upstream/nextcloud
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2026-06-11 09:42:09 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 57

only save the ticket when the user is using session sso

Browse source 
Signed-off-by: Robin Appelman <robin@icewind.nl>
This commit is contained in:
Robin Appelman 2023-09-04 17:02:12 +02:00
parent 66ce8da9fe
commit ddd75b16b3
No known key found for this signature in database
GPG key ID: 42B69D8A64526EFB
1 changed files with 28 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

30
apps/files_external/lib/Lib/TicketSaveMiddleware.php
View file

@ -24,22 +24,48 @@ declare(strict_types=1);
namespace OCA\Files_External\Lib;
use Icewind\SMB\KerberosTicket;
use OCA\Files_External\Controller\UserGlobalStoragesController;
use OCA\Files_External\Lib\Auth\SMB\KerberosSsoSession;
use OCA\Files_External\Service\UserGlobalStoragesService;
use OCP\AppFramework\Http\Response;
use OCP\AppFramework\Middleware;
use OCP\ISession;
use OCP\IUserSession;
class TicketSaveMiddleware extends Middleware {
private ISession $session;
private IUserSession $userSession;
private UserGlobalStoragesService $storagesService;
public function __construct(ISession $session) {
public function __construct(
ISession $session,
IUserSession $userSession,
UserGlobalStoragesService $storagesService
) {
$this->session = $session;
$this->userSession = $userSession;
$this->storagesService = $storagesService;
}
public function afterController($controller, $methodName, Response $response) {
$ticket = KerberosTicket::fromEnv();
if ($ticket && $ticket->isValid()) {
if ($ticket && $ticket->isValid() && $this->needToSaveTicket()) {
$this->session->set('kerberos_ticket', base64_encode($ticket->save()));
}
return $response;
}
private function needToSaveTicket(): bool {
$user = $this->userSession->getUser();
if (!$user) {
return false;
}
$storages = $this->storagesService->getAllStoragesForUser($user);
foreach ($storages as $storage) {
if ($storage->getAuthMechanism() instanceof KerberosSsoSession) {
return true;
}
}
return false;
}
}