28require
'../main.inc.php';
29require_once DOL_DOCUMENT_ROOT.
'/core/lib/admin.lib.php';
30require_once DOL_DOCUMENT_ROOT.
'/core/lib/oauth.lib.php';
35$urlwithouturlroot = preg_replace(
'/'.preg_quote(DOL_URL_ROOT,
'/').
'$/i',
'', trim($dolibarr_main_url_root));
36$urlwithroot = $urlwithouturlroot.DOL_URL_ROOT;
40$langs->loadLangs(array(
'admin',
'oauth',
'modulebuilder'));
47$action =
GETPOST(
'action',
'aZ09');
48$provider =
GETPOST(
'provider',
'aZ09');
49$label =
GETPOST(
'label',
'aZ09');
51$servicetoeditname =
GETPOST(
'servicetoeditname',
'aZ09');
60if ($action ==
'add') {
61 if ($provider && $provider !=
'-1') {
62 $constname = strtoupper($provider).($label ?
'-'.$label :
'').
'_ID';
65 setEventMessages($langs->trans(
"AOAuthEntryForThisProviderAndLabelAlreadyHasAKey"),
null,
'errors');
68 dolibarr_set_const($db, $constname, $langs->trans(
'ToComplete'),
'chaine', 0,
'', $conf->entity);
73if ($action ==
'update') {
74 foreach ($conf->global as $key => $val) {
75 if (!empty($val) && preg_match(
'/^OAUTH_.+_ID$/', $key)) {
76 $constvalue = str_replace(
'_ID',
'', $key);
77 $newconstvalue = $constvalue;
78 if (GETPOSTISSET($constvalue.
'_NAME')) {
79 $newconstvalue = preg_replace(
'/-.*$/',
'', $constvalue).
'-'.
GETPOST($constvalue.
'_NAME');
82 if (GETPOSTISSET($constvalue.
'_ID')) {
88 if (GETPOSTISSET($constvalue.
'_SECRET')) {
93 if (GETPOSTISSET($constvalue.
'_URLAUTHORIZE')) {
94 if (!
dolibarr_set_const($db, $newconstvalue.
'_URLAUTHORIZE',
GETPOST($constvalue.
'_URLAUTHORIZE'),
'chaine', 0,
'', $conf->entity)) {
98 if (GETPOSTISSET($constvalue.
'_TENANT')) {
103 if (GETPOSTISSET($constvalue.
'_SCOPE')) {
104 if (is_array(
GETPOST($constvalue.
'_SCOPE'))) {
105 $scopestring = implode(
',',
GETPOST($constvalue.
'_SCOPE'));
107 $scopestring =
GETPOST($constvalue.
'_SCOPE');
109 if (!
dolibarr_set_const($db, $newconstvalue.
'_SCOPE', $scopestring,
'chaine', 0,
'', $conf->entity)) {
112 } elseif ($newconstvalue !== $constvalue) {
113 if (!
dolibarr_set_const($db, $newconstvalue.
'_SCOPE',
'',
'chaine', 0,
'', $conf->entity)) {
119 if ($constvalue !== $newconstvalue) {
126 $oldname = preg_replace(
'/^OAUTH_/',
'', $constvalue);
127 $oldprovider = ucfirst(strtolower(preg_replace(
'/-.*$/',
'', $oldname)));
128 $oldlabel = preg_replace(
'/^.*-/',
'', $oldname);
129 $newlabel = preg_replace(
'/^.*-/',
'', $newconstvalue);
132 $sql =
"UPDATE ".MAIN_DB_PREFIX.
"oauth_token";
133 $sql.=
" SET service = '".$db->escape($oldprovider.
"-".$newlabel).
"'";
134 $sql.=
" WHERE service = '".$db->escape($oldprovider.
"-".$oldlabel).
"'";
137 $resql = $db->query($sql);
144 if (!
dolibarr_set_const($db,
'MAIN_MAIL_SMTPS_OAUTH_SERVICE', strtoupper($oldprovider).
