oauthlogintokens.php

Go to the documentation of this file.

<?php
/* Copyright (C) 2013-2016  Laurent Destailleur  <eldy@users.sourceforge.net>
 * Copyright (C) 2014-2018  Frederic France      <frederic.france@netlogic.fr>
 * Copyright (C) 2020   Nicolas ZABOURI      <info@inovea-conseil.com>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program. If not, see <https://www.gnu.org/licenses/>.
 */

require '../main.inc.php';
require_once DOL_DOCUMENT_ROOT.'/core/lib/admin.lib.php';
require_once DOL_DOCUMENT_ROOT.'/core/lib/oauth.lib.php'; // This define $list
require_once DOL_DOCUMENT_ROOT.'/core/class/doleditor.class.php';
use OAuth\Common\Storage\DoliStorage;

// Load translation files required by the page
$langs->loadLangs(array('admin', 'printing', 'oauth'));

if (!$user->admin) accessforbidden();

$action = GETPOST('action', 'aZ09');
$mode = GETPOST('mode', 'alpha');
$value = GETPOST('value', 'alpha');
$varname = GETPOST('varname', 'alpha');
$driver = GETPOST('driver', 'alpha');

if (!empty($driver)) $langs->load($driver);

if (!$mode) $mode = 'setup';


/*
 * Action
 */

/*if (($mode == 'test' || $mode == 'setup') && empty($driver))
{
    setEventMessages($langs->trans('PleaseSelectaDriverfromList'), null);
    header("Location: ".$_SERVER['PHP_SELF'].'?mode=config');
    exit;
}*/

if ($action == 'setconst' && $user->admin)
{
  $error = 0;
  $db->begin();

  $setupconstarray = GETPOST('setupdriver', 'array');

  foreach ($setupconstarray as $setupconst) {
    //print '<pre>'.print_r($setupconst, true).'</pre>';

    $constname = dol_escape_htmltag($setupconst['varname']);
    $constvalue = dol_escape_htmltag($setupconst['value']);
    $consttype = dol_escape_htmltag($setupconst['type']);
    $constnote = dol_escape_htmltag($setupconst['note']);

    $result = dolibarr_set_const($db, $constname, $constvalue, $consttype, 0, $constnote, $conf->entity);
    if (!$result > 0) $error++;
  }

  if (!$error)
  {
    $db->commit();
    setEventMessages($langs->trans("SetupSaved"), null);
  } else {
    $db->rollback();
    dol_print_error($db);
  }
  $action = '';
}

if ($action == 'setvalue' && $user->admin)
{
  $db->begin();

  $result = dolibarr_set_const($db, $varname, $value, 'chaine', 0, '', $conf->entity);
  if (!$result > 0) $error++;

  if (!$error)
  {
    $db->commit();
    setEventMessages($langs->trans("SetupSaved"), null);
  } else {
    $db->rollback();
    dol_print_error($db);
  }
  $action = '';
}


/*
 * View
 */

// Define $urlwithroot
$urlwithouturlroot = preg_replace('/'.preg_quote(DOL_URL_ROOT, '/').'$/i', '', trim($dolibarr_main_url_root));
$urlwithroot = $urlwithouturlroot.DOL_URL_ROOT; // This is to use external domain name found into config file
//$urlwithroot=DOL_MAIN_URL_ROOT;         // This is to use same domain name than current

$form = new Form($db);

llxHeader('', $langs->trans("PrintingSetup"));

$linkback = '<a href="'.DOL_URL_ROOT.'/admin/modules.php?restore_lastsearch_values=1">'.$langs->trans("BackToModuleList").'</a>';
print load_fiche_titre($langs->trans('ConfigOAuth'), $linkback, 'title_setup');

