Projekt

Allgemein

Profil

Herunterladen (4,51 KB) Statistiken
| Zweig: | Markierung: | Revision:

kivitendo/SL/Controller/LoginScreen.pm @ 57a728bd

540c0b5e Moritz Bunkus
package SL::Controller::LoginScreen;

use strict;

use parent qw(SL::Controller::Base);

3772d03a Moritz Bunkus
use List::Util qw(first);

540c0b5e Moritz Bunkus
use SL::Dispatcher::AuthHandler::User;
3772d03a Moritz Bunkus
use SL::DB::AuthClient;
use SL::DB::AuthGroup;
use SL::DB::AuthUser;
383534cc Moritz Bunkus
use SL::DB::Employee;
722fee3c Moritz Bunkus
use SL::Locale::String qw(t8);
540c0b5e Moritz Bunkus
use SL::User;

3772d03a Moritz Bunkus
use Rose::Object::MakeMethods::Generic (
'scalar --get_set_init' => [ qw(clients default_client_id) ],
);

38902b24 Sven Schöling
__PACKAGE__->run_before('set_layout');
3772d03a Moritz Bunkus
540c0b5e Moritz Bunkus
#
# actions
#

sub action_user_login {
my ($self) = @_;

22efd8a7 Moritz Bunkus
# If the user is already logged in then redirect to the proper menu
# script.
return if $self->_redirect_to_main_script_if_already_logged_in;

# Otherwise show the login form.
1c7afd9e Moritz Bunkus
$self->show_login_form(error => error_state($::form->{error}));
540c0b5e Moritz Bunkus
}

sub action_logout {
my ($self) = @_;

$::auth->destroy_session;
$::auth->create_or_refresh_session;
77505215 Moritz Bunkus
$self->show_login_form(info => $::locale->text('You are logged out!'));
540c0b5e Moritz Bunkus
}

sub action_login {
my ($self) = @_;

1c7afd9e Moritz Bunkus
my $login = $::form->{'{AUTH}login'} || $::auth->get_session_value('login');
my $client_id = $::form->{'{AUTH}client_id'} || $::auth->get_session_value('client_id');
my $error = t8('Incorrect username or password or no access to selected client!');

if (!$::auth->set_client($client_id)) {
$::auth->punish_wrong_login;
return $self->show_login_form(error => $error);
}

6c21fd13 Moritz Bunkus
%::myconfig = $login ? $::auth->read_user(login => $login) : ();
722fee3c Moritz Bunkus
$::form->{login} = $login;
540c0b5e Moritz Bunkus
$::locale = Locale->new($::myconfig{countrycode}) if $::myconfig{countrycode};
722fee3c Moritz Bunkus
SL::Dispatcher::AuthHandler::User->new->handle(countrycode => $::myconfig{countrycode});

$::request->layout(SL::Layout::Dispatcher->new(style => $::myconfig{menustyle}));
540c0b5e Moritz Bunkus
# if we get an error back, bale out
722fee3c Moritz Bunkus
my $result = User->new(login => $::myconfig{login})->login($::form);
540c0b5e Moritz Bunkus
# Database update available?
::end_of_request() if -2 == $result;

# Auth DB needs update? If so log the user out forcefully.
if (-3 == $result) {
$::auth->destroy_session;
return $self->render('login_screen/auth_db_needs_update');
}

# Other login errors.
if (0 > $result) {
$::auth->punish_wrong_login;
1c7afd9e Moritz Bunkus
return $self->show_login_form(error => $error);
540c0b5e Moritz Bunkus
}

# Everything is fine.
$::auth->set_cookie_environment_variable();

722fee3c Moritz Bunkus
$self->_redirect_to_main_script;
22efd8a7 Moritz Bunkus
}

#
# settings
#
sub get_auth_level {
return 'none';
}

sub keep_auth_vars_in_form {
return 1;
}

#
# private methods
#

sub _redirect_to_main_script {
722fee3c Moritz Bunkus
my ($self) = @_;
22efd8a7 Moritz Bunkus
383534cc Moritz Bunkus
$self->_ensure_employees_for_authorized_users_exist;

540c0b5e Moritz Bunkus
return $self->redirect_to($::form->{callback}) if $::form->{callback};

3880d657 Sven Schöling
$self->redirect_to(controller => "login.pl", action => 'company_logo');
540c0b5e Moritz Bunkus
}

22efd8a7 Moritz Bunkus
sub _redirect_to_main_script_if_already_logged_in {
my ($self) = @_;

# Get 'login' from valid session.
my $login = $::auth->get_session_value('login');
return unless $login;

# See whether or not the user exists in the database.
my %user = $::auth->read_user(login => $login);
return if ($user{login} || '') ne $login;

# Check if the session is logged in correctly.
return if SL::Auth::OK() != $::auth->authenticate($login, undef);

$::auth->create_or_refresh_session;
$::auth->delete_session_value('FLASH');

$self->_redirect_to_main_script(\%user);
540c0b5e Moritz Bunkus
return 1;
}

383534cc Moritz Bunkus
sub _ensure_employees_for_authorized_users_exist {
my ($self) = @_;

my %employees_by_login = map { ($_->login => $_) } @{ SL::DB::Manager::Employee->get_all };

foreach my $user (@{ SL::DB::AuthClient->new(id => $::auth->client->{id})->load->users || [] }) {
my $user_config = $user->config_values;
my $employee = $employees_by_login{$user->login} || SL::DB::Employee->new(login => $user->login);

$employee->update_attributes(
name => $user_config->{name},
workphone => $user_config->{tel},
deleted => 0,
);
}
}

3ab26ffc Sven Schöling
sub error_state {
return {
session => $::locale->text('The session is invalid or has expired.'),
722fee3c Moritz Bunkus
password => $::locale->text('Incorrect username or password or no access to selected client!'),
3ab26ffc Sven Schöling
}->{$_[0]};
}

38902b24 Sven Schöling
sub set_layout {
b6fd15a8 Sven Schöling
$::request->{layout} = SL::Layout::Dispatcher->new(style => 'login');
38902b24 Sven Schöling
}

3772d03a Moritz Bunkus
sub init_clients {
return SL::DB::Manager::AuthClient->get_all_sorted;
}

sub init_default_client_id {
my ($self) = @_;
my $default_client = first { $_->is_default } @{ $self->clients };
return $default_client ? $default_client->id : undef;
}

1c7afd9e Moritz Bunkus
sub show_login_form {
my ($self, %params) = @_;

$::request->layout->focus('#auth_login');
$self->render('login_screen/user_login', %params);
}

540c0b5e Moritz Bunkus
1;