- Added LoginAs to the menu

- Added new page to see your credentials and to get the credentials of someone else using autocomplete (searches by uid, name or surname) - Refactored the login page on CI side
2026-07-23 18:02:18 +00:00 · 2025-10-20 11:40:10 +02:00
parent 4495632393
commit 2484bf1217
8 changed files with 577 additions and 176 deletions
@@ -0,0 +1,135 @@
+<?php
+/**
+ * Copyright (C) 2025 fhcomplete.org
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ */
+
+if (! defined('BASEPATH')) exit('No direct script access allowed');
+
+/**
+ *
+ */
+class Login extends FHCAPI_Controller
+{
+	/**
+	 * Object initialization
+	 */
+	public function __construct()
+	{
+		parent::__construct(array(
+			'loginLDAP' => self::PERM_ANONYMOUS,
+			'loginASByUid' => 'admin:rw',
+			'loginASByPersonId' => 'admin:rw',
+			'whoAmI' => self::PERM_ANONYMOUS,
+			'searchUser' => 'admin:rw'
+		));
+	}
+
+	/**
+	 * Called with HTTP POST via ajax to login using the LDAP authentication
+	 */
+	public function loginLDAP()
+	{
+		$username = $this->input->post('username');
+		$password = $this->input->post('password');
+
+		$this->load->library('AuthLib', array(false)); // without authentication otherwise loooooop!
+
+		$login = $this->authlib->loginLDAP($username, $password);
+
+		// If login is success then retrieves the desired page
+		if (isSuccess($login)) $this->terminateWithSuccess($this->authlib->getLandingPage());
+
+		$this->terminateWithError(getError($login)); // returns the error code
+	}
+
+	/**
+	 * Called with HTTP POST via ajax to login as another user specified by uid
+	 */
+	public function loginASByUid()
+	{
+		$uid = $this->input->post('uid');
+
+		// With authentication -> you must be already logged to gain another identity
+		$this->load->library('AuthLib');
+
+		$loginAS = $this->authlib->loginASByUID($uid);
+
+		// Got it!
+		if (isSuccess($loginAS)) $this->terminateWithSuccess(true);
+
+		// Returns the error code
+		$this->terminateWithError(getError($loginAS));
+	}
+
+	/**
+	 * Called with HTTP POST via ajax to login as another user specified by person id
+	 */
+	public function loginASByPersonId()
+	{
+		$person_id = $this->input->post('person_id');
+
+		// With authentication -> you must be already logged to gain another identity
+		$this->load->library('AuthLib');
+
+		$loginAS = $this->authlib->loginASByPersonId($person_id);
+
+		// Got it!
+		if (isSuccess($loginAS)) $this->terminateWithSuccess(true);
+	
+		// Returns the error code
+		$this->terminateWithError(getError($loginAS));
+	}
+
+	/**
+	 * Called with HTTP GET via ajax to show which login cretentials are in use
+	 */
+	public function whoAmI()
+	{
+		// With authentication -> you must be already logged to gain another identity
+		$this->load->library('AuthLib');
+
+		$this->terminateWithSuccess($this->authlib->getAuthObj());
+	}
+
+	/**
+	 * Search for a user in database checking the name, surname or uid
+	 */
+	public function searchUser()
+	{
+		$query = strtolower('%'.$this->input->get('query').'%');
+
+		$this->load->model('person/Benutzer_model', 'BenutzerModel');
+
+		$dataset = $this->BenutzerModel->execReadOnlyQuery('
+			SELECT p.person_id,
+				b.uid,
+				p.nachname,
+				p.vorname,
+				b.uid || \' - \' || p.nachname || \' \' || p.vorname AS label
+			  FROM public.tbl_person p
+		     LEFT JOIN public.tbl_benutzer b ON(b.person_id = p.person_id)
+			 WHERE b.aktiv = TRUE
+			   AND (p.nachname LIKE ? OR p.vorname = ? OR b.uid LIKE ?)
+			',
+			array($query, $query, $query)
+		);
+
+		if (isError($dataset)) $this->terminateWithError(getError($dataset));
+
+		$this->terminateWithSuccess($dataset);
+	}
+}
+