Merge branch 'master' into import-export
commit
6dc1a19390
@ -0,0 +1,318 @@
|
|||||||
|
name: CI
|
||||||
|
on:
|
||||||
|
push:
|
||||||
|
branches:
|
||||||
|
- staging
|
||||||
|
- testing
|
||||||
|
- '1.5'
|
||||||
|
- '1.6'
|
||||||
|
- '1.7'
|
||||||
|
- '1.8'
|
||||||
|
- master
|
||||||
|
# version tags, e.g. 1.7.1
|
||||||
|
- '[1-9].[0-9].[0-9]'
|
||||||
|
# pre-releases, e.g. 1.8-pre1
|
||||||
|
- 1.8-pre[0-9]
|
||||||
|
# test branches, e.g. test-debian
|
||||||
|
- test-*
|
||||||
|
|
||||||
|
###############################################
|
||||||
|
# REQUIRED secrets
|
||||||
|
# DOCKER_UN: ${{ secrets.Docker_Login }}
|
||||||
|
# Username of docker login for pushing the images to repo $DOCKER_ORG
|
||||||
|
# DOCKER_PW: ${{ secrets.Docker_Password }}
|
||||||
|
# Password of docker login for pushing the images to repo $DOCKER_ORG
|
||||||
|
# DOCKER_ORG: ${{ secrets.DOCKER_ORG }}
|
||||||
|
# The docker repository where the images are pushed to.
|
||||||
|
# DOCKER_ORG_TESTS: ${{ secrets.DOCKER_ORG_TESTS }}
|
||||||
|
# The docker repository for test images. Only used for the branch TESTING (BORS try).
|
||||||
|
# Add the above secrets to your github repo to determine where the images will be pushed.
|
||||||
|
################################################
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
build:
|
||||||
|
name: Build images
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
steps:
|
||||||
|
- uses: actions/checkout@v2
|
||||||
|
- name: Extract branch name
|
||||||
|
shell: bash
|
||||||
|
run: |
|
||||||
|
echo "BRANCH=${GITHUB_REF#refs/heads/}" >> $GITHUB_ENV
|
||||||
|
- name: Create folder for storing images
|
||||||
|
run: |
|
||||||
|
sudo mkdir -p /images
|
||||||
|
sudo chmod 777 /images
|
||||||
|
- name: Configure images folder for caching
|
||||||
|
uses: actions/cache@v2
|
||||||
|
with:
|
||||||
|
path: /images
|
||||||
|
key: ${{ env.BRANCH }}-${{ github.run_id }}-${{ github.run_number }}
|
||||||
|
- name: Check docker-compose version
|
||||||
|
run: docker-compose -v
|
||||||
|
- name: Login docker
|
||||||
|
env:
|
||||||
|
DOCKER_UN: ${{ secrets.Docker_Login }}
|
||||||
|
DOCKER_PW: ${{ secrets.Docker_Password }}
|
||||||
|
DOCKER_ORG: ${{ secrets.DOCKER_ORG }}
|
||||||
|
run: echo "$DOCKER_PW" | docker login --username $DOCKER_UN --password-stdin
|
||||||
|
- name: Build all docker images
|
||||||
|
env:
|
||||||
|
MAILU_VERSION: ${{ env.BRANCH }}
|
||||||
|
TRAVIS_BRANCH: ${{ env.BRANCH }}
|
||||||
|
DOCKER_ORG: ${{ secrets.DOCKER_ORG }}
|
||||||
|
run: docker-compose -f tests/build.yml build
|
||||||
|
- name: Save all docker images
|
||||||
|
