mirror of
https://github.com/mailcow/mailcow-dockerized.git
synced 2025-12-13 01:45:59 +00:00
116 lines
3.6 KiB
PHP
116 lines
3.6 KiB
PHP
<?php
|
|
ini_set('error_reporting', 0);
|
|
header('Content-Type: application/json');
|
|
|
|
$post = trim(file_get_contents('php://input'));
|
|
if ($post) {
|
|
$post = json_decode($post, true);
|
|
}
|
|
|
|
|
|
$return = array("success" => false);
|
|
if(!isset($post['username']) || !isset($post['password']) || !isset($post['real_rip'])){
|
|
error_log("MAILCOWAUTH: Bad Request");
|
|
http_response_code(400); // Bad Request
|
|
echo json_encode($return);
|
|
exit();
|
|
}
|
|
|
|
require_once('../../../web/inc/vars.inc.php');
|
|
if (file_exists('../../../web/inc/vars.local.inc.php')) {
|
|
include_once('../../../web/inc/vars.local.inc.php');
|
|
}
|
|
require_once '../../../web/inc/lib/vendor/autoload.php';
|
|
|
|
|
|
// Init Valkey
|
|
$valkey = new Redis();
|
|
try {
|
|
if (!empty(getenv('VALKEY_SLAVEOF_IP'))) {
|
|
$valkey->connect(getenv('VALKEY_SLAVEOF_IP'), getenv('VALKEY_SLAVEOF_PORT'));
|
|
}
|
|
else {
|
|
$valkey->connect('valkey-mailcow', 6379);
|
|
}
|
|
$valkey->auth(getenv("VALKEYPASS"));
|
|
}
|
|
catch (Exception $e) {
|
|
error_log("MAILCOWAUTH: " . $e . PHP_EOL);
|
|
http_response_code(500); // Internal Server Error
|
|
echo json_encode($return);
|
|
exit;
|
|
}
|
|
|
|
// Init database
|
|
$dsn = $database_type . ":unix_socket=" . $database_sock . ";dbname=" . $database_name;
|
|
$opt = [
|
|
PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
|
|
PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC,
|
|
PDO::ATTR_EMULATE_PREPARES => false,
|
|
];
|
|
try {
|
|
$pdo = new PDO($dsn, $database_user, $database_pass, $opt);
|
|
}
|
|
catch (PDOException $e) {
|
|
error_log("MAILCOWAUTH: " . $e . PHP_EOL);
|
|
http_response_code(500); // Internal Server Error
|
|
echo json_encode($return);
|
|
exit;
|
|
}
|
|
|
|
// Load core functions first
|
|
require_once 'functions.inc.php';
|
|
require_once 'functions.auth.inc.php';
|
|
require_once 'sessions.inc.php';
|
|
require_once 'functions.mailbox.inc.php';
|
|
require_once 'functions.ratelimit.inc.php';
|
|
require_once 'functions.acl.inc.php';
|
|
|
|
|
|
$isSOGoRequest = $post['real_rip'] == getenv('IPV4_NETWORK') . '.248';
|
|
$result = false;
|
|
if ($isSOGoRequest) {
|
|
// This is a SOGo Auth request. First check for SSO password.
|
|
$sogo_sso_pass = file_get_contents("/etc/sogo-sso/sogo-sso.pass");
|
|
if ($sogo_sso_pass === $post['password']){
|
|
error_log('MAILCOWAUTH: SOGo SSO auth for user ' . $post['username']);
|
|
set_sasl_log($post['username'], $post['real_rip'], "SOGO");
|
|
$result = true;
|
|
}
|
|
}
|
|
if ($result === false){
|
|
// If it's a SOGo Request, don't check for protocol access
|
|
$service = ($isSOGoRequest) ? false : array($post['service'] => true);
|
|
$result = apppass_login($post['username'], $post['password'], $service, array(
|
|
'is_internal' => true,
|
|
'remote_addr' => $post['real_rip']
|
|
));
|
|
if ($result) {
|
|
error_log('MAILCOWAUTH: App auth for user ' . $post['username'] . " with service " . $post['service'] . " from IP " . $post['real_rip']);
|
|
set_sasl_log($post['username'], $post['real_rip'], $post['service']);
|
|
}
|
|
}
|
|
if ($result === false){
|
|
// Init Identity Provider
|
|
$iam_provider = identity_provider('init');
|
|
$iam_settings = identity_provider('get');
|
|
$result = user_login($post['username'], $post['password'], array('is_internal' => true, 'service' => $post['service']));
|
|
if ($result) {
|
|
error_log('MAILCOWAUTH: User auth for user ' . $post['username'] . " with service " . $post['service'] . " from IP " . $post['real_rip']);
|
|
set_sasl_log($post['username'], $post['real_rip'], $post['service']);
|
|
}
|
|
}
|
|
|
|
if ($result) {
|
|
http_response_code(200); // OK
|
|
$return['success'] = true;
|
|
} else {
|
|
error_log("MAILCOWAUTH: Login failed for user " . $post['username'] . " with service " . $post['service'] . " from IP " . $post['real_rip']);
|
|
http_response_code(401); // Unauthorized
|
|
}
|
|
|
|
|
|
echo json_encode($return);
|
|
session_destroy();
|
|
exit;
|