28require
'../main.inc.php';
29require_once DOL_DOCUMENT_ROOT.
'/core/lib/admin.lib.php';
30require_once DOL_DOCUMENT_ROOT.
'/core/lib/oauth.lib.php';
31require_once DOL_DOCUMENT_ROOT.
'/core/class/doleditor.class.php';
33use OAuth\Common\Storage\DoliStorage;
34use OAuth\Common\Consumer\Credentials;
49$langs->loadLangs(array(
'admin',
'printing',
'oauth'));
51$action =
GETPOST(
'action',
'aZ09');
52$mode =
GETPOST(
'mode',
'alpha');
53$value =
GETPOST(
'value',
'alpha');
54$varname =
GETPOST(
'varname',
'alpha');
55$driver =
GETPOST(
'driver',
'alpha');
58 $langs->load($driver);
80if ($action ==
'setconst' && $user->admin) {
83 $setupconstarray =
GETPOST(
'setupdriver',
'array');
85 foreach ($setupconstarray as $setupconst) {
99 setEventMessages($langs->trans(
"SetupSaved"),
null);
102 dol_print_error($db);
107if ($action ==
'setvalue' && $user->admin) {
111 if (!($result > 0)) {
117 setEventMessages($langs->trans(
"SetupSaved"),
null);
120 dol_print_error($db);
126if ($action ==
'refreshtoken' && $user->admin) {
127 $keyforprovider =
GETPOST(
'keyforprovider');
128 $OAUTH_SERVICENAME =
GETPOST(
'service');
133 require_once DOL_DOCUMENT_ROOT.
'/includes/OAuth/bootstrap.php';
135 $keyforsupportedoauth2array = $OAUTH_SERVICENAME;
136 if (preg_match(
'/^.*-/', $keyforsupportedoauth2array)) {
137 $keyforprovider = preg_replace(
'/^.*-/',
'', $keyforsupportedoauth2array);
139 $keyforprovider =
'';
141 $keyforsupportedoauth2array = preg_replace(
'/-.*$/',
'', strtoupper($keyforsupportedoauth2array));
142 $keyforsupportedoauth2array =
'OAUTH_'.$keyforsupportedoauth2array.
'_NAME';
144 $keyforparamtenant =
'OAUTH_'.strtoupper(empty($supportedoauth2array[$keyforsupportedoauth2array][
'callbackfile']) ?
'Unknown' : $supportedoauth2array[$keyforsupportedoauth2array][
'callbackfile']).($keyforprovider ?
'-'.$keyforprovider :
'').
'_TENANT';
150 print
'<!-- '.$OAUTH_SERVICENAME.
' -->'.
"\n";
152 dol_syslog(
"oauthlogintokens.php: Read token for service ".$OAUTH_SERVICENAME);
153 $tokenobj = $storage->retrieveAccessToken($OAUTH_SERVICENAME);
156 $expire = ($tokenobj->getEndOfLife() !== -9002 && $tokenobj->getEndOfLife() !== -9001 && time() > ($tokenobj->getEndOfLife() - 30));
158 $refreshtoken = $tokenobj->getRefreshToken();
159 print
'<!-- data stored into field token: '.$storage->token.
' - expire '.((string) $expire).
' -->';
168 $oauthname = explode(
'-', $OAUTH_SERVICENAME);
169 $keyforoauthservice = strtoupper($oauthname[0]).(empty($oauthname[1]) ?
'' :
'-'.$oauthname[1]);
170 $credentials =
new Credentials(
176 $serviceFactory = new \OAuth\ServiceFactory();
177 $httpClient = new \OAuth\Common\Http\Client\CurlClient();
181 $serviceFactory->setHttpClient($httpClient);
184 if (preg_match(
'/^Microsoft/', $OAUTH_SERVICENAME)) {
186 $tmp = explode(
'-', $OAUTH_SERVICENAME);
187 $scopes = explode(
',',
getDolGlobalString(
'OAUTH_'.strtoupper($tmp[0]).(empty($tmp[1]) ?
