4- Installer Envole
-cd /usr/share
-mkdir -p envole
-cd /usr/share/envole
-mkdir -p docker
-cd /usr/share/envole/docker
+cd /root
+mkdir git
+cd /root/git
git clone https://forge.cadoles.com/Envole/envole.git
cd /root/git/envole
make install
diff --git a/src/envole-1.0/doc/etude.md b/docker/doc/etude.md
similarity index 98%
rename from src/envole-1.0/doc/etude.md
rename to docker/doc/etude.md
index bc047ef..e0aa9d3 100644
--- a/src/envole-1.0/doc/etude.md
+++ b/docker/doc/etude.md
@@ -124,11 +124,9 @@ apt-get install docker-ce docker-ce-cli containerd.io docker-compose-plugin dock
4- Installer Envole
```
-cd /usr/share
-mkdir -p envole
-cd /usr/share/envole
-mkdir -p docker
-cd /usr/share/envole/docker
+cd /root
+mkdir git
+cd /root/git
git clone https://forge.cadoles.com/Envole/envole.git
cd /root/git/envole
make install
diff --git a/src/envole-1.0/doc/etude.pdf b/docker/doc/etude.pdf
similarity index 99%
rename from src/envole-1.0/doc/etude.pdf
rename to docker/doc/etude.pdf
index 6f214e3..bea1606 100644
Binary files a/src/envole-1.0/doc/etude.pdf and b/docker/doc/etude.pdf differ
diff --git a/src/envole-1.0/docker-compose.yml b/docker/docker-compose.yml
similarity index 100%
rename from src/envole-1.0/docker-compose.yml
rename to docker/docker-compose.yml
diff --git a/src/envole-1.0/env/.env b/docker/env/.env
similarity index 100%
rename from src/envole-1.0/env/.env
rename to docker/env/.env
diff --git a/src/envole-1.0/env/.env.zapp.keycloak b/docker/env/.env.zapp.keycloak
similarity index 100%
rename from src/envole-1.0/env/.env.zapp.keycloak
rename to docker/env/.env.zapp.keycloak
diff --git a/src/envole-1.0/env/.env.zapp.mariadb b/docker/env/.env.zapp.mariadb
similarity index 100%
rename from src/envole-1.0/env/.env.zapp.mariadb
rename to docker/env/.env.zapp.mariadb
diff --git a/src/envole-1.0/env/.env.zapp.nextcloud b/docker/env/.env.zapp.nextcloud
similarity index 100%
rename from src/envole-1.0/env/.env.zapp.nextcloud
rename to docker/env/.env.zapp.nextcloud
diff --git a/src/envole-1.0/env/.env.zapp.ninegate b/docker/env/.env.zapp.ninegate
similarity index 100%
rename from src/envole-1.0/env/.env.zapp.ninegate
rename to docker/env/.env.zapp.ninegate
diff --git a/src/envole-1.0/env/.env.zapp.openldap b/docker/env/.env.zapp.openldap
similarity index 100%
rename from src/envole-1.0/env/.env.zapp.openldap
rename to docker/env/.env.zapp.openldap
diff --git a/src/envole-1.0/env/.env.zapp.phpldapadmin b/docker/env/.env.zapp.phpldapadmin
similarity index 100%
rename from src/envole-1.0/env/.env.zapp.phpldapadmin
rename to docker/env/.env.zapp.phpldapadmin
diff --git a/src/envole-1.0/envole.sh b/docker/envole.sh
similarity index 100%
rename from src/envole-1.0/envole.sh
rename to docker/envole.sh
diff --git a/src/envole-1.0/misc/nineapache7/containers/nineapache/Dockerfile b/docker/misc/nineapache7/containers/nineapache/Dockerfile
similarity index 100%
rename from src/envole-1.0/misc/nineapache7/containers/nineapache/Dockerfile
rename to docker/misc/nineapache7/containers/nineapache/Dockerfile
diff --git a/src/envole-1.0/misc/nineapache7/containers/nineapache/apache.conf b/docker/misc/nineapache7/containers/nineapache/apache.conf
similarity index 100%
rename from src/envole-1.0/misc/nineapache7/containers/nineapache/apache.conf
rename to docker/misc/nineapache7/containers/nineapache/apache.conf
diff --git a/src/envole-1.0/misc/nineapache7/containers/nineapache/apache2.sh b/docker/misc/nineapache7/containers/nineapache/apache2.sh
similarity index 100%
rename from src/envole-1.0/misc/nineapache7/containers/nineapache/apache2.sh
rename to docker/misc/nineapache7/containers/nineapache/apache2.sh
diff --git a/src/envole-1.0/misc/nineapache7/containers/nineapache/index.php b/docker/misc/nineapache7/containers/nineapache/index.php
similarity index 100%
rename from src/envole-1.0/misc/nineapache7/containers/nineapache/index.php
rename to docker/misc/nineapache7/containers/nineapache/index.php
diff --git a/src/envole-1.0/misc/nineapache7/containers/nineapache/php.local.ini b/docker/misc/nineapache7/containers/nineapache/php.local.ini
similarity index 100%
rename from src/envole-1.0/misc/nineapache7/containers/nineapache/php.local.ini
rename to docker/misc/nineapache7/containers/nineapache/php.local.ini
diff --git a/src/envole-1.0/misc/nineapache7/containers/nineapache/ssl.conf b/docker/misc/nineapache7/containers/nineapache/ssl.conf
similarity index 100%
rename from src/envole-1.0/misc/nineapache7/containers/nineapache/ssl.conf
rename to docker/misc/nineapache7/containers/nineapache/ssl.conf
diff --git a/src/envole-1.0/misc/nineapache7/docker-compose.yml b/docker/misc/nineapache7/docker-compose.yml
similarity index 100%
rename from src/envole-1.0/misc/nineapache7/docker-compose.yml
rename to docker/misc/nineapache7/docker-compose.yml
diff --git a/src/envole-1.0/misc/nineapache8/containers/nineapache/Dockerfile b/docker/misc/nineapache8/containers/nineapache/Dockerfile
similarity index 100%
rename from src/envole-1.0/misc/nineapache8/containers/nineapache/Dockerfile
rename to docker/misc/nineapache8/containers/nineapache/Dockerfile
diff --git a/src/envole-1.0/misc/nineapache8/containers/nineapache/apache.conf b/docker/misc/nineapache8/containers/nineapache/apache.conf
similarity index 100%
rename from src/envole-1.0/misc/nineapache8/containers/nineapache/apache.conf
rename to docker/misc/nineapache8/containers/nineapache/apache.conf
diff --git a/src/envole-1.0/misc/nineapache8/containers/nineapache/apache2.sh b/docker/misc/nineapache8/containers/nineapache/apache2.sh
similarity index 100%
rename from src/envole-1.0/misc/nineapache8/containers/nineapache/apache2.sh
rename to docker/misc/nineapache8/containers/nineapache/apache2.sh
diff --git a/src/envole-1.0/misc/nineapache8/containers/nineapache/index.php b/docker/misc/nineapache8/containers/nineapache/index.php
similarity index 100%
rename from src/envole-1.0/misc/nineapache8/containers/nineapache/index.php
rename to docker/misc/nineapache8/containers/nineapache/index.php
diff --git a/src/envole-1.0/misc/nineapache8/containers/nineapache/php.local.ini b/docker/misc/nineapache8/containers/nineapache/php.local.ini
similarity index 100%
rename from src/envole-1.0/misc/nineapache8/containers/nineapache/php.local.ini
rename to docker/misc/nineapache8/containers/nineapache/php.local.ini
diff --git a/src/envole-1.0/misc/nineapache8/containers/nineapache/ssl.conf b/docker/misc/nineapache8/containers/nineapache/ssl.conf
similarity index 100%
rename from src/envole-1.0/misc/nineapache8/containers/nineapache/ssl.conf
rename to docker/misc/nineapache8/containers/nineapache/ssl.conf
diff --git a/src/envole-1.0/misc/nineapache8/docker-compose.yml b/docker/misc/nineapache8/docker-compose.yml
similarity index 100%
rename from src/envole-1.0/misc/nineapache8/docker-compose.yml
rename to docker/misc/nineapache8/docker-compose.yml
diff --git a/src/envole-1.0/misc/tools/bash_loading_animations.sh b/docker/misc/tools/bash_loading_animations.sh
similarity index 100%
rename from src/envole-1.0/misc/tools/bash_loading_animations.sh
rename to docker/misc/tools/bash_loading_animations.sh
diff --git a/src/envole-1.0/misc/tools/cadoles_theme.css b/docker/misc/tools/cadoles_theme.css
similarity index 100%
rename from src/envole-1.0/misc/tools/cadoles_theme.css
rename to docker/misc/tools/cadoles_theme.css
diff --git a/src/envole-1.0/misc/tools/e-ihm.sh b/docker/misc/tools/e-ihm.sh
similarity index 100%
rename from src/envole-1.0/misc/tools/e-ihm.sh
rename to docker/misc/tools/e-ihm.sh
diff --git a/src/envole-1.0/misc/tools/fonts/Roboto/LICENSE.txt b/docker/misc/tools/fonts/Roboto/LICENSE.txt
similarity index 100%
rename from src/envole-1.0/misc/tools/fonts/Roboto/LICENSE.txt
rename to docker/misc/tools/fonts/Roboto/LICENSE.txt
diff --git a/src/envole-1.0/misc/tools/fonts/Roboto/Roboto-Black.ttf b/docker/misc/tools/fonts/Roboto/Roboto-Black.ttf
similarity index 100%
rename from src/envole-1.0/misc/tools/fonts/Roboto/Roboto-Black.ttf
rename to docker/misc/tools/fonts/Roboto/Roboto-Black.ttf
diff --git a/src/envole-1.0/misc/tools/fonts/Roboto/Roboto-BlackItalic.ttf b/docker/misc/tools/fonts/Roboto/Roboto-BlackItalic.ttf
similarity index 100%
rename from src/envole-1.0/misc/tools/fonts/Roboto/Roboto-BlackItalic.ttf
rename to docker/misc/tools/fonts/Roboto/Roboto-BlackItalic.ttf
diff --git a/src/envole-1.0/misc/tools/fonts/Roboto/Roboto-Bold.ttf b/docker/misc/tools/fonts/Roboto/Roboto-Bold.ttf
similarity index 100%
rename from src/envole-1.0/misc/tools/fonts/Roboto/Roboto-Bold.ttf
rename to docker/misc/tools/fonts/Roboto/Roboto-Bold.ttf
diff --git a/src/envole-1.0/misc/tools/fonts/Roboto/Roboto-BoldItalic.ttf b/docker/misc/tools/fonts/Roboto/Roboto-BoldItalic.ttf
similarity index 100%
rename from src/envole-1.0/misc/tools/fonts/Roboto/Roboto-BoldItalic.ttf
rename to docker/misc/tools/fonts/Roboto/Roboto-BoldItalic.ttf
diff --git a/src/envole-1.0/misc/tools/fonts/Roboto/Roboto-Italic.ttf b/docker/misc/tools/fonts/Roboto/Roboto-Italic.ttf
similarity index 100%
rename from src/envole-1.0/misc/tools/fonts/Roboto/Roboto-Italic.ttf
rename to docker/misc/tools/fonts/Roboto/Roboto-Italic.ttf
diff --git a/src/envole-1.0/misc/tools/fonts/Roboto/Roboto-Light.ttf b/docker/misc/tools/fonts/Roboto/Roboto-Light.ttf
similarity index 100%
rename from src/envole-1.0/misc/tools/fonts/Roboto/Roboto-Light.ttf
rename to docker/misc/tools/fonts/Roboto/Roboto-Light.ttf
diff --git a/src/envole-1.0/misc/tools/fonts/Roboto/Roboto-LightItalic.ttf b/docker/misc/tools/fonts/Roboto/Roboto-LightItalic.ttf
similarity index 100%
rename from src/envole-1.0/misc/tools/fonts/Roboto/Roboto-LightItalic.ttf
rename to docker/misc/tools/fonts/Roboto/Roboto-LightItalic.ttf
diff --git a/src/envole-1.0/misc/tools/fonts/Roboto/Roboto-Medium.ttf b/docker/misc/tools/fonts/Roboto/Roboto-Medium.ttf
similarity index 100%
rename from src/envole-1.0/misc/tools/fonts/Roboto/Roboto-Medium.ttf
rename to docker/misc/tools/fonts/Roboto/Roboto-Medium.ttf
diff --git a/src/envole-1.0/misc/tools/fonts/Roboto/Roboto-MediumItalic.ttf b/docker/misc/tools/fonts/Roboto/Roboto-MediumItalic.ttf
similarity index 100%
rename from src/envole-1.0/misc/tools/fonts/Roboto/Roboto-MediumItalic.ttf
rename to docker/misc/tools/fonts/Roboto/Roboto-MediumItalic.ttf
diff --git a/src/envole-1.0/misc/tools/fonts/Roboto/Roboto-Regular.ttf b/docker/misc/tools/fonts/Roboto/Roboto-Regular.ttf
similarity index 100%
rename from src/envole-1.0/misc/tools/fonts/Roboto/Roboto-Regular.ttf
rename to docker/misc/tools/fonts/Roboto/Roboto-Regular.ttf
diff --git a/src/envole-1.0/misc/tools/fonts/Roboto/Roboto-Thin.ttf b/docker/misc/tools/fonts/Roboto/Roboto-Thin.ttf
similarity index 100%
rename from src/envole-1.0/misc/tools/fonts/Roboto/Roboto-Thin.ttf
rename to docker/misc/tools/fonts/Roboto/Roboto-Thin.ttf
diff --git a/src/envole-1.0/misc/tools/fonts/Roboto/Roboto-ThinItalic.ttf b/docker/misc/tools/fonts/Roboto/Roboto-ThinItalic.ttf
similarity index 100%
rename from src/envole-1.0/misc/tools/fonts/Roboto/Roboto-ThinItalic.ttf
rename to docker/misc/tools/fonts/Roboto/Roboto-ThinItalic.ttf
diff --git a/src/envole-1.0/misc/tools/logo.png b/docker/misc/tools/logo.png
similarity index 100%
rename from src/envole-1.0/misc/tools/logo.png
rename to docker/misc/tools/logo.png
diff --git a/src/envole-1.0/volume/keycloak/data/keycloak-protocol-cas-16.1.1.jar b/docker/volume/keycloak/data/keycloak-protocol-cas-16.1.1.jar
similarity index 100%
rename from src/envole-1.0/volume/keycloak/data/keycloak-protocol-cas-16.1.1.jar
rename to docker/volume/keycloak/data/keycloak-protocol-cas-16.1.1.jar
diff --git a/src/envole-1.0/volume/keycloak/envole/realm-export.json b/docker/volume/keycloak/envole/realm-export.json
similarity index 100%
rename from src/envole-1.0/volume/keycloak/envole/realm-export.json
rename to docker/volume/keycloak/envole/realm-export.json
diff --git a/src/envole-1.0/volume/keycloak/envole/server.crt.pem b/docker/volume/keycloak/envole/server.crt.pem
similarity index 100%
rename from src/envole-1.0/volume/keycloak/envole/server.crt.pem
rename to docker/volume/keycloak/envole/server.crt.pem
diff --git a/src/envole-1.0/volume/keycloak/envole/server.key.pem b/docker/volume/keycloak/envole/server.key.pem
similarity index 100%
rename from src/envole-1.0/volume/keycloak/envole/server.key.pem
rename to docker/volume/keycloak/envole/server.key.pem
diff --git a/src/envole-1.0/volume/mariadb/envole/check.sh b/docker/volume/mariadb/envole/check.sh
similarity index 100%
rename from src/envole-1.0/volume/mariadb/envole/check.sh
rename to docker/volume/mariadb/envole/check.sh
diff --git a/src/envole-1.0/volume/mariadb/envole/delete.sh b/docker/volume/mariadb/envole/delete.sh
similarity index 100%
rename from src/envole-1.0/volume/mariadb/envole/delete.sh
rename to docker/volume/mariadb/envole/delete.sh
diff --git a/src/envole-1.0/volume/mariadb/envole/init.sh b/docker/volume/mariadb/envole/init.sh
similarity index 100%
rename from src/envole-1.0/volume/mariadb/envole/init.sh
rename to docker/volume/mariadb/envole/init.sh
diff --git a/src/envole-1.0/volume/mariadb/envole/keycloak.sql b/docker/volume/mariadb/envole/keycloak.sql
similarity index 100%
rename from src/envole-1.0/volume/mariadb/envole/keycloak.sql
rename to docker/volume/mariadb/envole/keycloak.sql
diff --git a/src/envole-1.0/volume/mariadb/envole/nextcloud.sql b/docker/volume/mariadb/envole/nextcloud.sql
similarity index 100%
rename from src/envole-1.0/volume/mariadb/envole/nextcloud.sql
rename to docker/volume/mariadb/envole/nextcloud.sql
diff --git a/src/envole-1.0/volume/mariadb/envole/ninegate.sql b/docker/volume/mariadb/envole/ninegate.sql
similarity index 100%
rename from src/envole-1.0/volume/mariadb/envole/ninegate.sql
rename to docker/volume/mariadb/envole/ninegate.sql
diff --git a/docker/volume/nextcloud/envole/app/user_cas/CHANGELOG.md b/docker/volume/nextcloud/envole/app/user_cas/CHANGELOG.md
new file mode 100644
index 0000000..256d1e8
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/CHANGELOG.md
@@ -0,0 +1,260 @@
+CHANGELOG
+=========
+
+Version 1.11.0
+--------------
+
+* Add compatibility up to Nextcloud 25 with PHP 8.1
+* Bumps phpCAS library to 1.6.1
+
+
+Version 1.10.0
+--------------
+
+* Add compatibility for owncloud 10.10 and up to Nextcloud 24 with PHP 8.0
+* Bumps phpCAS library to 1.5.0
+
+
+Version 1.9.0
+-------------
+
+* Add setting to allow json-decode for mapped group attribute (see: Issue [#51](https://github.com/felixrupp/user_cas/issues/51))
+* Add mapping for user-id attribute (see: Issue [#70](https://github.com/felixrupp/user_cas/issues/70))
+* Add setting for adding default group, based on the user’s name and an optional prefix (see: Issue [75](https://github.com/felixrupp/user_cas/issues/75))
+* Add setting to protect public share links with CAS (see: Issue [93](https://github.com/felixrupp/user_cas/issues/93))
+* Possibly fixes WEBDAV problems (see: Issues [57](https://github.com/felixrupp/user_cas/issues/57) and [94](https://github.com/felixrupp/user_cas/issues/94))
+* Bumps phpCAS library to 1.3.9
+
+
+Version 1.8.7
+-------------
+
+* Raises compatibility to ownCloud 10.6 and Nextcloud 20
+* Changes the phpCAS Version to specify 1.3.5 or higher (was >= 1.3 before)
+
+
+Version 1.8.6
+-------------
+
+* Raises compatibility to ownCloud 10.5 and Nextcloud 19
+* Fixes a static file path to the CAS login button logo on ownCloud
+
+
+Version 1.8.5
+-------------
+
+* Improves SingleSignout to only remove CAS authtokens
+* Fixes Nextcloud login-flow bug (see Issue [#69](https://github.com/felixrupp/user_cas/issues/69)) - thanks to [@pingou2712](https://github.com/pingou2712>)
+
+
+Version 1.8.4
+-------------
+
