mirror of
https://github.com/librenms/librenms.git
synced 2024-10-07 16:52:45 +00:00
1ad7f3138b
* Add Laravel to LibreNMS. * Try to set permissions during initial install and first composer update to Laravel. * Fix composer.lock Fix missing db config keys * Start building v1 layout Port ajax_setresolution, inject csrf into jquery ajax calls Layout works, building menu Partially done. * Fix device group list remove stupid count relationships * Print messages for common boot errors. Don't log to laravel.log file. Log to error_log until booted, then librenms.log * Fix up some issues with Config loading Start of custom directives * Custom blade directives: config, notconfig, admin * Preflight checks Only load config files once. * Update the composer.lock for php 5.6 * Menu through routing * Start of alert menu * Better alert scopes * reduce cruft in models * Alerting menu more or less working :D * Fix style * Improved preflight * Fix chicken-eggs! * Remove examples * Better alert_rule status queries Debugbar * fix app.env check * User Menu * Settings bar (dropped refresh) Search JS * Toastr messages * Rename preflight * Use hasAccess(User) on most models. Add port counts * Missed a Preflight -> Checks rename * Fix some formatting * Boot Eloquent outside of Laravel Use Eloquent for Config and Plugins so we don't have to connect with dbFacile inside Laravel. Move locate_binary() into Config class * Config WIP * Try to fix a lot of config loading issues. * Improve menu for non-admins removing unneeded menus url() for all in menu * Only use eloquent if it exists * Include APP_URL in initial .env settings * Implement Legacy User Provider * Helper class for using Eloquent outside of Laravel. Allows access to DB style queries too and checking the connection status. * Fix up tests * Fix device groups query * Checking Travis * copy config.test.php earlier * dbFacile check config before connecting Don't use exception to check if eloquent is connected, it gets grabbed by the exception handler. Ignore missing config.php error. * Fix config load with database is not migrated yet. * Remove Config::load() from early boot. * Use laravel config settings to init db (this prefers .env settings) Fix bgp vars not set in menu add _ide_helper.php to .gitignore * Restrict dependencies to versions that support php 5.6 * Update ConfigTest * Fix a couple of installation issues * Add unique NODE_ID to .env * Correct handling of title image * Fix database config not loading. Thanks @laf * Don't prepend / * add class_exists checks for development service providers * Fix config value casting * Don't use functions that may not exist * Update dbFacile.php * d_echo may not be defined when Config used called. * Add SELinux configuration steps More detailed permissions check. Check all and give complete corrective commands in one step. * Ignore node_modules directory * Re-add accidetal removal
88 lines
2.9 KiB
PHP
88 lines
2.9 KiB
PHP
<?php
|
|
|
|
use LibreNMS\Authentication\Auth;
|
|
use LibreNMS\Authentication\TwoFactor;
|
|
use LibreNMS\Config;
|
|
use LibreNMS\Exceptions\AuthenticationException;
|
|
|
|
ini_set('session.use_only_cookies', 1);
|
|
ini_set('session.cookie_httponly', 1);
|
|
ini_set('session.use_strict_mode', 1); // php >= 5.5.2
|
|
ini_set('session.use_trans_sid', 0); // insecure feature, be sure it is disabled
|
|
|
|
// Clear up any old sessions
|
|
dbDelete('session', '`session_expiry` < ?', array(time()));
|
|
|
|
session_start();
|
|
|
|
$authorizer = Auth::get();
|
|
if ($vars['page'] == 'logout' && $authorizer->sessionAuthenticated()) {
|
|
$authorizer->logOutUser();
|
|
header('Location: ' . Config::get('post_logout_action', Config::get('base_url')));
|
|
exit;
|
|
}
|
|
|
|
try {
|
|
if ($authorizer->sessionAuthenticated()) {
|
|
// session authenticated already
|
|
$authorizer->logInUser();
|
|
} else {
|
|
// try authentication methods
|
|
|
|
if (isset($_POST['twofactor']) && TwoFactor::authenticate($_POST['twofactor'])) {
|
|
// process two-factor auth tokens
|
|
$authorizer->logInUser();
|
|
} elseif (isset($_COOKIE['sess_id'], $_COOKIE['token']) &&
|
|
$authorizer->reauthenticate(clean($_COOKIE['sess_id']), clean($_COOKIE['token']))
|
|
) {
|
|
$_SESSION['remember'] = true;
|
|
$_SESSION['twofactor'] = true; // trust cookie
|
|
// cookie authentication
|
|
$authorizer->logInUser();
|
|
} else {
|
|
// collect username and password
|
|
$password = null;
|
|
if (isset($_REQUEST['username']) && isset($_REQUEST['password'])) {
|
|
$username = clean($_REQUEST['username']);
|
|
$password = $_REQUEST['password'];
|
|
} elseif ($authorizer->authIsExternal()) {
|
|
$username = $authorizer->getExternalUsername();
|
|
}
|
|
|
|
// form authentication
|
|
if (isset($username) && $authorizer->authenticate($username, $password)) {
|
|
$_SESSION['username'] = $username;
|
|
|
|
if (isset($_POST['remember'])) {
|
|
$_SESSION['remember'] = $_POST['remember'];
|
|
}
|
|
|
|
if ($authorizer->logInUser()) {
|
|
// redirect to original uri or home page.
|
|
header('Location: '.rtrim($config['base_url'], '/').$_SERVER['REQUEST_URI'], true, 303);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
} catch (AuthenticationException $ae) {
|
|
$auth_message = $ae->getMessage();
|
|
if ($debug) {
|
|
$auth_message .= '<br /> ' . $ae->getFile() . ': ' . $ae->getLine();
|
|
}
|
|
|
|
dbInsert(
|
|
array('user' => $_SESSION['username'], 'address' => get_client_ip(), 'result' => $auth_message),
|
|
'authlog'
|
|
);
|
|
$authorizer->logOutUser($auth_message);
|
|
}
|
|
|
|
session_write_close();
|
|
|
|
// populate the permissions cache
|
|
if (isset($_SESSION['user_id'])) {
|
|
$permissions = permissions_cache($_SESSION['user_id']);
|
|
}
|
|
|
|
unset($username, $password);
|