run: docker save ${{ secrets.DOCKER_ORG }}/admin ${{ secrets.DOCKER_ORG }}/clamav ${{ secrets.DOCKER_ORG }}/docs ${{ secrets.DOCKER_ORG }}/dovecot ${{ secrets.DOCKER_ORG }}/fetchmail ${{ secrets.DOCKER_ORG }}/nginx ${{ secrets.DOCKER_ORG }}/none ${{ secrets.DOCKER_ORG }}/postfix ${{ secrets.DOCKER_ORG }}/postgresql ${{ secrets.DOCKER_ORG }}/radicale ${{ secrets.DOCKER_ORG }}/rainloop ${{ secrets.DOCKER_ORG }}/roundcube ${{ secrets.DOCKER_ORG }}/rspamd ${{ secrets.DOCKER_ORG }}/setup ${{ secrets.DOCKER_ORG }}/traefik-certdumper ${{ secrets.DOCKER_ORG }}/unbound -o /images/images.tar.gz
|
||||||
|
|
||||||
|
test-core:
|
||||||
|
name: Perform core tests
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
needs:
|
||||||
|
- build
|
||||||
|
steps:
|
||||||
|
- uses: actions/checkout@v2
|
||||||
|
- name: Extract branch name
|
||||||
|
shell: bash
|
||||||
|
run: |
|
||||||
|
echo "BRANCH=${GITHUB_REF#refs/heads/}" >> $GITHUB_ENV
|
||||||
|
- name: Create folder for storing images
|
||||||
|
run: |
|
||||||
|
sudo mkdir -p /images
|
||||||
|
sudo chmod 777 /images
|
||||||
|
- name: Configure images folder for caching
|
||||||
|
uses: actions/cache@v2
|
||||||
|
with:
|
||||||
|
path: /images
|
||||||
|
key: ${{ env.BRANCH }}-${{ github.run_id }}-${{ github.run_number }}
|
||||||
|
- name: Load docker images
|
||||||
|
run: docker load -i /images/images.tar.gz
|
||||||
|
- name: Install python packages
|
||||||
|
run: python3 -m pip install -r tests/requirements.txt
|
||||||
|
- name: Copy all certs
|
||||||
|
run: sudo -- sh -c 'mkdir -p /mailu && cp -r tests/certs /mailu && chmod 600 /mailu/certs/*'
|
||||||
|
- name: Test core suite
|
||||||
|
run: python tests/compose/test.py core 1
|
||||||
|
env:
|
||||||
|
MAILU_VERSION: ${{ env.BRANCH }}
|
||||||
|
TRAVIS_BRANCH: ${{ env.BRANCH }}
|
||||||
|
DOCKER_ORG: ${{ secrets.DOCKER_ORG }}
|
||||||
|
|
||||||
|
test-fetchmail:
|
||||||
|
name: Perform fetchmail tests
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
needs:
|
||||||
|
- build
|
||||||
|
steps:
|
||||||
|
- uses: actions/checkout@v2
|
||||||
|
- name: Extract branch name
|
||||||
|
shell: bash
|
||||||
|
run: |
|
||||||
|
echo "BRANCH=${GITHUB_REF#refs/heads/}" >> $GITHUB_ENV
|
||||||
|
- name: Create folder for storing images
|
||||||
|
run: |
|
||||||
|
sudo mkdir -p /images
|
||||||
|
sudo chmod 777 /images
|
||||||
|
- name: Configure images folder for caching
|
||||||
|
uses: actions/cache@v2
|
||||||
|
with:
|
||||||
|
path: /images
|
||||||
|
key: ${{ env.BRANCH }}-${{ github.run_id }}-${{ github.run_number }}
|
||||||
|
- name: Load docker images
|
||||||
|
run: docker load -i /images/images.tar.gz
|
||||||
|
- name: Install python packages
|
||||||
|
run: python3 -m pip install -r tests/requirements.txt
|
||||||
|
- name: Copy all certs
|
||||||
|
run: sudo -- sh -c 'mkdir -p /mailu && cp -r tests/certs /mailu && chmod 600 /mailu/certs/*'
|
||||||
|
- name: Test fetch
|
||||||
|