+* Adds option to disable SingleSignout requests to the ownCloud/Nextcloud instance in admin panel
+* Adds missing translations for options and readme entries
+
+
+Version 1.8.3
+-------------
+
+* Fixes SingleSignOut feature - thanks to [@pingou2712](https://github.com/pingou2712>)
+* Fixes wrong link to Nextcloud AppStore in Readme - thanks to [@Emi94](https://github.com/Emi94)
+
+
+Version 1.8.2
+-------------
+
+* Raises compatibility to ownCloud 10.4
+* Adds section in README to describe how to disable code integrity checks on dev setups
+
+
+Version 1.8.1
+-------------
+
+* Raises compatibility to Nextcloud 18
+
+* Fixes Nextcloud 18 WebDAV bug - thanks to [@landryb](https://github.com/landryb)
+* Fixes internal ip checks for *»Don’t use Multi-Factor-Authentication on these client-IPs«*
+* Fixes typo in acceptedStrength \[ECAS\]
+
+
+Version 1.8.0
+-------------
+
+* Drops compatibility for Nextcloud 13
+* Raises compatibility to Nextcloud 17
+
+* Fixes a redirect error with enabled enforce-authentication and non-authorized users
+* Fixes a security bug, where a user, not authorized by any groups, still had the possibility to gain access to a read only account
+* Fixes deprecated quota handling: all quotas should now be handled correctly (even 'none' and 'default')
+
+* Adds option to overwrite the CAS login button’s label
+* Adds option to keep CAS-ticket-ids in URL (see [Issue #17](https://github.com/felixrupp/user_cas/issues/17))
+* Adds feature to use CAS Single-Logout
+
+* Bumps phpCAS library to 1.3.8
+
+
+Version 1.7.4
+-------------
+
+* Fixes CAS logout service backlink
+
+
+Version 1.7.3
+-------------
+
+* Raises compatibility to ownCloud 10.3
+* Adds support for cas server path "/" - thanks to [@dattn](https://github.com/dattn)
+
+
+Version 1.7.2
+-------------
+
+* Fixes double synchronisation of DisplayName, causing overlays in DisplayName on first login
+* Fixes problems with local database users being converted to user_cas backend by accident
+* Fixes logout handling to not need a list of Logout Servers anymore
+
+* Adds error handling when CAS basic config is missing or truncated
+* Adds the license file for AGPL 3.0 or later
+* Adds ActiveDirectory import OCC command, let’s you import specific LDAP users as user_cas users to your ownCloud/Nextcloud instance
+* Adds options for group name filter and group umlaut replacement in "Groups" panel
+
+
+Version 1.7.1
+-------------
+
+* Raises compatibility to ownCloud 10.2 and Nextcloud 16
+* Fixes Create-/UpdateCommand and synchronisation with the user_cas-Backend
+* Fixes user autocreation process and synchronisation with the user_cas-Backend
+* Fixes Nextcloud detection algorithm, it does not depend on a user-editable string anymore
+
+
+Version 1.7.0
+-------------
+
+* Adds OCC commands to create and update CAS users directly via command line
+* Adds user quota mapping input in Settings Panel - user quota overwrites group quotas
+* Adds a filter to disable multi-factor-authentication for internal IP addresses on ECAS instances
+* Raises the ECAS client-version to 2.1.3
+* Fixes postLogin signals signature
+
+
+Version 1.6.2
+-------------
+* Changes default value of the autocreate option to "on"
+* Fixes postLogin signals signature
+
+
+Version 1.6.1
+-------------
+* Fixes 5min logout bug on Nextcloud
+* Unifies log levels in LoggingService
+* Moves hook registration to a higher level to ensure working postLoginHook
+
+
+Version 1.6.0
+-------------
+* Adds compatibility for ownCloud 10.1 and Nextcloud 15
+* Fixes app initialization to minimize incompatibilities with other apps
+* Removes hard app stopping when no phpCAS library is found
+* Updates jasig/phpcas to 1.3.6
+
+
+Version 1.5.6
+-------------
+* Changes most of the INFO log writes to DEBUG
+
+
+Version 1.5.5
+-------------
+* Adds Support for ownCloud 10.0.10 and Nextcloud 14.0.0
+
+
+Version 1.5.4
+-------------
+* Fixes Nextcloud log flood bug
+* Fixes documentation links in info.xml
+* Fixes ownCloud/Nextcloud Session Token-Password bug
+* Fixes enforce authentication issues with Database Backend
+* Fixes enforce authentication issues with public gallery interface
+
+
+* Adds support for ownCloud until version 10.0.9 and Nextcloud until version 13.0.6
+* Adds documentation for basic installation via release archive
+
+
+* Removes hardcoded PHP version requirements
+
+
+Version 1.5.3
+-------------
+* Hotfixes the IP address range separator in the exclude specific IPs field and changes it from "/" to "-"
+* Fixes ownCloud 10.0.8 bug and raises compatibility to 10.0.8
+
+Version 1.5.2
+-------------
+* Add settings field to exclude specific Ips and/or IP-ranges from force login
+* Nextcloud: Move settings panel to section "Security" (was in "Additional" before)
+* Remove the signature from repo (if you need a signed version, please use one of the release packages or download from ownCloud Market/Nextcloud AppStore)
+
+Version 1.5.1
+-------------
+* Hotfixes wrong links in 403 error page if enforce authentication was on
+* Hotfixes wrong translation in 403 error page for ECAS instances
+* Removes return type hints not compatible with PHP 5.6
+* Adds functionality to provide more than one mapping field to ownCloud userdata fields (e.g. DisplayName can now be concatenated by a firstname and a lastname CAS-field)
+
+Version 1.5.0
+-------------
+* Drop ownCloud 9 support
+* Major source code optimizations, fix several errors associated with redirection after login
+* Add ECAS support
+* Add authorization feature via groups
+* Add error views for when not authorized or when the CAS-Client throws errors
+* Support for ownCloud oauth2 App, it’s now possible to authenticate a desktop or mobile phone client with CAS via oauth2 provider
+
+Version 1.4.9
+-------------
+* Hotfixes the autocreate bug, mentioned in Issue [#13](https://github.com/felixrupp/user_cas/issues/13).
+
+Version 1.4.8
+-------------
+* Hotfixes the current 1.4 version to fix a major bug preventing the OCS-Api to work, while the user_cas app is installed and enabled.
+
+Version 1.4.7
+-------------
+* Hotfixes the min version and **lowers it to 9.1.6**
+
+Version 1.4.6
+-------------
+* Hotfix for app initialization
+
+Version 1.4.5
+-------------
+* Fix for autocreate bug
+* Re-add phpcas path to use custom phpcas library, if wanted
+* Remove GIT submodule for jasig phpcas
+* Add composer dependencies instead
+* **Raise minimum Owncloud Version to 10.0**
+
+Version 1.4.2, 1.4.3, 1.4.4
+---------------------------
+* Hotfixes for logging
+
+Version 1.4.1
+-------------
+* Hotfix for group and protected group handling
+
+Version 1.4.0
+-------------
+* Completely rewritten in object oriented code, based on Owncloud 9.1 app programming guidelines
+
+Version 0.1.1
+-------------
+* Added CSRF protection on setting form
+* Use openssl_random_pseudo_bytes instead of mt_rand (if available)
+
+Version 0.1
+-------------
+* Initial plugin
diff --git a/docker/volume/nextcloud/envole/app/user_cas/CONTRIBUTING.md b/docker/volume/nextcloud/envole/app/user_cas/CONTRIBUTING.md
new file mode 100644
index 0000000..fa108c5
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/CONTRIBUTING.md
@@ -0,0 +1,21 @@
+## Submitting issues
+
+If you have questions about how to install or use ownCloud, please direct these to the [mailing list][mailinglist], the [forum][forum] or the [IRC Chat][irc].
+
+### Guidelines
+* Please search the existing issues first, it's likely that your issue was already reported or even fixed.
+ - Go to one of the repositories, click "issues" and type any word in the top search/command bar.
+ - You can also filter by appending e. g. "state:open" to the search string.
+ - More info on [search syntax within github](https://help.github.com/articles/searching-issues)
+* This repository ([user_cas](https://github.com/felixrupp/user_cas/issues)) is *only* for issues within the ownCloud user_cas code.
+* __SECURITY__: Report any potential security bug to security@owncloud.com following our [security policy](https://owncloud.org/security/) instead of filing an issue in our bug tracker
+* Report the issue using our template, it includes all the information we need to track down the issue.
+
+Help us to maximize the effort we can spend fixing issues and adding new features, by not reporting duplicate issues.
+
+[mailinglist]: https://mailman.owncloud.org/mailman/listinfo/owncloud
+[forum]: https://central.owncloud.org
+[irc]: https://webchat.freenode.net/?channels=owncloud&uio=d4
+
+### Contribute Code and translations
+Please check [core's contribution guidelines](https://github.com/owncloud/core/blob/master/CONTRIBUTING.md) for further information about contributing code and translations.
diff --git a/docker/volume/nextcloud/envole/app/user_cas/LICENSE b/docker/volume/nextcloud/envole/app/user_cas/LICENSE
new file mode 100644
index 0000000..bd7dc2e
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/LICENSE
@@ -0,0 +1,614 @@
+GNU AFFERO GENERAL PUBLIC LICENSE
+
+Version 3, 19 November 2007
+
+Copyright (C) 2007 Free Software Foundation, Inc.
+
+Copyright (C)
+
+This program is free software: you can redistribute it and/or modify it under
+the terms of the GNU Affero General Public License as published by the Free
+Software Foundation, either version 3 of the License, or (at your option)
+any later version.
+
+This program is distributed in the hope that it will be useful, but WITHOUT
+ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
+FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more
+details.
+
+You should have received a copy of the GNU Affero General Public License along
+with this program. If not, see
+
+- Parameters (required):
+ - uid: the uid of the user
+
+- Options (optional):
+ - --display-name: The new display name of the user.
+ - --email: The new email of the user.
+ - -g | --group: The new group of the user, can be used multiple times (e.g. `-g Family -g Work`) to add multiple groups.
+ - -o | --quota: The new quota of the user, either as numerical byte value or human readable value (e.g. 1GB)).
+ - -e | --enabled: Enable or disable the user. Setting `-e 1` enables the user, setting `-e 0` disables the user.
+
+**Notice: Protected groups will never be unlinked from the user! See also [Groups](#groups).**
+
+
+Update a user:
+--------------
+
+ cas:update-user [--display-name [DISPLAY-NAME]] [--email [EMAIL]] [-g|--group [GROUP]] [-o|--quota [QUOTA]] [-e|--enabled [ENABLED]] [-c|--convert-backend [CONVERT-BACKEND]] [--]
+
+- Parameters (required):
+ - uid: the uid of the user
+
+- Options (optional):
+ - --display-name: The new display name of the user.
+ - --email: The new email of the user.
+ - -g | --group: The new group of the user, can be used multiple times (e.g. `-g Family -g Work`) to add multiple groups.
+ - -o | --quota: The new quota of the user, either as numerical byte value or human readable value (e.g. 1GB)).
+ - -e | --enabled: Enable or disable the user. Setting `-e 1` enables the user, setting `-e 0` disables the user.
+ - -c | --convert-backend: Set if the user’s backend should be converted to CAS backend. Setting `-c 1` converts to backend to CAS. **WARNING: This is not revocable!**
+
+**Notice: Protected groups will never be unlinked from the user! See also [Groups](#groups).**
+
+
+Import users from ActiveDirectory (LDAP):
+-----------------------------------------
+
+ cas:import-users-ad [-d|--delta-update [1]] [-c|--convert-backend [1]]
+
+- Options (optional):
+ - -d | --delta-update: Enable or disable delta updates of accounts. Setting `-d 1` enables account updates.
+ - -c | --convert-backend: Set if the user’s backend should be converted to CAS backend. Setting `-c 1` converts to backend to CAS. **WARNING: This is not revocable!**
+
+
+**Additional Info:** If you want to automate the ActiveDirectory import, call this command in a cronjob of your webservers user (e.g. `www-data` on debian based linux systems).
+
+**Additional Info:** If you want additional debug information, use the options `-vv` or `-vvv` in your command, to raise the debug level. To quiet the output, use the option `-q`
+
+**Example for usage as daily cronjob with delta updates and backend conversion (if needed), output will be zeroed**:
+
+ 0 0 * * * /usr/bin/php /path/to/owncloud/occ cas:import-users-ad -d 1 -c 1 -q >/dev/null 2>&1
+
+
+Bugs and Support
+==============
+
+Please contribute bug reports and feedback to [GitHub Issues](https://github.com/felixrupp/user_cas/issues).
+
+Commercial support and feature implementation is available via [felixrupp.com](http://www.felixrupp.com).
+
+
+ABOUT
+=====
+
+License
+-------
+
+AGPL 3.0 or later - http://www.gnu.org/licenses/agpl-3.0.html
+
+Authors
+-------
+
+Current Version, since 1.4.0:
+* Felix Rupp - [github.com/felixrupp](https://github.com/felixrupp)
+
+Older Versions:
+* Sixto Martin Garcia - [github.com/pitbulk](https://github.com/pitbulk)
+* David Willinger (Leonis Holding) - [github.com/leoniswebDAVe](https://github.com/leoniswebDAVe)
+* Florian Hintermeier (Leonis Holding) - [github.com/leonisCacheFlo](https://github.com/leonisCacheFlo)
+* brenard - [github.com/brenard](https://github.com/brenard)
+
+Links
+-------
+* ownCloud - [owncloud.org](http://www.owncloud.org)
+* ownCloud @ GitHub - [github.com/owncloud](https://github.com/owncloud)
\ No newline at end of file
diff --git a/docker/volume/nextcloud/envole/app/user_cas/appinfo/app.php b/docker/volume/nextcloud/envole/app/user_cas/appinfo/app.php
new file mode 100644
index 0000000..31abfb7
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/appinfo/app.php
@@ -0,0 +1,125 @@
+
+ * @copyright Felix Rupp
+ *
+ * This library is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or any later version.
+ *
+ * This library is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU AFFERO GENERAL PUBLIC LICENSE for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public
+ * License along with this library. If not, see
+ user_cas
+ CAS user and group backend
+ This app provides in-depth features to authenticate and authorize users against a [jasig/apereo Central Authentication Server (CAS)](https://www.apereo.org/projects/cas). The app provides all necessary options needed to connect to your CAS instance and also advanced features to manage the groups accessible by your CAS infrastructure to implement an authorization feature. This version supports ECAS instances used by the European Commission. Additionally this version supports ActiveDirectory (LDAP) import via commandline. Commercial support for user_cas is available through ownCloud GmbH and myself personally.
+ Authenticate users against an jasig/apereo CAS Server (https://github.com/apereo/cas)
+ AGPL
+ https://raw.githubusercontent.com/felixrupp/user_cas/master/.github/SCREENSHOTS/splashscreen.png
+ Felix Rupp
+ UserCAS
+ 2.0
+
+
+
+ security
+
+ https://github.com/felixrupp/user_cas
+
+
+ https://github.com/felixrupp/user_cas/blob/master/README.md
+ https://github.com/felixrupp/user_cas/blob/master/README.md
+ https://github.com/felixrupp/user_cas/blob/master/README.md
+
+
+ https://github.com/felixrupp/user_cas/issues
+
+ https://github.com/felixrupp/user_cas.git
+
+
+
+
+
+ OCA\UserCAS\Command\CreateUser
+ OCA\UserCAS\Command\UpdateUser
+ OCA\UserCAS\Command\ImportUsersAd
+
+
+
+ OCA\UserCAS\Panels\Admin
+
+
diff --git a/docker/volume/nextcloud/envole/app/user_cas/appinfo/routes.php b/docker/volume/nextcloud/envole/app/user_cas/appinfo/routes.php
new file mode 100644
index 0000000..18beb93
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/appinfo/routes.php
@@ -0,0 +1,34 @@
+
+ * @copyright Felix Rupp
+ *
+ * This library is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or any later version.