$head = oauthadmin_prepare_head();

print dol_get_fiche_head($head, 'tokengeneration', '', -1, 'technic');

if (GETPOST('error')) {
  setEventMessages(GETPOST('error'), null, 'errors');
}

if ($mode == 'setup' && $user->admin)
{
  print '<span class="opacitymedium">'.$langs->trans("OAuthSetupForLogin")."</span><br><br>\n";

  foreach ($list as $key)
  {
    $supported = 0;
    if (in_array($key[0], array_keys($supportedoauth2array))) $supported = 1;
    if (!$supported) continue; // show only supported


    $OAUTH_SERVICENAME = 'Unknown';
    if ($key[0] == 'OAUTH_GITHUB_NAME')
    {
      $OAUTH_SERVICENAME = 'GitHub';
      // List of keys that will be converted into scopes (from constants 'SCOPE_state_in_uppercase' in file of service).
      // We pass this param list in to 'state' because we need it before and after the redirect.
      $shortscope = 'user,public_repo';
      $urltorenew = $urlwithroot.'/core/modules/oauth/github_oauthcallback.php?shortscope='.$shortscope.'&state='.$shortscope.'&backtourl='.urlencode(DOL_URL_ROOT.'/admin/oauthlogintokens.php');
      $urltodelete = $urlwithroot.'/core/modules/oauth/github_oauthcallback.php?action=delete&token='.newToken().'&backtourl='.urlencode(DOL_URL_ROOT.'/admin/oauthlogintokens.php');
      $urltocheckperms = 'https://github.com/settings/applications/';
    } elseif ($key[0] == 'OAUTH_GOOGLE_NAME')
    {
      $OAUTH_SERVICENAME = 'Google';
      // List of keys that will be converted into scopes (from constants 'SCOPE_state_in_uppercase' in file of service).
      // We pass this param list in to 'state' because we need it before and after the redirect.
      $shortscope = 'userinfo_email,userinfo_profile,cloud_print';
      if (!empty($conf->global->OAUTH_GSUITE)) {
        $shortscope .= ',admin_directory_user';
      }
      //$scope.=',gmail_full';
      $urltorenew = $urlwithroot.'/core/modules/oauth/google_oauthcallback.php?shortscope='.$shortscope.'&state='.$shortscope.'&backtourl='.urlencode(DOL_URL_ROOT.'/admin/oauthlogintokens.php');
      $urltodelete = $urlwithroot.'/core/modules/oauth/google_oauthcallback.php?action=delete&token='.newToken().'&backtourl='.urlencode(DOL_URL_ROOT.'/admin/oauthlogintokens.php');
      $urltocheckperms = 'https://security.google.com/settings/security/permissions';
    } elseif ($key[0] == 'OAUTH_STRIPE_TEST_NAME')
    {
      $OAUTH_SERVICENAME = 'StripeTest';
      $urltorenew = $urlwithroot.'/core/modules/oauth/stripetest_oauthcallback.php?backtourl='.urlencode(DOL_URL_ROOT.'/admin/oauthlogintokens.php');
      $urltodelete = '';
      $urltocheckperms = '';
    } elseif ($key[0] == 'OAUTH_STRIPE_LIVE_NAME')
    {
      $OAUTH_SERVICENAME = 'StripeLive';
      $urltorenew = $urlwithroot.'/core/modules/oauth/stripelive_oauthcallback.php?backtourl='.urlencode(DOL_URL_ROOT.'/admin/oauthlogintokens.php');
      $urltodelete = '';
      $urltocheckperms = '';
    } else {
      $urltorenew = '';
      $urltodelete = '';
      $urltocheckperms = '';
    }


    // Show value of token
    $tokenobj = null;
    // Token
    require_once DOL_DOCUMENT_ROOT.'/includes/OAuth/bootstrap.php';
    require_once DOL_DOCUMENT_ROOT.'/includes/OAuth/bootstrap.php';
    // Dolibarr storage
    $storage = new DoliStorage($db, $conf);
    try {
      $tokenobj = $storage->retrieveAccessToken($OAUTH_SERVICENAME);
    } catch (Exception $e)
    {
      // Return an error if token not found
    }

    // Set other properties
    $refreshtoken = false;
    $expiredat = '';

