[Summary view]

Differences Between: [Versions 310 and 311] [Versions 310 and 400] [Versions 310 and 401] [Versions 310 and 402] [Versions 310 and 403] [Versions 39 and 310]

   1  <?php
   2  // This file is part of Moodle - http://moodle.org/
   3  //
   4  // Moodle is free software: you can redistribute it and/or modify
   5  // it under the terms of the GNU General Public License as published by
   6  // the Free Software Foundation, either version 3 of the License, or
   7  // (at your option) any later version.
   8  //
   9  // Moodle is distributed in the hope that it will be useful,
  10  // but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  12  // GNU General Public License for more details.
  13  //
  14  // You should have received a copy of the GNU General Public License
  15  // along with Moodle.  If not, see <http://www.gnu.org/licenses/>.
  16  
  17  /**
  18   * Confirm self oauth2 user.
  19   *
  20   * @package    auth_oauth2
  21   * @copyright  2017 Damyon Wiese
  22   * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
  23   */
  24  
  25  require('../../config.php');
  26  require_once($CFG->libdir . '/authlib.php');
  27  
  28  $token = required_param('token', PARAM_RAW);
  29  $username = required_param('username', PARAM_USERNAME);
  30  $userid = required_param('userid', PARAM_INT);
  31  $issuerid = required_param('issuerid', PARAM_INT);
  32  $redirect = optional_param('redirect', '', PARAM_LOCALURL);    // Where to redirect the browser once the user has been confirmed.
  33  
  34  $PAGE->set_url('/auth/oauth2/confirm-linkedlogin.php');
  35  $PAGE->set_context(context_system::instance());
  36  
  37  if (!\auth_oauth2\api::is_enabled()) {
  38      throw new \moodle_exception('notenabled', 'auth_oauth2');
  39  }
  40  
  41  $confirmed = \auth_oauth2\api::confirm_link_login($userid, $username, $issuerid, $token);
  42  
  43  if ($confirmed) {
  44  
  45      // The user has confirmed successfully, let's log them in.
  46  
  47      if (!$user = get_complete_user_data('id', $userid)) {
  48          print_error('cannotfinduser', '', '', $userid);
  49      }
  50  
  51      if (!$user->suspended) {
  52          complete_user_login($user);
  53  
  54          \core\session\manager::apply_concurrent_login_limit($user->id, session_id());
  55  
  56          // Check where to go, $redirect has a higher preference.
  57          if (empty($redirect) and !empty($SESSION->wantsurl) ) {
  58              $redirect = $SESSION->wantsurl;
  59              unset($SESSION->wantsurl);
  60          }
  61  
  62          if (!empty($redirect)) {
  63              redirect($redirect);
  64          }
  65      }
  66  
  67      $PAGE->navbar->add(get_string("confirmed"));
  68      $PAGE->set_title(get_string("confirmed"));
  69      $PAGE->set_heading($COURSE->fullname);
  70      echo $OUTPUT->header();
  71      echo $OUTPUT->box_start('generalbox centerpara boxwidthnormal boxaligncenter');
  72      echo "<h3>".get_string("thanks").", ". fullname($USER) . "</h3>\n";
  73      echo "<p>".get_string("confirmed")."</p>\n";
  74      echo $OUTPUT->single_button("$CFG->wwwroot/course/", get_string('courses'));
  75      echo $OUTPUT->box_end();
  76      echo $OUTPUT->footer();
  77      exit;
  78  } else {
  79      \core\notification::error(get_string('confirmationinvalid', 'auth_oauth2'));
  80  }
  81  
  82  redirect("$CFG->wwwroot/");