version 1.40, 2018/12/07 23:16:50
|
version 1.52, 2021/08/16 15:25:44
|
Line 30 package Apache::migrateuser;
|
Line 30 package Apache::migrateuser;
|
|
|
use strict; |
use strict; |
use LONCAPA qw(:DEFAULT :match); |
use LONCAPA qw(:DEFAULT :match); |
use Apache::Constants qw(:common :http :methods); |
use Apache::Constants qw(:common :http :methods :remotehost); |
use Apache::lonauth; |
use Apache::lonauth; |
use Apache::lonnet; |
use Apache::lonnet; |
use Apache::loncommon; |
use Apache::loncommon; |
Line 71 sub sso_check {
|
Line 71 sub sso_check {
|
$extra_env{'request.sso.reloginserver'} = |
$extra_env{'request.sso.reloginserver'} = |
$data->{'sso.reloginserver'}; |
$data->{'sso.reloginserver'}; |
} |
} |
if (($data->{'balancer'}) && ($data->{'server'}) && ($data->{'balcookie'})) { |
|
$extra_env{'request.balancercookie'} = $data->{'server'}.':'.$data->{'balcookie'}; |
|
} |
|
} |
} |
return \%extra_env; |
return \%extra_env; |
} |
} |
Line 256 sub ip_changed {
|
Line 253 sub ip_changed {
|
if ($hostname) { |
if ($hostname) { |
my $protocol = $Apache::lonnet::protocol{$switchto}; |
my $protocol = $Apache::lonnet::protocol{$switchto}; |
$protocol = 'http' if ($protocol ne 'https'); |
$protocol = 'http' if ($protocol ne 'https'); |
|
my $alias = &Apache::lonnet::use_proxy_alias($r,$switchto); |
|
$hostname = $alias if ($alias ne ''); |
$url = $protocol.'://'.$hostname; |
$url = $protocol.'://'.$hostname; |
if ($rule_in_effect eq 'balancer') { |
if ($rule_in_effect eq 'balancer') { |
$message .= '<br />'. |
$message .= '<br />'. |
Line 311 sub ip_changed {
|
Line 310 sub ip_changed {
|
} |
} |
|
|
sub logout { |
sub logout { |
my ($r,$handle,$data,$lti_env) = @_; |
my ($r,$ip,$handle,$data,$lti_env) = @_; |
my $lonidsdir=$r->dir_config('lonIDsDir'); |
my $lonidsdir=$r->dir_config('lonIDsDir'); |
if (unlink("$lonidsdir/$handle.id")) { |
if (unlink("$lonidsdir/$handle.id")) { |
if (($env{'user.linkedenv'} =~ /^[a-f0-9]+_linked$/) && |
if (($env{'user.linkedenv'} =~ /^[a-f0-9]+_linked$/) && |
Line 325 sub logout {
|
Line 324 sub logout {
|
&Apache::lonnet::log($env{'user.domain'}, |
&Apache::lonnet::log($env{'user.domain'}, |
$env{'user.name'}, |
$env{'user.name'}, |
$env{'user.home'}, |
$env{'user.home'}, |
"Logout $ENV{'REMOTE_ADDR'}"); |
"Logout $ip"); |
|
|
&Apache::loncommon::content_type($r,'text/html'); |
&Apache::loncommon::content_type($r,'text/html'); |
|
|
Line 340 sub logout {
|
Line 339 sub logout {
|
} |
} |
my (%info,%user_info,%lti_info); |
my (%info,%user_info,%lti_info); |
if (ref($lti_env) eq 'HASH') { |
if (ref($lti_env) eq 'HASH') { |
%lti_info = %{$lti_env}; |
foreach my $key (sort(keys(%{$lti_env}))) { |
|
if ($key =~ /^request\.(.+)$/) { |
|
$lti_info{$1} = $lti_env->{$key}; |
|
} |
|
} |
} |