+ *
+ * This library is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU AFFERO GENERAL PUBLIC LICENSE for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public
+ * License along with this library. If not, see , 2017.
+msgid ""
+msgstr ""
+"Project-Id-Version: ownCloud Core 8.0.0\n"
+"Report-Msgid-Bugs-To: translations@owncloud.org\n"
+"POT-Creation-Date: 2017-07-24 12:40+0000\n"
+"PO-Revision-Date: 2017-07-24 14:49+0200\n"
+"Last-Translator: Felix Rupp \n"
+"Language-Team: LANGUAGE \n"
+"Language: de\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Generator: Virtaal 0.7.1\n"
+
+#: templates/admin.php:7
+msgid "CAS Authentication backend"
+msgstr "CAS Authentifizierungsbackend"
+
+#: templates/admin.php:11
+msgid "CAS Server"
+msgstr "CAS Server"
+
+#: templates/admin.php:12
+msgid "Basic"
+msgstr "Grundeinstellungen"
+
+#: templates/admin.php:13
+msgid "Mapping"
+msgstr "Zuordnungen"
+
+#: templates/admin.php:14
+msgid "phpCAS Library"
+msgstr "phpCAS Bibliothek"
+
+#: templates/admin.php:18
+msgid "CAS Server Version"
+msgstr "CAS Server Version"
+
+#: templates/admin.php:26
+msgid "CAS Server Hostname"
+msgstr "CAS Server Hostname"
+
+#: templates/admin.php:31
+msgid "CAS Server Port"
+msgstr "CAS Server Port"
+
+#: templates/admin.php:36
+msgid "CAS Server Path"
+msgstr "CAS Server Pfad"
+
+#: templates/admin.php:41
+msgid "Service URL"
+msgstr "Dienst URL"
+
+#: templates/admin.php:47
+msgid "Certification file path (.crt)."
+msgstr "Pfad zur Zertifikatsdatei (.crt)."
+
+#: templates/admin.php:47
+msgid "Leave empty if you don’t want to validate your CAS server instance"
+msgstr "Nicht ausfüllen, wenn Sie ihren CAS-Server nicht validieren möchten"
+
+#: templates/admin.php:52
+msgid "Use CAS proxy initialization"
+msgstr "CAS Proxy Initialisierung verwenden"
+
+#: templates/admin.php:54
+msgid "Force user login using CAS?"
+msgstr "CAS Login erzwingen?"
+
+#: templates/admin.php:58
+msgid "Don’t use force login on these client-IPs"
+msgstr "Login bei diesen Client-IPs nicht erzwingen"
+
+#: templates/admin.php:58
+msgid "Comma separated list of client IP addresses (or address ranges), which won’t be forced to login if \"Force user login\" is enabled (e.g. 192.168.1.1-254,192.168.2.5)"
+msgstr "Kommagetrennte Liste an Client-IP-Adressen (oder Adressräumen), die nicht zum Login gezwungen werden, wenn \"CAS Login erzwingen\" aktiviert ist (z.B: 192.168.1.1-254,192.168.2.5)"
+
+#: templates/admin.php:60
+msgid "Disable CAS logout (do not logout CAS-session, only instance-session)"
+msgstr "CAS Logout deaktivieren (nicht die CAS-Session, sondern nur die Instanz-Session ausloggen)"
+
+msgid "Disable CAS SingleSignout (do not logout instance-session if CAS-server sends SSO-Request)"
+msgstr "CAS SingleSignout deaktivieren (nicht die Instanz-Session ausloggen, wenn der CAS-Server einen SSO-Request sendet)"
+
+#: templates/admin.php63
+msgid "SingleSignout Servers"
+msgstr "Logout Server"
+
+#: templates/admin.php63
+msgid "Comma separated list of servers which can send SingleSignout requests (leave empty if you do not have to restrict SingleSignout to defined servers)"
+msgstr "Kommagetrennte Liste an Servern, die SingleSingout-Requests an ihren CAS-Server senden dürfen (Nicht ausfüllen, wenn Sie SingleSignouts nicht beschränken/erlauben müssen)"
+
+msgid "Keep CAS-ticket-ids in URL?"
+msgstr "CAS-Ticket-IDs nicht aus der URL entfernen"
+
+msgid "Beware: Potential security risk! Only activate, if you know what you are doing."
+msgstr "Achtung: Potentielles Sicherheitsrisiko! Nur aktivieren, wenn Sie wissen, was Sie tun."
+
+msgid "Overwrite Login Button Label"
+msgstr "Login Button Label überschreiben"
+
+msgid "Protect \"public share\" links with CAS"
+msgstr "Teilen-Links mit CAS schützen"
+
+#: templates/admin.php:65
+msgid "Autocreate user after first CAS login?"
+msgstr "Benutzer nach erstem CAS Login automatisch erstellen?"
+
+#: templates/admin.php:70
+msgid "Link CAS authentication with LDAP users and groups backend"
+msgstr "CAS Authentifizierung mit LDAP Backend verknüpfen"
+
+#: templates/admin.php:75
+msgid "Update user data after each CAS login?"
+msgstr "Benutzerdaten nach jedem CAS Login aktualisieren?"
+
+#: templates/admin.php:78
+msgid "Locked Groups"
+msgstr "Geschützte Gruppen"
+
+#: templates/admin.php:78
+msgid ""
+"Groups that will not be unlinked from the user when sync the CAS server and "
+"the owncloud"
+msgstr ""
+"Gruppen, die beim Synchronisieren mit dem CAS Server nicht vom ownCloud Benutzer entfernt werden"
+
+#: templates/admin.php:81
+msgid "Multivalued field, use comma to separate values"
+msgstr "Mehrzeiliges Feld, nutzen Sie komma separierte Werte"
+
+#: templates/admin.php:83
+msgid "Default Group"
+msgstr "Standardgruppe"
+
+#: templates/admin.php:83
+msgid ""
+"Default group when autocreating users and no group data was found for the "
+"user"
+msgstr ""
+"Standardgruppe, die beim automatischen Neuerstellen von ownCloud Benutzern vergeben "
+"wird"
+
+#: templates/admin.php:84
+msgid "Authorized CAS Groups"
+msgstr "Authorisierte CAS Gruppen"
+
+#: templates/admin.php:85
+msgid "Users in the following groups will be able to log into ownCloud, users not in one of the groups will be logged out immediately"
+msgstr "Benutzer in den folgenden Gruppen können sich in ownCloud anmelden, Benutzer, die nicht in einer der Gruppen sind, werden sofort ausgeloggt"
+
+#: templates/admin.php:85
+msgid "Group Quotas"
+msgstr "Gruppenquotas"
+
+#: templates/admin.php:85
+msgid "Use ECAS Attribute Parser?"
+msgstr "ECAS Attribute Parser verwenden?"
+
+#: templates/admin.php:85
+msgid "Request full user details?"
+msgstr "Vollständige Benutzerdetails anfordern?"
+
+#: templates/admin.php:86
+msgid "ECAS Strength"
+msgstr "ECAS Strength"
+
+#: templates/admin.php:86
+msgid "Not set"
+msgstr "Nicht gesetzt"
+
+#: templates/admin.php:86
+msgid "ECAS AssuranceLevel"
+msgstr "ECAS AssuranceLevel"
+
+#: templates/admin.php:87
+msgid "Query ECAS groups"
+msgstr "Gruppen in ECAS-Abfrage"
+
+#: templates/admin.php:87
+msgid "Note down all groups which you want to receive from your ECAS instance, * returns all groups"
+msgstr "Setzen Sie alle Gruppen, die Sie von Ihrer ECAS-Instanz zurück erhalten möchten, * gibt alle Gruppen zurück"
+
+#: templates/admin.php:87
+msgid "Don’t use Multi-Factor-Authentication on these client-IPs"
+msgstr "Multi-Faktor-Authentifizierung bei diesen Client-IPs deaktivieren"
+
+#: templates/admin.php:87
+msgid "Comma separated list of client IP addresses (or address ranges), which won’t be forced to use Multi-Factor-Authentication if \"ECAS AssuranceLevel\" is at least MEDIUM (e.g. 192.168.1.1-254,192.168.2.5)"
+msgstr "Kommagetrennte Liste an Client-IP-Adressen (oder Adressräumen), die nicht zur Multi-Faktor-Authentifizierung gezwungen werden, wenn der \"ECAS AssuranceLevel\" mindestens MEDIUM ist (z.B: 192.168.1.1-254,192.168.2.5)"
+
+#: templates/admin.php:89
+msgid "User-ID"
+msgstr "Benutzername"
+
+msgid "Only map this attribute, if you want one specific CAS attribute as your user’s id. If left blank, the default CAS user-id is used."
+msgstr "Verwenden Sie das Attribut nur, wenn Sie ein spezifisches CAS-Attribut als Benutzername verwenden wollen. Lassen Sie das Attribut leer, um den Standard CAS Benutzernamen zu verwenden."
+
+#: templates/admin.php:89
+msgid "Email"
+msgstr "E-Mail"
+
+#: templates/admin.php:94
+msgid "Display Name"
+msgstr "Anzeigename"
+
+#: templates/admin.php:99
+msgid "Groups"
+msgstr "Gruppen"
+
+#: templates/admin.php:99
+msgid "Group Name: JSON Decode"
+msgstr "Gruppen Name: JSON-Decode aktivieren"
+
+#: templates/admin.php:107
+msgid "Overwrite phpCAS path (CAS.php file)"
+msgstr "phpCAS Pfad überschreiben (CAS.php Datei)"
+
+#: templates/admin.php:107
+msgid ""
+"Optional: Overwrite phpCAS path (CAS.php file) if you want to use your own "
+"version. Leave blank to use the shipped version."
+msgstr ""
+"Optional: Überschreiben Sie den phpCAS Pfad (CAS.php Datei), wenn Sie eine "
+"eigene Version verwenden möchten. Nicht ausfüllen, wenn Sie die "
+"Standardversion verwenden möchten"
+
+#: templates/admin.php:112
+msgid "PHP CAS debug file"
+msgstr "PHP CAS debug Datei"
+
+#: templates/admin.php:118
+msgid "Save"
+msgstr "Speichern"
+
+#: lib/Controller/SettingsController.php:140
+msgid "Your CAS settings have been updated."
+msgstr "Ihre CAS Einstellungen wurden gespeichert."
+
+#: lib/Controller/SettingsController.php:146
+msgid "Your CAS settings could not be updated. Please try again."
+msgstr "Ihre CAS Einstellungen konnten nicht gespeichert werden. Bitte versuchen Sie es erneut."
+
+#: templates/cas-error.php:24
+msgid "403"
+msgstr ""
+
+#: templates/cas-error.php:24
+msgid "500"
+msgstr ""
+
+#: templates/cas-error.php:24
+msgid "Forbidden. You do not have access to this application. Please refer to your administrator if something feels wrong to you."
+msgstr "Verboten. Sie haben keinen Zugriff auf diese Anwendung. Bitte wenden Sie sich an Ihren Administrator, wenn Sie denken, dass etwas nicht stimmt."
+
+#: templates/cas-error.php:24
+msgid "You do not have access to the JRCbox application. Please contact the JRCbox administrator if something feels wrong to you."
+msgstr "Sie haben keinen Zugriff auf diese JRCbox Anwendung. Bitte wenden Sie sich an den JRCbox Administrator, wenn Sie denken, dass etwas nicht stimmt."
+
+#: templates/cas-error.php:24
+msgid "Internal Server Error. The server encountered an error. Please try again."
+msgstr "Interner Serverfehler. Die Serveranfrage war fehlerhaft, bitte versuchen Sie es erneut."
+
+#: templates/cas-error.php:28
+msgid "Go back to the login page"
+msgstr "Zurück zur Startseite"
+
+
+# Import CLI
+msgid "Import CLI"
+msgstr "Import CLI"
+
+
+msgid "ActiveDirectory (LDAP)"
+msgstr "ActiveDirectory (LDAP)"
+
+msgid "LDAP Host"
+msgstr "LDAP Host"
+
+msgid "LDAP User and Domain"
+msgstr "LDAP Benutzer und Domain"
+
+msgid "LDAP User Password"
+msgstr "LDAP Benutzerpasswort"
+
+msgid "LDAP Base DN"
+msgstr "LDAP Basis DN"
+
+msgid "LDAP Sync Filter"
+msgstr "LDAP Sync Filter"
+
+msgid "LDAP Sync Pagesize (1–1500)"
+msgstr "LDAP Sync Seitengröße (1–1500)"
+
+
+msgid "CLI Attribute Mapping"
+msgstr "CLI Attributzuordnung"
+
+msgid "UID/Username"
+msgstr "UID/Benutzername"
+
+msgid "Group Name Field"
+msgstr "Gruppen Namensfeld"
+
+msgid "Group Name Filter"
+msgstr "Gruppen Namensfeld Filter"
+
+msgid "Attention: You must use PHP (PCRE) Regex syntax for the filter."
+msgstr "Achtung: Sie müssen die PHP (PCRE) Regex Syntax für diesen Filter einhalten."
