mirror of
https://github.com/mailcow/mailcow-dockerized.git
synced 2026-01-30 09:07:19 +00:00
95e0608749
Autodiscover and autoconfig domains (autodiscover.*, autoconfig.*) are intended solely for client autoconfiguration endpoints and should not display the mailcow login page. This change check the hostname and disables unauthenticated users from seeing the login page on those domains; HTTP 404 response is returned when necessary.
58 lines
2.0 KiB
PHP
58 lines
2.0 KiB
PHP
<?php
|
|
require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/prerequisites.inc.php';
|
|
require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/triggers.user.inc.php';
|
|
|
|
if (isset($_SESSION['mailcow_cc_role']) && isset($_SESSION['oauth2_request'])) {
|
|
$oauth2_request = $_SESSION['oauth2_request'];
|
|
unset($_SESSION['oauth2_request']);
|
|
header('Location: ' . $oauth2_request);
|
|
exit();
|
|
}
|
|
elseif (isset($_SESSION['mailcow_cc_role']) && $_SESSION['mailcow_cc_role'] == 'user') {
|
|
$user_details = mailbox("get", "mailbox_details", $_SESSION['mailcow_cc_username']);
|
|
$is_dual = (!empty($_SESSION["dual-login"]["username"])) ? true : false;
|
|
if (intval($user_details['attributes']['sogo_access']) == 1 && !$is_dual && getenv('SKIP_SOGO') != "y") {
|
|
header("Location: /SOGo/so/");
|
|
} else {
|
|
header("Location: /user");
|
|
}
|
|
exit();
|
|
}
|
|
elseif (isset($_SESSION['mailcow_cc_role']) && $_SESSION['mailcow_cc_role'] == 'admin') {
|
|
header('Location: /admin/dashboard');
|
|
exit();
|
|
}
|
|
elseif (isset($_SESSION['mailcow_cc_role']) && $_SESSION['mailcow_cc_role'] == 'domainadmin') {
|
|
header('Location: /domainadmin/mailbox');
|
|
exit();
|
|
}
|
|
|
|
$host = strtolower($_SERVER['HTTP_HOST'] ?? '');
|
|
if (str_starts_with($host, 'autodiscover.') || str_starts_with($host, 'autoconfig.')) {
|
|
http_response_code(404);
|
|
exit();
|
|
}
|
|
|
|
require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/header.inc.php';
|
|
$_SESSION['return_to'] = $_SERVER['REQUEST_URI'];
|
|
$_SESSION['index_query_string'] = $_SERVER['QUERY_STRING'];
|
|
|
|
$has_iam_sso = false;
|
|
if ($iam_provider){
|
|
$iam_redirect_url = identity_provider("get-redirect");
|
|
$has_iam_sso = $iam_redirect_url ? true : false;
|
|
}
|
|
$custom_login = customize('get', 'custom_login');
|
|
|
|
$template = 'user_index.twig';
|
|
$template_data = [
|
|
'oauth2_request' => @$_SESSION['oauth2_request'],
|
|
'is_mobileconfig' => str_contains($_SESSION['index_query_string'], 'mobileconfig'),
|
|
'login_delay' => @$_SESSION['ldelay'],
|
|
'has_iam_sso' => $has_iam_sso,
|
|
'custom_login' => $custom_login,
|
|
];
|
|
|
|
$js_minifier->add('/web/js/site/index.js');
|
|
require_once $_SERVER['DOCUMENT_ROOT'] . '/inc/footer.inc.php';
|