} |
my $lonhost = $r->dir_config('lonHostID'); |
my $lonhost = $r->dir_config('lonHostID'); |
if (ref($data) eq 'HASH') { |
if (ref($data) eq 'HASH') { |
%user_info=('ip' => $ENV{'REMOTE_ADDR'}, |
%user_info=('ip' => $ip, |
'domain' => $data->{'domain'}, |
'domain' => $data->{'domain'}, |
'username' => $data->{'username'}, |
'username' => $data->{'username'}, |
'home' => $data->{'home'}, |
'home' => $data->{'home'}, |
Line 362 sub logout {
|
Line 365 sub logout {
|
{'redirect' => [0.1,$url], |
{'redirect' => [0.1,$url], |
'only_body' => 1,}). |
'only_body' => 1,}). |
&Apache::loncommon::end_page()); |
&Apache::loncommon::end_page()); |
|
if ($env{'request.balancercookie'}) { |
|
my ($balancer,$cookie) = split(/:/,$env{'request.balancercookie'}); |
|
if ((&Apache::lonnet::hostname($balancer)) && ($cookie =~ /^[a-f0-9]{32}$/)) { |
|
$cookie = $env{'user.domain'}.'_'.$env{'user.name'}.'_'.$cookie; |
|
&Apache::lonnet::delbalcookie($cookie,$balancer); |
|
} |
|
} |
$r->register_cleanup(\&flush_course_logs); |
$r->register_cleanup(\&flush_course_logs); |
return; |
return; |
} |
} |
Line 533 sub do_server_switch {
|
Line 543 sub do_server_switch {
|
} |
} |
|
|
sub log_switch { |
sub log_switch { |
my ($r,$data,$lti_env) = @_; |
my ($r,$data,$lti_env,$ip) = @_; |
my $lonhost = $r->dir_config('lonHostID'); |
my $lonhost = $r->dir_config('lonHostID'); |
return unless ((ref($data) eq 'HASH') && (ref($lti_env) eq 'HASH')); |
return unless ((ref($data) eq 'HASH') && (ref($lti_env) eq 'HASH')); |
my $now = time; |
my $now = time; |
Line 549 sub log_switch {
|
Line 559 sub log_switch {
|
} else { |
} else { |
$logmsg .= " (no role)"; |
$logmsg .= " (no role)"; |
} |
} |
$logmsg .= ' '.$ENV{'REMOTE_ADDR'}; |
$logmsg .= ' '.$ip; |
&Apache::lonnet::log($data->{'domain'},$data->{'username'},$data->{'home'},$logmsg); |
&Apache::lonnet::log($data->{'domain'},$data->{'username'},$data->{'home'},$logmsg); |
} |
} |
|
|
Line 579 sub handler {
|
Line 589 sub handler {
|
} |
} |
my ($home,@ids); |
my ($home,@ids); |
@ids=&Apache::lonnet::current_machine_ids(); |
@ids=&Apache::lonnet::current_machine_ids(); |
if ($data{'ip'} ne $ENV{'REMOTE_ADDR'}) { |
my $ip = &Apache::lonnet::get_requestor_ip($r,REMOTE_NOLOOKUP); |
|
if ($data{'ip'} ne $ip) { |
&Apache::lonnet::logthis('IP change when session migration requested -- was: '. |
&Apache::lonnet::logthis('IP change when session migration requested -- was: '. |
$data{'ip'}.'; now: '.$ENV{'REMOTE_ADDR'}.' for '.$data{'username'}.':'.$data{'domain'}); |
$data{'ip'}.'; now: '.$ip.' for '.$data{'username'}.':'.$data{'domain'}); |
return &ip_changed($r,$data{'domain'},$data{'server'},\@ids,\%data); |
return &ip_changed($r,$data{'domain'},$data{'server'},\@ids,\%data); |
} |
} |
if ($data{'loncfail'}) { |