'' :
'-'.$tmp[1]).
'_SCOPE'));
191 $apiService = $serviceFactory->createService($oauthname[0], $credentials, $storage, $scopes);
193 if ($apiService instanceof OAuth\OAuth2\Service\AbstractService || $apiService instanceof OAuth\OAuth1\Service\AbstractService) {
195 dol_syslog(
"oauthlogintokens.php: call refreshAccessToken to get the new access token");
196 $tokenobj = $apiService->refreshAccessToken($tokenobj);
198 dol_syslog(
"oauthlogintokens.php: call setRefreshToken");
199 $tokenobj->setRefreshToken($refreshtoken);
201 dol_syslog(
"oauthlogintokens.php: call storeAccessToken to save the new access token + the old refresh token");
202 $storage->storeAccessToken($OAUTH_SERVICENAME, $tokenobj);
205 setEventMessages($langs->trans(
"OldTokenWasExpiredItHasBeenRefresh"),
null,
'mesgs');
207 setEventMessages($langs->trans(
"OldTokenWasNotExpiredButItHasBeenRefresh"),
null,
'mesgs');
210 dol_print_error($db,
'apiService is not a correct OAUTH2 Abstract service');
213 dol_syslog(
"oauthlogintokens.php: Read token again for service ".$OAUTH_SERVICENAME);
214 $tokenobj = $storage->retrieveAccessToken($OAUTH_SERVICENAME);
217 print $e->getMessage();
228$urlwithroot = $urlwithouturlroot.DOL_URL_ROOT;
231$form =
new Form($db);
233$title = $langs->trans(
"TokenManager");
234$help_url =
'EN:Module_OAuth|FR:Module_OAuth_FR|ES:Módulo_OAuth_ES';
236llxHeader(
'', $title, $help_url,
'', 0, 0,
'',
'',
'',
'mod-admin page-oauthlogintokens');
238$linkback =
'<a href="'.dolBuildUrl(DOL_URL_ROOT.
'/admin/modules.php', [
'restore_lastsearch_values' => 1]).
'">'.img_picto($langs->trans(
"BackToModuleList"),
'back',
'class="pictofixedwidth"').
'<span class="hideonsmartphone">'.$langs->trans(
"BackToModuleList").
'</span></a>';
240print
load_fiche_titre($langs->trans(
'ConfigOAuth'), $linkback,
'title_setup');
247 setEventMessages(
GETPOST(
'error'),
null,
'errors');
250if ($mode ==
'setup' && $user->admin) {
251 print
'<span class="opacitymedium">'.$langs->trans(
"OAuthSetupForLogin").
"</span><br><br>\n";
254 $listinsetup = array();
255 foreach (
$conf->global as $key => $val) {
256 if (!empty($val) && preg_match(
'/^OAUTH_.*_ID$/', $key)) {
257 $provider = preg_replace(
'/_ID$/',
'', $key);
258 $listinsetup[] = array(
268 $oauthstateanticsrf = bin2hex(random_bytes(128 / 8));
271 if (!empty($listinsetup)) {
272 foreach ($listinsetup as $key) {
274 $keyforsupportedoauth2array = $key[0];
275 $keyforsupportedoauth2array = preg_replace(
'/^OAUTH_/',
'', $keyforsupportedoauth2array);
276 $keyforsupportedoauth2array = preg_replace(
'/_NAME$/',
'', $keyforsupportedoauth2array);
277 if (preg_match(
'/^.*-/', $keyforsupportedoauth2array)) {
278 $keybeforeprovider = preg_replace(
'/-.*$/',
'', $keyforsupportedoauth2array);
279 $keyforprovider = preg_replace(
'/^.*-/',
'', $keyforsupportedoauth2array);
281 $keybeforeprovider = $keyforsupportedoauth2array;
282 $keyforprovider =
'';
284 $keyforsupportedoauth2array = preg_replace(
'/-.*$/',
'', strtoupper($keyforsupportedoauth2array));
285 $keyforsupportedoauth2array =
'OAUTH_'.$keyforsupportedoauth2array.