    $expire = false;
    // Is token expired or will token expire in the next 30 seconds
    if (is_object($tokenobj)) {
      $expire = ($tokenobj->getEndOfLife() !== $tokenobj::EOL_NEVER_EXPIRES && $tokenobj->getEndOfLife() !== $tokenobj::EOL_UNKNOWN && time() > ($tokenobj->getEndOfLife() - 30));
    }

    if ($key[1] != '' && $key[2] != '') {
      if (is_object($tokenobj)) {
        $refreshtoken = $tokenobj->getRefreshToken();

        $endoflife = $tokenobj->getEndOfLife();
        if ($endoflife == $tokenobj::EOL_NEVER_EXPIRES)
        {
          $expiredat = $langs->trans("Never");
        } elseif ($endoflife == $tokenobj::EOL_UNKNOWN)
        {
          $expiredat = $langs->trans("Unknown");
        } else {
          $expiredat = dol_print_date($endoflife, "dayhour");
        }
      }
    }

    $submit_enabled = 0;

    print '<form method="post" action="'.$_SERVER["PHP_SELF"].'?mode=setup&amp;driver='.$driver.'" autocomplete="off">';
    print '<input type="hidden" name="token" value="'.newToken().'">';
    print '<input type="hidden" name="action" value="setconst">';


    print '<table class="noborder centpercent">'."\n";

    print '<tr class="liste_titre">';
    print '<th class="titlefieldcreate">'.$langs->trans($key[0]).'</th>';
    print '<th></th>';
    print '<th></th>';
    print "</tr>\n";

    print '<tr class="oddeven">';
    print '<td'.($key['required'] ? ' class="required"' : '').'>';
    //var_dump($key);
    print $langs->trans("OAuthIDSecret").'</td>';
    print '<td>';
    print $langs->trans("SeePreviousTab");
    print '</td>';
    print '<td>';
    print '</td>';
    print '</tr>'."\n";

    print '<tr class="oddeven">';
    print '<td'.($key['required'] ? ' class="required"' : '').'>';
    //var_dump($key);
    print $langs->trans("IsTokenGenerated");
    print '</td>';
    print '<td>';
    if (is_object($tokenobj)) print $langs->trans("HasAccessToken");
    else print $langs->trans("NoAccessToken");
    print '</td>';
    print '<td>';
    // Links to delete/checks token
    if (is_object($tokenobj))
    {
      //test on $storage->hasAccessToken($OAUTH_SERVICENAME) ?
      print '<a class="button" href="'.$urltodelete.'">'.$langs->trans('DeleteAccess').'</a><br>';
    }
    // Request remote token
    if ($urltorenew)
    {
      print '<a class="button" href="'.$urltorenew.'">'.$langs->trans('RequestAccess').'</a><br>';
    }
    // Check remote access
    if ($urltocheckperms)
    {
      print '<br>'.$langs->trans("ToCheckDeleteTokenOnProvider", $OAUTH_SERVICENAME).': <a href="'.$urltocheckperms.'" target="_'.strtolower($OAUTH_SERVICENAME).'">'.$urltocheckperms.'</a>';
    }
    print '</td>';
    print '</tr>';

    print '<tr class="oddeven">';
    print '<td'.($key['required'] ? ' class="required"' : '').'>';
    //var_dump($key);
    print $langs->trans("Token").'</td>';
    print '<td colspan="2">';
    if (is_object($tokenobj))
    {
      //var_dump($tokenobj);
      print $tokenobj->getAccessToken().'<br>';
      //print 'Refresh: '.$tokenobj->getRefreshToken().'<br>';
      //print 'EndOfLife: '.$tokenobj->getEndOfLife().'<br>';
      //var_dump($tokenobj->getExtraParams());
      /*print '<br>Extra: <br><textarea class="quatrevingtpercent">';
            print ''.join(',',$tokenobj->getExtraParams());
            print '</textarea>';*/
    }
    print '</td>';
    print '</tr>'."\n";

    if (is_object($tokenobj))
    {
      // Token refresh
      print '<tr class="oddeven">';
      print '<td'.($key['required'] ? ' class="required"' : '').'>';
      //var_dump($key);
      print $langs->trans("TOKEN_REFRESH").'</td>';
      print '<td colspan="2">';
      print yn($refreshtoken);
      print '</td>';
      print '</tr>';