if ($data{'loncfail'}) { |
Line 626 sub handler {
|
Line 637 sub handler {
|
return &goto_login($r,$udom,\%data); |
return &goto_login($r,$udom,\%data); |
} |
} |
} |
} |
|
|
my $rolemsg; |
my $rolemsg; |
if ($data{'role'}) { |
if ($data{'role'}) { |
$rolemsg = "role: $data{'role'}"; |
$rolemsg = "role: $data{'role'}"; |
Line 645 sub handler {
|
Line 656 sub handler {
|
} elsif ((ref($lti_env) eq 'HASH') && (keys(%{$lti_env}))) { |
} elsif ((ref($lti_env) eq 'HASH') && (keys(%{$lti_env}))) { |
$extra_env = $lti_env; |
$extra_env = $lti_env; |
} |
} |
|
if (($data{'balancer'}) && ($data{'server'}) && ($data{'balcookie'})) { |
|
if (ref($extra_env) eq 'HASH') { |
|
$extra_env->{'request.balancercookie'} = $data{'server'}.':'.$data{'balcookie'}; |
|
} else { |
|
$extra_env = { 'request.balancercookie' => $data{'server'}.':'.$data{'balcookie'} }; |
|
} |
|
} elsif (($data{'server'}) && ($data{'otherbalcookie'})) { |
|
my ($balancer,$balcookie) = split(/:/,$data{'otherbalcookie'}); |
|
if (defined(&Apache::lonnet::hostname($balancer)) && $balcookie =~ /^[a-f0-9]{32}$/) { |
|
my $baldom = &Apache::lonnet::host_domain($balancer); |
|
if (&Apache::lonnet::shared_institution($baldom)) { |
|
my $cookieid = join('_',$udom,$data{'username'},$balcookie); |
|
&Apache::lonnet::updatebalcookie($cookieid,$balancer,$data{'server'}); |
|
if (ref($extra_env) eq 'HASH') { |
|
$extra_env->{'request.balancercookie'} = $data{'otherbalcookie'}; |
|
} else { |
|
$extra_env = { 'request.balancercookie' => $data{'otherbalcookie'} }; |
|
} |
|
} |
|
} |
|
} |
|
|
if (($data{'conlost'}) && ($data{'server'})) { |
if (($data{'conlost'}) && ($data{'server'})) { |
my @conlosts = split(/,/,$data{'conlost'}); |
my @conlosts = split(/,/,$data{'conlost'}); |
my $switchfrom = $data{'server'}; |
my $switchfrom = $data{'server'}; |
if (@conlosts) { |
if (@conlosts) { |
if (grep(/^\Q$switchfrom\E$/,@conlosts)) { |
if (grep(/^\Q$switchfrom\E$/,@conlosts)) { |
&log_switch($r,\%data,$extra_env); |
&log_switch($r,\%data,$extra_env,$ip); |
} |
} |
} |
} |
} |
} |
|
|
my %form; |
my (%form,$cid); |
if ($data{'symb'} ne '') { |
if ($data{'symb'} ne '') { |
$form{'symb'} = $data{'symb'}; |
$form{'symb'} = $data{'symb'}; |
} |
} |
Line 666 sub handler {
|
Line 698 sub handler {
|
if ($data{'noloadbalance'} ne '') { |
if ($data{'noloadbalance'} ne '') { |
$form{'noloadbalance'} = $data{'noloadbalance'}; |
$form{'noloadbalance'} = $data{'noloadbalance'}; |
} |
} |
|
if ($data{'role'}) { |
if (!$data{'role'}) { |
if ($data{'role'} =~ m{\./($match_domain)/($match_courseid)(?:/\w+|$)}) { |
|
unless (&Apache::lonnet::homeserver($2,$1) eq 'no_host') { |
|
$cid = $1.'_'.$2; |
|
} |
|
} |
|
} else { |
my $handle = &Apache::lonnet::check_for_valid_session($r); |
