add_hook('startup', array($this, 'startup')); $this->add_hook('authenticate', array($this, 'authenticate')); $this->add_hook('login_after', array($this, 'login')); $this->add_hook('login_failed', array($this, 'login_failed')); $this->add_hook('logout_after', array($this, 'logout')); } function startup($args) { if (empty($_SESSION['user_id'])) { $args['action'] = 'login'; } $ua = $_SERVER['HTTP_USER_AGENT']; $ra = $_SERVER['REMOTE_ADDR']; if ($ua == 'health' and ($ra == '127.0.0.1' or $ra == '::1')) { print('OK'); exit(); } return $args; } function authenticate($args) { if (!array_key_exists('HTTP_X_REMOTE_USER', $_SERVER) or !array_key_exists('HTTP_X_REMOTE_USER_TOKEN', $_SERVER)) { if ($_SERVER['PHP_SELF'] == '/sso.php') { header('HTTP/1.0 403 Forbidden'); print('mailu sso failure'); } else { header('Location: sso.php'); } exit(); } $args['user'] = $_SERVER['HTTP_X_REMOTE_USER']; $args['pass'] = $_SERVER['HTTP_X_REMOTE_USER_TOKEN']; $args['cookiecheck'] = false; $args['valid'] = true; return $args; } // Redirect to global SSO logout path. function logout($args) { $this->load_config(); $sso_logout_url = rcmail::get_instance()->config->get('sso_logout_url'); header('Location: ' . $sso_logout_url, true); exit(); } function login($args) { header('Location: index.php'); exit(); } function login_failed($args) { header('Location: sso.php'); exit(); } }