loncom/auth/lonacc.pm - diff

Return to lonacc.pm CVS log

Up to [LON-CAPA] / loncom / auth

Diff for /loncom/auth/lonacc.pm between versions 1.116.2.2 and 1.123

-version 1.116.2.2, 2008/12/31 20:22:47
+version 1.123, 2008/12/10 16:28:03
  Line 27
  #
  ###
+ =head1 NAME
+ Apache::lonacc - Cookie Based Access Handler
+ =head1 SYNOPSIS
+ Invoked (for various locations) by /etc/httpd/conf/srm.conf:
+  PerlAccessHandler       Apache::lonacc
+ =head1 INTRODUCTION
+ This module enables cookie based authentication and is used
+ to control access for many different LON-CAPA URIs.
+ Whenever the client sends the cookie back to the server,
+ this cookie is handled by either lonacc.pm or loncacc.pm
+ (see srm.conf for what is invoked when).  If
+ the cookie is missing or invalid, the user is re-challenged
+ for login information.
+ This is part of the LearningOnline Network with CAPA project
+ described at http://www.lon-capa.org.
+ =head1 HANDLER SUBROUTINE
+ This routine is called by Apache and mod_perl.
+ =over 4
+ =item *
+ transfer profile into environment
+ =item *
+ load POST parameters
+ =item *
+ check access
+ =item *
+ if allowed, get symb, log, generate course statistics if applicable
+ =item *
+ otherwise return error
+ =item *
+ see if public resource
+ =item *
+ store attempted access
+ =back
+ =head1 NOTABLE SUBROUTINES
+ =over
+ =cut
  package Apache::lonacc;
  use strict;
- Line 93  sub get_posted_cgi {
+ Line 160  sub get_posted_cgi {
                      if (ref($fields) eq 'ARRAY') {
                          next if (!grep(/^\Q$name\E$/,@{$fields}));
                      }
- 		    if ($fname) {
+                     if ($fname) {
                          if ($env{'form.symb'} ne '') {
                              my $size = (length($value))/(1024.0 * 1024.0);
                              if (&upload_size_allowed($name,$size,$fname) eq 'ok') {
- Line 102  sub get_posted_cgi {
+ Line 169  sub get_posted_cgi {
                                  &Apache::loncommon::add_to_env("form.$name",$value);
                              }
                          } else {
- 			    $env{"form.$name.filename"}=$fname;
+                             $env{"form.$name.filename"}=$fname;
- 			    $env{"form.$name.mimetype"}=$fmime;
+                             $env{"form.$name.mimetype"}=$fmime;
                              &Apache::loncommon::add_to_env("form.$name",$value);
                          }
- 		    } else {
+                     } else {
- 			$value=~s/\s+$//s;
+                         $value=~s/\s+$//s;
                          &Apache::loncommon::add_to_env("form.$name",$value);
- 		    }
+                     }
  		}
  		if ($i<$#lines) {
  		    $i++;
- Line 155  sub get_posted_cgi {
+ Line 222  sub get_posted_cgi {
      $r->headers_in->unset('Content-length');
  }
- #
+ =pod
- # Perform size checks for file uploads to essayresponse items in course context.
- #
+ =item upload_size_allowed()
- # Add form.HWFILESIZE.$part_$id to %env with file size (MB)
- # If file exceeds maximum allowed size, add form.HWFILETOOBIG.$part_$id to %env.
+ 	Perform size checks for file uploads to essayresponse items in course context.
- #
+ 	Add form.HWFILESIZE.$part_$id to %env with file size (MB)
+ 	If file exceeds maximum allowed size, add form.HWFILETOOBIG.$part_$id to %env.
+ =cut
  sub upload_size_allowed {
      my ($name,$size,$fname) = @_;
      if ($name =~ /^HWFILE(\w+)$/) {
- Line 182  sub upload_size_allowed {
+ Line 253  sub upload_size_allowed {
      return 'ok';
  }
+ =pod
+ =item sso_login()
+ 	handle the case of the single sign on user, at this point $r->user
+ 	will be set and valid now need to find the loncapa user info and possibly
+ 	balance them
+ 	returns OK if it was a SSO and user was handled
+         undef if not SSO or no means to hanle the user
+ =cut
- # handle the case of the single sign on user, at this point $r->user
- # will be set and valid now need to find the loncapa user info and possibly
- # balance them
- # returns OK if it was a SSO and user was handled
- #         undef if not SSO or no means to hanle the user
  sub sso_login {
      my ($r,$handle) = @_;
- Line 275  sub handler {
+ Line 352  sub handler {
          return OK;
      }
-     if ($requrl =~ m{^/res/adm/pages/[^/]+\.(gif|png)$}) {
-         return OK;
-     }
      my $handle = &Apache::lonnet::check_for_valid_session($r);
      my $result = &sso_login($r,$handle);
- Line 464  sub handler {
+ Line 537  sub handler {
 ;
  __END__
- =head1 NAME
+ =pod
- Apache::lonacc - Cookie Based Access Handler
- =head1 SYNOPSIS
- Invoked (for various locations) by /etc/httpd/conf/srm.conf:
-  PerlAccessHandler       Apache::lonacc
- =head1 INTRODUCTION
- This module enables cookie based authentication and is used
- to control access for many different LON-CAPA URIs.
- Whenever the client sends the cookie back to the server,
- this cookie is handled by either lonacc.pm or loncacc.pm
- (see srm.conf for what is invoked when).  If
- the cookie is missing or invalid, the user is re-challenged
- for login information.
- This is part of the LearningOnline Network with CAPA project
- described at http://www.lon-capa.org.
- =head1 HANDLER SUBROUTINE
- This routine is called by Apache and mod_perl.
- =over 4
- =item *
- transfer profile into environment
- =item *
- load POST parameters
- =item *
- check access
- =item *
- if allowed, get symb, log, generate course statistics if applicable
- =item *
- otherwise return error
- =item *
- see if public resource
- =item *
- store attempted access
  =back
  =cut

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>

Removed from v.1.116.2.2
changed lines
	Added in v.1.123