+
+msgid "Group Name: Replace Umlauts"
+msgstr "Gruppen Name: Ersetze Umlaute"
+
+msgid "Enable"
+msgstr "Aktivierung"
+
+msgid "Calculate Enable Attribute Bitwise AND with"
+msgstr "Berechne die Nutzer-Aktivierung 'Bitwise AND' mit"
+
+msgid "Merge Accounts"
+msgstr "Accounts zusammenführen"
+
+msgid "Prefer Enabled over Disabled Accounts on Merge"
+msgstr "Aktivierte Accounts beim Zusammenführen bevorzugen"
+
+msgid "Merge Two Active Accounts by"
+msgstr "Zwei aktivierte Accounts zusammenfügen mit Hilfe vom Attribut"
+
+msgid "Merge Two Active Accounts by: Filterstring"
+msgstr "Filterstring für das Zusammenfügen zweier aktivierter Accounts"
\ No newline at end of file
diff --git a/docker/volume/nextcloud/envole/app/user_cas/l10n/fr.js b/docker/volume/nextcloud/envole/app/user_cas/l10n/fr.js
new file mode 100644
index 0000000..4938c2d
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/l10n/fr.js
@@ -0,0 +1,85 @@
+OC.L10N.register(
+ "user_cas",
+ {
+ "CAS Authentication backend": "Authentification CAS",
+ "CAS Server": "Serveur CAS",
+ "Basic": "Basic",
+ "Mapping": "Mapping",
+ "phpCAS Library": "Librairie phpCAS",
+ "CAS Server Version": "Version du serveur CAS",
+ "CAS Server Hostname": "Nom d’hôte du serveur CAS",
+ "CAS Server Port": "Port du serveur CAS",
+ "CAS Server Path": "Chemin du serveur CAS",
+ "Service URL": "URL du service",
+ "Certification file path (.crt).": "Chemin du fichier de certification (.crt).",
+ "Leave empty if you don’t want to validate your CAS server instance": "Laissez vide si vous ne voulez pas valider votre instance de serveur CAS",
+ "Use CAS proxy initialization": "Utiliser l'initialisation du proxy CAS",
+ "Force user login using CAS?": "Forcer la connexion de l'utilisateur en utilisant CAS?",
+ "Don’t use force login on these client-IPs": "N'utilisez pas la connexion forcée sur ces adresses IP client",
+ "Comma separated list of client IP addresses (or address ranges), which won’t be forced to login if \"Force user login\" is enabled (e.g. 192.168.1.1-254,192.168.2.5)": "Liste des adresses IP (ou plages d'adresses) séparées par des virgules, qui ne sera pas obligée de se connecter si \"Forcer la connexion utilisateur\" est activé (par exemple 192.168.1.1-254, 192.168.2.5)",
+ "Disable CAS logout (do not logout CAS-session, only instance-session)": "Désactiver la déconnexion CAS (ne pas déconnecter la session CAS, déconnecter la session d'instance)",
+ "Disable CAS SingleSignout (do not logout instance-session if CAS-server sends SSO-Request)": "Désactiver la déconnexion unique CAS (ne déconnecte pas la session d'instance si le serveur CAS envoie une demande SSO)",
+ "SingleSignout Servers": "Serveurs de déconnexion",
+ "Comma separated list of servers which can send SingleSignout requests (leave empty if you do not have to restrict SingleSignout to defined servers)": "Liste de serveurs séparés par des virgules pouvant envoyer des demandes SingleSignout (laissez vide si vous n'avez pas à limiter SingleSignout à des serveurs définis)",
+ "Autocreate user after first CAS login?": "Créer l'utilisateur automatiquement après la connexion CAS?",
+ "Keep CAS-ticket-ids in URL?": "Gardez CAS-ticket-ids dans l'URL?",
+ "Beware: Potential security risk! Only activate, if you know what you are doing.": "Attention: risque potentiel de sécurité! Activez uniquement si vous savez ce que vous faites.",
+ "Overwrite Login Button Label": "Écraser l'étiquette du bouton de connexion",
+ "Protect \"public share\" links with CAS": "Protéger les liens de «partage public» avec CAS ",
+ "Link CAS authentication with LDAP users and groups backend": "Lier l'authentification CAS avec les utilisateurs et groupe de l'authentification LDAP?",
+ "Update user data after each CAS login?": "Mettre à jour les données utilisateurs après la connexion?",
+ "Locked Groups": "Groupes protégés",
+ "Groups that will not be unlinked from the user when sync the CAS server and the owncloud": "Groupes de l'utilisateur qui seront pas supprimés lors de la synchronisation entre le serveur CAS et Owncloud",
+ "Multivalued field, use comma to separate values": "Champ multivalué, utilisez des virgules pour séparer les valeurs",
+ "Default Group": "Groupe par défaut",
+ "Default group when autocreating users and no group data was found for the user": "Groupe par défaut lors de la création automatique des utilisateurs ownCloud quand aucun groupe n'est trouvé pour l'utilisateur",
+ "Authorized CAS Groups": "Groupes autorisés CAS",
+ "Users in the following groups will be able to log into ownCloud, users not in one of the groups will be logged out immediately": "Les utilisateurs des groupes suivants pourront se connecter à ownCloud, les utilisateurs ne faisant pas partie d'un groupe seront déconnectés immédiatement",
+ "Group Quotas": "Quotas de groupe",
+ "Use ECAS Attribute Parser?": "Utiliser ECAS Attribute Parser?",
+ "Request full user details?": "Demander des informations complètes sur l'utilisateur?",
+ "ECAS Strength": "ECAS Strength",
+ "Not set": "Pas encore défini",
+ "ECAS AssuranceLevel": "ECAS AssuranceLevel",
+ "Query ECAS groups": "ECAS groupes de requêtes",
+ "Note down all groups which you want to receive from your ECAS instance, * returns all groups": "Notez tous les groupes que vous souhaitez recevoir de votre instance ECAS, * renvoie tous les groupes",
+ "Don’t use Multi-Factor-Authentication on these client-IPs": "N'utilisez pas l'authentification multi-facteurs sur ces IP client",
+ "Comma separated list of client IP addresses (or address ranges), which won’t be forced to use Multi-Factor-Authentication if \"ECAS AssuranceLevel\" is at least MEDIUM (e.g. 192.168.1.1-254,192.168.2.5)": "Liste d'adresses IP client (ou plages d'adresses), séparées par des virgules, qui ne seront pas obligées d'utiliser l'authentification à plusieurs facteurs si \"ECAS AssuranceLevel\" est au moins de MEDIUM (par exemple 192.168.1.1-254, 192.168.2.5)",
+ "User-ID": "Nom d'utilisateur",
+ "Only map this attribute, if you want one specific CAS attribute as your user’s id. If left blank, the default CAS user-id is used.": "Mappez cet attribut uniquement si vous voulez un attribut CAS spécifique comme identifiant de votre utilisateur. S'il est laissé vide, le nom d'utilisateur CAS par défaut est utilisé.",
+ "Email": "Email",
+ "Display Name": "Nom affiché",
+ "Groups": "Groupes",
+ "Group Name: JSON Decode": "Nom du groupe: activer le décodage JSON",
+ "Overwrite phpCAS path (CAS.php file)": "Chemin PHP CAS (fichier CAS.php)",
+ "Optional: Overwrite phpCAS path (CAS.php file) if you want to use your own version. Leave blank to use the shipped version.": "Optionnel: Chemin PHP CAS (fichier CAS.php). Laissez vide pour utiliser la version expédiée.",
+ "PHP CAS debug file": "Chemin du fichier de debug de PHP CAS",
+ "Save": "Enregistrer",
+ "Your CAS settings have been updated.": "Vos paramètres CAS ont été mis à jour.",
+ "Your CAS settings could not be updated. Please try again.": "Vos paramètres CAS n'ont pas pu être mis à jour. Veuillez réessayer.",
+ "Forbidden. You do not have access to this application. Please refer to your administrator if something feels wrong to you.": "Interdit. Vous n'avez pas accès à cette application. Veuillez vous adresser à votre administrateur si quelque chose vous semble incorrect.",
+ "You do not have access to the JRCbox application. Please contact the JRCbox administrator if something feels wrong to you.": "Vous n'avez pas accès à cette application JRCbox. Veuillez vous adresser à votre administrateur JRCbox si quelque chose vous semble incorrect.",
+ "Internal Server Error. The server encountered an error. Please try again.": "Erreur Interne du Serveur. Le serveur a rencontré une erreur. Veuillez réessayer.",
+ "Go back to the login page": "Retourner à la page d'accueil",
+ "Import CLI": "Import CLI",
+ "ActiveDirectory (LDAP)": "ActiveDirectory (LDAP)",
+ "LDAP Host": "Hôte LDAP",
+ "LDAP User and Domain": "Utilisateur et domaine LDAP",
+ "LDAP User Password": "Mot de passe utilisateur LDAP",
+ "LDAP Base DN": "LDAP Base DN",
+ "LDAP Sync Filter": "Filtre de synchronisation LDAP",
+ "LDAP Sync Pagesize (1–1500)": "LDAP Sync Pagesize (1–1500)",
+ "CLI Attribute Mapping": "Mappage d'attributs CLI",
+ "UID/Username": "UID/Nom d'utilisateur",
+ "Group Name Field": "Nom du groupe",
+ "Group Name Filter": "Filtre de nom de groupe",
+ "Attention: You must use PHP (PCRE) Regex syntax for the filter.": "Attention: Vous devez utiliser la syntaxe PHP (PCRE) Regex pour le filtre.",
+ "Group Name: Replace Umlauts": "Nom du groupe - Remplacer les trémas",
+ "Enable": "Activer",
+ "Calculate Enable Attribute Bitwise AND with": "Calculer Activer Attribut Bitwise AND avec",
+ "Merge Accounts": "Fusionner des comptes",
+ "Prefer Enabled over Disabled Accounts on Merge": "Préférer activé sur les comptes désactivés lors de la fusion",
+ "Merge Two Active Accounts by": "Fusionner deux comptes actifs par",
+ "Merge Two Active Accounts by: Filterstring": "Fusionner deux comptes actifs par: Filtres"
+ },
+ "nplurals=2; plural=(n != 1);");
diff --git a/docker/volume/nextcloud/envole/app/user_cas/l10n/fr.json b/docker/volume/nextcloud/envole/app/user_cas/l10n/fr.json
new file mode 100644
index 0000000..bc8c456
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/l10n/fr.json
@@ -0,0 +1,85 @@
+{
+ "translations": {
+ "CAS Authentication backend": "Authentification CAS",
+ "CAS Server": "Serveur CAS",
+ "Basic": "Basic",
+ "Mapping": "Mapping",
+ "phpCAS Library": "Librairie phpCAS",
+ "CAS Server Version": "Version du serveur CAS",
+ "CAS Server Hostname": "Nom d’hôte du serveur CAS",
+ "CAS Server Port": "Port du serveur CAS",
+ "CAS Server Path": "Chemin du serveur CAS",
+ "Service URL": "URL du service",
+ "Certification file path (.crt).": "Chemin du fichier de certification (.crt).",
+ "Leave empty if you don’t want to validate your CAS server instance": "Laissez vide si vous ne voulez pas valider votre instance de serveur CAS",
+ "Use CAS proxy initialization": "Utiliser l'initialisation du proxy CAS",
+ "Force user login using CAS?": "Forcer la connexion de l'utilisateur en utilisant CAS?",
+ "Don’t use force login on these client-IPs": "N'utilisez pas la connexion forcée sur ces adresses IP client",
+ "Comma separated list of client IP addresses (or address ranges), which won’t be forced to login if \"Force user login\" is enabled (e.g. 192.168.1.1-254,192.168.2.5)": "Liste des adresses IP (ou plages d'adresses) séparées par des virgules, qui ne sera pas obligée de se connecter si \"Forcer la connexion utilisateur\" est activé (par exemple 192.168.1.1-254, 192.168.2.5)",
+ "Disable CAS logout (do not logout CAS-session, only instance-session)": "Désactiver la déconnexion CAS (ne pas déconnecter la session CAS, déconnecter la session d'instance)",
+ "Disable CAS SingleSignout (do not logout instance-session if CAS-server sends SSO-Request)": "Désactiver la déconnexion unique CAS (ne déconnecte pas la session d'instance si le serveur CAS envoie une demande SSO)",
+ "SingleSignout Servers": "Serveurs de déconnexion",
+ "Comma separated list of servers which can send SingleSignout requests (leave empty if you do not have to restrict SingleSignout to defined servers)": "Liste de serveurs séparés par des virgules pouvant envoyer des demandes SingleSignout (laissez vide si vous n'avez pas à limiter SingleSignout à des serveurs définis)",
+ "Autocreate user after first CAS login?": "Créer l'utilisateur automatiquement après la connexion CAS?",
+ "Keep CAS-ticket-ids in URL?": "Gardez CAS-ticket-ids dans l'URL?",
+ "Beware: Potential security risk! Only activate, if you know what you are doing.": "Attention: risque potentiel de sécurité! Activez uniquement si vous savez ce que vous faites.",
+ "Overwrite Login Button Label": "Écraser l'étiquette du bouton de connexion",
+ "Protect \"public share\" links with CAS": "Protéger les liens de «partage public» avec CAS ",
+ "Link CAS authentication with LDAP users and groups backend": "Lier l'authentification CAS avec les utilisateurs et groupe de l'authentification LDAP?",
+ "Update user data after each CAS login?": "Mettre à jour les données utilisateurs après la connexion?",
+ "Locked Groups": "Groupes protégés",
+ "Groups that will not be unlinked from the user when sync the CAS server and the owncloud": "Groupes de l'utilisateur qui seront pas supprimés lors de la synchronisation entre le serveur CAS et Owncloud",
+ "Multivalued field, use comma to separate values": "Champ multivalué, utilisez des virgules pour séparer les valeurs",
+ "Default Group": "Groupe par défaut",
+ "Default group when autocreating users and no group data was found for the user": "Groupe par défaut lors de la création automatique des utilisateurs ownCloud quand aucun groupe n'est trouvé pour l'utilisateur",
+ "Authorized CAS Groups": "Groupes autorisés CAS",
+ "Users in the following groups will be able to log into ownCloud, users not in one of the groups will be logged out immediately": "Les utilisateurs des groupes suivants pourront se connecter à ownCloud, les utilisateurs ne faisant pas partie d'un groupe seront déconnectés immédiatement",
+ "Group Quotas": "Quotas de groupe",
+ "Use ECAS Attribute Parser?": "Utiliser ECAS Attribute Parser?",
+ "Request full user details?": "Demander des informations complètes sur l'utilisateur?",
+ "ECAS Strength": "ECAS Strength",
+ "Not set": "Pas encore défini",
+ "ECAS AssuranceLevel": "ECAS AssuranceLevel",
+ "Query ECAS groups": "ECAS groupes de requêtes",
+ "Note down all groups which you want to receive from your ECAS instance, * returns all groups": "Notez tous les groupes que vous souhaitez recevoir de votre instance ECAS, * renvoie tous les groupes",
+ "Don’t use Multi-Factor-Authentication on these client-IPs": "N'utilisez pas l'authentification multi-facteurs sur ces IP client",
+ "Comma separated list of client IP addresses (or address ranges), which won’t be forced to use Multi-Factor-Authentication if \"ECAS AssuranceLevel\" is at least MEDIUM (e.g. 192.168.1.1-254,192.168.2.5)": "Liste d'adresses IP client (ou plages d'adresses), séparées par des virgules, qui ne seront pas obligées d'utiliser l'authentification à plusieurs facteurs si \"ECAS AssuranceLevel\" est au moins de MEDIUM (par exemple 192.168.1.1-254, 192.168.2.5)",
+ "User-ID": "Nom d'utilisateur",
+ "Only map this attribute, if you want one specific CAS attribute as your user’s id. If left blank, the default CAS user-id is used.": "Mappez cet attribut uniquement si vous voulez un attribut CAS spécifique comme identifiant de votre utilisateur. S'il est laissé vide, le nom d'utilisateur CAS par défaut est utilisé.",
+ "Email": "Email",
+ "Display Name": "Nom affiché",
+ "Groups": "Groupes",
+ "Group Name: JSON Decode": "Nom du groupe: activer le décodage JSON",
+ "Overwrite phpCAS path (CAS.php file)": "Chemin PHP CAS (fichier CAS.php)",
+ "Optional: Overwrite phpCAS path (CAS.php file) if you want to use your own version. Leave blank to use the shipped version.": "Optionnel: Chemin PHP CAS (fichier CAS.php). Laissez vide pour utiliser la version expédiée.",
+ "PHP CAS debug file": "Chemin du fichier de debug de PHP CAS",
+ "Save": "Enregistrer",
+ "Your CAS settings have been updated.": "Vos paramètres CAS ont été mis à jour.",
+ "Your CAS settings could not be updated. Please try again.": "Vos paramètres CAS n'ont pas pu être mis à jour. Veuillez réessayer.",
+ "Forbidden. You do not have access to this application. Please refer to your administrator if something feels wrong to you.": "Interdit. Vous n'avez pas accès à cette application. Veuillez vous adresser à votre administrateur si quelque chose vous semble incorrect.",
+ "You do not have access to the JRCbox application. Please contact the JRCbox administrator if something feels wrong to you.": "Vous n'avez pas accès à cette application JRCbox. Veuillez vous adresser à votre administrateur JRCbox si quelque chose vous semble incorrect.",
+ "Internal Server Error. The server encountered an error. Please try again.": "Erreur Interne du Serveur. Le serveur a rencontré une erreur. Veuillez réessayer.",
+ "Go back to the login page": "Retourner à la page d'accueil",
+ "Import CLI": "Import CLI",
+ "ActiveDirectory (LDAP)": "ActiveDirectory (LDAP)",
+ "LDAP Host": "Hôte LDAP",
+ "LDAP User and Domain": "Utilisateur et domaine LDAP",
+ "LDAP User Password": "Mot de passe utilisateur LDAP",
+ "LDAP Base DN": "LDAP Base DN",
+ "LDAP Sync Filter": "Filtre de synchronisation LDAP",
+ "LDAP Sync Pagesize (1–1500)": "LDAP Sync Pagesize (1–1500)",
+ "CLI Attribute Mapping": "Mappage d'attributs CLI",
+ "UID/Username": "UID/Nom d'utilisateur",
+ "Group Name Field": "Nom du groupe",
+ "Group Name Filter": "Filtre de nom de groupe",
+ "Attention: You must use PHP (PCRE) Regex syntax for the filter.": "Attention: Vous devez utiliser la syntaxe PHP (PCRE) Regex pour le filtre.",
+ "Group Name: Replace Umlauts": "Nom du groupe - Remplacer les trémas",
+ "Enable": "Activer",
+ "Calculate Enable Attribute Bitwise AND with": "Calculer Activer Attribut Bitwise AND avec",
+ "Merge Accounts": "Fusionner des comptes",
+ "Prefer Enabled over Disabled Accounts on Merge": "Préférer activé sur les comptes désactivés lors de la fusion",
+ "Merge Two Active Accounts by": "Fusionner deux comptes actifs par",
+ "Merge Two Active Accounts by: Filterstring": "Fusionner deux comptes actifs par: Filtres"
+ },
+ "pluralForm": "nplurals=2; plural=(n != 1);"
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/l10n/fr/user_cas.po b/docker/volume/nextcloud/envole/app/user_cas/l10n/fr/user_cas.po
new file mode 100644
index 0000000..ee0c0d5
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/l10n/fr/user_cas.po
@@ -0,0 +1,337 @@
+# Copyright (C) 2017 Felix Rupp
+# This file is distributed under the same license as the user_cas package.
+# Felix Rupp , 2017.
+msgid ""
+msgstr ""
+"Project-Id-Version: ownCloud Core 8.0.0\n"
+"Report-Msgid-Bugs-To: translations@owncloud.org\n"
+"POT-Creation-Date: 2017-07-24 12:40+0000\n"
+"PO-Revision-Date: 2017-07-24 14:57+0200\n"
+"Last-Translator: Felix Rupp \n"
+"Language-Team: LANGUAGE \n"
+"Language: de\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Generator: Virtaal 0.7.1\n"
+
+#: templates/admin.php:7
+msgid "CAS Authentication backend"
+msgstr "Authentification CAS"
+
+#: templates/admin.php:11
+msgid "CAS Server"
+msgstr "Serveur CAS"
+
+#: templates/admin.php:12
+msgid "Basic"
+msgstr "Basic"
+
+#: templates/admin.php:13
+msgid "Mapping"
+msgstr "Mapping"
+
+#: templates/admin.php:14
+msgid "phpCAS Library"
+msgstr "Librairie phpCAS"
+
+#: templates/admin.php:18
+msgid "CAS Server Version"
+msgstr "Version du serveur CAS"
+
+#: templates/admin.php:26
+msgid "CAS Server Hostname"
+msgstr "Nom d’hôte du serveur CAS"
+
+#: templates/admin.php:31
+msgid "CAS Server Port"
+msgstr "Port du serveur CAS"
+
+#: templates/admin.php:36
+msgid "CAS Server Path"
+msgstr "Chemin du serveur CAS"
+
+#: templates/admin.php:41
+msgid "Service URL"
+msgstr "URL du service"
+
+#: templates/admin.php:47
+msgid "Certification file path (.crt)."
+msgstr "Chemin du fichier de certification (.crt)."
+
+#: templates/admin.php:47
+msgid "Leave empty if you don’t want to validate your CAS server instance"
+msgstr "Laissez vide si vous ne voulez pas valider votre instance de serveur CAS"
+
+#: templates/admin.php:52
+msgid "Use CAS proxy initialization"
+msgstr "Utiliser l'initialisation du proxy CAS"
+
+#: templates/admin.php:54
+msgid "Force user login using CAS?"
+msgstr "Forcer la connexion de l'utilisateur en utilisant CAS?"
