Guwan
/
ldap-matter
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Remove changes that are not related to the HTTPS redirect_uri

This commit is contained in:
Angus B. Grieve-Smith 2020-05-01 13:24:17 -04:00
parent 13dc19e040
commit 93c4a0ab84
5 changed files with 14 additions and 61 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
oauth/LDAP/LDAP.php
View File

@ -237,9 +237,7 @@ class LDAP implements LDAPInterface
throw new Exception('An error has occured during ldap_get_values execution (complete name). Please check parameter of LDAP/getData.'); throw new Exception('An error has occured during ldap_get_values execution (complete name). Please check parameter of LDAP/getData.');
} }
$return_data = array("mail" => $mail[0], "cn" => $cn[0]); return array("mail" => $mail[0], "cn" => $cn[0]);
error_log("LDAP \$return_data = " . json_encode($return_data));
return $return_data;
} }
/* /*

11
oauth/connexion.php
View File

@ -20,17 +20,12 @@ else
// Check received data length (to prevent code injection) // Check received data length (to prevent code injection)
if (strlen($_POST['user']) > 15) if (strlen($_POST['user']) > 15)
{ {
echo 'Username is longer than 15 characters ... Please try again<br /><br />'; echo 'Username has incorrect format ... Please try again<br /><br />';
echo 'Click <a href="./index.php">here</a> to come back to login page'; echo 'Click <a href="./index.php">here</a> to come back to login page';
} }
elseif (strlen($_POST['password']) > 50) elseif (strlen($_POST['password']) > 50 || strlen($_POST['password']) <= 7)
{ {
echo 'Password is longer than 50 characters ... Please try again<br /><br />'; echo 'Password has incorrect format ... Please try again<br /><br />';
echo 'Click <a href="./index.php">here</a> to come back to login page';
} elseif (strlen($_POST['password']) <= 7)
{
echo 'Password is shorter than 7 characters ... Please try again<br /><br />';
echo 'Click <a href="./index.php">here</a> to come back to login page'; echo 'Click <a href="./index.php">here</a> to come back to login page';
} }
else else

48
oauth/resource.php
View File

@ -34,52 +34,8 @@ try
{ {
$data = $ldap->getDataForMattermost($ldap_base_dn,$ldap_filter,$ldap_bind_dn,$ldap_bind_pass,$ldap_search_attribute,$user); $data = $ldap->getDataForMattermost($ldap_base_dn,$ldap_filter,$ldap_bind_dn,$ldap_bind_pass,$ldap_search_attribute,$user);
/* Here is the patch for Mattermost 4.4 and older. Gitlab has changed // Here is the patch for Mattermost 4.4 and older. Gitlab has changed the JSON output of oauth service. Many data are not used by Mattermost, but there is a stack error if we delete them. That's the reason why date and many parameters are null or empty.
the JSON output of oauth service. Many data are not used by $resp = array("id" => $assoc_id,"name" => $data['cn'],"username" => $user,"state" => "active","avatar_url" => "","web_url" => "","created_at" => "0000-00-00T00:00:00.000Z","bio" => null,"location" => null,"skype" => "","linkedin" => "","twitter" => "","website_url" => "","organization" => null,"last_sign_in_at" => "0000-00-00T00:00:00.000Z","confirmed_at" => "0000-00-00T00:00:00.000Z","last_activity_on" => null,"email" => $data['mail'],"theme_id" => 1,"color_scheme_id" => 1,"projects_limit" => 100000,"current_sign_in_at" => "0000-00-00T00:00:00.000Z","identities" => array(array("provider" => "ldapmain","extern_uid" => $data['dn'])),"can_create_group" => true,"can_create_project" => true,"two_factor_enabled" => false,"external" => false,"shared_runners_minutes_limit" => null);
Mattermost, but there is a stack error if we delete them. That's the
reason why date and many parameters are null or empty.
*/
if ($data) {
error_log("resource.php \$data = " . json_encode($data));
} else {
error_log("$data is null");
}
$resp = array(
"id" => $assoc_id,
"name" => $data['cn'],
"username" => $user,
"state" => "active",
"avatar_url" => "",
"web_url" => "",
"created_at" => "0000-00-00T00:00:00.000Z",
"bio" => null,"location" => null,
"skype" => "",
"linkedin" => "",
"twitter" => "",
"website_url" => "",
"organization" => null,
"last_sign_in_at" => "0000-00-00T00:00:00.000Z",
"confirmed_at" => "0000-00-00T00:00:00.000Z",
"last_activity_on" => null,
"email" => $data['mail'],
"theme_id" => 1,
"color_scheme_id" => 1,
"projects_limit" => 100000,
"current_sign_in_at" => "0000-00-00T00:00:00.000Z",
"identities" => array(
array(
"provider" => "ldapmain",
"extern_uid" => $data['cn']
)
),
"can_create_group" => true,
"can_create_project" => true,
"two_factor_enabled" => false,
"external" => false,
"shared_runners_minutes_limit" => null
);
error_log("\$resp = " . json_encode($resp));
// Below is the old version, still consistent with Mattermost before version 4.4 // Below is the old version, still consistent with Mattermost before version 4.4
// $resp = array("name" => $data['cn'],"username" => $user,"id" => $assoc_id,"state" => "active","email" => $data['mail']); // $resp = array("name" => $data['cn'],"username" => $user,"id" => $assoc_id,"state" => "active","email" => $data['mail']);

8
oauth/token.php
View File

@ -9,7 +9,6 @@ require_once __DIR__.'/server.php';
require_once __DIR__.'/config.php'; require_once __DIR__.'/config.php';
error_log("token.php \$_POST = " . json_encode($_POST));
/* /*
The Mattermost server seems to be returning bare http urls, even The Mattermost server seems to be returning bare http urls, even
@ -23,6 +22,11 @@ if ($url_scheme == "https" && $redirect_url_scheme == "http:") {
$_POST["redirect_uri"] = "https" . substr($_POST["redirect_uri"], 4); $_POST["redirect_uri"] = "https" . substr($_POST["redirect_uri"], 4);
} }
// Handle a request for an OAuth2.0 Access Token and send the response to the client /*
Handle a request for an OAuth2.0 Access Token and send the response
to the client
*/
$server->handleTokenRequest(OAuth2\Request::createFromGlobals())->send(); $server->handleTokenRequest(OAuth2\Request::createFromGlobals())->send();
?> ?>