run: python tests/compose/test.py fetchmail 1
|
||||||
|
env:
|
||||||
|
MAILU_VERSION: ${{ env.BRANCH }}
|
||||||
|
TRAVIS_BRANCH: ${{ env.BRANCH }}
|
||||||
|
DOCKER_ORG: ${{ secrets.DOCKER_ORG }}
|
||||||
|
|
||||||
|
test-filters:
|
||||||
|
name: Perform filter tests
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
needs:
|
||||||
|
- build
|
||||||
|
steps:
|
||||||
|
- uses: actions/checkout@v2
|
||||||
|
- name: Extract branch name
|
||||||
|
shell: bash
|
||||||
|
run: |
|
||||||
|
echo "BRANCH=${GITHUB_REF#refs/heads/}" >> $GITHUB_ENV
|
||||||
|
- name: Create folder for storing images
|
||||||
|
run: |
|
||||||
|
sudo mkdir -p /images
|
||||||
|
sudo chmod 777 /images
|
||||||
|
- name: Configure images folder for caching
|
||||||
|
uses: actions/cache@v2
|
||||||
|
with:
|
||||||
|
path: /images
|
||||||
|
key: ${{ env.BRANCH }}-${{ github.run_id }}-${{ github.run_number }}
|
||||||
|
- name: Load docker images
|
||||||
|
run: docker load -i /images/images.tar.gz
|
||||||
|
- name: Install python packages
|
||||||
|
run: python3 -m pip install -r tests/requirements.txt
|
||||||
|
- name: Copy all certs
|
||||||
|
run: sudo -- sh -c 'mkdir -p /mailu && cp -r tests/certs /mailu && chmod 600 /mailu/certs/*'
|
||||||
|
- name: Test clamvav
|
||||||
|
run: python tests/compose/test.py filters 2
|
||||||
|
env:
|
||||||
|
MAILU_VERSION: ${{ env.BRANCH }}
|
||||||
|
TRAVIS_BRANCH: ${{ env.BRANCH }}
|
||||||
|
DOCKER_ORG: ${{ secrets.DOCKER_ORG }}
|
||||||
|
|
||||||
|
test-rainloop:
|
||||||
|
name: Perform rainloop tests
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
needs:
|
||||||
|
- build
|
||||||
|
steps:
|
||||||
|
- uses: actions/checkout@v2
|
||||||
|
- name: Extract branch name
|
||||||
|
shell: bash
|
||||||
|
run: |
|
||||||
|
echo "BRANCH=${GITHUB_REF#refs/heads/}" >> $GITHUB_ENV
|
||||||
|
- name: Create folder for storing images
|
||||||
|
run: |
|
||||||
|
sudo mkdir -p /images
|
||||||
|
sudo chmod 777 /images
|
||||||
|
- name: Configure images folder for caching
|
||||||
|
uses: actions/cache@v2
|
||||||
|
with:
|
||||||
|
path: /images
|
||||||
|
key: ${{ env.BRANCH }}-${{ github.run_id }}-${{ github.run_number }}
|
||||||
|
- name: Load docker images
|
||||||
|
run: docker load -i /images/images.tar.gz
|
||||||
|
- name: Install python packages
|
||||||
|
run: python3 -m pip install -r tests/requirements.txt
|
||||||
|
- name: Copy all certs
|
||||||
|
run: sudo -- sh -c 'mkdir -p /mailu && cp -r tests/certs /mailu && chmod 600 /mailu/certs/*'
|
||||||
|
- name: Test rainloop
|
||||||
|
run: python tests/compose/test.py rainloop 1
|
||||||
|
env:
|
||||||
|
MAILU_VERSION: ${{ env.BRANCH }}
|
||||||
|
TRAVIS_BRANCH: ${{ env.BRANCH }}
|
||||||
|
DOCKER_ORG: ${{ secrets.DOCKER_ORG }}
|
||||||
|
|
||||||
|
test-roundcube:
|
||||||
|
name: Perform roundcube tests