+
+#: templates/admin.php:58
+msgid "Don’t use force login on these client-IPs"
+msgstr "N'utilisez pas la connexion forcée sur ces adresses IP client"
+
+#: templates/admin.php:58
+msgid "Comma separated list of client IP addresses (or address ranges), which won’t be forced to login if \"Force user login\" is enabled (e.g. 192.168.1.1-254,192.168.2.5)"
+msgstr "Liste des adresses IP (ou plages d'adresses) séparées par des virgules, qui ne sera pas obligée de se connecter si \"Forcer la connexion utilisateur\" est activé (par exemple 192.168.1.1-254, 192.168.2.5)"
+
+#: templates/admin.php:60
+msgid "Disable CAS logout (do not logout CAS-session, only instance-session)"
+msgstr "Désactiver la déconnexion CAS (ne pas déconnecter la session CAS, déconnecter la session d'instance)"
+
+msgid "Disable CAS SingleSignout (do not logout instance-session if CAS-server sends SSO-Request)"
+msgstr "Désactiver la déconnexion unique CAS (ne déconnecte pas la session d'instance si le serveur CAS envoie une demande SSO)"
+
+#: templates/admin.php63
+msgid "SingleSignout Servers"
+msgstr "Serveurs de déconnexion"
+
+#: templates/admin.php63
+msgid "Comma separated list of servers which can send SingleSignout requests (leave empty if you do not have to restrict SingleSignout to defined servers)"
+msgstr "Liste de serveurs séparés par des virgules pouvant envoyer des demandes SingleSignout (laissez vide si vous n'avez pas à limiter SingleSignout à des serveurs définis)"
+
+#: templates/admin.php:65
+msgid "Autocreate user after first CAS login?"
+msgstr "Créer l'utilisateur automatiquement après la connexion CAS?"
+
+msgid "Keep CAS-ticket-ids in URL?"
+msgstr "Gardez CAS-ticket-ids dans l'URL?"
+
+msgid "Beware: Potential security risk! Only activate, if you know what you are doing."
+msgstr "Attention: risque potentiel de sécurité! Activez uniquement si vous savez ce que vous faites."
+
+msgid "Overwrite Login Button Label"
+msgstr "Écraser l'étiquette du bouton de connexion"
+
+msgid "Protect \"public share\" links with CAS"
+msgstr "Protéger les liens de partage avec CAS"
+
+#: templates/admin.php:70
+msgid "Link CAS authentication with LDAP users and groups backend"
+msgstr ""
+"Lier l'authentification CAS avec les utilisateurs et groupe de "
+"l'authentification LDAP?"
+
+#: templates/admin.php:75
+msgid "Update user data after each CAS login?"
+msgstr "Mettre à jour les données utilisateurs après la connexion?"
+
+#: templates/admin.php:78
+msgid "Locked Groups"
+msgstr "Groupes protégés"
+
+#: templates/admin.php:78
+msgid ""
+"Groups that will not be unlinked from the user when sync the CAS server and "
+"the owncloud"
+msgstr ""
+"Groupes de l'utilisateur qui seront pas supprimés lors de la synchronisation "
+"entre le serveur CAS et Owncloud"
+
+#: templates/admin.php:81
+msgid "Multivalued field, use comma to separate values"
+msgstr "Champ multivalué, utilisez des virgules pour séparer les valeurs"
+
+#: templates/admin.php:83
+msgid "Default Group"
+msgstr "Groupe par défaut"
+
+#: templates/admin.php:83
+msgid ""
+"Default group when autocreating users and no group data was found for the "
+"user"
+msgstr ""
+"Groupe par défaut lors de la création automatique des utilisateurs quand "
+"aucun groupe n'est trouvé pour l'utilisateur"
+
+#: templates/admin.php:84
+msgid "Authorized CAS Groups"
+msgstr "Groupes autorisés CAS"
+
+#: templates/admin.php:85
+msgid "Users in the following groups will be able to log into ownCloud, users not in one of the groups will be logged out immediately"
+msgstr "Les utilisateurs des groupes suivants pourront se connecter à ownCloud, les utilisateurs ne faisant pas partie d'un groupe seront déconnectés immédiatement"
+
+#: templates/admin.php:85
+msgid "Group Quotas"
+msgstr "Quotas de groupe"
+
+#: templates/admin.php:85
+msgid "Use ECAS Attribute Parser?"
+msgstr "Utiliser ECAS Attribute Parser?"
+
+#: templates/admin.php:85
+msgid "Request full user details?"
+msgstr "Demander des informations complètes sur l'utilisateur?"
+
+#: templates/admin.php:86
+msgid "ECAS Strength"
+msgstr "ECAS Strength"
+
+#: templates/admin.php:86
+msgid "Not set"
+msgstr "Pas encore défini"
+
+#: templates/admin.php:86
+msgid "ECAS AssuranceLevel"
+msgstr "ECAS AssuranceLevel"
+
+#: templates/admin.php:87
+msgid "Query ECAS groups"
+msgstr "ECAS groupes de requêtes"
+
+#: templates/admin.php:87
+msgid "Note down all groups which you want to receive from your ECAS instance, * returns all groups"
+msgstr "Notez tous les groupes que vous souhaitez recevoir de votre instance ECAS, * renvoie tous les groupes"
+
+#: templates/admin.php:87
+msgid "Don’t use Multi-Factor-Authentication on these client-IPs"
+msgstr "N'utilisez pas l'authentification multi-facteurs sur ces IP client"
+
+#: templates/admin.php:87
+msgid "Comma separated list of client IP addresses (or address ranges), which won’t be forced to use Multi-Factor-Authentication if \"ECAS AssuranceLevel\" is at least MEDIUM (e.g. 192.168.1.1-254,192.168.2.5)"
+msgstr "Liste d'adresses IP client (ou plages d'adresses), séparées par des virgules, qui ne seront pas obligées d'utiliser l'authentification à plusieurs facteurs si \"ECAS AssuranceLevel\" est au moins de MEDIUM (par exemple 192.168.1.1-254, 192.168.2.5)"
+
+#: templates/admin.php:89
+msgid "User-ID"
+msgstr "Nom d'utilisateur"
+
+msgid "Only map this attribute, if you want one specific CAS attribute as your user’s id. If left blank, the default CAS user-id is used."
+msgstr "Mappez cet attribut uniquement si vous voulez un attribut CAS spécifique comme identifiant de votre utilisateur. S'il est laissé vide, le nom d'utilisateur CAS par défaut est utilisé."
+
+#: templates/admin.php:89
+msgid "Email"
+msgstr "Email"
+
+#: templates/admin.php:94
+msgid "Display Name"
+msgstr "Nom affiché"
+
+#: templates/admin.php:99
+msgid "Groups"
+msgstr "Groupes"
+
+#: templates/admin.php:99
+msgid "Group Name: JSON Decode"
+msgstr "Nom du groupe: activer le décodage JSON"
+
+#: templates/admin.php:107
+msgid "Overwrite phpCAS path (CAS.php file)"
+msgstr "Chemin PHP CAS (fichier CAS.php)"
+
+#: templates/admin.php:107
+msgid ""
+"Optional: Overwrite phpCAS path (CAS.php file) if you want to use your own "
+"version. Leave blank to use the shipped version."
+msgstr ""
+"Optionnel: Chemin PHP CAS (fichier CAS.php). Laissez vide pour utiliser la "
+"version expédiée."
+
+#: templates/admin.php:112
+msgid "PHP CAS debug file"
+msgstr "Chemin du fichier de debug de PHP CAS"
+
+#: templates/admin.php:118
+msgid "Save"
+msgstr "Enregistrer"
+
+#: lib/Controller/SettingsController.php:140
+msgid "Your CAS settings have been updated."
+msgstr "Vos paramètres CAS ont été mis à jour."
+
+#: lib/Controller/SettingsController.php:146
+msgid "Your CAS settings could not be updated. Please try again."
+msgstr "Vos paramètres CAS n'ont pas pu être mis à jour. Veuillez réessayer."
+
+#: templates/cas-error.php:24
+msgid "403"
+msgstr ""
+
+#: templates/cas-error.php:24
+msgid "500"
+msgstr ""
+
+#: templates/cas-error.php:24
+msgid "Forbidden. You do not have access to this application. Please refer to your administrator if something feels wrong to you."
+msgstr "Interdit. Vous n'avez pas accès à cette application. Veuillez vous adresser à votre administrateur si quelque chose vous semble incorrect."
+
+#: templates/cas-error.php:24
+msgid "You do not have access to the JRCbox application. Please contact the JRCbox administrator if something feels wrong to you."
+msgstr "Vous n'avez pas accès à cette application JRCbox. Veuillez vous adresser à votre administrateur JRCbox si quelque chose vous semble incorrect."
+
+#: templates/cas-error.php:24
+msgid "Internal Server Error. The server encountered an error. Please try again."
+msgstr "Erreur Interne du Serveur. Le serveur a rencontré une erreur. Veuillez réessayer."
+
+#: templates/cas-error.php:28
+msgid "Go back to the login page"
+msgstr "Retourner à la page d'accueil"
+
+
+# Import CLI
+msgid "Import CLI"
+msgstr "Import CLI"
+
+
+msgid "ActiveDirectory (LDAP)"
+msgstr "ActiveDirectory (LDAP)"
+
+msgid "LDAP Host"
+msgstr "Hôte LDAP"
+
+msgid "LDAP User and Domain"
+msgstr "Utilisateur et domaine LDAP"
+
+msgid "LDAP User Password"
+msgstr "Mot de passe utilisateur LDAP"
+
+msgid "LDAP Base DN"
+msgstr "LDAP Base DN"
+
+msgid "LDAP Sync Filter"
+msgstr "Filtre de synchronisation LDAP"
+
+msgid "LDAP Sync Pagesize (1–1500)"
+msgstr "LDAP Sync Pagesize (1–1500)"
+
+
+msgid "CLI Attribute Mapping"
+msgstr "Mappage d'attributs CLI"
+
+msgid "UID/Username"
+msgstr "UID/Nom d'utilisateur"
+
+msgid "Group Name Field"
+msgstr "Nom du groupe"
+
+msgid "Group Name Filter"
+msgstr "Filtre de nom de groupe"
+
+msgid "Attention: You must use PHP (PCRE) Regex syntax for the filter."
+msgstr "Attention: Vous devez utiliser la syntaxe PHP (PCRE) Regex pour le filtre."
+
+msgid "Group Name: Replace Umlauts"
+msgstr "Nom du groupe - Remplacer les trémas"
+
+msgid "Enable"
+msgstr "Activer"
+
+msgid "Calculate Enable Attribute Bitwise AND with"
+msgstr "Calculer Activer Attribut Bitwise AND avec"
+
+msgid "Merge Accounts"
+msgstr "Fusionner des comptes"
+
+msgid "Prefer Enabled over Disabled Accounts on Merge"
+msgstr "Préférer activé sur les comptes désactivés lors de la fusion"
+
+msgid "Merge Two Active Accounts by"
+msgstr "Fusionner deux comptes actifs par"
+
+msgid "Merge Two Active Accounts by: Filterstring"
+msgstr "Fusionner deux comptes actifs par: Filtres"
\ No newline at end of file
diff --git a/docker/volume/nextcloud/envole/app/user_cas/l10n/templates/user_cas.pot b/docker/volume/nextcloud/envole/app/user_cas/l10n/templates/user_cas.pot
new file mode 100644
index 0000000..f5359a1
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/l10n/templates/user_cas.pot
@@ -0,0 +1,332 @@
+# SOME DESCRIPTIVE TITLE.
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+# FIRST AUTHOR , YEAR.
+#
+#, fuzzy
+msgid ""
+msgstr ""
+"Project-Id-Version: ownCloud Core 8.0.0\n"
+"Report-Msgid-Bugs-To: translations@owncloud.org\n"
+"POT-Creation-Date: 2017-07-24 12:40+0000\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"Last-Translator: FULL NAME \n"
+"Language-Team: LANGUAGE \n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=CHARSET\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#: templates/admin.php:7
+msgid "CAS Authentication backend"
+msgstr ""
+
+#: templates/admin.php:11
+msgid "CAS Server"
+msgstr ""
+
+#: templates/admin.php:12
+msgid "Basic"
+msgstr ""
+
+#: templates/admin.php:13
+msgid "Mapping"
+msgstr ""
+
+#: templates/admin.php:14
+msgid "phpCAS Library"
+msgstr ""
+
+#: templates/admin.php:18
+msgid "CAS Server Version"
+msgstr ""
+
+#: templates/admin.php:26
+msgid "CAS Server Hostname"
+msgstr ""
+
+#: templates/admin.php:31
+msgid "CAS Server Port"
+msgstr ""
+
+#: templates/admin.php:36
+msgid "CAS Server Path"
+msgstr ""
+
+#: templates/admin.php:41
+msgid "Service URL"
+msgstr ""
+
+#: templates/admin.php:47
+msgid "Certification file path (.crt)."
+msgstr ""
+
+#: templates/admin.php:47
+msgid "Leave empty if you don’t want to validate your CAS server instance"
+msgstr ""
+
+#: templates/admin.php:52
+msgid "Use CAS proxy initialization"
+msgstr ""
+
+#: templates/admin.php:54
+msgid "Force user login using CAS?"
+msgstr ""
+
+#: templates/admin.php:58
+msgid "Don’t use force login on these client-IPs"
+msgstr ""
+
+#: templates/admin.php:58
+msgid "Comma separated list of client IP addresses (or address ranges), which won’t be forced to login if \"Force user login\" is enabled (e.g. 192.168.1.1-254,192.168.2.5)"
+msgstr ""
+
+#: templates/admin.php:60
+msgid "Disable CAS logout (do not logout CAS-session, only instance-session)"
+msgstr ""
+
+msgid "Disable CAS SingleSignout (do not logout instance-session if CAS-server sends SSO-Request)"
+msgstr ""
+
+#: templates/admin.php63
+msgid "SingleSignout Servers"
+msgstr ""
+
+#: templates/admin.php63
+msgid "Comma separated list of servers which can send SingleSignout requests (leave empty if you do not have to restrict SingleSignout to defined servers)"
+msgstr ""
+
+#: templates/admin.php:65
+msgid "Autocreate user after first CAS login?"
+msgstr ""
+
+msgid "Keep CAS-ticket-ids in URL?"
+msgstr ""
+
+msgid "Beware: Potential security risk! Only activate, if you know what you are doing."
+msgstr ""
+
+msgid "Overwrite Login Button Label"
+msgstr ""
+
+msgid "Protect \"public share\" links with CAS"
+msgstr ""
+
+#: templates/admin.php:70
+msgid "Link CAS authentication with LDAP users and groups backend"
+msgstr ""
+
+#: templates/admin.php:75
+msgid "Update user data after each CAS login?"
+msgstr ""
+
+#: templates/admin.php:78
+msgid "Locked Groups"
+msgstr ""
+
+#: templates/admin.php:78
+msgid ""
+"Groups that will not be unlinked from the user when sync the CAS server and "
+"the owncloud"
+msgstr ""
+
+#: templates/admin.php:81
+msgid "Multivalued field, use comma to separate values"
+msgstr ""
+
+#: templates/admin.php:83
+msgid "Default Group"
+msgstr ""
+
+#: templates/admin.php:83
+msgid ""
+"Default group when autocreating users and no group data was found for the "
+"user"
+msgstr ""
+
+#: templates/admin.php:84
+msgid "Authorized CAS Groups"
+msgstr ""
+
+#: templates/admin.php:85
+msgid "Users in the following groups will be able to log into ownCloud, users not in one of the groups will be logged out immediately"
+msgstr ""
+
+#: templates/admin.php:85
+msgid "Group Quotas"
+msgstr ""
+
+#: templates/admin.php:85
+msgid "Use ECAS Attribute Parser?"
+msgstr ""
+
+#: templates/admin.php:85
+msgid "Request full user details?"
+msgstr ""
+
+#: templates/admin.php:86
+msgid "ECAS Strength"
+msgstr ""
+
+#: templates/admin.php:86
+msgid "Not set"
+msgstr ""
+
+#: templates/admin.php:86
+msgid "ECAS AssuranceLevel"
+msgstr ""
+
+#: templates/admin.php:87
+msgid "Query ECAS groups"
+msgstr ""
+
+#: templates/admin.php:87
+msgid "Note down all groups which you want to receive from your ECAS instance, * returns all groups"
+msgstr ""
+
+#: templates/admin.php:87
+msgid "Don’t use Multi-Factor-Authentication on these client-IPs"
+msgstr ""
+
+#: templates/admin.php:87
+msgid "Comma separated list of client IP addresses (or address ranges), which won’t be forced to use Multi-Factor-Authentication if \"ECAS AssuranceLevel\" is at least MEDIUM (e.g. 192.168.1.1-254,192.168.2.5)"
+msgstr ""
+
+#: templates/admin.php:89
+msgid "User-ID"
+msgstr ""
+
+#: templates/admin.php:89
+msgid "Only map this attribute, if you want one specific CAS attribute as your user’s id. If left blank, the default CAS user-id is used."
+msgstr ""
+
+#: templates/admin.php:89
+msgid "Email"
+msgstr ""
+
+#: templates/admin.php:94
+msgid "Display Name"
+msgstr ""
+
+#: templates/admin.php:99
+msgid "Groups"
+msgstr ""
+
+#: templates/admin.php:99
+msgid "Group Name: JSON Decode"
+msgstr ""
+
+#: templates/admin.php:107
+msgid "Overwrite phpCAS path (CAS.php file)"
+msgstr ""
+
+#: templates/admin.php:107
+msgid ""
+"Optional: Overwrite phpCAS path (CAS.php file) if you want to use your own "
+"version. Leave blank to use the shipped version."
+msgstr ""
+
+#: templates/admin.php:112
+msgid "PHP CAS debug file"
+msgstr ""
+
+#: templates/admin.php:118
+msgid "Save"
+msgstr ""
+
+#: lib/Controller/SettingsController.php:140
+msgid "Your CAS settings have been updated."
