mirror of
https://github.com/Cacti/cacti.git
synced 2026-10-23 03:27:02 +09:00
Thomas Vincent
06d52372d1
cacti_redirect() was introduced in 61d8e935 but the function does not
exist in the codebase, causing a fatal error during OAuth2 login flow.
Reverts to the original header('Location: ...') + exit pattern.
Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
120 lines
4.0 KiB
PHP
120 lines
4.0 KiB
PHP
<?php
|
|
/*
|
|
+-------------------------------------------------------------------------+
|
|
| Copyright (C) 2004-2026 The Cacti Group |
|
|
| |
|
|
| This program is free software; you can redistribute it and/or |
|
|
| modify it under the terms of the GNU General Public License |
|
|
| as published by the Free Software Foundation; either version 2 |
|
|
| of the License, or (at your option) any later version. |
|
|
| |
|
|
| This program is distributed in the hope that it will be useful, |
|
|
| but WITHOUT ANY WARRANTY; without even the implied warranty of |
|
|
| MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|
|
| GNU General Public License for more details. |
|
|
+-------------------------------------------------------------------------+
|
|
| Cacti: The Complete RRDtool-based Graphing Solution |
|
|
+-------------------------------------------------------------------------+
|
|
| This code is designed, written, and maintained by the Cacti Group. See |
|
|
| about.php and/or the AUTHORS file for specific developer information. |
|
|
+-------------------------------------------------------------------------+
|
|
| http://www.cacti.net/ |
|
|
+-------------------------------------------------------------------------+
|
|
*/
|
|
|
|
require('./include/global.php');
|
|
|
|
if (read_config_option('settings_how') != 3) {
|
|
cacti_log('WARNING: Trying get OAuth2 token but different mail method is configured');
|
|
|
|
die('OAuth is not configured');
|
|
}
|
|
|
|
$clientId = read_config_option('settings_oauth2_client_id');
|
|
$clientSecret = read_config_option('settings_oauth2_client_secret');
|
|
$redirectUri = read_config_option('settings_oauth2_redirect_uri');
|
|
// for azure only
|
|
$tenantId = read_config_option('settings_oauth2_tenant_id');
|
|
|
|
$params = [
|
|
'clientId' => $clientId,
|
|
'clientSecret' => $clientSecret,
|
|
'redirectUri' => $redirectUri,
|
|
'accessType' => 'offline'
|
|
];
|
|
|
|
$options = [];
|
|
|
|
$providerName = read_config_option('settings_oauth2_provider');
|
|
|
|
switch ($providerName) {
|
|
case 'google':
|
|
$provider = new League\OAuth2\Client\Provider\Google($params);
|
|
$options = [
|
|
'scope' => [
|
|
'https://mail.google.com/'
|
|
]
|
|
];
|
|
|
|
break;
|
|
case 'yahoo':
|
|
$provider = new Hayageek\OAuth2\Client\Provider\Yahoo($params);
|
|
|
|
break;
|
|
case 'microsoft':
|
|
$provider = new Stevenmaguire\OAuth2\Client\Provider\Microsoft($params);
|
|
$options = [
|
|
'scope' => [
|
|
'wl.imap',
|
|
'wl.offline_access'
|
|
]
|
|
];
|
|
|
|
break;
|
|
case 'azure':
|
|
$params['tenantId'] = $tenantId;
|
|
|
|
$provider = new Greew\OAuth2\Client\Provider\Azure($params);
|
|
$options = [
|
|
'scope' => [
|
|
'https://outlook.office.com/SMTP.Send',
|
|
'offline_access'
|
|
]
|
|
];
|
|
|
|
break;
|
|
default:
|
|
cacti_log('ERROR: Unknown OAuth2 provider');
|
|
|
|
die('Provider missing');
|
|
}
|
|
|
|
if (!isrv('code')) { // If we don't have an authorization code then get one
|
|
$authUrl = $provider->getAuthorizationUrl($options);
|
|
$_SESSION['oauth2state'] = $provider->getState();
|
|
header('Location: ' . $authUrl);
|
|
|
|
exit;
|
|
|
|
// Check given state against previously stored one to mitigate CSRF attack
|
|
}
|
|
|
|
if (isempty_request_var('state') || (isset($_SESSION['oauth2state']) && (grv('state') !== $_SESSION['oauth2state']))) {
|
|
unset($_SESSION['oauth2state']);
|
|
|
|
exit('Invalid state');
|
|
} else { // Try to get an access token (using the authorization code grant)
|
|
$token = $provider->getAccessToken(
|
|
'authorization_code',
|
|
[
|
|
'code' => grv('code')
|
|
]
|
|
);
|
|
|
|
// Use this to interact with an API on the users behalf
|
|
// Use this to get a new access token if the old one expires
|
|
print __('Refresh Token: ') . htmle($token->getRefreshToken());
|
|
print '<br/>' . __('Store this token in Settings -> Mail/Reporting/DNS -> Oauth2 refresh token. ');
|
|
print '<br/>' . __('If the token is empty, it means it stays the same. The Oatuh2 provider will not resend it in that case. ');
|
|
}
|