'_NAME';
287 $nameofservice = ucfirst(strtolower(empty($supportedoauth2array[$keyforsupportedoauth2array][
'callbackfile']) ?
'Unknown' : $supportedoauth2array[$keyforsupportedoauth2array][
'callbackfile']));
288 $nameofservice .= ($keyforprovider ?
'-'.$keyforprovider :
'');
289 $OAUTH_SERVICENAME = $nameofservice;
291 $keyforparamtenant =
'OAUTH_'.strtoupper(empty($supportedoauth2array[$keyforsupportedoauth2array][
'callbackfile']) ?
'Unknown' : $supportedoauth2array[$keyforsupportedoauth2array][
'callbackfile']).($keyforprovider ?
'-'.$keyforprovider :
'').
'_TENANT';
297 $state = $shortscope;
299 $urltorefresh = $_SERVER[
"PHP_SELF"].
'?action=refreshtoken&token='.
newToken();
302 if ($keyforsupportedoauth2array ==
'OAUTH_GITHUB_NAME') {
307 $urltorenew = $urlwithroot.
'/core/modules/oauth/github_oauthcallback.php?shortscope='.urlencode($shortscope).
'&state='.urlencode($shortscope).
'&backtourl='.urlencode(DOL_URL_ROOT.
'/admin/oauthlogintokens.php');
308 $urltodelete = $urlwithroot.
'/core/modules/oauth/github_oauthcallback.php?action=delete&token='.
newToken().
'&backtourl='.urlencode(DOL_URL_ROOT.
'/admin/oauthlogintokens.php');
309 $urltocheckperms =
'https://github.com/settings/applications/';
310 } elseif ($keyforsupportedoauth2array ==
'OAUTH_GOOGLE_NAME') {
314 $urltorenew = $urlwithroot.
'/core/modules/oauth/google_oauthcallback.php?shortscope='.urlencode($shortscope).
'&state='.urlencode($state).
'-'.$oauthstateanticsrf.
'&backtourl='.urlencode(DOL_URL_ROOT.
'/admin/oauthlogintokens.php');
315 $urltodelete = $urlwithroot.
'/core/modules/oauth/google_oauthcallback.php?action=delete&token='.
newToken().
'&backtourl='.urlencode(DOL_URL_ROOT.
'/admin/oauthlogintokens.php');
316 $urltocheckperms =
'https://security.google.com/settings/security/permissions';
317 } elseif (!empty($supportedoauth2array[$keyforsupportedoauth2array][
'returnurl'])) {
318 $urltorenew = $urlwithroot.$supportedoauth2array[$keyforsupportedoauth2array][
'returnurl'].
'?shortscope='.urlencode($shortscope).
'&state='.urlencode($state).
'&backtourl='.urlencode(DOL_URL_ROOT.
'/admin/oauthlogintokens.php');
319 $urltodelete = $urlwithroot.$supportedoauth2array[$keyforsupportedoauth2array][
'returnurl'].
'?action=delete&token='.
newToken().
'&backtourl='.urlencode(DOL_URL_ROOT.
'/admin/oauthlogintokens.php');
320 $urltocheckperms =
'';
324 $urltocheckperms =
'';
328 $urltorenew .=
'&keyforprovider='.urlencode($keyforprovider);
331 $urltorefresh .=
'&keyforprovider='.urlencode($keyforprovider).
'&service='.urlencode($OAUTH_SERVICENAME);
334 $urltodelete .=
'&keyforprovider='.urlencode($keyforprovider);
340 require_once DOL_DOCUMENT_ROOT.
'/includes/OAuth/bootstrap.php';
345 print
'<!-- '.$OAUTH_SERVICENAME.
