Annotation of loncom/auth/loncacc.pm, revision 1.1.1.1
1.1 albertel 1: # The LearningOnline Network
2: # Cookie Based Access Handler for Construction Area
3: # (lonacc: 5/21/99,5/22,5/29,5/31 Gerd Kortemeyer)
4: # 6/15 Gerd Kortemeyer
5:
6: package Apache::loncacc;
7:
8: use strict;
9: use Apache::Constants qw(:common :http);
10: use CGI::Cookie();
11:
12: sub handler {
13: my $r = shift;
14: my $requrl=$r->uri;
15: my %cookies=CGI::Cookie->parse($r->header_in('Cookie'));
16: my $lonid=$cookies{'lonID'};
17: my $cookie;
18: if ($lonid) {
19: my $handle=$lonid->value;
20: $handle=~s/\W//g;
21: my $lonidsdir=$r->dir_config('lonIDsDir');
22: if ((-e "$lonidsdir/$handle.id") && ($handle ne '')) {
23: my $ownername=$requrl;
24: $ownername=~s/\/\~(\w+).*/\1/;
25: my $ownerdomain=$r->dir_config('lonDefDomain');
26: my @handleparts=split(/\_/,$handle);
27: my $username=$handleparts[0];
28: my $domain=$handleparts[2];
29: if (($username ne $ownername) || ($domain ne $ownerdomain)) {
30: $r->log_reason
31: ("$username at $domain not authorized", $r->filename);
32: return HTTP_NOT_ACCEPTABLE;
33: }
34: return OK;
35: } else {
36: $r->log_reason("Cookie $handle not valid", $r->filename)
37: };
38: }
39: $cookie=CGI::Cookie->new(-name => 'lonURL',
40: -value => $requrl,
41: -path => '/');
42: $r->err_headers_out->add('Set-Cookie' => $cookie);
43: return FORBIDDEN;
44: }
45:
46: 1;
47: __END__
48:
49:
50:
51:
52:
53:
54:
55:
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>