|
|
require_once DOL_DOCUMENT_ROOT.'/includes/OAuth/bootstrap.php';
|
|
// Dolibarr storage
|
|
$storage = new DoliStorage($db, $conf);
|
|
try {
|
|
$tokenobj = $storage->retrieveAccessToken($OAUTH_SERVICENAME);
|
|
} catch (Exception $e) {
|
|
// Return an error if token not found
|
|
}
|
|
|
|
// Set other properties
|
|
$refreshtoken = false;
|
|
$expiredat = '';
|
|
|
|
$expire = false;
|
|
// Is token expired or will token expire in the next 30 seconds
|
|
if (is_object($tokenobj)) {
|
|
$expire = ($tokenobj->getEndOfLife() !== $tokenobj::EOL_NEVER_EXPIRES && $tokenobj->getEndOfLife() !== $tokenobj::EOL_UNKNOWN && time() > ($tokenobj->getEndOfLife() - 30));
|
|
}
|
|
|
|
if ($key[1] != '' && $key[2] != '') {
|
|
if (is_object($tokenobj)) {
|
|
$refreshtoken = $tokenobj->getRefreshToken();
|
|
|
|
$endoflife = $tokenobj->getEndOfLife();
|
|
if ($endoflife == $tokenobj::EOL_NEVER_EXPIRES) {
|
|
$expiredat = $langs->trans("Never");
|
|
} elseif ($endoflife == $tokenobj::EOL_UNKNOWN) {
|
|
$expiredat = $langs->trans("Unknown");
|
|
} else {
|
|
$expiredat = dol_print_date($endoflife, "dayhour");
|
|
}
|
|
}
|
|
}
|
|
|
|
$submit_enabled = 0;
|
|
|
|
print '<form method="post" action="'.$_SERVER["PHP_SELF"].'?mode=setup&driver='.$driver.'" autocomplete="off">';
|
|
print '<input type="hidden" name="token" value="'.newToken().'">';
|
|
print '<input type="hidden" name="action" value="setconst">';
|
|
|
|
print '<div class="div-table-responsive-no-min">';
|
|
print '<table class="noborder centpercent">'."\n";
|
|
|
|
print '<tr class="liste_titre">';
|
|
print '<th class="titlefieldcreate">';
|
|
print img_picto('', $supportedoauth2array[$keyforsupportedoauth2array]['picto'], 'class="pictofixedwidth"');
|
|
print $langs->trans($keyforsupportedoauth2array);
|
|
print '</th>';
|
|
print '<th></th>';
|
|
print '<th></th>';
|
|
print "</tr>\n";
|
|
|
|
print '<tr class="oddeven">';
|
|
print '<td'.($key['required'] ? ' class="required"' : '').'>';
|
|
//var_dump($key);
|
|
print $langs->trans("OAuthIDSecret").'</td>';
|
|
print '<td>';
|
|
print '<span class="opacitymedium">'.$langs->trans("SeePreviousTab").'</span>';
|
|
print '</td>';
|
|
print '<td>';
|
|
print '</td>';
|
|
print '</tr>'."\n";
|
|
|
|
print '<tr class="oddeven">';
|
|
print '<td'.($key['required'] ? ' class="required"' : '').'>';
|
|
//var_dump($key);
|
|
print $langs->trans("IsTokenGenerated");
|
|
print '</td>';
|
|
print '<td>';
|
|
if (is_object($tokenobj)) {
|
|
print $langs->trans("HasAccessToken");
|
|
} else {
|
|
print '<span class="opacitymedium">'.$langs->trans("NoAccessToken").'</span>';
|
|
}
|
|
print '</td>';
|
|
print '<td width="50%">';
|
|
// Links to delete/checks token
|
|
if (is_object($tokenobj)) {
|
|
//test on $storage->hasAccessToken($OAUTH_SERVICENAME) ?