' -->'.
"\n";
346 $tokenobj = $storage->retrieveAccessToken($OAUTH_SERVICENAME);
347 print
'<!-- data stored into field token: '.$storage->token.
' -->';
356 $refreshtoken =
false;
361 if (is_object($tokenobj)) {
363 $expire = ($tokenobj->getEndOfLife() !== $tokenobj::EOL_NEVER_EXPIRES && $tokenobj->getEndOfLife() !== $tokenobj::EOL_UNKNOWN && time() > ($tokenobj->getEndOfLife() - 30));
365 if ($key[1] !=
'' && $key[2] !=
'') {
366 if (is_object($tokenobj)) {
367 $refreshtoken = $tokenobj->getRefreshToken();
369 $endoflife = $tokenobj->getEndOfLife();
370 if ($endoflife == $tokenobj::EOL_NEVER_EXPIRES) {
371 $expiredat = $langs->trans(
"Never");
372 } elseif ($endoflife == $tokenobj::EOL_UNKNOWN) {
373 $expiredat = $langs->trans(
"Unknown");
382 print
'<form method="post" action="'.$_SERVER[
"PHP_SELF"].
'?mode=setup&driver='.$driver.
'" autocomplete="off" spellcheck="false">';
383 print
'<input type="hidden" name="token" value="'.newToken().
'">';
384 print
'<input type="hidden" name="action" value="setconst">';
385 print
'<input type="hidden" name="page_y" value="">';
387 print
'<div class="div-table-responsive-no-min">';
388 print
'<table class="noborder centpercent">'.
"\n";
391 $label = $langs->trans($keyforsupportedoauth2array);
392 print
'<tr class="liste_titre">';
393 print
'<th class="titlefieldcreate">';
394 print img_picto(
'', $supportedoauth2array[$keyforsupportedoauth2array][
'picto'],
'class="pictofixedwidth"');
395 if ($label == $keyforsupportedoauth2array) {
396 print $supportedoauth2array[$keyforsupportedoauth2array][
'name'];
400 if ($keyforprovider) {
401 print
' (<b>'.$keyforprovider.
'</b>)';
403 print
' (<b>'.$langs->trans(
"NoName").
'</b>)';
410 print
'<tr class="oddeven">';
413 print $langs->trans(
"OAuthIDSecret").
'</td>';
415 print
'<span class="opacitymedium">'.$langs->trans(
"SeePreviousTab").
'</span>';
422 print
'<tr class="oddeven">';
423 print
'<td>'.$langs->trans(
"Scopes").
'</td>';
424 print
'<td colspan="2">';
426 print $currentscopes;
429 print
'<tr class="oddeven">';
432 print $langs->trans(
"IsTokenGenerated");
435 if ($keyforprovider !=
'Login') {
436 if (is_object($tokenobj)) {
437 print $form->textwithpicto(yn(1), $langs->trans(
"HasAccessToken").
' : '.
dol_print_date($storage->date_modification,
'dayhour').
'<br>Scopes saved into field state='.
dol_escape_htmltag($storage->state));
439 print
'<span class="opacitymedium">'.$langs->trans(
"NoAccessToken").
'</span>';
442 print
'<span class="opacitymedium">'.$langs->trans(
"TokenNotRequiredForOAuthLogin").
'</span>';
445 print
'<td width="50%">';
446 if ($keyforprovider !=
'Login') {
448 if (is_object($tokenobj)) {
451 print
'<a class="button button-delete smallpaddingimp reposition marginright" href="'.$urltodelete.
'">'.$langs->trans(
'DeleteAccess').
'</a>';
453 print
'<span class="opacitymedium marginright">'.$langs->trans(
'GoOnTokenProviderToDeleteToken').
'</span>';
458 print
'<a class="button smallpaddingimp reposition classfortooltip marginright" href="'.$urltorenew.