+msgstr ""
+
+#: lib/Controller/SettingsController.php:146
+msgid "Your CAS settings could not be updated. Please try again."
+msgstr ""
+
+
+#: templates/cas-error.php:24
+msgid "403"
+msgstr ""
+
+#: templates/cas-error.php:24
+msgid "500"
+msgstr ""
+
+#: templates/cas-error.php:24
+msgid "Forbidden. You do not have access to this application. Please refer to your administrator if something feels wrong to you."
+msgstr ""
+
+#: templates/cas-error.php:24
+msgid "You do not have access to the JRCbox application. Please contact the JRCbox administrator if something feels wrong to you."
+msgstr ""
+
+#: templates/cas-error.php:24
+msgid "Internal Server Error. The server encountered an error. Please try again."
+msgstr ""
+
+#: templates/cas-error.php:28
+msgid "Go back to the login page"
+msgstr ""
+
+
+# Import CLI
+msgid "Import CLI"
+msgstr ""
+
+
+msgid "ActiveDirectory (LDAP)"
+msgstr ""
+
+msgid "LDAP Host"
+msgstr ""
+
+msgid "LDAP User and Domain"
+msgstr ""
+
+msgid "LDAP User Password"
+msgstr ""
+
+msgid "LDAP Base DN"
+msgstr ""
+
+msgid "LDAP Sync Filter"
+msgstr ""
+
+msgid "LDAP Sync Pagesize (1–1500)"
+msgstr ""
+
+
+msgid "CLI Attribute Mapping"
+msgstr ""
+
+msgid "UID/Username"
+msgstr ""
+
+msgid "Group Name Field"
+msgstr ""
+
+msgid "Group Name Filter"
+msgstr ""
+
+msgid "Attention: You must use PHP (PCRE) Regex syntax for the filter."
+msgstr ""
+
+msgid "Group Name: Replace Umlauts"
+msgstr ""
+
+msgid "Enable"
+msgstr ""
+
+msgid "Calculate Enable Attribute Bitwise AND with"
+msgstr ""
+
+msgid "Merge Accounts"
+msgstr ""
+
+msgid "Prefer Enabled over Disabled Accounts on Merge"
+msgstr ""
+
+msgid "Merge Two Active Accounts by"
+msgstr ""
+
+msgid "Merge Two Active Accounts by: Filterstring"
+msgstr ""
\ No newline at end of file
diff --git a/docker/volume/nextcloud/envole/app/user_cas/lib/AppInfo/Application.php b/docker/volume/nextcloud/envole/app/user_cas/lib/AppInfo/Application.php
new file mode 100644
index 0000000..113b002
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/lib/AppInfo/Application.php
@@ -0,0 +1,197 @@
+
+ * @copyright Felix Rupp
+ *
+ * This library is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or any later version.
+ *
+ * This library is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU AFFERO GENERAL PUBLIC LICENSE for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public
+ * License along with this library. If not, see
+ * @copyright Felix Rupp
+ *
+ * @since 1.4.0
+ */
+class Application extends App
+{
+
+ /**
+ * Application constructor.
+ *
+ * @param array $urlParams
+ */
+ public function __construct(array $urlParams = array())
+ {
+
+ parent::__construct('user_cas', $urlParams);
+
+ $container = $this->getContainer();
+
+ $container->registerService('User', function (IContainer $c) {
+ return $c->query('UserSession')->getUser();
+ });
+
+ $container->registerService('Config', function (IContainer $c) {
+ return $c->query('ServerContainer')->getConfig();
+ });
+
+ $container->registerService('L10N', function (IContainer $c) {
+ return $c->query('ServerContainer')->getL10N($c->query('AppName'));
+ });
+
+ $container->registerService('Logger', function (IContainer $c) {
+ return $c->query('ServerContainer')->getLogger();
+ });
+
+ /**
+ * Register LoggingService
+ */
+ $container->registerService('LoggingService', function (IContainer $c) {
+ return new LoggingService(
+ $c->query('AppName'),
+ $c->query('Config'),
+ $c->query('Logger')
+ );
+ });
+
+ /**
+ * Register AppService with config
+ */
+ $container->registerService('AppService', function (IContainer $c) {
+ return new AppService(
+ $c->query('AppName'),
+ $c->query('Config'),
+ $c->query('LoggingService'),
+ $c->query('ServerContainer')->getUserManager(),
+ $c->query('ServerContainer')->getUserSession(),
+ $c->query('ServerContainer')->getURLGenerator(),
+ $c->query('ServerContainer')->getAppManager()
+ );
+ });
+
+
+ // Workaround for Nextcloud >= 14.0.0
+ if ($container->query('AppService')->isNotNextcloud()) {
+
+ /**
+ * Register regular Backend
+ */
+ $container->registerService('Backend', function (IContainer $c) {
+ return new Backend(
+ $c->query('AppName'),
+ $c->query('Config'),
+ $c->query('LoggingService'),
+ $c->query('AppService'),
+ $c->query('ServerContainer')->getUserManager(),
+ $c->query('UserService')
+ );
+ });
+ } else {
+
+ /**
+ * Register Nextcloud Backend
+ */
+ $container->registerService('Backend', function (IContainer $c) {
+ return new NextBackend(
+ $c->query('AppName'),
+ $c->query('Config'),
+ $c->query('LoggingService'),
+ $c->query('AppService'),
+ $c->query('ServerContainer')->getUserManager(),
+ $c->query('UserService')
+ );
+ });
+ }
+
+ /**
+ * Register UserService with UserSession for login/logout and UserManager for create
+ */
+ $container->registerService('UserService', function (IContainer $c) {
+ return new UserService(
+ $c->query('AppName'),
+ $c->query('Config'),
+ $c->query('ServerContainer')->getUserManager(),
+ $c->query('ServerContainer')->getUserSession(),
+ $c->query('ServerContainer')->getGroupManager(),
+ $c->query('AppService'),
+ $c->query('LoggingService')
+ );
+ });
+
+ /**
+ * Register SettingsController
+ */
+ $container->registerService('SettingsController', function (IContainer $c) {
+ return new SettingsController(
+ $c->query('AppName'),
+ $c->query('Request'),
+ $c->query('Config'),
+ $c->query('L10N')
+ );
+ });
+
+ /**
+ * Register AuthenticationController
+ */
+ $container->registerService('AuthenticationController', function (IContainer $c) {
+ return new AuthenticationController(
+ $c->query('AppName'),
+ $c->query('Request'),
+ $c->query('Config'),
+ $c->query('UserService'),
+ $c->query('AppService'),
+ $c->query('ServerContainer')->getUserSession(),
+ $c->query('LoggingService')
+ );
+ });
+
+ /**
+ * Register UserHooks
+ */
+ $container->registerService('UserHooks', function (IContainer $c) {
+ return new UserHooks(
+ $c->query('AppName'),
+ $c->query('ServerContainer')->getUserManager(),
+ $c->query('ServerContainer')->getUserSession(),
+ $c->query('Config'),
+ $c->query('UserService'),
+ $c->query('AppService'),
+ $c->query('LoggingService'),
+ $c->query('Backend')
+ );
+ });
+ }
+}
\ No newline at end of file
diff --git a/docker/volume/nextcloud/envole/app/user_cas/lib/Command/CreateUser.php b/docker/volume/nextcloud/envole/app/user_cas/lib/Command/CreateUser.php
new file mode 100644
index 0000000..a0ca6a8
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/lib/Command/CreateUser.php
@@ -0,0 +1,304 @@
+
+ * @copyright Felix Rupp
+ *
+ * @since 1.7.0
+ */
+class CreateUser extends Command
+{
+
+ /**
+ * @var UserService
+ */
+ protected $userService;
+
+ /**
+ * @var AppService
+ */
+ protected $appService;
+
+ /**
+ * @var IUserManager
+ */
+ protected $userManager;
+
+ /**
+ * @var IGroupManager
+ */
+ protected $groupManager;
+
+ /**
+ * @var IMailer
+ */
+ protected $mailer;
+
+ /**
+ * @var LoggingService
+ */
+ protected $loggingService;
+
+ /**
+ * @var IConfig
+ */
+ protected $config;
+
+ /**
+ * @var Backend|UserCasBackendInterface
+ */
+ protected $backend;
+
+
+ /**
+ *
+ */
+ public function __construct()
+ {
+ parent::__construct();
+
+ $userManager = \OC::$server->getUserManager();
+ $groupManager = \OC::$server->getGroupManager();
+ $mailer = \OC::$server->getMailer();
+ $config = \OC::$server->getConfig();
+ $userSession = \OC::$server->getUserSession();
+ $logger = \OC::$server->getLogger();
+ $urlGenerator = \OC::$server->getURLGenerator();
+ $appManager = \OC::$server->getAppManager();
+
+ $loggingService = new LoggingService('user_cas', $config, $logger);
+ $this->appService = new AppService('user_cas', $config, $loggingService, $userManager, $userSession, $urlGenerator, $appManager);
+
+ $userService = new UserService(
+ 'user_cas',
+ $config,
+ $userManager,
+ $userSession,
+ $groupManager,
+ $this->appService,
+ $loggingService
+ );
+
+ if ($this->appService->isNotNextcloud()) {
+
+ $backend = new Backend(
+ 'user_cas',
+ $config,
+ $loggingService,
+ $this->appService,
+ $userManager,
+ $userService
+ );
+ } else {
+
+ $backend = new NextBackend(
+ 'user_cas',
+ $config,
+ $loggingService,
+ $this->appService,
+ $userManager,
+ $userService
+ );
+ }
+
+ $this->userService = $userService;
+ $this->userManager = $userManager;
+ $this->groupManager = $groupManager;
+ $this->mailer = $mailer;
+ $this->loggingService = $loggingService;
+ $this->config = $config;
+ $this->backend = $backend;
+ }
+
+
+ /**
+ *
+ */
+ protected function configure()
+ {
+ $this
+ ->setName('cas:create-user')
+ ->setDescription('Adds a user_cas user to the database.')
+ ->addArgument(
+ 'uid',
+ InputArgument::REQUIRED,
+ 'User ID used to login (must only contain a-z, A-Z, 0-9, -, _ and @).'
+ )
+ ->addOption(
+ 'display-name',
+ null,
+ InputOption::VALUE_OPTIONAL,
+ 'User name used in the web UI (can contain any characters).'
+ )
+ ->addOption(
+ 'email',
+ null,
+ InputOption::VALUE_OPTIONAL,
+ 'Email address for the user.'
+ )
+ ->addOption(
+ 'group',
+ 'g',
+ InputOption::VALUE_OPTIONAL | InputOption::VALUE_IS_ARRAY,
+ 'The groups the user should be added to (The group will be created if it does not exist).'
+ )
+ ->addOption(
+ 'quota',
+ 'o',
+ InputOption::VALUE_OPTIONAL,
+ 'The quota the user should get either as numeric value in bytes or as a human readable string (e.g. 1GB for 1 Gigabyte)'
+ )
+ ->addOption(
+ 'enabled',
+ 'e',
+ InputOption::VALUE_OPTIONAL,
+ 'Set user enabled'
+ );
+ }
+
+
+ /**
+ * @param InputInterface $input
+ * @param OutputInterface $output
+ * @return int|null
+ * @throws \Exception
+ */
+ protected function execute(InputInterface $input, OutputInterface $output)
+ {
+
+ $uid = $input->getArgument('uid');
+ if ($this->userManager->userExists($uid)) {
+ $output->writeln('The user "' . $uid . '" already exists. ');
+ return 1;
+ }
+
+ // Validate email before we create the user
+ if ($input->getOption('email')) {
+ // Validate first
+ if (!$this->mailer->validateMailAddress($input->getOption('email'))) {
+ // Invalid! Error
+ $output->writeln('Invalid email address supplied ');
+ return 1;
+ } else {
+ $email = $input->getOption('email');
+ }
+ } else {
+ $email = null;
+ }
+
+ # Register Backend
+ $this->userService->registerBackend($this->backend);
+
+ /**
+ * @var IUser
+ */
+ $user = $this->userService->create($uid, $this->backend);
+
+ if ($user instanceof IUser) {
+
+ $output->writeln('The user "' . $user->getUID() . '" was created successfully ');
+ } else {
+
+ $output->writeln('An error occurred while creating the user ');
+ return 1;
+ }
+
+ # Set displayName
+ if ($input->getOption('display-name')) {
+
+ $user->setDisplayName($input->getOption('display-name'));
+ $output->writeln('Display name set to "' . $user->getDisplayName() . '"');
+ }
+
+ # Set email if supplied & valid
+ if ($email !== null) {
+
+ $user->setEMailAddress($email);
+ $output->writeln('Email address set to "' . $user->getEMailAddress() . '"');
+ }
+
+ # Set Groups
+ $groups = (array)$input->getOption('group');
+
+ if (count($groups) > 0) {
+
+ $this->userService->updateGroups($user, $groups, $this->config->getAppValue('user_cas', 'cas_protected_groups'), TRUE);
+ $output->writeln('Groups have been set.');
+ }
+
+ # Set Quota
+ $quota = $input->getOption('quota');
+
+ if (!empty($quota)) {
+
+ if (is_numeric($quota)) {
+
+ $newQuota = $quota;
+ } elseif ($quota === 'default') {
+
+ $newQuota = 'default';
+ } elseif ($quota === 'none') {
+
+ $newQuota = 'none';
+ } else {
+
+ $newQuota = \OCP\Util::computerFileSize($quota);
+ }
+
+ $user->setQuota($newQuota);
+ $output->writeln('Quota set to "' . $user->getQuota() . '"');
+ }
+
+ # Set enabled
+ $enabled = $input->getOption('enabled');
+
+ if (is_numeric($enabled) || is_bool($enabled)) {
+
+ $user->setEnabled(boolval($enabled));
+
+ $enabledString = ($user->isEnabled()) ? 'enabled' : 'not enabled';
+ $output->writeln('Enabled set to "' . $enabledString . '"');
+ }
+
+ # Set Backend
+ if ($this->appService->isNotNextcloud()) {
+
+ if (!is_null($user) && ($user->getBackendClassName() === 'OC\User\Database' || $user->getBackendClassName() === "Database")) {
+
+ $query = \OC_DB::prepare('UPDATE `*PREFIX*accounts` SET `backend` = ? WHERE LOWER(`user_id`) = LOWER(?)');
+ $result = $query->execute([get_class($this->backend), $uid]);
+
+ $output->writeln('New user added to CAS backend.');
+ }
+
+ } else {
+
+ $output->writeln('This is a Nextcloud instance, no backend update needed.');
+ }
+ }
+}
\ No newline at end of file
diff --git a/docker/volume/nextcloud/envole/app/user_cas/lib/Command/ImportUsersAd.php b/docker/volume/nextcloud/envole/app/user_cas/lib/Command/ImportUsersAd.php
new file mode 100644
index 0000000..eca5802
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/lib/Command/ImportUsersAd.php
@@ -0,0 +1,187 @@
+
+ * @copyright Felix Rupp
+ *
+ * @since 1.0.0
+ */
+class ImportUsersAd extends Command
+{
+
+ /**
+ * @var Manager $userManager
+ */
+ private $userManager;
+
+ /**
+ * @var IConfig
+ */
+ private $config;
+
+
+ /**
+ * ImportUsersAd constructor.
+ */
+ public function __construct()
+ {
+ parent::__construct();
+
+ $this->userManager = \OC::$server->getUserManager();
+ $this->config = \OC::$server->getConfig();
+ }
+
+ /**
+ * Configure method
+ */
+ protected function configure()
+ {
+ $this
+ ->setName('cas:import-users-ad')
+ ->setDescription('Imports users from an ActiveDirectory LDAP.')
