/**
  * Validates a username and password
  *
  * This method should return true or false depending on if login
  * succeeded.
  *
  * @return bool
  */
 protected function validateUserPass($username, $password)
 {
     if (OC_User::login($username, $password)) {
         OC_Util::setUpFS();
         return true;
     } else {
         return false;
     }
 }
Example #2
0
 /**
  * Validates a username and password
  *
  * This method should return true or false depending on if login
  * succeeded.
  *
  * @return bool
  */
 protected function validateUserPass($username, $password)
 {
     OC_Util::setUpFS();
     //login hooks may need early access to the filesystem
     if (OC_User::login($username, $password)) {
         OC_Util::setUpFS();
         return true;
     } else {
         return false;
     }
 }
Example #3
0
 /**
  * Validates a username and password
  *
  * This method should return true or false depending on if login
  * succeeded.
  *
  * @return bool
  */
 protected function validateUserPass($username, $password)
 {
     //always give read-only:
     if ($_SERVER['REQUEST_METHOD'] == 'OPTIONS' || isset($this->validTokens[$password]) || $_SERVER['REQUEST_METHOD'] == 'GET' && $this->category == 'public') {
         OC_Util::setUpFS();
         return true;
     } else {
         //var_export($_SERVER);
         //var_export($this->validTokens);
         //die('not getting in with "'.$username.'"/"'.$password.'"!');
         return false;
     }
 }
 /**
  * Validates a username and password
  *
  * This method should return true or false depending on if login
  * succeeded.
  *
  * @return bool
  */
 protected function validateUserPass($username, $password)
 {
     //always give read-only:
     if (in_array($_SERVER['REQUEST_METHOD'], array('GET', 'HEAD', 'OPTIONS'))) {
         OC_Util::setUpFS();
         return true;
     } else {
         if (isset($this->validTokens[$password]) && $this->validTokens[$password] == $username) {
             OC_Util::setUpFS();
             return true;
         } else {
             var_export($_SERVER);
             var_export($this->validTokens);
             die('not getting in with "' . $username . '"/"' . $password . '"!');
             return false;
         }
     }
 }
Example #5
0
	/**
	 * Validates a username and password
	 *
	 * This method should return true or false depending on if login
	 * succeeded.
	 *
	 * @param string $username
	 * @param string $password
	 * @return bool
	 */
	protected function validateUserPass($username, $password) {
		if (OC_User::isLoggedIn() &&
			$this->isDavAuthenticated($username)
		) {
			OC_Util::setupFS(OC_User::getUser());
			\OC::$server->getSession()->close();
			return true;
		} else {
			OC_Util::setUpFS(); //login hooks may need early access to the filesystem
			if(OC_User::login($username, $password)) {
				OC_Util::setUpFS(OC_User::getUser());
				\OC::$server->getSession()->set(self::DAV_AUTHENTICATED, $username);
				\OC::$server->getSession()->close();
				return true;
			} else {
				\OC::$server->getSession()->close();
				return false;
			}
		}
	}
Example #6
0
 /**
  * Validates a username and password
  *
  * This method should return true or false depending on if login
  * succeeded.