'" title="'.dolPrintHTMLForAttribute($langs->trans(
'RequestAccess')).
'">'.$langs->trans(
'GetAccess').
'</a>';
461 if ($urltorefresh && $refreshtoken) {
462 print
'<a class="button smallpaddingimp reposition classfortooltip marginright" href="'.$urltorefresh.
'" title="'.dolPrintHTMLForAttribute($langs->trans(
'RefreshTokenHelp')).
'">'.$langs->trans(
'RefreshToken').
'</a>';
466 if ($urltocheckperms) {
467 print
'<br>'.$langs->trans(
"ToCheckDeleteTokenOnProvider", $OAUTH_SERVICENAME).
': <a href="'.$urltocheckperms.
'" target="_'.strtolower($OAUTH_SERVICENAME).
'">'.$urltocheckperms.
'</a>';
473 if (is_object($tokenobj)) {
474 print
'<tr class="oddeven">';
477 print $langs->trans(
"TokenRawValue").
'</td>';
478 print
'<td colspan="2">';
479 if (is_object($tokenobj)) {
480 print
'<textarea class="quatrevingtpercent small" rows="'.ROWS_4.
'">'.var_export($tokenobj,
true).
'</textarea><br>'.
"\n";
485 print
'<tr class="oddeven">';
488 print $langs->trans(
"AccessToken").
'</td>';
489 print
'<td colspan="2">';
490 $tokentoshow = $tokenobj->getAccessToken();
499 print
'<span class="opacitymedium"> - ';
500 print $langs->trans(
"ExpirationDate").
': ';
504 print $expire ?
' ('.$langs->trans(
"TokenExpired").
')' :
' ('.$langs->trans(
"TokenNotExpired").
')';
510 print
'<tr class="oddeven">';
513 print $langs->trans(
"TOKEN_REFRESH");
515 print
'<td colspan="2">';
524 if (!empty($driver)) {
525 if ($submit_enabled) {
526 print $form->buttonsSaveCancel(
"Modify",
'');
536if ($mode ==
'test' && $user->admin) {
537 print $langs->trans(
'PrintTestDesc'.$driver).
"<br><br>\n";
539 print
'<div class="div-table-responsive-no-min">';
540 print
'<table class="noborder centpercent">';
541 if (!empty($driver)) {
542 require_once DOL_DOCUMENT_ROOT.
'/core/modules/printing/'.$driver.
'.modules.php';
543 $classname =
'printing_'.$driver;
544 $langs->load($driver);
545 $printer =
new $classname($db);
547 '@phan-var-force PrintingDriver $printer';
550 if (count($printer->getlistAvailablePrinters())) {
551 if ($printer->listAvailablePrinters() == 0) {
552 print $printer->resprint;
554 setEventMessages($printer->error, $printer->errors,
'errors');
557 print $langs->trans(
'PleaseConfigureDriverfromList');
565if ($mode ==
'userconf' && $user->admin) {
566 print $langs->trans(
'PrintUserConfDesc'.$driver).
"<br><br>\n";
568 print
'<div class="div-table-responsive">';
569 print
'<table class="noborder centpercent">';
570 print
'<tr class="liste_titre">';
571 print
'<th>'.$langs->trans(
"User").
'</th>';
572 print
'<th>'.$langs->trans(
"PrintModule").
'</th>';
573 print
'<th>'.$langs->trans(
"PrintDriver").
'</th>';
574 print
'<th>'.$langs->trans(
"Printer").
'</th>';
575 print
'<th>'.$langs->trans(
"PrinterLocation").
'</th>';
576 print
'<th>'.$langs->trans(
"PrinterId").
'</th>';
577 print
'<th>'.$langs->trans(
"NumberOfCopy").
'</th>';
578 print
'<th class="center">'.$langs->trans(
"Delete").