+ ->addOption(
+ 'delta-update',
+ 'd',
+ InputOption::VALUE_OPTIONAL,
+ 'Activate updates on existing accounts'
+ )
+ ->addOption(
+ 'convert-backend',
+ 'c',
+ InputOption::VALUE_OPTIONAL,
+ 'Convert the backend to CAS (on update only)'
+ );
+ }
+
+ /**
+ * Execute method
+ *
+ * @param InputInterface $input
+ * @param OutputInterface $output
+ */
+ protected function execute(InputInterface $input, OutputInterface $output)
+ {
+
+
+ try {
+ /**
+ * @var LoggerInterface $logger
+ */
+ $logger = new ConsoleLogger($output);
+
+ # Check for ldap extension
+ if (extension_loaded("ldap")) {
+
+ $output->writeln('Start account import from ActiveDirectory.');
+
+ /**
+ * @var ImporterInterface $importer
+ */
+ $importer = new AdImporter($this->config);
+
+ $importer->init($logger);
+
+ $allUsers = $importer->getUsers();
+
+ $importer->close();
+
+ $output->writeln('Account import from ActiveDirectory finished.');
+
+ #$importer->exportAsCsv($allUsers);
+ #$importer->exportAsText($allUsers);
+ #exit;
+
+ $output->writeln('Start account import to database.');
+
+ $progressBar = new ProgressBar($output, count($allUsers));
+
+ # Convert backend
+ $convertBackend = $input->getOption('convert-backend');
+
+ if ($convertBackend) {
+
+ $logger->info("Backend conversion: Backends will be converted to CAS-Backend.");
+ }
+
+ # Delta Update
+ $deltaUpdate = $input->getOption('delta-update');
+
+ if ($deltaUpdate) {
+
+ $logger->info("Delta updates: Existing users will be updated.");
+ }
+
+ $createCommand = $this->getApplication()->find('cas:create-user');
+ $updateCommand = $this->getApplication()->find('cas:update-user');
+
+ foreach ($allUsers as $user) {
+
+ $arguments = [
+ 'command' => 'cas:create-user',
+ 'uid' => $user["uid"],
+ '--display-name' => $user["displayName"],
+ '--email' => $user["email"],
+ '--quota' => $user["quota"],
+ '--enabled' => $user["enable"],
+ '--group' => $user["groups"]
+ ];
+
+ # Create user if he does not exist
+ if (!$this->userManager->userExists($user["uid"])) {
+
+ $input = new ArrayInput($arguments);
+
+ $createCommand->run($input, new NullOutput());
+ } # Update user if he already exists and delta update is true
+ else if ($this->userManager->userExists($user["uid"]) && $deltaUpdate) {
+
+ $arguments['command'] = 'cas:update-user';
+
+ if ($convertBackend) {
+
+ $arguments["--convert-backend"] = 1;
+ }
+ $input = new ArrayInput($arguments);
+
+ $updateCommand->run($input, new NullOutput());
+ }
+
+ $progressBar->advance();
+ }
+
+ $progressBar->finish();
+ $progressBar->clear();
+
+ $output->writeln('Account import to database finished.');
+
+ } else {
+
+ throw new \Exception("User import failed. PHP extension 'ldap' is not loaded.");
+ }
+ } catch (\Exception $e) {
+
+ $logger->critical("Fatal Error: " . $e->getMessage());
+ }
+ }
+}
\ No newline at end of file
diff --git a/docker/volume/nextcloud/envole/app/user_cas/lib/Command/UpdateUser.php b/docker/volume/nextcloud/envole/app/user_cas/lib/Command/UpdateUser.php
new file mode 100644
index 0000000..7c55498
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/lib/Command/UpdateUser.php
@@ -0,0 +1,313 @@
+
+ * @copyright Felix Rupp
+ *
+ * @since 1.7.0
+ */
+class UpdateUser extends Command
+{
+
+ /**
+ * @var UserService
+ */
+ protected $userService;
+
+ /**
+ * @var AppService
+ */
+ protected $appService;
+
+ /**
+ * @var IUserManager
+ */
+ protected $userManager;
+
+ /**
+ * @var IGroupManager
+ */
+ protected $groupManager;
+
+ /**
+ * @var IMailer
+ */
+ protected $mailer;
+
+ /**
+ * @var LoggingService
+ */
+ protected $loggingService;
+
+ /**
+ * @var \OCP\IConfig
+ */
+ protected $config;
+
+ /**
+ * @var Backend|UserCasBackendInterface
+ */
+ protected $backend;
+
+
+ /**
+ *
+ */
+ public function __construct()
+ {
+ parent::__construct();
+
+ $userManager = \OC::$server->getUserManager();
+ $groupManager = \OC::$server->getGroupManager();
+ $mailer = \OC::$server->getMailer();
+ $config = \OC::$server->getConfig();
+ $userSession = \OC::$server->getUserSession();
+ $logger = \OC::$server->getLogger();
+ $urlGenerator = \OC::$server->getURLGenerator();
+ $appManager = \OC::$server->getAppManager();
+
+ $loggingService = new LoggingService('user_cas', $config, $logger);
+ $this->appService = new AppService('user_cas', $config, $loggingService, $userManager, $userSession, $urlGenerator, $appManager);
+
+ $userService = new UserService(
+ 'user_cas',
+ $config,
+ $userManager,
+ $userSession,
+ $groupManager,
+ $this->appService,
+ $loggingService
+ );
+
+ if ($this->appService->isNotNextcloud()) {
+
+ $backend = new Backend(
+ 'user_cas',
+ $config,
+ $loggingService,
+ $this->appService,
+ $userManager,
+ $userService
+ );
+ } else {
+
+ $backend = new NextBackend(
+ 'user_cas',
+ $config,
+ $loggingService,
+ $this->appService,
+ $userManager,
+ $userService
+ );
+ }
+
+ $this->userService = $userService;
+ $this->userManager = $userManager;
+ $this->groupManager = $groupManager;
+ $this->mailer = $mailer;
+ $this->loggingService = $loggingService;
+ $this->config = $config;
+ $this->backend = $backend;
+ }
+
+
+ /**
+ *
+ */
+ protected function configure()
+ {
+ $this
+ ->setName('cas:update-user')
+ ->setDescription('Updates an existing user and, if not yet a CAS user, converts the record to CAS backend.')
+ ->addArgument(
+ 'uid',
+ InputArgument::REQUIRED,
+ 'User ID used to login (must only contain a-z, A-Z, 0-9, -, _ and @).'
+ )
+ ->addOption(
+ 'display-name',
+ null,
+ InputOption::VALUE_OPTIONAL,
+ 'User name used in the web UI (can contain any characters).'
+ )
+ ->addOption(
+ 'email',
+ null,
+ InputOption::VALUE_OPTIONAL,
+ 'Email address for the user.'
+ )
+ ->addOption(
+ 'group',
+ 'g',
+ InputOption::VALUE_OPTIONAL | InputOption::VALUE_IS_ARRAY,
+ 'The groups the user should be added to (The group will be created if it does not exist).'
+ )
+ ->addOption(
+ 'quota',
+ 'o',
+ InputOption::VALUE_OPTIONAL,
+ 'The quota the user should get, either as numeric value in bytes or as a human readable string (e.g. 1GB for 1 Gigabyte)'
+ )
+ ->addOption(
+ 'enabled',
+ 'e',
+ InputOption::VALUE_OPTIONAL,
+ 'Set user enabled'
+ )
+ ->addOption(
+ 'convert-backend',
+ 'c',
+ InputOption::VALUE_OPTIONAL,
+ 'Convert the backend to CAS'
+ );
+ }
+
+
+ /**
+ * @param InputInterface $input
+ * @param OutputInterface $output
+ * @return int|null
+ * @throws \Exception
+ */
+ protected function execute(InputInterface $input, OutputInterface $output)
+ {
+
+ $uid = $input->getArgument('uid');
+ if (!$this->userManager->userExists($uid)) {
+ $output->writeln('The user "' . $uid . '" does not exist. ');
+ return 1;
+ }
+
+ // Validate email before we create the user
+ if ($input->getOption('email')) {
+ // Validate first
+ if (!$this->mailer->validateMailAddress($input->getOption('email'))) {
+ // Invalid! Error
+ $output->writeln('Invalid email address supplied ');
+ return 1;
+ } else {
+ $email = $input->getOption('email');
+ }
+ } else {
+ $email = null;
+ }
+
+ # Register Backend
+ $this->userService->registerBackend($this->backend);
+
+ /**
+ * @var IUser
+ */
+ $user = $this->userManager->get($uid);
+
+ if ($user instanceof IUser) {
+
+ $output->writeln('The user "' . $user->getUID() . '" has been found ');
+ } else {
+
+ $output->writeln('An error occurred while finding the user ');
+ return 1;
+ }
+
+ # Set displayName
+ if ($input->getOption('display-name')) {
+
+ $user->setDisplayName($input->getOption('display-name'));
+ $output->writeln('Display name set to "' . $user->getDisplayName() . '"');
+ }
+
+ # Set email if supplied & valid
+ if ($email !== null) {
+
+ $user->setEMailAddress($email);
+ $output->writeln('Email address set to "' . $user->getEMailAddress() . '"');
+ }
+
+ # Set Groups
+ $groups = (array)$input->getOption('group');
+
+ if (count($groups) > 0) {
+
+ $this->userService->updateGroups($user, $groups, $this->config->getAppValue('user_cas', 'cas_protected_groups'));
+ $output->writeln('Groups have been updated.');
+ }
+
+ # Set Quota
+ $quota = $input->getOption('quota');
+
+ if (!empty($quota)) {
+
+ if (is_numeric($quota)) {
+
+ $newQuota = $quota;
+ } elseif ($quota === 'default') {
+
+ $newQuota = 'default';
+ } elseif ($quota === 'none') {
+
+ $newQuota = 'none';
+ } else {
+
+ $newQuota = \OCP\Util::computerFileSize($quota);
+ }
+
+ $user->setQuota($newQuota);
+ $output->writeln('Quota set to "' . $user->getQuota() . '"');
+ }
+
+ # Set enabled
+ $enabled = $input->getOption('enabled');
+
+ if (is_numeric($enabled) || is_bool($enabled)) {
+
+ $user->setEnabled(boolval($enabled));
+
+ $enabledString = ($user->isEnabled()) ? 'enabled' : 'not enabled';
+ $output->writeln('Enabled set to "' . $enabledString . '"');
+ }
+
+ # Convert backend
+ $convertBackend = $input->getOption('convert-backend');
+
+ if ($convertBackend) {
+
+ # Set Backend
+ if ($this->appService->isNotNextcloud()) {
+
+ $query = \OC_DB::prepare('UPDATE `*PREFIX*accounts` SET `backend` = ? WHERE LOWER(`user_id`) = LOWER(?)');
+ $result = $query->execute([get_class($this->backend), $uid]);
+
+ $output->writeln('New user added to CAS backend.');
+
+ } else {
+
+ $output->writeln('This is a Nextcloud instance, no backend update needed.');
+
+ }
+ }
+ }
+}
\ No newline at end of file
diff --git a/docker/volume/nextcloud/envole/app/user_cas/lib/Controller/AuthenticationController.php b/docker/volume/nextcloud/envole/app/user_cas/lib/Controller/AuthenticationController.php
new file mode 100644
index 0000000..f8c0c4b
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/lib/Controller/AuthenticationController.php
@@ -0,0 +1,296 @@
+
+ * @copyright Felix Rupp
+ *
+ * This library is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or any later version.
+ *
+ * This library is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU AFFERO GENERAL PUBLIC LICENSE for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public
+ * License along with this library. If not, see
+ * @copyright Felix Rupp
+ *
+ * @since 1.4.0
+ */
+class AuthenticationController extends Controller
+{
+
+ /**
+ * @var string $appName
+ */
+ protected $appName;
+
+ /**
+ * @var \OCP\IConfig $config
+ */
+ private $config;
+
+ /**
+ * @var \OCA\UserCAS\Service\UserService $userService
+ */
+ private $userService;
+
+ /**
+ * @var \OCA\UserCAS\Service\AppService $appService
+ */
+ private $appService;
+
+ /**
+ * @var IUserSession $userSession
+ */
+ private $userSession;
+
+ /**
+ * @var \OCA\UserCAS\Service\LoggingService $loggingService
+ */
+ private $loggingService;
+
+ /**
+ * AuthenticationController constructor.
+ * @param $appName
+ * @param IRequest $request
+ * @param IConfig $config
+ * @param UserService $userService
+ * @param AppService $appService
+ * @param IUserSession $userSession
+ * @param LoggingService $loggingService
+ */
+ public function __construct($appName, IRequest $request, IConfig $config, UserService $userService, AppService $appService, IUserSession $userSession, LoggingService $loggingService)
+ {
+ $this->appName = $appName;
+ $this->config = $config;
+ $this->userService = $userService;
+ $this->appService = $appService;
+ $this->userSession = $userSession;
+ $this->loggingService = $loggingService;
+ parent::__construct($appName, $request);
+ }
+
+ /**
+ * Login method.
+ *
+ * @NoAdminRequired
+ * @NoCSRFRequired
+ * @PublicPage
+ * @UseSession
+ * @OnlyUnauthenticatedUsers
+ *
+ * @return RedirectResponse|TemplateResponse
+ */
+ public function casLogin()
+ {
+
+ if (!$this->appService->isCasInitialized()) {
+
+ try {
+
+ $this->appService->init();
+ } catch (PhpUserCasLibraryNotFoundException $e) {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::FATAL, 'Fatal error with code: ' . $e->getCode() . ' and message: ' . $e->getMessage());
+
+ header("Location: " . $this->appService->getAbsoluteURL('/'));
+ die();
+ }
+ }
+
+ # Handle redirect based on cookie value
+ if (isset($_COOKIE['user_cas_redirect_url'])) {
+
+ $url = urldecode($_COOKIE['user_cas_redirect_url']);
+
+ if (strpos($url, 'http') !== FALSE || strpos($url, 'https') !== FALSE) {
+
+ $location = $url;
+ } else {
+
+ $location = $this->appService->getAbsoluteURL($url);
+ }
+ } else {
+
+ $location = $this->appService->getAbsoluteURL("/");
+ }
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, 'The Redirect URL Parameter in Login Action was: ' . $location);
+
+ if (!$this->userService->isLoggedIn()) {
+
+ try {
+
+ if (\phpCAS::isAuthenticated()) {
+
+ #$userName = \phpCAS::getUser();
+ $userName = $this->userService->getUserId();
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, "phpCAS user " . $userName . " has been authenticated.");
+
+ $isLoggedIn = $this->userService->login($this->request, $userName);
+
+ if ($isLoggedIn) {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, "phpCAS user has been authenticated against owncloud.");
+
+ # Reset cookie
+ setcookie("user_cas_redirect_url", '/', 0, '/');
+
+ return new RedirectResponse($location);
+ } else { # Not authenticated against owncloud
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, "phpCAS user has not been authenticated against owncloud.");
+
+ return $this->casError(null, \OCP\AppFramework\Http::STATUS_FORBIDDEN);
+ }
+ } else { # Not authenticated against CAS
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, "phpCAS user is not authenticated, redirect to CAS server.");
+
+ \phpCAS::forceAuthentication();
+ }
+ } catch (\CAS_Exception $e) {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::ERROR, "phpCAS has thrown an exception with code: " . $e->getCode() . " and message: " . $e->getMessage() . ".");
+
+ return $this->casError(null, \OCP\AppFramework\Http::STATUS_INTERNAL_SERVER_ERROR);
+ }
+ } else {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, "phpCAS user is already authenticated against owncloud.");
+
+ # Reset cookie
+ setcookie("user_cas_redirect_url", '/', 0, '/');
+
+ return new RedirectResponse($location);
+ }
+ }
+
+
+ /**
+ * Logout method for CAS Single-Logout-Feature.
+ *
+ * @NoAdminRequired
+ * @NoCSRFRequired
+ * @PublicPage
+ * @UseSession
+ */
+ public function casLogout()
+ {
+ if (!$this->appService->isCasInitialized()) {
+
+ try {
+
+ $this->appService->init();
+ } catch (PhpUserCasLibraryNotFoundException $e) {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::FATAL, 'Fatal error with code: ' . $e->getCode() . ' and message: ' . $e->getMessage());
+
+ header("Location: " . $this->appService->getAbsoluteURL('/'));
+ die();
+ }
+ }
+
+ // Logout oC/NC user
+ if ($this->userService->isLoggedIn()) {
+
+ $this->userService->logout();
+ }
+ }
+
+
+ /**
+ * Render error view
+ *
+ * @NoAdminRequired
+ * @NoCSRFRequired
+ * @PublicPage
+ * @UseSession
+ * @OnlyUnauthenticatedUsers
+ *
+ * @param \Exception|null $exception
+ * @param int $additionalErrorCode
+ *
+ * @return TemplateResponse
+ */
+ private function casError(\Exception $exception = NULL, $additionalErrorCode = 0)
+ {
+ $params = [];
+
+ if ($additionalErrorCode !== 0) {
+
+ if ($additionalErrorCode === \OCP\AppFramework\Http::STATUS_FORBIDDEN) {
+
+ if (boolval($this->config->getAppValue('user_cas', 'cas_ecas_attributeparserenabled', false))) {
+
+ $params['errorCode'] = '';
+ $params['errorMessage'] = "You do not have access to the JRCbox application. Please contact the JRCbox administrator if something feels wrong to you.";
+ } else {
+
+ $params['errorCode'] = $additionalErrorCode;
+ $params['errorMessage'] = "Forbidden. You do not have access to this application. Please refer to your administrator if something feels wrong to you.";
+ }
+ }
+
+ if ($additionalErrorCode === \OCP\AppFramework\Http::STATUS_INTERNAL_SERVER_ERROR) {
+
+ $params['errorCode'] = $additionalErrorCode;
+ $params['errorMessage'] = "Internal Server Error. The server encountered an error. Please try again.";
+ }
+ } else if ($exception instanceof \Exception) {
+
+ $params['errorCode'] = $exception->getCode();
+ $params['errorMessage'] = $exception->getMessage();
+ }
+
+ /*if ($this->config->getAppValue($this->appName, 'cas_force_login') === '1') {
+
+ $newProtocol = 'http://';
+
+ if (intval($this->config->getAppValue($this->appName, 'cas_server_port')) === 443) {
+
+ $newProtocol = 'https://';
+ }
+
+ $params['backUrl'] = $newProtocol . $this->config->getAppValue($this->appName, 'cas_server_hostname') . $this->config->getAppValue($this->appName, 'cas_server_path');
+ } else {*/
+
+ $params['backUrl'] = $this->appService->getAbsoluteURL('/');
+ //}
+
+ $response = new TemplateResponse($this->appName, 'cas-error', $params, 'guest');
+
+ return $response;
+ }
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/lib/Controller/SettingsController.php b/docker/volume/nextcloud/envole/app/user_cas/lib/Controller/SettingsController.php
new file mode 100644
index 0000000..e6612ab
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/lib/Controller/SettingsController.php
@@ -0,0 +1,246 @@
+
+ * @copyright Felix Rupp
+ *
+ * This library is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or any later version.
+ *
+ * This library is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU AFFERO GENERAL PUBLIC LICENSE for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public
+ * License along with this library. If not, see
+ * @copyright Felix Rupp
+ *
+ * @since 1.4
+ */
+class SettingsController extends Controller
+{
+ /**
+ * @var IL10N
+ */
+ private $l10n;
+
+ /**
+ * @var IConfig
+ */
+ private $config;
+
+
+ /**
+ * @var string
+ */
+ protected $appName;
+
+ /**
+ * SettingsController constructor.