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
needs:
|
||||||
|
- build
|
||||||
|
steps:
|
||||||
|
- uses: actions/checkout@v2
|
||||||
|
- name: Extract branch name
|
||||||
|
shell: bash
|
||||||
|
run: |
|
||||||
|
echo "BRANCH=${GITHUB_REF#refs/heads/}" >> $GITHUB_ENV
|
||||||
|
- name: Create folder for storing images
|
||||||
|
run: |
|
||||||
|
sudo mkdir -p /images
|
||||||
|
sudo chmod 777 /images
|
||||||
|
- name: Configure images folder for caching
|
||||||
|
uses: actions/cache@v2
|
||||||
|
with:
|
||||||
|
path: /images
|
||||||
|
key: ${{ env.BRANCH }}-${{ github.run_id }}-${{ github.run_number }}
|
||||||
|
- name: Load docker images
|
||||||
|
run: docker load -i /images/images.tar.gz
|
||||||
|
- name: Install python packages
|
||||||
|
run: python3 -m pip install -r tests/requirements.txt
|
||||||
|
- name: Copy all certs
|
||||||
|
run: sudo -- sh -c 'mkdir -p /mailu && cp -r tests/certs /mailu && chmod 600 /mailu/certs/*'
|
||||||
|
- name: Test roundcube
|
||||||
|
run: python tests/compose/test.py roundcube 1
|
||||||
|
env:
|
||||||
|
MAILU_VERSION: ${{ env.BRANCH }}
|
||||||
|
TRAVIS_BRANCH: ${{ env.BRANCH }}
|
||||||
|
DOCKER_ORG: ${{ secrets.DOCKER_ORG }}
|
||||||
|
|
||||||
|
test-webdav:
|
||||||
|
name: Perform webdav tests
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
needs:
|
||||||
|
- build
|
||||||
|
steps:
|
||||||
|
- uses: actions/checkout@v2
|
||||||
|
- name: Extract branch name
|
||||||
|
shell: bash
|
||||||
|
run: |
|
||||||
|
echo "BRANCH=${GITHUB_REF#refs/heads/}" >> $GITHUB_ENV
|
||||||
|
- name: Create folder for storing images
|
||||||
|
run: |
|
||||||
|
sudo mkdir -p /images
|
||||||
|
sudo chmod 777 /images
|
||||||
|
- name: Configure images folder for caching
|
||||||
|
uses: actions/cache@v2
|
||||||
|
with:
|
||||||
|
path: /images
|
||||||
|
key: ${{ env.BRANCH }}-${{ github.run_id }}-${{ github.run_number }}
|
||||||
|
- name: Load docker images
|
||||||
|
run: docker load -i /images/images.tar.gz
|
||||||
|
- name: Install python packages
|
||||||
|
run: python3 -m pip install -r tests/requirements.txt
|
||||||
|
- name: Copy all certs
|
||||||
|
run: sudo -- sh -c 'mkdir -p /mailu && cp -r tests/certs /mailu && chmod 600 /mailu/certs/*'
|
||||||
|
- name: Test webdav
|
||||||
|
run: python tests/compose/test.py webdav 1
|
||||||
|
env:
|
||||||
|
MAILU_VERSION: ${{ env.BRANCH }}
|
||||||
|
TRAVIS_BRANCH: ${{ env.BRANCH }}
|
||||||
|
DOCKER_ORG: ${{ secrets.DOCKER_ORG }}
|
||||||
|
|
||||||
|
deploy:
|
||||||
|
name: Deploy images
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
needs:
|
||||||
|
- build
|
||||||
|
- test-core
|
||||||
|
- test-fetchmail
|
||||||
|
- test-filters
|
||||||
|
- test-rainloop
|
||||||
|
- test-roundcube
|
||||||
|
- test-webdav
|
||||||
|
steps:
|
||||||
|
- uses: actions/checkout@v2
|
||||||
|
- name: Extract branch name
|
||||||
|
shell: bash
|
||||||
|
run: |
|
||||||
|
echo "BRANCH=${GITHUB_REF#refs/heads/}" >> $GITHUB_ENV
|
||||||
|
- name: Create folder for storing images
|
||||||
|
run: |
|
||||||
|
sudo mkdir -p /images
|
||||||
|
sudo chmod 777 /images
|
||||||
|
- name: Configure images folder for caching
|
||||||
|
# For staging we do not deploy images. So we do not have to load them from cache.
|
||||||
|
if: ${{ env.BRANCH != 'staging' }}
|
||||||
|
uses: actions/cache@v2
|
||||||
|
with:
|
||||||
|
path: /images
|
||||||
|
key: ${{ env.BRANCH }}-${{ github.run_id }}-${{ github.run_number }}
|
||||||
|
- name: Load docker images
|
||||||
|
if: ${{ env.BRANCH != 'staging' }}
|
||||||
|
run: docker load -i /images/images.tar.gz
|
||||||
|
- name: Deploy built docker images
|
||||||
|
env:
|
||||||
|
DOCKER_UN: ${{ secrets.Docker_Login }}
|
||||||
|
DOCKER_PW: ${{ secrets.Docker_Password }}
|
||||||
|
DOCKER_ORG: ${{ secrets.DOCKER_ORG }}
|
||||||
|
DOCKER_ORG_TESTS: ${{ secrets.DOCKER_ORG_TESTS }}
|
||||||
|
MAILU_VERSION: ${{ env.BRANCH }}
|
||||||
|
TRAVIS_BRANCH: ${{ env.BRANCH }}
|
||||||
|
TRAVIS_COMMIT_MESSAGE: ${{ github.event.head_commit.message }}
|
||||||
|
run: bash tests/deploy.sh
|
||||||
|
|
||||||
|
# This job is watched by bors. It only complets if building,testing and deploy worked.
|
||||||
|
ci-success:
|
||||||
|
name: CI-Done
|
||||||
|
#Returns true when none of the **previous** steps have failed or been canceled.
|
||||||
|
if: ${{ success() }}
|
||||||
|
needs:
|
||||||
|
- deploy
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
steps:
|
||||||
|
- name: CI/CD succeeded.
|
||||||
|
run: exit 0
|
@ -1,56 +0,0 @@
|
|||||||
branches:
|
|
||||||
only:
|
|
||||||
- staging
|
|
||||||
- testing
|
|
||||||
- '1.5'
|
|
||||||
- '1.6'
|
|
||||||
- '1.7'
|
|
||||||
- '1.8'
|
|
||||||
- master
|
|
||||||
# version tags, e.g. 1.7.1
|
|
||||||
- /^1\.[5678]\.\d+$/
|
|
||||||
# pre-releases, e.g. 1.8-pre1
|
|
||||||
- /^1\.8-pre\d+$/
|
|
||||||
# test branches, e.g. test-debian
|
|
||||||
- /^test-[\w\-\.]+$/
|
|
||||||
|
|
||||||
sudo: required
|
|
||||||
services: docker
|
|
||||||
addons:
|
|
||||||
apt:
|
|
||||||
packages:
|
|
||||||
- docker-ce
|
|
||||||
|
|
||||||
env:
|
|
||||||
- MAILU_VERSION=${TRAVIS_BRANCH////-}
|
|
||||||
|
|
||||||
language: python
|
|
||||||
python:
|
|
||||||
- "3.6"
|
|
||||||
install:
|
|
||||||
- pip install -r tests/requirements.txt
|
|
||||||
- sudo curl -L https://github.com/docker/compose/releases/download/1.23.0-rc3/docker-compose-`uname -s`-`uname -m` -o /usr/local/bin/docker-compose
|
|
||||||
- sudo chmod +x /usr/local/bin/docker-compose
|
|
||||||
|
|
||||||
before_script:
|
|
||||||
- docker-compose -v
|
|
||||||
- echo "$DOCKER_PW" | docker login --username $DOCKER_UN --password-stdin
|
|
||||||
- docker-compose -f tests/build.yml build
|
|
||||||
- sudo -- sh -c 'mkdir -p /mailu && cp -r tests/certs /mailu && chmod 600 /mailu/certs/*'
|
|
||||||
|
|
||||||
|
|
||||||
script:
