OpenidEid.php

Go to the documentation of this file.

<?php
namespace TYPO3\CMS\Openid;

use TYPO3\CMS\Core\Utility\GeneralUtility;
use TYPO3\CMS\Core\Utility\HttpUtility;

class OpenidEid {

    public function main() {
        // Due to the nature of OpenID (redrections, etc) we need to force user
        // session fetching if there is no session around. This ensures that
        // our service is called even if there is no login data in the request.
        // Inside the service we will process OpenID response and authenticate
        // the user.
        $GLOBALS['TYPO3_CONF_VARS']['SVCONF']['auth']['FE_fetchUserIfNoSession'] = TRUE;
        // Initialize Frontend user
        \TYPO3\CMS\Frontend\Utility\EidUtility::initFeUser();
        // Redirect to the original location in any case (authenticated or not)
        @ob_end_clean();
        if ($this->getSignature(GeneralUtility::_GP('tx_openid_location')) === GeneralUtility::_GP('tx_openid_location_signature')) {
            HttpUtility::redirect(GeneralUtility::_GP('tx_openid_location'), HttpUtility::HTTP_STATUS_303);
        }
    }

    protected function getSignature($parameter) {
        return GeneralUtility::hmac($parameter, 'openid');
    }
}