my $handle = &Apache::lonnet::check_for_valid_session($r); |
if ($handle) { |
if ($handle) { |
&Apache::lonnet::transfer_profile_to_env($r->dir_config('lonIDsDir'), |
&Apache::lonnet::transfer_profile_to_env($r->dir_config('lonIDsDir'), |
$handle); |
$handle); |
|
if ($data{'linkprot'} ne '') { |
|
&Apache::lonnet::appenv({'request.linkprot' => $data{'linkprot'}}); |
|
my ($linkprotector,$deeplink) = split(/:/,$data{'linkprot'},2); |
|
if ($env{'user.linkprotector'}) { |
|
my @protectors = split(/,/,$env{'user.linkprotector'}); |
|
unless (grep(/^\Q$linkprotector\E$/,@protectors)) { |
|
push(@protectors,$linkprotector); |
|
@protectors = sort { $a <=> $b } @protectors; |
|
&Apache::lonnet::appenv({'user.linkprotector' => join(',',@protectors)}); |
|
} |
|
} else { |
|
&Apache::lonnet::appenv({'user.linkprotector' => $linkprotector }); |
|
} |
|
if ($env{'user.linkproturi'}) { |
|
my @proturis = split(/,/,$env{'user.linkproturi'}); |
|
unless(grep(/^\Q$deeplink\E$/,@proturis)) { |
|
push(@proturis,$deeplink); |
|
@proturis = sort @proturis; |
|
&Apache::lonnet::appenv({'user.linkproturi' => join(',',@proturis)}); |
|
} |
|
} else { |
|
&Apache::lonnet::appenv({'user.linkproturi' => $deeplink}); |
|
} |
|
} elsif ($data{'linkkey'}) { |
|
&Apache::lonnet::appenv({'request.linkkey' => $data{'linkkey'}}); |
|
my $deeplink = $data{'deeplink.login'}; |
|
my $linkkey = $data{'linkkey'}; |
|
if ($env{'user.deeplinkkey'}) { |
|
my @linkkeys = split(/,/,$env{'user.deeplinkkey'}); |
|
unless (grep(/^\Q$linkkey\E$/,@linkkeys)) { |
|
push(@linkkeys,$linkkey); |
|
&Apache::lonnet::appenv({'user.deeplinkkey' => join(',',sort(@linkkeys))}); |
|
} |
|
} else { |
|
&Apache::lonnet::appenv({'user.deeplinkkey' => $linkkey}); |
|
} |
|
if ($deeplink) { |
|
if ($env{'user.keyedlinkuri'}) { |
|
my @keyeduris = split(/,/,$env{'user.keyedlinkuri'}); |
|
unless (grep(/^\Q$deeplink\E$/,@keyeduris)) { |
|
push(@keyeduris,$deeplink); |
|
&Apache::lonnet::appenv({'user.keyedlinkuri' => join(',',sort(@keyeduris))}); |
|
} |
|
} else { |
|
&Apache::lonnet::appenv({'user.keyedlinkuri' => $deeplink}); |
|
} |
|
} |
|
} |
|
if ($data{'deeplink.login'}) { |
|
&Apache::lonnet::appenv({'request.deeplink.login' => $data{'deeplink.login'}}); |
|
} |
if ($data{'lti.login'}) { |
if ($data{'lti.login'}) { |
my $needslogout; |
my $needslogout; |
if ($env{'request.lti.login'}) { |
if ($env{'request.lti.login'}) { |
Line 686 sub handler {
|
Line 774 sub handler {
|
# (and session) or has an LTI session cookie for a different username, |
# (and session) or has an LTI session cookie for a different username, |
# logout the existing session, and start a new one |
# logout the existing session, and start a new one |
if ($needslogout) { |
if ($needslogout) { |
