public/tt-rss
1
0
Fork 0
mirror of https://git.tt-rss.org/git/tt-rss.git synced 2026-02-10 16:01:33 +00:00
Code Issues Releases Wiki Activity

allow authentication using SSL client certificates (closes #324)

Browse Source
This commit is contained in:
Andrew Dolgov
2011-03-27 16:40:23 +04:00
parent 535d216a7d
commit f98252f27c
3 changed files with 29 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
functions.php
+20 -4
View File
@@ -1757,6 +1757,22 @@
return true;
}
function get_remote_user() {
$remote_user = $_SERVER["REMOTE_USER"];
if (!$remote_user)
$remote_user = $_SERVER["REDIRECT_SSL_CLIENT_S_DN_CN"];
return db_escape_string($remote_user);
}
function get_remote_fakepass() {
if (get_remote_user())
return "******";
else
return "";
}
function authenticate_user($link, $login, $password, $force_auth = false) {
if (!SINGLE_USER_MODE) {
@@ -1766,9 +1782,9 @@
$login = db_escape_string($login);
if (defined('ALLOW_REMOTE_USER_AUTH') && ALLOW_REMOTE_USER_AUTH
&& $_SERVER["REMOTE_USER"] && $login != "admin") {
&& get_remote_user() && $login != "admin") {
$login = db_escape_string($_SERVER["REMOTE_USER"]);
$login = db_escape_string(get_remote_user());
$query = "SELECT id,login,access_level,pwd_hash
FROM ttrss_users WHERE
@@ -1959,8 +1975,8 @@
if (!$_SESSION["uid"] || !validate_session($link)) {
if (defined('ALLOW_REMOTE_USER_AUTH') && ALLOW_REMOTE_USER_AUTH
&& $_SERVER["REMOTE_USER"] && defined('AUTO_LOGIN') && AUTO_LOGIN) {
authenticate_user($link,$_SERVER['REMOTE_USER'],null);
&& get_remote_user() && defined('AUTO_LOGIN') && AUTO_LOGIN) {
authenticate_user($link, get_remote_user(), null);
$_SESSION["ref_schema_version"] = get_schema_version($link, true);
} else {
render_login_form($link, $mobile);