'-'.$newlabel,
'chaine', 0,
'', $conf->entity)) {
160if ($action ==
'confirm_delete') {
161 $provider =
GETPOST(
'provider',
'aZ09');
164 $globalkey = empty($provider) ? $label : $label.
'-'.$provider;
167 $backtourl = DOL_URL_ROOT.
'/admin/oauth.php?action=delete_entry&provider='.$provider.
'&label='.$label.
'&token='.
newToken();
168 $urlwithouturlroot = preg_replace(
'/'.preg_quote(DOL_URL_ROOT,
'/').
'$/i',
'', trim($dolibarr_main_url_root));
169 $urlwithroot = $urlwithouturlroot.DOL_URL_ROOT;
170 $callbacktodel = $urlwithroot;
171 if ($label ==
'OAUTH_GOOGLE') {
172 $callbacktodel .=
'/core/modules/oauth/google_oauthcallback.php?action=delete&keyforprovider='.$provider.
'&token='.
newToken().
'&backtourl='.urlencode($backtourl);
173 } elseif ($label ==
'OAUTH_GITHUB') {
174 $callbacktodel .=
'/core/modules/oauth/github_oauthcallback.php?action=delete&keyforprovider='.$provider.
'&token='.
newToken().
'&backtourl='.urlencode($backtourl);
175 } elseif ($label ==
'OAUTH_STRIPELIVE') {
176 $callbacktodel .=
'/core/modules/oauth/stripelive_oauthcallback.php?action=delete&keyforprovider='.$provider.
'&token='.
newToken().
'&backtourl='.urlencode($backtourl);
177 } elseif ($label ==
'OAUTH_STRIPETEST') {
178 $callbacktodel .=
'/core/modules/oauth/stripetest_oauthcallback.php?action=delete&keyforprovider='.$provider.
'&token='.
newToken().
'&backtourl='.urlencode($backtourl);
179 } elseif ($label ==
'OAUTH_MICROSOFT') {
180 $callbacktodel .=
'/core/modules/oauth/microsoft_oauthcallback.php?action=delete&keyforprovider='.$provider.
'&token='.
newToken().
'&backtourl='.urlencode($backtourl);
181 } elseif ($label ==
'OAUTH_MICROSOFT2') {
182 $callbacktodel .=
'/core/modules/oauth/microsoft2_oauthcallback.php?action=delete&keyforprovider='.$provider.
'&token='.
newToken().
'&backtourl='.urlencode($backtourl);
183 } elseif ($label ==
'OAUTH_GENERIC') {
184 $callbacktodel .=
'/core/modules/oauth/generic_oauthcallback.php?action=delete&keyforprovider='.$provider.
'&token='.
newToken().
'&backtourl='.urlencode($backtourl);
186 header(
"Location: ".$callbacktodel);
189 $action =
'delete_entry';
193if ($action ==
'delete_entry') {
194 $provider =
GETPOST(
'provider',
'aZ09');
197 $globalkey = empty($provider) ? $label : $label.
'-'.$provider;
199 if (!
dolibarr_del_const($db, $globalkey.
'_NAME', $conf->entity) || !
dolibarr_del_const($db, $globalkey.
'_ID', $conf->entity) || !
dolibarr_del_const($db, $globalkey.
'_SECRET', $conf->entity) || !
dolibarr_del_const($db, $globalkey.
'_URLAUTHORIZE', $conf->entity) || !
dolibarr_del_const($db, $globalkey.
'_SCOPE', $conf->entity)) {
211$form =
new Form($db);
213$title = $langs->trans(
'ConfigOAuth');
214$help_url =
'EN:Module_OAuth|FR:Module_OAuth_FR|ES:Módulo_OAuth_ES';
216llxHeader(
'', $title, $help_url,
'', 0, 0,
'',
'',
'',
'mod-admin page-oauth');
219if ($action ==
'delete') {
220 $formquestion = array();
221 $formconfirm = $form->formconfirm($_SERVER[
"PHP_SELF"].
'?provider='.
GETPOST(
'provider').
'&label='.
GETPOST(
'label'), $langs->trans(
'OAuthServiceConfirmDeleteTitle'), $langs->trans(
'OAuthServiceConfirmDeleteMessage'),
'confirm_delete', $formquestion, 0, 1, 220);
226$linkback =
'<a href="'.DOL_URL_ROOT.