&logout($r,$handle,\%data,$lti_env); |
&logout($r,$ip,$handle,\%data,$lti_env); |
} elsif (($data{'lti.reqcrs'}) && ($data{'lti.reqrole'} eq 'cc')) { |
} elsif (($data{'lti.reqcrs'}) && ($data{'lti.reqrole'} eq 'cc')) { |
$form{'lti.reqcrs'} = $data{'lti.reqcrs'}; |
$form{'lti.reqcrs'} = $data{'lti.reqcrs'}; |
$form{'lti.reqrole'} = $data{'lti.reqrole'}; |
$form{'lti.reqrole'} = $data{'lti.reqrole'}; |
Line 757 sub handler {
|
Line 845 sub handler {
|
} |
} |
} else { |
} else { |
my $desturl = '/adm/roles'; |
my $desturl = '/adm/roles'; |
if ($data{'origurl'} ne '') { |
if ($data{'lti.login'}) { |
$desturl = $data{'origurl'}; |
if ($data{'lti.selfenrollrole'}) { |
if ($data{'lti.login'}) { |
$desturl .= '?selectrole=1&'. |
$desturl = $data{'origurl'}; |
&escape($data{'lti.selfenrollrole'}).'=1'; |
|
if ($data{'origurl'} ne '') { |
|
$desturl .= '&orgurl='.$data{'origurl'}; |
|
if ($data{'origurl'} =~ m{/default_\d+\.sequence$}) { |
|
$desturl .= '&navmap=1'; |
|
} |
|
} |
|
} elsif ($data{'origurl'} ne '') { |
|
$desturl = $data{'origurl'}; |
if ($desturl =~ m{/default_\d+\.sequence$}) { |
if ($desturl =~ m{/default_\d+\.sequence$}) { |
$desturl .= (($desturl =~/\?/)?'&':'?').'navmap=1'; |
$desturl .= (($desturl =~/\?/)?'&':'?').'navmap=1'; |
} |
} |
} |
} |
|
} elsif ($data{'origurl'} ne '') { |
|
$desturl = $data{'origurl'}; |
|
if ($data{'linkprot'}) { |
|
my ($linkprotector,$linkuri) = split(/:/,$data{'linkprot'},2); |
|
if ($linkprotector) { |
|
if (ref($extra_env) eq 'HASH') { |
|
$extra_env->{'user.linkprotector'} = $linkprotector; |
|
$extra_env->{'user.linkproturi'} = $linkuri; |
|
$extra_env->{'request.linkprot'} = $data{'linkprot'}; |
|
} else { |
|
$extra_env = {'user.linkprotector' => $linkprotector, |
|
'user.linkproturi' => $linkuri, |
|
'request.linkprot' => $data{'linkprot'}}; |
|
} |
|
} |
|
} elsif ($data{'linkkey'}) { |
|
if (ref($extra_env) eq 'HASH') { |
|
$extra_env->{'user.deeplinkkey'} = $data{'linkkey'}; |
|
$extra_env->{'user.keyedlinkuri'} = $data{'deeplink.login'}; |
|
$extra_env->{'request.linkkey'} = $data{'linkkey'}; |
|
} else { |
|
$extra_env = {'user.deeplinkkey' => $data{'linkkey'}, |
|
'user.keyedlinkuri' => $data{'deeplink.login'}, |
|
'request.linkkey' => $data{'linkkey'}}; |
|
} |
|
} |
|
if ($data{'deeplink.login'}) { |
|
if (ref($extra_env) eq 'HASH') { |
|
$extra_env->{'request.deeplink.login' => $data{'deeplink.login'}}; |
|
} else { |
|
$extra_env = {'request.deeplink.login' => $data{'deeplink.login'}}; |
|
} |
|
} |
} |
} |
my $skipcritical; |
my $skipcritical; |
if (($data{'lti.login'}) && ($data{'lti.reqcrs'}) && |
if ($data{'lti.login'}) { |
($data{'lti.reqrole'} eq 'cc')) { |
if ((($data{'lti.reqcrs'}) && |
$skipcritical = 1; |
($data{'lti.reqrole'} eq 'cc')) || |
|
($data{'lti.selfenrollrole'})) { |