      // Token expired
      print '<tr class="oddeven">';
      print '<td'.($key['required'] ? ' class="required"' : '').'>';
      //var_dump($key);
      print $langs->trans("TOKEN_EXPIRED").'</td>';
      print '<td colspan="2">';
      print yn($expire);
      print '</td>';
      print '</tr>';

      // Token expired at
      print '<tr class="oddeven">';
      print '<td'.($key['required'] ? ' class="required"' : '').'>';
      //var_dump($key);
      print $langs->trans("TOKEN_EXPIRE_AT").'</td>';
      print '<td colspan="2">';
      print $expiredat;
      print '</td>';
      print '</tr>';
    }

    print '</table>';

    if (!empty($driver))
    {
      if ($submit_enabled) {
        print '<div class="center"><input type="submit" class="button" value="'.dol_escape_htmltag($langs->trans("Modify")).'"></div>';
      }
    }


    print '</form>';
  }
}

if ($mode == 'test' && $user->admin)
{
  print $langs->trans('PrintTestDesc'.$driver)."<br><br>\n";

  print '<table class="noborder centpercent">';
  if (!empty($driver))
  {
    require_once DOL_DOCUMENT_ROOT.'/core/modules/printing/'.$driver.'.modules.php';
    $classname = 'printing_'.$driver;
    $langs->load($driver);
    $printer = new $classname($db);
    //print '<pre>'.print_r($printer, true).'</pre>';
    if (count($printer->getlistAvailablePrinters())) {
      if ($printer->listAvailablePrinters() == 0) {
        print $printer->resprint;
      } else {
        setEventMessages($printer->error, $printer->errors, 'errors');
      }
    } else {
      print $langs->trans('PleaseConfigureDriverfromList');
    }
  }

  print '</table>';
}

if ($mode == 'userconf' && $user->admin)
{
  print $langs->trans('PrintUserConfDesc'.$driver)."<br><br>\n";

  print '<table class="noborder centpercent">';
  print '<tr class="liste_titre">';
  print '<th>'.$langs->trans("User").'</th>';
  print '<th>'.$langs->trans("PrintModule").'</th>';
  print '<th>'.$langs->trans("PrintDriver").'</th>';
  print '<th>'.$langs->trans("Printer").'</th>';
  print '<th>'.$langs->trans("PrinterLocation").'</th>';
  print '<th>'.$langs->trans("PrinterId").'</th>';
  print '<th>'.$langs->trans("NumberOfCopy").'</th>';
  print '<th class="center">'.$langs->trans("Delete").'</th>';
  print "</tr>\n";
  $sql = 'SELECT p.rowid, p.printer_name, p.printer_location, p.printer_id, p.copy, p.module, p.driver, p.userid, u.login FROM '.MAIN_DB_PREFIX.'printing as p, '.MAIN_DB_PREFIX.'user as u WHERE p.userid=u.rowid';
  $resql = $db->query($sql);
  while ($row = $db->fetch_array($resql)) {
    print '<tr class="oddeven">';
    print '<td>'.$row['login'].'</td>';
    print '<td>'.$row['module'].'</td>';
    print '<td>'.$row['driver'].'</td>';
    print '<td>'.$row['printer_name'].'</td>';
    print '<td>'.$row['printer_location'].'</td>';
    print '<td>'.$row['printer_id'].'</td>';
    print '<td>'.$row['copy'].'</td>';
    print '<td class="center">'.img_picto($langs->trans("Delete"), 'delete').'</td>';
    print "</tr>\n";
  }
  print '</table>';
}

print dol_get_fiche_end();

// End of page
llxFooter();
$db->close();