'</th>';
580 $sql =
"SELECT p.rowid, p.printer_name, p.printer_location, p.printer_id, p.copy, p.module, p.driver, p.userid, u.login";
581 $sql .=
" FROM ".MAIN_DB_PREFIX.
"printing as p, ".MAIN_DB_PREFIX.
"user as u WHERE p.userid = u.rowid";
582 $resql = $db->query($sql);
583 while ($obj = $db->fetch_object($resql)) {
584 print
'<tr class="oddeven">';
585 print
'<td>'.$obj->login.
'</td>';
586 print
'<td>'.$obj->module.
'</td>';
587 print
'<td>'.$obj->driver.
'</td>';
588 print
'<td>'.$obj->printer_name.
'</td>';
589 print
'<td>'.$obj->printer_location.
'</td>';
590 print
'<td>'.$obj->printer_id.
'</td>';
591 print
'<td>'.$obj->copy.
'</td>';
592 print
'<td class="center">'.img_picto($langs->trans(
"Delete"),
'delete').
'</td>';
global $dolibarr_main_url_root
dolibarr_set_const($db, $name, $value, $type='chaine', $visible=0, $note='', $entity=1)
Insert a parameter (key,value) into database (delete old key then insert it again).
llxFooter($comment='', $zone='private', $disabledoutputofmessages=0)
Empty footer.
if(!defined('NOREQUIRESOC')) if(!defined( 'NOREQUIRETRAN')) if(!defined('NOTOKENRENEWAL')) if(!defined( 'NOREQUIREMENU')) if(!defined('NOREQUIREHTML')) if(!defined( 'NOREQUIREAJAX')) llxHeader($head='', $title='', $help_url='', $target='', $disablejs=0, $disablehead=0, $arrayofjs='', $arrayofcss='', $morequerystring='', $morecssonbody='', $replacemainareaby='', $disablenofollow=0, $disablenoindex=0)
Empty header.
newToken()
Return the value of token currently saved into session with name 'newtoken'.
GETPOST($paramname, $check='alphanohtml', $method=0, $filter=null, $options=null, $noreplace=0, $nodefault=0)
Return value of a param into GET or POST supervariable.
dol_print_date($time, $format='', $tzoutput='auto', $outputlangs=null, $encodetooutput=false, $decorate=0)
Output date in a string format according to outputlangs (or langs if not defined).
dol_trunc($string, $size=40, $trunc='right', $stringencoding='UTF-8', $nodot=0, $display=0)
Truncate a string to a particular length adding '...' if string larger than length.
getDolGlobalString($key, $default='')
Return a Dolibarr global constant string value.
dol_syslog($message, $level=LOG_INFO, $ident=0, $suffixinfilename='', $restricttologhandler='', $logcontext=null)
Write log message into outputs.
showValueWithClipboardCPButton($valuetocopy, $showonlyonhover=1, $texttoshow='')
Create a button to copy $valuetocopy in the clipboard (for copy and paste feature).
dol_get_fiche_head($links=array(), $active='', $title='', $notab=0, $picto='', $pictoisfullpath=0, $morehtmlright='', $morecss='', $limittoshow=0, $moretabssuffix='', $dragdropfile=0, $morecssdiv='')
Show tabs of a record.
dol_get_fiche_end($notab=0)
Return tab footer of a card.
load_fiche_titre($title, $morehtmlright='', $picto='generic', $pictoisfullpath=0, $id='', $morecssontable='', $morehtmlcenter='', $morecssonpicto='widthpictotitle')
Load a title with picto.
dol_escape_htmltag($stringtoescape, $keepb=0, $keepn=0, $noescapetags='', $escapeonlyhtmltags=0, $cleanalsojavascript=0)
getSupportedOauth2Array()
Return array of tabs to use on pages to setup cron module.
oauthadmin_prepare_head()
Return array of tabs to used on pages to setup cron module.
accessforbidden($message='', $printheader=1, $printfooter=1, $showonlymessage=0, $params=null)
Show a message to say access is forbidden and stop program.