7bb57b4692
Monotone-Revision: 8e4f10d6d171bd7c241c05d63d20efa7f2a66de4 Monotone-Author: wsourdeau@inverse.ca Monotone-Date: 2009-09-11T14:38:43 Monotone-Branch: ca.inverse.sogo
167 lines
3.7 KiB
Objective-C
167 lines
3.7 KiB
Objective-C
/* SOGoProxyAuthenticator.h - this file is part of SOGo
|
|
*
|
|
* Copyright (C) 2009 Inverse inc.
|
|
*
|
|
* Author: Wolfgang Sourdeau <wsourdeau@inverse.ca>
|
|
*
|
|
* This file is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2, or (at your option)
|
|
* any later version.
|
|
*
|
|
* This file is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; see the file COPYING. If not, write to
|
|
* the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
|
|
* Boston, MA 02111-1307, USA.
|
|
*/
|
|
|
|
#import <Foundation/NSArray.h>
|
|
#import <Foundation/NSString.h>
|
|
#import <Foundation/NSUserDefaults.h>
|
|
|
|
#import <NGObjWeb/NSException+HTTP.h>
|
|
#import <NGObjWeb/WOContext.h>
|
|
#import <NGObjWeb/WORequest.h>
|
|
#import <NGObjWeb/WOResponse.h>
|
|
|
|
#import <NGExtensions/NSObject+Logs.h>
|
|
|
|
#import "LDAPUserManager.h"
|
|
#import "SOGoPermissions.h"
|
|
#import "SOGoUser.h"
|
|
|
|
#import "SOGoProxyAuthenticator.h"
|
|
|
|
@implementation SOGoProxyAuthenticator
|
|
|
|
+ (id) sharedSOGoProxyAuthenticator
|
|
{
|
|
static SOGoProxyAuthenticator *auth = nil;
|
|
|
|
if (!auth)
|
|
auth = [self new];
|
|
|
|
return auth;
|
|
}
|
|
|
|
- (id) init
|
|
{
|
|
NSUserDefaults *ud;
|
|
|
|
if ((self = [super init]))
|
|
{
|
|
ud = [NSUserDefaults standardUserDefaults];
|
|
authMethod = [ud stringForKey: @"SOGoAuthenticationMethod"];
|
|
if (!authMethod)
|
|
authMethod = [ud stringForKey: @"SOGoAuthentificationMethod"];
|
|
if (!authMethod)
|
|
{
|
|
authMethod = @"LDAP";
|
|
[self warnWithFormat:
|
|
@"authentication method automatically set to '%@'",
|
|
authMethod];
|
|
}
|
|
}
|
|
|
|
return self;
|
|
}
|
|
|
|
- (void) dealloc
|
|
{
|
|
[authMethod release];
|
|
[super dealloc];
|
|
}
|
|
|
|
- (BOOL) checkLogin: (NSString *) _login
|
|
password: (NSString *) _pwd
|
|
{
|
|
return YES;
|
|
}
|
|
|
|
/* create SOGoUser */
|
|
|
|
- (NSString *) checkCredentialsInContext: (WOContext *) context
|
|
{
|
|
NSString *remoteUser;
|
|
|
|
remoteUser = [[context request] headerForKey: @"x-webobjects-remote-user"];
|
|
|
|
return remoteUser;
|
|
}
|
|
|
|
- (WOResponse *) unauthorized: (NSString *) reason
|
|
inContext: (WOContext *) context
|
|
{
|
|
WOResponse *r;
|
|
|
|
if (![reason length])
|
|
reason = @"Unauthorized";
|
|
|
|
r = [context response];
|
|
[r setStatus: 403 /* unauthorized */];
|
|
[r setHeader: @"text/plain; charset=utf-8" forKey: @"content-type"];
|
|
[r appendContentString: reason];
|
|
|
|
return r;
|
|
}
|
|
|
|
- (SOGoUser *) userInContext: (WOContext *) context
|
|
{
|
|
SOGoUser *user;
|
|
NSString *login;
|
|
|
|
login = [self checkCredentialsInContext: context];
|
|
if ([login length])
|
|
user = [SOGoUser userWithLogin: login
|
|
roles: [NSArray arrayWithObject:
|
|
SoRole_Authenticated]];
|
|
else
|
|
user = nil;
|
|
|
|
return user;
|
|
}
|
|
|
|
- (NSString *) passwordInContext: (WOContext *) context
|
|
{
|
|
return @"";
|
|
}
|
|
|
|
- (WOResponse *) preprocessCredentialsInContext: (WOContext *) context
|
|
{
|
|
WOResponse *r;
|
|
|
|
if ([self userInContext: context])
|
|
{
|
|
[context setObject: [NSArray arrayWithObject: SoRole_Authenticated]
|
|
forKey: @"SoAuthenticatedRoles"];
|
|
r = nil;
|
|
}
|
|
else
|
|
r = [self unauthorized: nil inContext: context];
|
|
|
|
return r;
|
|
}
|
|
|
|
- (BOOL) renderException: (NSException *) e
|
|
inContext: (WOContext *) context
|
|
{
|
|
BOOL rc;
|
|
|
|
if ([e httpStatus] == 401)
|
|
{
|
|
[self unauthorized: [e reason] inContext: context];
|
|
rc = YES;
|
|
}
|
|
else
|
|
rc = NO;
|
|
|
|
return rc;
|
|
}
|
|
|
|
@end /* SOGoProxyAuthenticator */
|