Proyectos de Subversion Moodle

<?php

// This file is part of Moodle - http://moodle.org/

//

// Moodle is free software: you can redistribute it and/or modify

// it under the terms of the GNU General Public License as published by

// the Free Software Foundation, either version 3 of the License, or

// (at your option) any later version.

//

// Moodle is distributed in the hope that it will be useful,

// but WITHOUT ANY WARRANTY; without even the implied warranty of

// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

// GNU General Public License for more details.

//

// You should have received a copy of the GNU General Public License

// along with Moodle.  If not, see <http://www.gnu.org/licenses/>.

/**

 * MFA page

 *

 * @package     tool_mfa

 * @author      Mikhail Golenkov <golenkovm@gmail.com>

 * @copyright   Catalyst IT

 * @license     http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later

 */

require_once(__DIR__ . '/../../../config.php');

require_once($CFG->dirroot . '/admin/tool/mfa/lib.php');

require_once($CFG->libdir.'/adminlib.php');

use tool_mfa\local\form\login_form;

use tool_mfa\manager;

use tool_mfa\plugininfo\factor;

require_login(null, false);

$context = context_user::instance($USER->id);

$PAGE->set_context($context);

$PAGE->set_url('/admin/tool/mfa/auth.php');

$PAGE->set_pagelayout('login');

$PAGE->blocks->show_only_fake_blocks();

$pagetitle = $SITE->shortname.': '.get_string('mfa', 'tool_mfa');

$PAGE->set_title($pagetitle);

// Logout if it was requested.

$logout = optional_param('logout', false, PARAM_BOOL);

$sesskey = optional_param('sesskey', '_none_', PARAM_RAW);

if ($logout) {

    if (!confirm_sesskey($sesskey)) {

        echo $OUTPUT->header();

        echo $OUTPUT->confirm(

            get_string('logoutconfirm'),

            new moodle_url($PAGE->url, ['logout' => 1, 'sesskey' => sesskey()]),

            new moodle_url('/'),

        );

        echo $OUTPUT->footer();

        die;

    }

    if (!empty($SESSION->wantsurl)) {

        // If we have the wantsurl, we should redirect there, to keep it intact.

        $wantsurl = $SESSION->wantsurl;

    } else {

        // Else redirect home.

        $wantsurl = new \moodle_url($CFG->wwwroot);

    }

    manager::mfa_logout();

    redirect($wantsurl);

}

$currenturl = new moodle_url('/admin/tool/mfa/auth.php');

// Perform state check.

manager::resolve_mfa_status();

// We have a valid landing here, before doing any actions, clear any redir loop progress.

manager::clear_redirect_counter();

// If a specific factor was requested, use it.

$pickedname = optional_param('factorname', false, PARAM_ALPHA);

$pickedfactor = factor::get_factor($pickedname);

$formfactor = optional_param('factor', false, PARAM_ALPHA);

if ($pickedfactor && $pickedfactor->has_input() && $pickedfactor->get_state() == factor::STATE_UNKNOWN) {

    $factor = $pickedfactor;

} else if ($formfactor) {

    // Check if a factor was supplied by the form, such as for a form submission.

    $factor = factor::get_factor($formfactor);

} else {

    // Else, get the next factor that requires input.

    $factor = factor::get_next_user_login_factor();

}

// If ok, perform form actions for input factor.

$form = new login_form($currenturl, ['factor' => $factor], 'post', '', ['class' => 'ignoredirty']);

if ($form->is_submitted()) {

    if (!$form->is_validated() && !$form->is_cancelled()) {

        // Increment the fail counter for the factor,

        // And let the factor handle locking logic.

        $factor->increment_lock_counter();

        manager::resolve_mfa_status(false);

    } else {

        // Set state from user actions.

        if ($form->is_cancelled()) {

            $factor->process_cancel_action();

            // Move to next factor.

            manager::resolve_mfa_status(true);

        } else {

            if ($data = $form->get_data()) {

                // Validation has passed, so before processing, lets action the global form submissions as well.

                $form->globalmanager->submit($data);

                // Did user submit something that causes a fail state?

                if ($factor->get_state() == factor::STATE_FAIL) {

                    manager::resolve_mfa_status(true);

                }

                $factor->set_state(factor::STATE_PASS);

                // Move to next factor.

                manager::resolve_mfa_status(true);

            }

        }

    }

}

$renderer = $PAGE->get_renderer('tool_mfa');

echo $OUTPUT->header();

manager::display_debug_notification();

echo $renderer->verification_form($factor, $form);

echo $OUTPUT->footer();