Return to lonuploadedacc.pm CVS log

Up to [LON-CAPA] / loncom / auth

Annotation of loncom/auth/lonuploadedacc.pm, revision 1.16

1.1       www         1: # The LearningOnline Network
                      2: # Access Handler for User Files
                      3: #
1.16    ! raeburn     4: # $Id: lonuploadedacc.pm,v 1.15 2008/11/20 15:19:22 jms Exp $
1.1       www         5: #
                      6: # Copyright Michigan State University Board of Trustees
                      7: #
                      8: # This file is part of the LearningOnline Network with CAPA (LON-CAPA).
                      9: #
                     10: # LON-CAPA is free software; you can redistribute it and/or modify
                     11: # it under the terms of the GNU General Public License as published by
                     12: # the Free Software Foundation; either version 2 of the License, or
                     13: # (at your option) any later version.
                     14: #
                     15: # LON-CAPA is distributed in the hope that it will be useful,
                     16: # but WITHOUT ANY WARRANTY; without even the implied warranty of
                     17: # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
                     18: # GNU General Public License for more details.
                     19: #
                     20: # You should have received a copy of the GNU General Public License
                     21: # along with LON-CAPA; if not, write to the Free Software
                     22: # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
                     23: #
                     24: # /home/httpd/html/adm/gpl.txt
                     25: #
                     26: # http://www.lon-capa.org/
                     27: #
                     28: 
1.14      jms        29: 
                     30: 
1.1       www        31: package Apache::lonuploadedacc;
                     32: 
1.7       www        33: 
1.1       www        34: use strict;
1.10      albertel   35: use Apache::Constants qw(:common :http);
1.12      albertel   36: use Apache::lonnet;
1.16    ! raeburn    37: use LONCAPA qw(:match);
1.1       www        38: 
                     39: sub handler {
                     40:     my $r = shift;
1.2       www        41:     my $args=$r->args;
1.7       www        42:     &Apache::loncommon::get_unprocessed_cgi($args,['token','tokenissued']); 
1.11      albertel   43:     my (undef,undef,$udom,$uname,$ufile)=split(/\//,$r->uri,5);
1.2       www        44:     $ufile=~s/^[\~\.]+//;
1.12      albertel   45:     my $remoteserver=$env{'form.tokenissued'};
1.2       www        46:     my $reply=&Apache::lonnet::reply('tokenauthuserfile:'.
1.12      albertel   47:                  $udom.'/'.$uname.'/'.$ufile.':'.$env{'form.token'},
1.4       albertel   48: 				     $remoteserver);
1.2       www        49:     if ($reply eq 'ok') {
1.16    ! raeburn    50:        if (($r->user() eq '') && ($env{'form.token'} ne '')) {
        !            51:            my ($cuname,$cudom) = 
        !            52:                ($env{'form.token'} =~ /^($match_username)_\d+_($match_domain)_/); 
        !            53:            if ($cuname ne '') {
        !            54:                if ($cudom eq $r->dir_config('lonDefDomain')) {
        !            55:                    $r->user($cuname);
        !            56:                } else {
        !            57:                    $r->user($cuname.':'.$cudom);
        !            58:                }
        !            59:            } else {
        !            60:                $r->user('public:public');
        !            61:            }
        !            62:        } else {
        !            63:            $r->user('public:public');
        !            64:        }
1.2       www        65:        return OK;
1.10      albertel   66:    } elsif ($reply eq 'con_lost' || $reply eq 'no_such_host') {
1.12      albertel   67:        &Apache::lonnet::logthis("Server unavailable for userfile access $uname at $udom for $ufile with $remoteserver token $env{'form.token'}: $reply");
1.10      albertel   68:        return HTTP_SERVICE_UNAVAILABLE;
1.2       www        69:    } else {
1.12      albertel   70:        &Apache::lonnet::logthis("Refused userfile access $uname at $udom for $ufile with $remoteserver token $env{'form.token'}: $reply");
1.2       www        71:        return FORBIDDEN;
                     72:    }
1.1       www        73: }
                     74: 
1.13      albertel   75: sub skip_phase {
                     76:     return OK;
                     77: }
                     78: 
1.1       www        79: 1;
                     80: __END__
                     81: 
                     82: 
                     83: 
1.15      jms        84: =head1 NAME
                     85: 
                     86: Apache::lonuploadedacc
                     87: 
                     88: =head1 SYNOPSIS
                     89: 
                     90: The way this is supposed to work:
                     91: 
                     92:  User A has client machine C 
                     93:  User A is logged into LON-CAPA server S
                     94:  needs file from user B
                     95:  homeserver for user B is H
1.1       www        96: 
1.15      jms        97: This is part of the LearningOnline Network with CAPA project
                     98: described at http://www.lon-capa.org.
                     99: 
                    100: =head1 HANDLER SUBROUTINE
                    101: 
                    102: This handler runs on H
                    103: To access a userfile:
                    104: Server S generates a token and puts it into the query string of URL for H
                    105: Client box C asks H for file with token issued by C
                    106: H now must ask S if token is valid, uses S's lond-command tokenauthuserfile
                    107: 
                    108: =cut
1.1       www       109: 
                    110: 
                    111: