Laurent Opprecht
14 years ago
commit
9d02882e7a
@ -0,0 +1,89 @@ |
|||||||
|
<?php |
||||||
|
/* |
||||||
|
SSO sample |
||||||
|
|
||||||
|
This is the "server" of my institution/university authentification "code" |
||||||
|
|
||||||
|
1. Active all the SSO option in your Chamilo installation: main/admin/settings.php?category=Security |
||||||
|
2. Make sure this script is located in the index page of the server you fill in the "Domain of the Single Sign On server" Chamilo setting |
||||||
|
For example this script must be located in example.com/index.php if you set the "Domain of the Single Sign On server" = example.com |
||||||
|
3. Create a user in chamilo and in your external system with login = "joe" and password = "doe" |
||||||
|
4. Remember this is just a sample! Check the chamilo drupal extension for more information: |
||||||
|
http://drupal.org/node/817682 |
||||||
|
5. See the main/auth/sso.class.php library for more details |
||||||
|
*/ |
||||||
|
|
||||||
|
|
||||||
|
//This page will be loaded when entering to the Chamilo site if the SSO option was set in step 1. |
||||||
|
|
||||||
|
//Getting the chamilo server |
||||||
|
$my_chamilo_server = filter_xss($_SERVER['HTTP_HOST']); |
||||||
|
|
||||||
|
//Correct user values - we asume that this user exists in both systems |
||||||
|
$correct_user = 'john'; |
||||||
|
$correct_pass = 'doe'; |
||||||
|
|
||||||
|
$account = array(); |
||||||
|
|
||||||
|
if (isset($_SESSION['my_server_user_session'])) { |
||||||
|
//validate if the user is already logged in my external system in order to redirect to chamilo |
||||||
|
} |
||||||
|
|
||||||
|
//Login process |
||||||
|
|
||||||
|
if (isset($_POST['user']) && isset($_POST['password'])) { |
||||||
|
if ($_POST['user'] == $correct_user && $_POST['password'] == $correct_pass) { |
||||||
|
|
||||||
|
// You have to add here your server validations |
||||||
|
|
||||||
|
$account['name'] = 'john'; |
||||||
|
$account['pass'] = 'doe'; |
||||||
|
|
||||||
|
$master_auth_uri = $my_chamilo_server . '?q=user'; |
||||||
|
|
||||||
|
// Creating an array cookie that will be sent to Chamilo |
||||||
|
$sso = array( |
||||||
|
'username' => $account['name'], |
||||||
|
'secret' => sha1($account['pass']), |
||||||
|
'master_domain' => $my_chamilo_server, |
||||||
|
'master_auth_uri' => $master_auth_uri, |
||||||
|
'lifetime' => time() + 3600, |
||||||
|
'target' => filter_xss($_GET['sso_target']), |
||||||
|
); |
||||||
|
|
||||||
|
$cookie = base64_encode(serialize($sso)); |
||||||
|
$url = chamilo_sso_protocol() . $master_auth_uri; |
||||||
|
$params = 'sso_referer='. urlencode($url) .'&sso_cookie='. urlencode($cookie); |
||||||
|
$final_url = filter_xss($_GET['sso_referer']) .'?'. $params; |
||||||
|
|
||||||
|
//If your user exists redirect to chamilo and set the account in a session to check it later |
||||||
|
$_SESSION['my_server_user_session'] = $account; |
||||||
|
|
||||||
|
//Redirect to chamilo |
||||||
|
header('Location: '.$final_url); |
||||||
|
} else { |
||||||
|
echo '<h2>Wrong parameters</h2>'; |
||||||
|
} |
||||||
|
} |
||||||
|
|
||||||
|
if (isset($_POST['logout'])) { |
||||||
|
//echo do something to logout |
||||||
|
} |
||||||
|
|
||||||
|
function filter_xss($val) { |
||||||
|
//do some cleaning |
||||||
|
return $val; |
||||||
|
} |
||||||
|
|
||||||
|
function chamilo_sso_protocol() { |
||||||
|
//get the sso_protocol from chamilo using webservices |
||||||
|
return 'http://'; |
||||||
|
} |
||||||
|
?> |
||||||
|
<html> |
||||||
|
<form method="post"> |
||||||
|
User <input name="user" value="<?php echo $correct_user; ?>">
|
||||||
|
Pass <input name="password" value="<?php echo $correct_pass; ?>">
|
||||||
|
<input type="submit" value="Login"> |
||||||
|
</form> |
||||||
|
</html> |
||||||
Loading…
Reference in new issue