#!/usr/bin/perl
#================================================
# LemonLDAP::NG default test page
# Display headers and environment
#================================================
# Init CGI
use CGI ;
my $ cgi = CGI - > new ;
# GET parameters
my $ name = $ cgi - > param ( "name" ) || "LemonLDAP::NG sample protected application" ;
my $ color = $ cgi - > param ( "color" ) || "#ddd" ;
# Local parameters
my $ portal_url = "http://auth.__DNSDOMAIN__" ;
my $ manager_url = "http://manager.__DNSDOMAIN__" ;
# CSS
my $ css = << EOT ;
html , body {
height:100 % ;
background: $ color ;
}
#content{
padding:20px ;
}
EOT
# Read headers
my % headers ;
foreach ( sort keys % ENV ) {
if ( $ _ =~ /^HTTP_/ ) {
( $ a = $ _ ) =~ s/^HTTP_//i ;
$ a = join '-' , map { ucfirst ( lc ) } split '_' , $ a ;
$ headers - > { $ a } = $ _ ;
}
}
# Display page
print $ cgi - > header ( - charset = > 'utf-8' ) ;
print "<!DOCTYPE html>\n" ;
print
"<html xmlns=\"http://www.w3.org/1999/xhtml\" xml:lang=\"en\" lang=\"en\">\n" ;
print "<head>\n" ;
print "<title>$name</title>\n" ;
print
"<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n" ;
print
"<meta http-equiv=\"Content-Script-Type\" content=\"text/javascript\" />\n" ;
print "<meta http-equiv=\"cache-control\" content=\"no-cache\" />\n" ;
print
"<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n" ;
print
"<link href=\"$portal_url/skins/bootstrap/css/bootstrap.css\" rel=\"stylesheet\">\n" ;
print
"<link href=\"$portal_url/skins/bootstrap/css/bootstrap-theme.css\" rel=\"stylesheet\">\n" ;
print "<style>\n" ;
print "$css\n" ;
print "</style>\n" ;
print
"<script type=\"text/javascript\" src=\"/skins/common/js/jquery-1.10.2.js\"></script>\n" ;
print
"<script type=\"text/javascript\" src=\"/skins/common/js/jquery-ui-1.10.3.custom.js\"></script>\n" ;
print "<script src=\"$portal_url/skins/bootstrap/js/bootstrap.js\"></script>\n" ;
print "</head>\n" ;
print "<body>\n" ;
print "<div id=\"content\" class=\"container\">\n" ;
print "<div class=\"panel panel-info panel-body\">\n" ;
print "<div class=\"page-header\">\n" ;
print "<h1 class=\"text-center\">$name</h1>\n" ;
print "</div>\n" ;
print "<div class=\"panel panel-info\">\n" ;
print "<div class=\"panel-heading\">\n" ;
print "<h2 class=\"panel-title text-center\">Main informations</h2>\n" ;
print "</div>\n" ;
print "<div class=\"panel-body\">\n" ;
print "<ul class=\"list-unstyled\">\n" ;
print
"<li><strong>Authentication status:</strong> <span class=\"label label-success\">Success</span></li>\n" ;
print "<li>Connected user: <ul>\n" ;
print "<li><tt>\$ENV{HTTP_AUTH_USER}</tt>: $ENV{HTTP_AUTH_USER}</li>\n" ;
print "<li><tt>\$ENV{REMOTE_USER}</tt>: $ENV{REMOTE_USER}</li>\n" ;
print "</ul></li>\n" ;
print "</ul>\n" ;
print
"<div class=\"alert alert-warning\">Be carefull, the <tt>\$ENV{REMOTE_USER}</tt> is set only if your script is in the same server than LemonLDAP::NG Handler (<tt>\$whatToTrace</tt> parameter). If you use it on a reverse-proxy, <tt>\$ENV{REMOTE_USER}</tt> is not set. See <a href=\"$manager_url/doc/pages/documentation/current/header_remote_user_conversion.html\">this documentation page</a> to know how to convert an HTTP header into an environment variable.</div>\n" ;
