CHIEFSOFT\ameye
131 lines
4.5 KiB
PHP
131 lines
4.5 KiB
PHP
<?php
|
|
// This file is part of Moodle - http://moodle.org/
|
|
//
|
|
// Moodle is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU General Public License as published by
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
// (at your option) any later version.
|
|
//
|
|
// Moodle is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU General Public License
|
|
// along with Moodle. If not, see <http://www.gnu.org/licenses/>.
|
|
/**
|
|
* MFA page
|
|
*
|
|
* @package tool_mfa
|
|
* @author Mikhail Golenkov <golenkovm@gmail.com>
|
|
* @copyright Catalyst IT
|
|
* @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
|
|
*/
|
|
|
|
require_once(__DIR__ . '/../../../config.php');
|
|
require_once($CFG->dirroot . '/admin/tool/mfa/lib.php');
|
|
require_once($CFG->libdir.'/adminlib.php');
|
|
|
|
use tool_mfa\local\form\login_form;
|
|
use tool_mfa\manager;
|
|
use tool_mfa\plugininfo\factor;
|
|
|
|
require_login(null, false);
|
|
|
|
$context = context_user::instance($USER->id);
|
|
$PAGE->set_context($context);
|
|
$PAGE->set_url('/admin/tool/mfa/auth.php');
|
|
$PAGE->set_pagelayout('login');
|
|
$PAGE->blocks->show_only_fake_blocks();
|
|
$pagetitle = $SITE->shortname.': '.get_string('mfa', 'tool_mfa');
|
|
$PAGE->set_title($pagetitle);
|
|
|
|
// Logout if it was requested.
|
|
$logout = optional_param('logout', false, PARAM_BOOL);
|
|
$sesskey = optional_param('sesskey', '_none_', PARAM_RAW);
|
|
|
|
if ($logout) {
|
|
if (!confirm_sesskey($sesskey)) {
|
|
echo $OUTPUT->header();
|
|
echo $OUTPUT->confirm(
|
|
get_string('logoutconfirm'),
|
|
new moodle_url($PAGE->url, ['logout' => 1, 'sesskey' => sesskey()]),
|
|
new moodle_url('/'),
|
|
);
|
|
echo $OUTPUT->footer();
|
|
die;
|
|
}
|
|
|
|
if (!empty($SESSION->wantsurl)) {
|
|
// If we have the wantsurl, we should redirect there, to keep it intact.
|
|
$wantsurl = $SESSION->wantsurl;
|
|
} else {
|
|
// Else redirect home.
|
|
$wantsurl = new \moodle_url($CFG->wwwroot);
|
|
}
|
|
|
|
manager::mfa_logout();
|
|
redirect($wantsurl);
|
|
}
|
|
|
|
$currenturl = new moodle_url('/admin/tool/mfa/auth.php');
|
|
|
|
// Perform state check.
|
|
manager::resolve_mfa_status();
|
|
|
|
// We have a valid landing here, before doing any actions, clear any redir loop progress.
|
|
manager::clear_redirect_counter();
|
|
|
|
// If a specific factor was requested, use it.
|
|
$pickedname = optional_param('factorname', false, PARAM_ALPHA);
|
|
$pickedfactor = factor::get_factor($pickedname);
|
|
$formfactor = optional_param('factor', false, PARAM_ALPHA);
|
|
|
|
if ($pickedfactor && $pickedfactor->has_input() && $pickedfactor->get_state() == factor::STATE_UNKNOWN) {
|
|
$factor = $pickedfactor;
|
|
} else if ($formfactor) {
|
|
// Check if a factor was supplied by the form, such as for a form submission.
|
|
$factor = factor::get_factor($formfactor);
|
|
} else {
|
|
// Else, get the next factor that requires input.
|
|
$factor = factor::get_next_user_login_factor();
|
|
}
|
|
|
|
// If ok, perform form actions for input factor.
|
|
$form = new login_form($currenturl, ['factor' => $factor], 'post', '', ['class' => 'ignoredirty']);
|
|
if ($form->is_submitted()) {
|
|
if (!$form->is_validated() && !$form->is_cancelled()) {
|
|
// Increment the fail counter for the factor,
|
|
// And let the factor handle locking logic.
|
|
$factor->increment_lock_counter();
|
|
manager::resolve_mfa_status(false);
|
|
} else {
|
|
// Set state from user actions.
|
|
if ($form->is_cancelled()) {
|
|
$factor->process_cancel_action();
|
|
// Move to next factor.
|
|
manager::resolve_mfa_status(true);
|
|
} else {
|
|
if ($data = $form->get_data()) {
|
|
// Validation has passed, so before processing, lets action the global form submissions as well.
|
|
$form->globalmanager->submit($data);
|
|
|
|
// Did user submit something that causes a fail state?
|
|
if ($factor->get_state() == factor::STATE_FAIL) {
|
|
manager::resolve_mfa_status(true);
|
|
}
|
|
|
|
$factor->set_state(factor::STATE_PASS);
|
|
// Move to next factor.
|
|
manager::resolve_mfa_status(true);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
$renderer = $PAGE->get_renderer('tool_mfa');
|
|
echo $OUTPUT->header();
|
|
manager::display_debug_notification();
|
|
echo $renderer->verification_form($factor, $form);
|
|
echo $OUTPUT->footer();
|