php-web-wiki/dokuwiki/lib/plugins/phpcvs/auth.php

<?php
/**
 * DokuWiki Plugin phpcvs (Auth Component)
 *
 *
 * @license    GPL 2 (http://www.gnu.org/licenses/gpl.html)
 * @author     Lukas Smith <smith@pooteeweet.org>
 */

// must be run within Dokuwiki
if(!defined('DOKU_INC')) die();

class auth_plugin_phpcvs extends auth_plugin_authplain {


    /**
     * Constructor.
     */
    public function __construct() {
        parent::__construct(); // for compatibility

        global $conf;
        $this->cnf = $conf['auth']['phpcvs'];
        $this->success = true;

        /* We fallback on the authplain module, so pretend we can do these things */
        $this->cando['addUser']   = true;
        $this->cando['delUser']   = true;
        $this->cando['modLogin']  = true;
        $this->cando['modPass']   = true;
        $this->cando['modName']   = true;
        $this->cando['modMail']   = true;
        $this->cando['modGroups'] = true;
        $this->cando['getUsers']     = true;
        $this->cando['getUserCount'] = true;
    }


    /* There is no magic cookie, so don't trust it ! */
  function trustExternal($user,$pass,$sticky=false){
      return false;
    }

    /**
     * Set a user read via main.php.net
     *
     * Checks if the given user exists and the given
     * plaintext password is correct
     *
     * @return  bool true or int error code
     */
    function _setCVSUser($user){
      $this->loadUserData();
      $this->users[$user]['pass'] = null;
      $this->users[$user]['name'] = $user;
      $this->users[$user]['mail'] = $user.'@php.net';
      $grps = array('phpcvs');
      if (in_array($user, $this->cnf['admins'])) {
        $grps[] = 'admin';
      }
      $this->users[$user]['grps'] = $grps;
    }

    /**
     * Check user+password against main.php.net [required auth function]
     *
     * Checks if the given user exists and the given
     * plaintext password is correct
     *
     * @return  bool true or int error code
     */
    function _checkCVSPass($user,$pass = ''){
      $post = http_build_query(
        array(
          "token" => getenv("dokuwikitoken"),
          "username" => $user,
          "password" => $pass,
        ), '', '&'
      );

      $opts = array(
        "method"  => "POST",
        "header"  => "Content-type: application/x-www-form-urlencoded",
        "content" => $post,
      );

      $ctx = stream_context_create(array("http" => $opts));

      $s = file_get_contents("https://main.php.net/fetch/cvsauth.php", false, $ctx);

      $a = unserialize($s);
      /*
      define("E_UNKNOWN", 0);
      define("E_USERNAME", 1);
      define("E_PASSWORD", 2);
      */
      if (!is_array($a)) {
        return 0;
      }
      if (isset($a["errno"])) {
        return (int)$a["errno"];
      }

      $this->_setCVSUser($user);

      return true;
    }

    /**
     * Check user+password [required auth function]
     *
     * Checks if the given user exists and the given
     * plaintext password is correct
     *
     * @return  bool
     */
    function checkPass($user,$pass){
      $cvs_reply = $this->_checkCVSPass($user,$pass);

      if ($cvs_reply === true) {
        return true;
      // username did not match an existing username
      } elseif($cvs_reply < 2) {
        return parent::checkPass($user,$pass);
      }

      return false;
    }

    /**
     * Return user info
     *
     * Returns info about the given user needs to contain
     * at least these fields:
     *
     * name string  full name of the user
     * mail string  email addres of the user
     * grps array   list of groups the user is in
     *
     * @author  Andreas Gohr <andi@splitbrain.org>
     */
    function getUserData($user, $requireGroups = true){
      $cvs_reply = $this->_checkCVSPass($user);
      if ($cvs_reply === 2) {
        $this->_setCVSUser($user);
      }

      if($this->users === null) $this->loadUserData();
      return isset($this->users[$user]) ? $this->users[$user] : false;
    }

    /**
     *  Remove one or more users from the list of registered users
     *
     *  @author  Christopher Smith <chris@jalakai.co.uk>
     *  @param   array  $users   array of users to be deleted
     *  @return  int             the number of users deleted
     */
    function deleteUsers($users) {
      $deleted = array();
      foreach ($users as $key => $user) {
        $cvs_reply = $this->_checkCVSPass($user);
        // user exists because we got a password mismatch error
        if($cvs_reply === 2) {
          unset($users[$key]);
        }
      }

      $users = array_values($users);

      return parent::deleteUsers($users);
    }
}

// vim:ts=4:sw=4:et: