time to re-code the auth server from scratch

[ga4php.git] / archive / authserver_v1.0 / www / user_actions.php

diff --git a/archive/authserver_v1.0/www/user_actions.php b/archive/authserver_v1.0/www/user_actions.php
new file mode 100644 (file)
index 0000000..28852cf
--- /dev/null
+++ b/archive/authserver_v1.0/www/user_actions.php
@@ -0,0 +1,52 @@
+<?php 
+require_once("../lib/authClient.php");
+
+$myAC = new GAAuthClient();
+
+
+$loggedin = false;
+session_start();
+
+if(isset($_SESSION["user_loggedin"])) if($_SESSION["user_loggedin"]) {
+       $loggedin = true;
+} else {
+       $loggedin = false;
+}
+
+if(isset($_REQUEST["action"])) {
+       error_log("action set: ".$_REQUEST["action"]);
+       switch($_REQUEST["action"]) {
+               case "actuallygettoken":
+                       $otkid = $_REQUEST["otkid"];
+                       $username = $_REQUEST["username"];
+                       error_log("requesting otk, $otk");
+                       $otk_img = $myAC->getOtkPng($username,$otkid);
+                       header("Content-type: image/png");
+                       echo $otk_img;
+                       exit(0);
+                       break;
+               case "login":
+                       error_log("being login");
+                       $username = $_REQUEST["username"];
+                       $token = $_REQUEST["tokencode"];
+                       
+                       if($myAC->authUserToken($username, $token)) {
+                               
+                               $_SESSION["user_loggedin"] = true;
+                               $_SESSION["username"] = $username;
+                               header("Location: index.php");
+                       } else {
+                               error_log("login failed, $username, $token");
+                               header("Location: index.php?error=".urlencode("Login Failed"));
+                       }
+                       break;
+               case "logout":
+                       $_SESSION["user_loggedin"] = false;
+                       $_SESSION["username"] = "";
+                       header("Location: index.php?message=".urlencode("logged out"));
+                       exit(0);
+                       break;
+                       
+       }
+}
+?>