|
$skipcritical = 1; |
|
} |
} |
} |
&Apache::lonauth::success($r,$data{'username'},$data{'domain'}, |
&Apache::lonauth::success($r,$data{'username'},$data{'domain'}, |
$home,$desturl,$extra_env,\%form,$skipcritical); |
$home,$desturl,$extra_env,\%form,$skipcritical); |
Line 777 sub handler {
|
Line 909 sub handler {
|
return OK; |
return OK; |
} |
} |
|
|
my $next_url='/adm/roles?selectrole=1&'.&escape($data{'role'}).'=1'; |
if ($data{'lti.login'}) { |
if ($data{'origurl'} ne '') { |
my $handle = &Apache::lonnet::check_for_valid_session($r); |
$next_url .= '&orgurl='.&escape($data{'origurl'}); |
if ($handle) { |
if ($data{'lti.login'}) { |
&Apache::lonnet::transfer_profile_to_env($r->dir_config('lonIDsDir'), |
if (($data{'origurl'} =~ m{/default_\d+\.sequence$}) || |
$handle); |
($data{'origurl'} =~ m{^/res/.+\.sequence$})) { |
my $needslogout; |
$next_url .= '&navmap=1'; |
if ($env{'request.lti.login'}) { |
|
if (($env{'user.name'} ne $data{'username'}) || |
|
($env{'user.domain'} ne $data{'domain'})) { |
|
$needslogout = 1; |
|
} |
|
} else { |
|
$needslogout = 1; |
} |
} |
|
if ($needslogout) { |
|
&logout($r,$ip,$handle,\%data,$lti_env); |
|
return OK; |
|
} |
|
} |
|
} |
|
|
|
# check if current user, and role match those expected. |
|
my ($next_url,$reuse_session); |
|
if (($env{'user.name'} eq $data{'username'}) && ($env{'user.domain'} eq $data{'domain'}) && |
|
($env{'request.role'} eq $data{'role'}) && ($data{'origurl'} ne '')) { |
|
$next_url = $data{'origurl'}; |
|
$reuse_session = 1; |
|
} elsif ($data{'origurl'} =~ m{^/tiny/$match_domain/\w+$}) { |
|
$next_url=$data{'origurl'}; |
|
} else { |
|
$next_url='/adm/roles?selectrole=1&'.&escape($data{'role'}).'=1'; |
|
if ($data{'origurl'} ne '') { |
|
$next_url .= '&orgurl='.&escape($data{'origurl'}); |
|
} |
|
} |
|
if ($data{'lti.login'}) { |
|
if (($data{'origurl'} =~ m{/default_\d+\.sequence$}) || |
|
($data{'origurl'} =~ m{^/res/.+\.sequence$})) { |
|
$next_url .= '&navmap=1'; |
|
} |
|
} |
|
if ($reuse_session) { |
|
$r->internal_redirect($next_url); |
|
} elsif ($data{'deeplink.login'}) { |
|
if (ref($extra_env) eq 'HASH') { |
|
$extra_env->{'request.deeplink.login'} = $data{'deeplink.login'}; |
|
} else { |
|
$extra_env = {'request.deeplink.login' => $data{'deeplink.login'}}; |
|
} |
|
if ($data{'linkprot'}) { |
|
$extra_env->{'request.linkprot'} = $data{'linkprot'}; |
|
} elsif ($data{'linkkey'} ne '') { |
|
$extra_env->{'request.linkkey'} = $data{'linkkey'}; |
} |
} |
|
&Apache::lonauth::success($r,$data{'username'},$data{'domain'},$home, |
|
$next_url,$extra_env,\%form,'',$cid); |
} |
} |
&Apache::lonauth::success($r,$data{'username'},$data{'domain'},$home, |
|
$next_url,$extra_env,\%form); |
|
return OK; |
return OK; |
} |
} |
|
|