mirror of
https://github.com/nextcloud/server.git
synced 2025-02-06 01:20:16 +00:00
62 lines
1.6 KiB
PHP
62 lines
1.6 KiB
PHP
<?php
|
|
/**
|
|
* SPDX-FileCopyrightText: 2017 Nextcloud GmbH and Nextcloud contributors
|
|
* SPDX-License-Identifier: AGPL-3.0-or-later
|
|
*/
|
|
namespace OCA\DAV\Connector\Sabre;
|
|
|
|
use OCP\AppFramework\Http;
|
|
use OCP\Defaults;
|
|
use OCP\IRequest;
|
|
use OCP\ISession;
|
|
use OCP\IUserSession;
|
|
use Sabre\DAV\Auth\Backend\AbstractBearer;
|
|
use Sabre\HTTP\RequestInterface;
|
|
use Sabre\HTTP\ResponseInterface;
|
|
|
|
class BearerAuth extends AbstractBearer {
|
|
public function __construct(
|
|
private IUserSession $userSession,
|
|
private ISession $session,
|
|
private IRequest $request,
|
|
private string $principalPrefix = 'principals/users/',
|
|
) {
|
|
// setup realm
|
|
$defaults = new Defaults();
|
|
$this->realm = $defaults->getName() ?: 'Nextcloud';
|
|
}
|
|
|
|
private function setupUserFs($userId) {
|
|
\OC_Util::setupFS($userId);
|
|
$this->session->close();
|
|
return $this->principalPrefix . $userId;
|
|
}
|
|
|
|
/**
|
|
* {@inheritdoc}
|
|
*/
|
|
public function validateBearerToken($bearerToken) {
|
|
\OC_Util::setupFS();
|
|
|
|
if (!$this->userSession->isLoggedIn()) {
|
|
$this->userSession->tryTokenLogin($this->request);
|
|
}
|
|
if ($this->userSession->isLoggedIn()) {
|
|
return $this->setupUserFs($this->userSession->getUser()->getUID());
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* \Sabre\DAV\Auth\Backend\AbstractBearer::challenge sets an WWW-Authenticate
|
|
* header which some DAV clients can't handle. Thus we override this function
|
|
* and make it simply return a 401.
|
|
*
|
|
* @param RequestInterface $request
|
|
* @param ResponseInterface $response
|
|
*/
|
|
public function challenge(RequestInterface $request, ResponseInterface $response): void {
|
|
$response->setStatus(Http::STATUS_UNAUTHORIZED);
|
|
}
|
|
}
|