webcit/openid.c

   1 /*
   2  * Copyright (c) 1996-2012 by the citadel.org team
   3  *
   4  * This program is open source software.  You can redistribute it and/or
   5  * modify it under the terms of the GNU General Public License, version 3.
   6  *
   7  * This program is distributed in the hope that it will be useful,
   8  * but WITHOUT ANY WARRANTY; without even the implied warranty of
   9  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  10  * GNU General Public License for more details.
  11  */
  12
  13 #include "webcit.h"
  14 #include "webserver.h"
  15
  16 /*
  17  * Display the OpenIDs associated with an account
  18  */
  19 void display_openids(void)
  20 {
  21         wcsession *WCC = WC;
  22         char buf[1024];
  23         int bg = 0;
  24
  25         output_headers(1, 1, 1, 0, 0, 0);
  26
  27         do_template("box_begin_1");
  28         StrBufAppendBufPlain(WCC->WBuf, _("Manage Account/OpenID Associations"), -1, 0);
  29         do_template("box_begin_2");
  30
  31         if (WCC->serv_info->serv_supports_openid) {
  32
  33                 wc_printf("<table class=\"altern\">");
  34
  35                 serv_puts("OIDL");
  36                 serv_getln(buf, sizeof buf);
  37                 if (buf[0] == '1') while (serv_getln(buf, sizeof buf), strcmp(buf, "000")) {
  38                         bg = 1 - bg;
  39                         wc_printf("<tr class=\"%s\">", (bg ? "even" : "odd"));
  40                         wc_printf("<td><img src=\"static/webcit_icons/openid-small.gif\"></td><td>");
  41                         escputs(buf);
  42                         wc_printf("</td><td>");
  43                         wc_printf("<a href=\"openid_detach?id_to_detach=");
  44                         urlescputs(buf);
  45                         wc_printf("\" onClick=\"return confirm('%s');\">",
  46                                 _("Do you really want to delete this OpenID?"));
  47                         wc_printf("%s</a>", _("(delete)"));
  48                         wc_printf("</td></tr>\n");
  49                 }
  50
  51                 wc_printf("</table><br>\n");
  52
  53                 wc_printf("<form method=\"POST\" action=\"openid_attach\">\n");
  54                 wc_printf("<input type=\"hidden\" name=\"nonce\" value=\"%d\">\n", WCC->nonce);
  55                 wc_printf(_("Add an OpenID: "));
  56                 wc_printf("<input type=\"text\" name=\"openid_url\" class=\"openid_urlarea\" size=\"40\">\n");
  57                 wc_printf("<input type=\"submit\" name=\"attach_button\" value=\"%s\">"
  58                         "</form></center>\n", _("Attach"));
  59         }
  60
  61         else {
  62                 wc_printf(_("%s does not permit authentication via OpenID."), ChrPtr(WCC->serv_info->serv_humannode));
  63         }
  64
  65         do_template("box_end");
  66         wDumpContent(2);
  67 }
  68
  69
  70 /*
  71  * Attempt to attach an OpenID to an existing, logged-in account
  72  */
  73 void openid_attach(void) {
  74         char buf[4096];
  75
  76         if (havebstr("attach_button")) {
  77
  78                 syslog(LOG_DEBUG, "Attempting to attach %s\n", bstr("openid_url"));
  79
  80                 snprintf(buf, sizeof buf,
  81                         "OIDS %s|%s/finalize_openid_login?attach_existing=1|%s",
  82                         bstr("openid_url"),
  83                         ChrPtr(site_prefix),
  84                         ChrPtr(site_prefix)
  85                 );
  86
  87                 serv_puts(buf);
  88                 serv_getln(buf, sizeof buf);
  89                 if (buf[0] == '2') {
  90                         syslog(LOG_DEBUG, "OpenID server contacted; redirecting to %s\n", &buf[4]);
  91                         http_redirect(&buf[4]);
  92                         return;
  93                 }
  94                 else {
  95                         syslog(LOG_DEBUG, "OpenID attach failed: %s\n", &buf[4]);
  96                 }
  97         }
  98
  99         /* If we get to this point then something failed. */
 100         display_openids();
 101 }
 102
 103
 104 /*
 105  * Detach an OpenID from the currently logged-in account
 106  */
 107 void openid_detach(void) {
 108         StrBuf *Line;
 109
 110         if (havebstr("id_to_detach")) {
 111                 serv_printf("OIDD %s", bstr("id_to_detach"));
 112                 Line = NewStrBuf();
 113                 StrBuf_ServGetln(Line);
 114                 GetServerStatusMsg(Line, NULL, 1, 2);
 115                 FreeStrBuf(&Line);
 116         }
 117
 118         display_openids();
 119 }
 120
 121 void
 122 InitModule_OPENID
 123 (void)
 124 {
 125         WebcitAddUrlHandler(HKEY("display_openids"), "", 0, display_openids, 0);
 126         WebcitAddUrlHandler(HKEY("openid_attach"), "", 0, openid_attach, 0);
 127         WebcitAddUrlHandler(HKEY("openid_detach"), "", 0, openid_detach, 0);
 128 }