'/admin/modules.php?restore_lastsearch_values=1">'.$langs->trans(
"BackToModuleList").
'</a>';
229print
'<form action="'.$_SERVER[
"PHP_SELF"].
'" method="POST">';
230print
'<input type="hidden" name="token" value="'.newToken().
'">';
231print
'<input type="hidden" name="action" value="add">';
238print
'<span class="opacitymedium">'.$langs->trans(
"ListOfSupportedOauthProviders").
'</span><br><br>';
244print
'<select name="provider" id="provider" class="minwidth150">';
245print
'<option name="-1" value="-1">'.$langs->trans(
"OAuthProvider").
'</option>';
247foreach ($list as $key) {
249 $keyforsupportedoauth2array = $key[0];
251 if (in_array($keyforsupportedoauth2array, array_keys($supportedoauth2array))) {
258 print
'<option name="'.$keyforsupportedoauth2array.
'" value="'.str_replace(
'_NAME',
'', $keyforsupportedoauth2array).
'">'.$supportedoauth2array[$keyforsupportedoauth2array][
'name'].
'</option>'.
"\n";
262print
' <input type="text" name="label" value="" placeholder="'.$langs->trans(
"Label").
'" pattern="^\S+$" title="'.$langs->trans(
"SpaceOrSpecialCharAreNotAllowed").
'">';
263print
' <input type="submit" class="button small" name="add" value="'.$langs->trans(
"Add").
'">';
274foreach ($conf->global as $key => $val) {
275 if (!empty($val) && preg_match(
'/^OAUTH_.*_ID$/', $key)) {
276 $provider = preg_replace(
'/_ID$/',
'', $key);
277 $listinsetup[] = array(
281 $provider.
'_URLAUTHORIZE',
288if (count($listinsetup) > 0) {
289 print
'<form action="'.$_SERVER[
"PHP_SELF"].
'" method="POST">';
290 print
'<input type="hidden" name="token" value="'.newToken().
'">';
291 print
'<input type="hidden" name="action" value="update">';
293 print
'<div class="div-table-responsive-no-min">';
298 foreach ($listinsetup as $key) {
300 $keyforsupportedoauth2array = $key[0];
301 $keyforsupportedoauth2array = preg_replace(
'/^OAUTH_/',
'', $keyforsupportedoauth2array);
302 $keyforsupportedoauth2array = preg_replace(
'/_NAME$/',
'', $keyforsupportedoauth2array);
303 if (preg_match(
'/^.*-/', $keyforsupportedoauth2array)) {
304 $keybeforeprovider = preg_replace(
'/-.*$/',
'', $keyforsupportedoauth2array);
305 $keyforprovider = preg_replace(
'/^.*-/',
'', $keyforsupportedoauth2array);
307 $keybeforeprovider = $keyforsupportedoauth2array;
308 $keyforprovider =
'';
310 $keyforsupportedoauth2array = preg_replace(
'/-.*$/',
'', $keyforsupportedoauth2array);
311 $keyforsupportedoauth2array =
'OAUTH_'.$keyforsupportedoauth2array.
'_NAME';
313 if (in_array($keyforsupportedoauth2array, array_keys($supportedoauth2array))) {
322 print
'<table class="noborder centpercent">';
325 $label = $langs->trans($keyforsupportedoauth2array);
326 print
'<tr class="liste_titre'.($i > 1 ?
' liste_titre_add' :
'').
'">';
327 print
'<td class="titlefieldcreate">';
328 print
img_picto(
'', $supportedoauth2array[$keyforsupportedoauth2array][
'picto'],
'class="pictofixedwidth"');
329 if ($label == $keyforsupportedoauth2array) {
330 print $supportedoauth2array[$keyforsupportedoauth2array][
'name'];
334 if ($servicetoeditname == $key[0]) {
335 print
' (<input style="width: 20%" type="text" name="'.$key[0].
'" value="'.$keyforprovider.
'" >)';
336 } elseif ($keyforprovider) {
337 print
' (<b>'.$keyforprovider.