|
|
||||||
# test.py, test name and timeout between start and tests.
|
|
||||||
- python tests/compose/test.py core 1
|
|
||||||
- python tests/compose/test.py fetchmail 1
|
|
||||||
- travis_wait python tests/compose/test.py filters 10
|
|
||||||
- python tests/compose/test.py rainloop 1
|
|
||||||
- python tests/compose/test.py roundcube 1
|
|
||||||
- python tests/compose/test.py webdav 1
|
|
||||||
|
|
||||||
deploy:
|
|
||||||
provider: script
|
|
||||||
script: bash tests/deploy.sh
|
|
||||||
on:
|
|
||||||
all_branches: true
|
|
||||||
condition: -n $DOCKER_UN
|
|
@ -1,3 +1,4 @@
|
|||||||
status = [
|
status = [
|
||||||
"continuous-integration/travis-ci/push"
|
"CI-Done"
|
||||||
]
|
]
|
||||||
|
|
||||||
|
@ -0,0 +1,5 @@
|
|||||||
|
echo "Creating user required for next test ..."
|
||||||
|
# Should not fail and update the password; update mode
|
||||||
|
docker-compose -f tests/compose/filters/docker-compose.yml exec -T admin flask mailu admin admin mailu.io 'password' --mode=update || exit 1
|
||||||
|
docker-compose -f tests/compose/filters/docker-compose.yml exec -T admin flask mailu user user mailu.io 'password' || exit 1
|
||||||
|
echo "User created successfully"
|
@ -0,0 +1 @@
|
|||||||
|
Add a credential cache to speedup authentication requests.
|
@ -0,0 +1 @@
|
|||||||
|
Add documentation for Traefik 2 in Reverse Proxy
|
@ -0,0 +1 @@
|
|||||||
|
Support configuring lz4 and zstd compression for dovecot.
|
@ -0,0 +1,2 @@
|
|||||||
|
Fix CVE-2021-23240, CVE-2021-3156 and CVE-2021-23239 for postgresql
|
||||||
|
by force-upgrading sudo.
|
@ -0,0 +1 @@
|
|||||||
|
Switched from Travis to Github actions for CI/CD. Improved CI workflow to perform all tests in parallel.
|
@ -0,0 +1 @@
|
|||||||
|
Make CI tests run in parallel.
|
@ -0,0 +1 @@
|
|||||||
|
Fix roundcube environment configuration for databases
|
@ -0,0 +1 @@
|
|||||||
|
Antispam service now uses a static hostname. Rspamd history is only retained when the service has a fixed hostname.