  *
  * @param string $username
  * @param string $password
  * @return bool
  */
 protected function validateUserPass($username, $password)
 {
     if (OC_User::isLoggedIn() && $this->isDavAuthenticated(OC_User::getUser())) {
         OC_Util::setupFS(OC_User::getUser());
         \OC::$server->getSession()->close();
         return true;
     } else {
         OC_Util::setUpFS();
         //login hooks may need early access to the filesystem
         if (OC_User::login($username, $password)) {
             // make sure we use owncloud's internal username here
             // and not the HTTP auth supplied one, see issue #14048
             $ocUser = OC_User::getUser();
             OC_Util::setUpFS($ocUser);
             \OC::$server->getSession()->set(self::DAV_AUTHENTICATED, $ocUser);
             \OC::$server->getSession()->close();
             return true;
         } else {
             \OC::$server->getSession()->close();
             return false;
         }
     }
 }
Example #7
0
File: api.php Project: nem0xff/core
 /**
  * http basic auth
  * @return string|false (username, or false on failure)
  */
 private static function loginUser()
 {
     if (self::$isLoggedIn === true) {
         return \OC_User::getUser();
     }
     // reuse existing login
     $loggedIn = OC_User::isLoggedIn();
     if ($loggedIn === true) {
         $ocsApiRequest = isset($_SERVER['HTTP_OCS_APIREQUEST']) ? $_SERVER['HTTP_OCS_APIREQUEST'] === 'true' : false;
         if ($ocsApiRequest) {
             // initialize the user's filesystem
             \OC_Util::setUpFS(\OC_User::getUser());
             self::$isLoggedIn = true;
             return OC_User::getUser();
         }
         return false;
     }
     // basic auth - because OC_User::login will create a new session we shall only try to login
     // if user and pass are set
     if (isset($_SERVER['PHP_AUTH_USER']) && isset($_SERVER['PHP_AUTH_PW'])) {
         $authUser = $_SERVER['PHP_AUTH_USER'];
         $authPw = $_SERVER['PHP_AUTH_PW'];
         $return = OC_User::login($authUser, $authPw);
         if ($return === true) {
             self::$logoutRequired = true;
             // initialize the user's filesystem
             \OC_Util::setUpFS(\OC_User::getUser());
             self::$isLoggedIn = true;
             return \OC_User::getUser();
         }
     }
     return false;
 }
Example #8
0
 /**
  * http basic auth
  * @return string|false (username, or false on failure)
  */
 private static function loginUser()
 {
     // reuse existing login
     $loggedIn = OC_User::isLoggedIn();
     $ocsApiRequest = isset($_SERVER['HTTP_OCS_APIREQUEST']) ? $_SERVER['HTTP_OCS_APIREQUEST'] === 'true' : false;
     if ($loggedIn === true && $ocsApiRequest) {
         // initialize the user's filesystem
         \OC_Util::setUpFS(\OC_User::getUser());
         return OC_User::getUser();
     }
     // basic auth
     $authUser = isset($_SERVER['PHP_AUTH_USER']) ? $_SERVER['PHP_AUTH_USER'] : '';
     $authPw = isset($_SERVER['PHP_AUTH_PW']) ? $_SERVER['PHP_AUTH_PW'] : '';
     $return = OC_User::login($authUser, $authPw);
     if ($return === true) {
         self::$logoutRequired = true;
         // initialize the user's filesystem
         \OC_Util::setUpFS(\OC_User::getUser());
         return $authUser;
     }
     return false;
 }
Example #9
0
 /**
  * http basic auth
  * @return string|false (username, or false on failure)
  */
 private static function loginUser()
 {
     if (self::$isLoggedIn === true) {
         return \OC_User::getUser();
     }
     // reuse existing login
     $loggedIn = OC_User::isLoggedIn();
     if ($loggedIn === true) {
         $ocsApiRequest = isset($_SERVER['HTTP_OCS_APIREQUEST']) ? $_SERVER['HTTP_OCS_APIREQUEST'] === 'true' : false;
         if ($ocsApiRequest) {
             // initialize the user's filesystem
             \OC_Util::setUpFS(\OC_User::getUser());
             self::$isLoggedIn = true;
             return OC_User::getUser();
         }
         return false;
     }
     // basic auth - because OC_User::login will create a new session we shall only try to login
     // if user and pass are set
     if (isset($_SERVER['PHP_AUTH_USER']) && isset($_SERVER['PHP_AUTH_PW'])) {
         $authUser = $_SERVER['PHP_AUTH_USER'];
         $authPw = $_SERVER['PHP_AUTH_PW'];
         try {
             $return = OC_User::login($authUser, $authPw);
         } catch (\OC\User\LoginException $e) {
             return false;
         }
         if ($return === true) {
             self::$logoutRequired = true;
             // initialize the user's filesystem
             \OC_Util::setUpFS(\OC_User::getUser());
             self::$isLoggedIn = true;
             /**
              * Add DAV authenticated. This should in an ideal world not be
              * necessary but the iOS App reads cookies from anywhere instead
              * only the DAV endpoint.
              * This makes sure that the cookies will be valid for the whole scope
              * @see https://github.com/owncloud/core/issues/22893
              */
             \OC::$server->getSession()->set(\OCA\DAV\Connector\Sabre\Auth::DAV_AUTHENTICATED, \OC::$server->getUserSession()->getUser()->getUID());
             return \OC_User::getUser();
         }
     }
     return false;
 }