'</b>)';
339 print
' (<b>'.$langs->trans(
"NoName").
'</b>)';
341 if (!($servicetoeditname == $key[0])) {
342 print
'<a class="editfielda reposition" href="'.$_SERVER[
"PHP_SELF"].
'?token='.
newToken().
'&servicetoeditname='.urlencode($key[0]).
'">'.
img_edit($langs->transnoentitiesnoconv(
'Edit'), 1).
'</a>';
346 if (!empty($supportedoauth2array[$keyforsupportedoauth2array][
'urlforcredentials'])) {
347 print $langs->trans(
"OAUTH_URL_FOR_CREDENTIAL", $supportedoauth2array[$keyforsupportedoauth2array][
'urlforcredentials']);
353 $label = preg_replace(
'/_NAME$/',
'', $keyforsupportedoauth2array);
354 print
'<a href="'.$_SERVER[
"PHP_SELF"].
'?action=delete&token='.
newToken().
'&provider='.urlencode($keyforprovider).
'&label='.urlencode($label).
'">';
364 $redirect_uri = $urlwithroot.
'/core/modules/oauth/'.$supportedoauth2array[$keyforsupportedoauth2array][
'callbackfile'].
'_oauthcallback.php';
365 print
'<tr class="oddeven value">';
366 print
'<td>'.$form->textwithpicto($langs->trans(
"RedirectURL"), $langs->trans(
"UseTheFollowingUrlAsRedirectURI")).
'</td>';
367 print
'<td><input style="width: 80%" type="text" name="uri'.$keyforsupportedoauth2array.
'" id="uri'.$keyforsupportedoauth2array.$keyforprovider.
'" value="'.$redirect_uri.
'" disabled>';
368 print
ajax_autoselect(
'uri'.$keyforsupportedoauth2array.$keyforprovider);
373 if ($keyforsupportedoauth2array ==
'OAUTH_GENERIC_NAME') {
374 print
'<tr class="oddeven value">';
375 print
'<td>'.$langs->trans(
"URLOfServiceForAuthorization").
'</td>';
376 print
'<td><input style="width: 80%" type="text" name="'.$key[3].
'" value="'.
getDolGlobalString($key[3]).
'" >';
382 print
'<tr class="oddeven value">';
383 print
'<td>'.$langs->trans(
"UseTheFollowingUrlAsRedirectURI").
'</td>';
384 print
'<td>'.$langs->trans(
"FeatureNotYetSupported").
'</td>';
391 print
'<tr class="oddeven value">';
392 print
'<td><label for="'.$key[1].
'">'.$langs->trans(
"OAUTH_ID").
'</label></td>';
393 print
'<td><input type="text" size="100" id="'.$key[1].
'" name="'.$key[1].
'" value="'.
getDolGlobalString($key[1]).
'">';
399 print
'<tr class="oddeven value">';
400 print
'<td><label for="'.$key[2].
'">'.$langs->trans(
"OAUTH_SECRET").
'</label></td>';
401 print
'<td><input type="password" size="100" id="'.$key[2].
'" name="'.$key[2].
'" value="'.
getDolGlobalString($key[2]).
'">';
407 if ($keybeforeprovider ==
'MICROSOFT' || $keybeforeprovider ==
'MICROSOFT2') {
408 print
'<tr class="oddeven value">';
409 print
'<td><label for="'.$key[2].
'">'.$langs->trans(
"OAUTH_TENANT").
'</label></td>';
410 print
'<td><input type="text" size="100" id="OAUTH_'.$keybeforeprovider.($keyforprovider ?
'-'.$keyforprovider :
'').
'_TENANT" name="OAUTH_'.$keybeforeprovider.($keyforprovider ?
'-'.$keyforprovider :
'').
'_TENANT" value="'.
getDolGlobalString(
'OAUTH_'.$keybeforeprovider.($keyforprovider ?
'-'.$keyforprovider :
'').
'_TENANT').
'">';
418 if ($keyforsupportedoauth2array ==
'OAUTH_GENERIC_NAME') {
419 print
'<tr class="oddeven value">';
420 print
'<td>'.$langs->trans(
"Scopes").