|
@ -0,0 +1 @@
|
|||||||
|
Add instructions on how to create DNS records for email client auto-configuration (RFC6186 style)
|
@ -0,0 +1 @@
|
|||||||
|
Centralize the authentication of webmails behind the admin interface
|
@ -0,0 +1,31 @@
|
|||||||
|
<?php
|
||||||
|
|
||||||
|
$_ENV['RAINLOOP_INCLUDE_AS_API'] = true;
|
||||||
|
if (!defined('APP_VERSION')) {
|
||||||
|
$version = file_get_contents('/data/VERSION');
|
||||||
|
if ($version) {
|
||||||
|
define('APP_VERSION', $version);
|
||||||
|
define('APP_INDEX_ROOT_FILE', __FILE__);
|
||||||
|
define('APP_INDEX_ROOT_PATH', str_replace('\\', '/', rtrim(dirname(__FILE__), '\\/').'/'));
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
if (file_exists(APP_INDEX_ROOT_PATH.'rainloop/v/'.APP_VERSION.'/include.php')) {
|
||||||
|
include APP_INDEX_ROOT_PATH.'rainloop/v/'.APP_VERSION.'/include.php';
|
||||||
|
} else {
|
||||||
|
echo '[105] Missing version directory';
|
||||||
|
exit(105);
|
||||||
|
}
|
||||||
|
|
||||||
|
// Retrieve email and password
|
||||||
|
if (in_array('HTTP_X_REMOTE_USER', $_SERVER) && in_array('HTTP_X_REMOTE_USER_TOKEN', $_SERVER)) {
|
||||||
|
$email = $_SERVER['HTTP_X_REMOTE_USER'];
|
||||||
|
$password = $_SERVER['HTTP_X_REMOTE_USER_TOKEN'];
|
||||||
|
$ssoHash = \RainLoop\Api::GetUserSsoHash($email, $password);
|
||||||
|
|
||||||
|
// redirect to webmail sso url
|
||||||
|
header('Location: index.php?sso&hash='.$ssoHash);
|
||||||
|
}
|
||||||
|
else {
|
||||||
|
header('HTTP/1.0 403 Forbidden');
|
||||||
|
}
|
@ -0,0 +1,59 @@
|
|||||||
|
<?php
|
||||||
|
|
||||||
|
class mailu extends rcube_plugin
|
||||||
|
{
|
||||||
|
|
||||||
|
function init()
|
||||||
|
{
|
||||||
|
$this->add_hook('startup', array($this, 'startup'));
|
||||||
|
$this->add_hook('authenticate', array($this, 'authenticate'));
|
||||||
|
$this->add_hook('login_after', array($this, 'login'));
|
||||||
|
$this->add_hook('login_failed', array($this, 'login_failed'));
|
||||||
|
$this->add_hook('logout_after', array($this, 'logout'));
|
||||||
|
}
|
||||||
|
|
||||||
|
function startup($args)
|
||||||
|
{
|
||||||
|
if (empty($_SESSION['user_id'])) {
|
||||||
|
$args['action'] = 'login';
|
||||||
|
}
|
||||||
|
|
||||||
|
return $args;
|
||||||
|
}
|
||||||
|
|
||||||
|
function authenticate($args)
|
||||||
|
{
|
||||||
|
if (!in_array('HTTP_X_REMOTE_USER', $_SERVER) || !in_array('HTTP_X_REMOTE_USER_TOKEN', $_SERVER)) {
|
||||||
|
header('HTTP/1.0 403 Forbidden');
|
||||||
|
die();
|
||||||
|
}
|
||||||
|
$args['user'] = $_SERVER['HTTP_X_REMOTE_USER'];
|
||||||
|
$args['pass'] = $_SERVER['HTTP_X_REMOTE_USER_TOKEN'];
|
||||||
|
|
||||||
|
$args['cookiecheck'] = false;
|
||||||
|
$args['valid'] = true;
|
||||||
|
|
||||||
|
return $args;
|
||||||
|
}
|
||||||
|
|
||||||
|
function logout($args) {
|
||||||
|
// Redirect to global SSO logout path.
|
||||||
|
$this->load_config();
|
||||||
|
|
||||||
|
$sso_logout_url = rcmail::get_instance()->config->get('sso_logout_url');
|
||||||
|
header("Location: " . $sso_logout_url, true);
|
||||||
|
exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
function login($args)
|
||||||
|
{
|
||||||
|
header('Location: index.php');
|
||||||
|
exit();
|
||||||
|
}
|
||||||
|
function login_failed($args)
|
||||||
|
{
|
||||||
|
header('Location: sso.php');
|
||||||
|
exit();
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
Loading…
Reference in New Issue