print "</div>\n" ;
print "</div>\n" ;
print "<div class=\"panel panel-info\">\n" ;
print "<div class=\"panel-heading\">\n" ;
print "<h2 class=\"panel-title text-center\">HTTP headers</h2>\n" ;
print "</div>\n" ;
print "<div class=\"panel-body\">\n" ;
print
"<p>To know who is connected in your applications, you can read HTTP headers:</p>\n" ;
print "<div class=\"table-responsive\">\n" ;
print "<table class=\"table table-striped table-hover\">\n" ;
print
"<thead><tr><th>Header</th><th>Perl CGI</th><th>PHP script</th><th>Value</th></tr></thead><tbody>\n" ;
foreach ( sort keys %$ headers ) {
next if $ _ =~ /(Accept|Cache|User-Agent|Connection|Keep-Alive)/i ;
print " <tr>
<td> $ _ </td>
<td> <tt> \ $ ENV { $ headers - > { $ _ } } </tt> </td>
<td> <tt> \ $ _SERVER { $ headers - > { $ _ } } </tt> </td>
<td> < ul class = \ "list-unstyled\">" ;
foreach ( split ( /;/ , $ ENV { $ headers - > { $ _ } } ) ) {
print "<li>$_</li>" if $ _ ne " " ;
}
print "☒" unless $ ENV { $ headers - > { $ _ } } ;
print " </ul> </td>
</tr> \ n " ;
}
print "</tbody></table>\n" ;
print "</div>\n" ;
print
"<div class=\"alert alert-warning\">Note that LemonLDAP::NG cookie is hidden. So that application developpers can not spoof sessions.</div>\n" ;
print
"<div class=\"alert alert-info\">You can access to any information (IP address or LDAP attribute) by customizing exported headers with the <a href=\"$manager_url\">LemonLDAP::NG Management interface</a>.</div>\n" ;
print "</div>\n" ;
print "</div>\n" ;
print "<div class=\"panel panel-info\">\n" ;
print "<div class=\"panel-heading\">\n" ;
print "<h2 class=\"panel-title text-center\">Scripts parameters</h2>\n" ;
print "</div>\n" ;
print "<div class=\"panel-body\">\n" ;
print "<p>Find here all GET or POST parameters sent to this page:</p>\n" ;
print "<div class=\"table-responsive\">\n" ;
print "<table class=\"table table-striped table-hover\">\n" ;
print "<thead><tr><th>Parameter</th><th>Value</th></tr></thead><tbody>\n" ;
foreach ( sort $ cgi - > param ( ) ) {
my $ tmp = $ cgi - > param ( $ _ ) ;
print "<tr><td>$_</td><td><big>☞</big> $tmp</td></tr>\n" ;
}
print "</tbody></table>\n" ;
print "</div>\n" ;
print
"<div class=\"alert alert-info\">POST parameters can be forged by LemonLDAP::NG to <a href=\"$manager_url/doc/pages/documentation/current/formreplay.html\">autosubmit forms</a>.</div>\n" ;
print "</div>\n" ;
print "</div>\n" ;
print "<div class=\"panel panel-info\">\n" ;
print "<div class=\"panel-heading\">\n" ;
print "<h2 class=\"panel-title text-center\">Environment for Perl CGI</h2>\n" ;
print "</div>\n" ;
print "<div class=\"panel-body\">\n" ;
print "<div class=\"table-responsive\">\n" ;
print "<table class=\"table table-striped table-hover\">\n" ;
print
"<thead><tr><th>Environment variable</th><th>Value</th></tr></thead><tbody>\n" ;
foreach ( sort keys % ENV ) {
my $ tmp = $ ENV { $ _ } ;
$ tmp =~ s/&/&/g ;
$ tmp =~ s/>/>/g ;
$ tmp =~ s/</</g ;
print "<tr><td>$_</td><td><big>☞</big> $tmp</td></tr>\n" ;
}
print "</tbody></table>\n" ;
print "</div>\n" ;
print "</div>\n" ;
print "</div>\n" ;
print "</div>\n" ;
print "</div>\n" ;
print $ cgi - > end_html ;