'</td>';
422 print
'<input style="width: 80%" type"text" name="'.$key[4].
'" value="'.
getDolGlobalString($key[4]).
'" >';
427 $availablescopes = array_flip(explode(
',', $supportedoauth2array[$keyforsupportedoauth2array][
'availablescopes']));
429 $scopestodispay = array();
430 foreach ($availablescopes as $keyscope => $valscope) {
431 if (in_array($keyscope, $currentscopes)) {
432 $scopestodispay[$keyscope] = 1;
434 $scopestodispay[$keyscope] = 0;
438 print
'<tr class="oddeven value">';
439 print
'<td>'.$langs->trans(
"Scopes").
'</td>';
441 foreach ($scopestodispay as $scope => $val) {
442 print
'<input type="checkbox" id="'.$keyforprovider.$scope.
'" name="'.$key[4].
'[]" value="'.$scope.
'"'.($val ?
' checked' :
'').
'>';
443 print
'<label style="margin-right: 10px" for="'.$keyforprovider.$scope.
'">'.$scope.
'</label>';
450 print
'<tr class="oddeven value">';
451 print
'<td>'.$langs->trans(
"UseTheFollowingUrlAsRedirectURI").
'</td>';
452 print
'<td>'.$langs->trans(
"FeatureNotYetSupported").
'</td>';
458 print
'</table>'.
"\n";
465 print $form->buttonsSaveCancel(
"Save",
'');
dolibarr_set_const($db, $name, $value, $type='chaine', $visible=0, $note='', $entity=1)
Insert a parameter (key,value) into database (delete old key then insert it again).
dolibarr_del_const($db, $name, $entity=1)
Delete a constant.
ajax_combobox($htmlname, $events=array(), $minLengthToAutocomplete=0, $forcefocus=0, $widthTypeOfAutocomplete='resolve', $idforemptyvalue='-1', $morecss='')
Convert a html select field into an ajax combobox.
if(!defined('NOREQUIRESOC')) if(!defined( 'NOREQUIRETRAN')) if(!defined('NOTOKENRENEWAL')) if(!defined( 'NOREQUIREMENU')) if(!defined('NOREQUIREHTML')) if(!defined( 'NOREQUIREAJAX')) llxHeader()
Empty header.
load_fiche_titre($title, $morehtmlright='', $picto='generic', $pictoisfullpath=0, $id='', $morecssontable='', $morehtmlcenter='')
Load a title with picto.
img_picto($titlealt, $picto, $moreatt='', $pictoisfullpath=0, $srconly=0, $notitle=0, $alt='', $morecss='', $marginleftonlyshort=2)
Show picto whatever it's its name (generic function)
dol_get_fiche_head($links=array(), $active='', $title='', $notab=0, $picto='', $pictoisfullpath=0, $morehtmlright='', $morecss='', $limittoshow=0, $moretabssuffix='', $dragdropfile=0)
Show tabs of a record.
dol_get_fiche_end($notab=0)
Return tab footer of a card.
ajax_autoselect($htmlname, $addlink='', $textonlink='Link')
Make content of an input box selected when we click into input field.
newToken()
Return the value of token currently saved into session with name 'newtoken'.
GETPOST($paramname, $check='alphanohtml', $method=0, $filter=null, $options=null, $noreplace=0)
Return value of a param into GET or POST supervariable.
setEventMessages($mesg, $mesgs, $style='mesgs', $messagekey='', $noduplicate=0)
Set event messages in dol_events session object.
getDolGlobalString($key, $default='')
Return dolibarr global constant string value.
img_edit($titlealt='default', $float=0, $other='')
Show logo edit/modify fiche.
getAllOauth2Array()
Return array of possible OAUTH2 services.
getSupportedOauth2Array()
Return array of tabs to used on pages to setup cron module.
oauthadmin_prepare_head()
Return array of tabs to used on pages to setup cron module.
accessforbidden($message='', $printheader=1, $printfooter=1, $showonlymessage=0, $params=null)
Show a message to say access is forbidden and stop program.