|
|
print '<a class="button smallpaddingimp" href="'.$urltodelete.'">'.$langs->trans('DeleteAccess').'</a><br>';
|
|
}
|
|
// Request remote token
|
|
if ($urltorenew) {
|
|
print '<a class="button smallpaddingimp" href="'.$urltorenew.'">'.$langs->trans('RequestAccess').'</a><br>';
|
|
}
|
|
// Check remote access
|
|
if ($urltocheckperms) {
|
|
print '<br>'.$langs->trans("ToCheckDeleteTokenOnProvider", $OAUTH_SERVICENAME).': <a href="'.$urltocheckperms.'" target="_'.strtolower($OAUTH_SERVICENAME).'">'.$urltocheckperms.'</a>';
|
|
}
|
|
print '</td>';
|
|
print '</tr>';
|
|
|
|
print '<tr class="oddeven">';
|
|
print '<td'.($key['required'] ? ' class="required"' : '').'>';
|
|
//var_dump($key);
|
|
print $langs->trans("Token").'</td>';
|
|
print '<td colspan="2">';
|
|
if (is_object($tokenobj)) {
|
|
//var_dump($tokenobj);
|
|
print $tokenobj->getAccessToken().'<br>';
|
|
//print 'Refresh: '.$tokenobj->getRefreshToken().'<br>';
|
|
//print 'EndOfLife: '.$tokenobj->getEndOfLife().'<br>';
|
|
//var_dump($tokenobj->getExtraParams());
|
|
/*print '<br>Extra: <br><textarea class="quatrevingtpercent">';
|
|
print ''.join(',',$tokenobj->getExtraParams());
|
|
print '</textarea>';*/
|
|
}
|
|
print '</td>';
|
|
print '</tr>'."\n";
|
|
|
|
if (is_object($tokenobj)) {
|
|
// Token refresh
|
|
print '<tr class="oddeven">';
|
|
print '<td'.($key['required'] ? ' class="required"' : '').'>';
|
|
//var_dump($key);
|
|
print $langs->trans("TOKEN_REFRESH").'</td>';
|
|
print '<td colspan="2">';
|
|
print yn($refreshtoken);
|
|
print '</td>';
|
|
print '</tr>';
|
|
|
|
// Token expired
|
|
print '<tr class="oddeven">';
|
|
print '<td'.($key['required'] ? ' class="required"' : '').'>';
|
|
//var_dump($key);
|
|
print $langs->trans("TOKEN_EXPIRED").'</td>';
|
|
print '<td colspan="2">';
|
|
print yn($expire);
|
|
print '</td>';
|
|
print '</tr>';
|
|
|
|
// Token expired at
|
|
print '<tr class="oddeven">';
|
|
print '<td'.($key['required'] ? ' class="required"' : '').'>';
|
|
//var_dump($key);
|
|
print $langs->trans("TOKEN_EXPIRE_AT").'</td>';
|
|
print '<td colspan="2">';
|
|
print $expiredat;
|
|
print '</td>';
|
|
print '</tr>';
|
|
}
|
|
|
|
print '</table>';
|
|
print '</div>';
|
|
|
|
if (!empty($driver)) {
|
|
if ($submit_enabled) {
|
|
print $form->buttonsSaveCancel("Modify", '');
|
|
}
|
|
}
|
|
|
|
|
|
print '</form>';
|
|
}
|
|
}
|
|
|
|
if ($mode == 'test' && $user->admin) {
|
|
print $langs->trans('PrintTestDesc'.$driver)."<br><br>\n";
|
|
|
|
print '<div class="div-table-responsive-no-min">';
|
|
print '<table class="noborder centpercent">';
|
|
if (!empty($driver)) {
|
|
require_once DOL_DOCUMENT_ROOT.'/core/modules/printing/'.$driver.'.modules.php';
|
|
$classname = 'printing_'.$driver;
|
|
$langs->load($driver);
|
|
$printer = new $classname($db);
|
|
//print '<pre>'.print_r($printer, true).'</pre>';
|
|
if (count($printer->getlistAvailablePrinters())) {
|
|
if ($printer->listAvailablePrinters() == 0) {
|
|
print $printer->resprint;
|
|
} else {
|
|
setEventMessages($printer->error, $printer->errors, 'errors');
|
|
}
|
|
} else {
|
|
print $langs->trans('PleaseConfigureDriverfromList');
|
|
}
|
|
}
|
|
|
|
print '</table>';
|
|
print '</div>';
|
|
}
|
|
|
|
if ($mode == 'userconf' && $user->admin) {
|
|
print $langs->trans('PrintUserConfDesc'.$driver)."<br><br>\n";
|
|
|
|
print '<div class="div-table-responsive">';
|
|
print '<table class="noborder centpercent">';
|
|
print '<tr class="liste_titre">';
|
|
print '<th>'.$langs->trans("User").'</th>';
|
|
print '<th>'.$langs->trans("PrintModule").'</th>';
|
|
print '<th>'.$langs->trans("PrintDriver").'</th>';
|
|
print '<th>'.$langs->trans("Printer").'</th>';
|
|
print '<th>'.$langs->trans("PrinterLocation").'</th>';
|
|
print '<th>'.$langs->trans("PrinterId").'</th>';
|
|
print '<th>'.$langs->trans("NumberOfCopy").'</th>';
|
|
print '<th class="center">'.$langs->trans("Delete").'</th>';
|
|
print "</tr>\n";
|
|
$sql = 'SELECT p.rowid, p.printer_name, p.printer_location, p.printer_id, p.copy, p.module, p.driver, p.userid, u.login FROM '.MAIN_DB_PREFIX.'printing as p, '.MAIN_DB_PREFIX.'user as u WHERE p.userid=u.rowid';
|
|
$resql = $db->query($sql);
|
|
while ($row = $db->fetch_array($resql)) {
|
|
print '<tr class="oddeven">';
|
|
print '<td>'.$row['login'].'</td>';
|
|
print '<td>'.$row['module'].'</td>';
|
|
print '<td>'.$row['driver'].'</td>';
|
|
print '<td>'.$row['printer_name'].'</td>';
|
|
print '<td>'.$row['printer_location'].'</td>';
|
|
print '<td>'.$row['printer_id'].'</td>';
|
|
print '<td>'.$row['copy'].'</td>';
|
|
print '<td class="center">'.img_picto($langs->trans("Delete"), 'delete').'</td>';
|
|
print "</tr>\n";
|
|
}
|
|
print '</table>';
|
|
print '</div>';
|
|
}
|
|
|
|
print dol_get_fiche_end();
|
|
|
|
// End of page
|
|
llxFooter();
|
|
$db->close();
|