+ * @param $appName
+ * @param IRequest $request
+ * @param IConfig $config
+ * @param IL10N $l10n
+ */
+ public function __construct($appName, IRequest $request, IConfig $config, IL10N $l10n)
+ {
+ $this->config = $config;
+ $this->appName = $appName;
+ $this->l10n = $l10n;
+ parent::__construct($appName, $request);
+ }
+
+ /**
+ * @AdminRequired
+ *
+ * @param string $cas_server_version
+ * @param string $cas_server_hostname
+ * @param string $cas_server_port
+ * @param string $cas_server_path
+ * @param string $cas_protected_groups
+ * @param string $cas_default_group
+ * @param string $cas_groups_letter_filter
+ * @param string $cas_groups_create_default_for_user_prefix
+ * @param string $cas_userid_mapping
+ * @param string $cas_email_mapping
+ * @param string $cas_displayName_mapping
+ * @param string $cas_group_mapping
+ * @param string $cas_quota_mapping
+ * @param string $cas_cert_path
+ * @param string $cas_debug_file
+ * @param string $cas_php_cas_path
+ * @param string $cas_service_url
+ * @param string $cas_handlelogout_servers
+ * @param string $cas_login_button_label
+ * @param string $cas_access_allow_groups
+ * @param string $cas_ecas_accepted_strengths
+ * @param string $cas_ecas_retrieve_groups
+ * @param string $cas_ecas_assurance_level
+ * @param string $cas_access_group_quotas
+ * @param string $cas_force_login_exceptions
+ * @param string $cas_ecas_internal_ip_range
+ * @param string $cas_import_ad_protocol
+ * @param string $cas_import_ad_host
+ * @param string $cas_import_ad_port
+ * @param string $cas_import_ad_user
+ * @param string $cas_import_ad_domain
+ * @param string $cas_import_ad_password
+ * @param string $cas_import_ad_base_dn
+ * @param string $cas_import_ad_sync_filter
+ * @param string $cas_import_ad_sync_pagesize
+ * @param string $cas_import_map_uid
+ * @param string $cas_import_map_displayname
+ * @param string $cas_import_map_email
+ * @param string $cas_import_map_groups
+ * @param string $cas_import_map_groups_description
+ * @param string $cas_import_map_quota
+ * @param string $cas_import_map_enabled
+ * @param string $cas_import_map_enabled_and_bitwise
+ * @param string $cas_import_map_dn
+ * @param string $cas_import_map_dn_filter
+ * @param string|null $cas_ecas_attributeparserenabled
+ * @param string|null $cas_ecas_request_full_userdetails
+ * @param string|null $cas_force_login
+ * @param string|null $cas_autocreate
+ * @param string|null $cas_update_user_data
+ * @param string|null $cas_link_to_ldap_backend
+ * @param string|null $cas_disable_logout
+ * @param string|null $cas_disable_singlesignout
+ * @param string|null $cas_use_proxy
+ * @param string|null $cas_import_merge
+ * @param string|null $cas_import_merge_enabled
+ * @param string|null $cas_groups_letter_umlauts
+ * @param string|null $cas_keep_ticket_ids
+ * @param string|null $cas_groups_json_decode
+ * @param string|null $cas_groups_create_default_for_user
+ * @param string|null $cas_shares_protected
+ * @return mixed
+ */
+ public function saveSettings($cas_server_version, $cas_server_hostname, $cas_server_port, $cas_server_path, $cas_protected_groups, $cas_default_group, $cas_groups_letter_filter, $cas_groups_create_default_for_user_prefix,
+ $cas_userid_mapping, $cas_email_mapping, $cas_displayName_mapping, $cas_group_mapping, $cas_quota_mapping, $cas_cert_path, $cas_debug_file, $cas_php_cas_path, $cas_service_url, $cas_handlelogout_servers, $cas_login_button_label,
+ $cas_access_allow_groups, $cas_ecas_accepted_strengths, $cas_ecas_retrieve_groups, $cas_ecas_assurance_level, $cas_access_group_quotas, $cas_force_login_exceptions, $cas_ecas_internal_ip_range,
+ $cas_import_ad_protocol, $cas_import_ad_host, $cas_import_ad_port, $cas_import_ad_user, $cas_import_ad_domain, $cas_import_ad_password, $cas_import_ad_base_dn, $cas_import_ad_sync_filter, $cas_import_ad_sync_pagesize,
+ $cas_import_map_uid, $cas_import_map_displayname, $cas_import_map_email, $cas_import_map_groups, $cas_import_map_groups_description, $cas_import_map_quota, $cas_import_map_enabled, $cas_import_map_enabled_and_bitwise, $cas_import_map_dn, $cas_import_map_dn_filter,
+ $cas_ecas_attributeparserenabled = NULL, $cas_ecas_request_full_userdetails = NULL, $cas_force_login = NULL, $cas_autocreate = NULL, $cas_update_user_data = NULL, $cas_link_to_ldap_backend = NULL,
+ $cas_disable_logout = NULL, $cas_disable_singlesignout = NULL, $cas_use_proxy = NULL, $cas_import_merge = NULL, $cas_import_merge_enabled = NULL, $cas_groups_letter_umlauts = NULL, $cas_keep_ticket_ids = NULL, $cas_groups_json_decode = NULL,
+ $cas_groups_create_default_for_user = NULL, $cas_shares_protected = NULL)
+ {
+
+ try {
+
+ # CAS Server
+ $this->config->setAppValue($this->appName, 'cas_server_version', $cas_server_version);
+ $this->config->setAppValue($this->appName, 'cas_server_hostname', $cas_server_hostname);
+ $this->config->setAppValue($this->appName, 'cas_server_port', $cas_server_port);
+ $this->config->setAppValue($this->appName, 'cas_server_path', $cas_server_path);
+
+ # Basic
+ $this->config->setAppValue($this->appName, 'cas_force_login_exceptions', $cas_force_login_exceptions);
+ $this->config->setAppValue($this->appName, 'cas_protected_groups', $cas_protected_groups);
+ $this->config->setAppValue($this->appName, 'cas_default_group', $cas_default_group);
+ $this->config->setAppValue($this->appName, 'cas_access_allow_groups', $cas_access_allow_groups);
+ $this->config->setAppValue($this->appName, 'cas_access_group_quotas', $cas_access_group_quotas);
+ $this->config->setAppValue($this->appName, 'cas_cert_path', $cas_cert_path);
+ $this->config->setAppValue($this->appName, 'cas_service_url', $cas_service_url);
+ $this->config->setAppValue($this->appName, 'cas_handlelogout_servers', $cas_handlelogout_servers);
+ $this->config->setAppValue($this->appName, 'cas_login_button_label', $cas_login_button_label);
+
+ # Mapping
+ $this->config->setAppValue($this->appName, 'cas_userid_mapping', $cas_userid_mapping);
+ $this->config->setAppValue($this->appName, 'cas_email_mapping', $cas_email_mapping);
+ $this->config->setAppValue($this->appName, 'cas_displayName_mapping', $cas_displayName_mapping);
+ $this->config->setAppValue($this->appName, 'cas_group_mapping', $cas_group_mapping);
+ $this->config->setAppValue($this->appName, 'cas_quota_mapping', $cas_quota_mapping);
+ $this->config->setAppValue($this->appName, 'cas_groups_letter_filter', $cas_groups_letter_filter);
+ $this->config->setAppValue($this->appName, 'cas_groups_create_default_for_user_prefix', $cas_groups_create_default_for_user_prefix);
+
+ # phpCas
+ $this->config->setAppValue($this->appName, 'cas_debug_file', $cas_debug_file);
+ $this->config->setAppValue($this->appName, 'cas_php_cas_path', $cas_php_cas_path);
+
+ # ECAS settings
+ $this->config->setAppValue($this->appName, 'cas_ecas_accepted_strengths', $cas_ecas_accepted_strengths);
+ $this->config->setAppValue($this->appName, 'cas_ecas_retrieve_groups', $cas_ecas_retrieve_groups);
+ $this->config->setAppValue($this->appName, 'cas_ecas_assurance_level', $cas_ecas_assurance_level);
+ $this->config->setAppValue($this->appName, 'cas_ecas_internal_ip_range', $cas_ecas_internal_ip_range);
+
+ # Import module AD
+ $this->config->setAppValue($this->appName, 'cas_import_ad_protocol', $cas_import_ad_protocol);
+ $this->config->setAppValue($this->appName, 'cas_import_ad_host', $cas_import_ad_host);
+ $this->config->setAppValue($this->appName, 'cas_import_ad_port', intval($cas_import_ad_port));
+ $this->config->setAppValue($this->appName, 'cas_import_ad_user', $cas_import_ad_user);
+ $this->config->setAppValue($this->appName, 'cas_import_ad_domain', $cas_import_ad_domain);
+
+ if(strlen($cas_import_ad_password) > 0) { # Only save if a new password is given
+ $this->config->setAppValue($this->appName, 'cas_import_ad_password', $cas_import_ad_password);
+ }
+
+ $this->config->setAppValue($this->appName, 'cas_import_ad_base_dn', $cas_import_ad_base_dn);
+ $this->config->setAppValue($this->appName, 'cas_import_ad_sync_filter', htmlspecialchars_decode($cas_import_ad_sync_filter));
+ $this->config->setAppValue($this->appName, 'cas_import_ad_sync_pagesize', intval($cas_import_ad_sync_pagesize));
+
+ # Import module cli mapping
+ $this->config->setAppValue($this->appName, 'cas_import_map_uid', $cas_import_map_uid);
+ $this->config->setAppValue($this->appName, 'cas_import_map_displayname', $cas_import_map_displayname);
+ $this->config->setAppValue($this->appName, 'cas_import_map_email', $cas_import_map_email);
+ $this->config->setAppValue($this->appName, 'cas_import_map_groups', $cas_import_map_groups);
+ $this->config->setAppValue($this->appName, 'cas_import_map_groups_description', $cas_import_map_groups_description);
+ $this->config->setAppValue($this->appName, 'cas_import_map_quota', $cas_import_map_quota);
+ $this->config->setAppValue($this->appName, 'cas_import_map_enabled', $cas_import_map_enabled);
+ $this->config->setAppValue($this->appName, 'cas_import_map_enabled_and_bitwise', $cas_import_map_enabled_and_bitwise);
+ $this->config->setAppValue($this->appName, 'cas_import_map_dn', $cas_import_map_dn);
+ $this->config->setAppValue($this->appName, 'cas_import_map_dn_filter', $cas_import_map_dn_filter);
+
+ # Checkbox settings
+ $this->config->setAppValue($this->appName, 'cas_force_login', ($cas_force_login !== NULL) ? '1' : '0');
+ $this->config->setAppValue($this->appName, 'cas_autocreate', ($cas_autocreate !== NULL) ? '1' : '0');
+ $this->config->setAppValue($this->appName, 'cas_update_user_data', ($cas_update_user_data !== NULL) ? '1' : '0');
+ $this->config->setAppValue($this->appName, 'cas_link_to_ldap_backend', ($cas_link_to_ldap_backend !== NULL) ? '1' : '0');
+ $this->config->setAppValue($this->appName, 'cas_disable_logout', ($cas_disable_logout !== NULL) ? '1' : '0');
+ $this->config->setAppValue($this->appName, 'cas_disable_singlesignout', ($cas_disable_singlesignout !== NULL) ? '1' : '0');
+ $this->config->setAppValue($this->appName, 'cas_ecas_attributeparserenabled', ($cas_ecas_attributeparserenabled !== NULL) ? '1' : '0');
+ $this->config->setAppValue($this->appName, 'cas_ecas_request_full_userdetails', ($cas_ecas_request_full_userdetails !== NULL) ? '1' : '0');
+ $this->config->setAppValue($this->appName, 'cas_use_proxy', ($cas_use_proxy !== NULL) ? '1' : '0');
+ $this->config->setAppValue($this->appName, 'cas_import_merge', ($cas_import_merge !== NULL) ? '1' : '0');
+ $this->config->setAppValue($this->appName, 'cas_import_merge_enabled', ($cas_import_merge_enabled !== NULL) ? '1' : '0');
+ $this->config->setAppValue($this->appName, 'cas_groups_letter_umlauts', ($cas_groups_letter_umlauts !== NULL) ? '1' : '0');
+ $this->config->setAppValue($this->appName, 'cas_keep_ticket_ids', ($cas_keep_ticket_ids !== NULL) ? '1' : '0');
+ $this->config->setAppValue($this->appName, 'cas_groups_json_decode', ($cas_groups_json_decode !== NULL) ? '1' : '0');
+ $this->config->setAppValue($this->appName, 'cas_groups_create_default_for_user', ($cas_groups_create_default_for_user !== NULL) ? '1' : '0');
+ $this->config->setAppValue($this->appName, 'cas_shares_protected', ($cas_shares_protected !== NULL) ? '1' : '0');
+
+
+ return array(
+ 'code' => 200,
+ 'message' => $this->l10n->t('Your CAS settings have been updated.')
+ );
+ } catch (\Exception $e) {
+
+ return array(
+ 'code' => 500,
+ 'message' => $this->l10n->t('Your CAS settings could not be updated. Please try again.')
+ );
+ }
+ }
+}
\ No newline at end of file
diff --git a/docker/volume/nextcloud/envole/app/user_cas/lib/Exception/PhpCas/PhpUserCasLibraryNotFoundException.php b/docker/volume/nextcloud/envole/app/user_cas/lib/Exception/PhpCas/PhpUserCasLibraryNotFoundException.php
new file mode 100644
index 0000000..101f451
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/lib/Exception/PhpCas/PhpUserCasLibraryNotFoundException.php
@@ -0,0 +1,40 @@
+
+ * @copyright Felix Rupp
+ *
+ * This library is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or any later version.
+ *
+ * This library is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU AFFERO GENERAL PUBLIC LICENSE for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public
+ * License along with this library. If not, see
+ * @copyright Felix Rupp
+ *
+ * @since 1.5.0
+ */
+class PhpUserCasLibraryNotFoundException extends UserCasException
+{
+}
\ No newline at end of file
diff --git a/docker/volume/nextcloud/envole/app/user_cas/lib/Exception/UserCasException.php b/docker/volume/nextcloud/envole/app/user_cas/lib/Exception/UserCasException.php
new file mode 100644
index 0000000..5aa01aa
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/lib/Exception/UserCasException.php
@@ -0,0 +1,38 @@
+
+ * @copyright Felix Rupp
+ *
+ * This library is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or any later version.
+ *
+ * This library is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU AFFERO GENERAL PUBLIC LICENSE for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public
+ * License along with this library. If not, see
+ * @copyright Felix Rupp
+ *
+ * @since 1.5.0
+ */
+class UserCasException extends \Exception
+{
+}
\ No newline at end of file
diff --git a/docker/volume/nextcloud/envole/app/user_cas/lib/Hooks/UserHooks.php b/docker/volume/nextcloud/envole/app/user_cas/lib/Hooks/UserHooks.php
new file mode 100644
index 0000000..68bf83f
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/lib/Hooks/UserHooks.php
@@ -0,0 +1,448 @@
+
+ * @copyright Felix Rupp
+ *
+ * This library is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or any later version.
+ *
+ * This library is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU AFFERO GENERAL PUBLIC LICENSE for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public
+ * License along with this library. If not, see
+ * @copyright Felix Rupp
+ *
+ * @since 1.4.0
+ */
+class UserHooks
+{
+
+ /**
+ * @var string
+ */
+ private $appName;
+
+ /**
+ * @var \OCP\IUserManager $userManager
+ */
+ private $userManager;
+
+ /**
+ * @var \OCP\IUserSession $userSession
+ */
+ private $userSession;
+
+ /**
+ * @var \OCP\IConfig
+ */
+ private $config;
+
+ /**
+ * @var \OCA\UserCAS\Service\UserService $userService
+ */
+ private $userService;
+
+ /**
+ * @var \OCA\UserCAS\Service\AppService $appService
+ */
+ private $appService;
+
+ /**
+ * @var \OCA\UserCAS\Service\LoggingService
+ */
+ private $loggingService;
+
+ /**
+ * @var UserCasBackendInterface
+ */
+ private $backend;
+
+
+ /**
+ * UserHooks constructor.
+ *
+ * @param string $appName
+ * @param \OCP\IUserManager $userManager
+ * @param \OCP\IUserSession $userSession
+ * @param \OCP\IConfig $config
+ * @param \OCA\UserCAS\Service\UserService $userService
+ * @param \OCA\UserCAS\Service\AppService $appService
+ * @param \OCA\UserCAS\Service\LoggingService $loggingService
+ * @param UserCasBackendInterface $backend
+ */
+ public function __construct($appName, IUserManager $userManager, IUserSession $userSession, IConfig $config, UserService $userService, AppService $appService, LoggingService $loggingService, UserCasBackendInterface $backend)
+ {
+ $this->appName = $appName;
+ $this->userManager = $userManager;
+ $this->userSession = $userSession;
+ $this->config = $config;
+ $this->userService = $userService;
+ $this->appService = $appService;
+ $this->loggingService = $loggingService;
+ $this->backend = $backend;
+ }
+
+ /**
+ * Register method.
+ */
+ public function register()
+ {
+ #$this->userSession->listen('\OC\User', 'preLogin', array($this, 'preLogin'));
+ $this->userSession->listen('\OC\User', 'postLogin', array($this, 'postLogin'));
+ $this->userSession->listen('\OC\User', 'postLogout', array($this, 'postLogout'));
+ }
+
+
+ /**
+ * postLogin method to update user data.
+ *
+ * @param mixed $uid
+ * @param string $password
+ * @return bool
+ * @throws \Exception
+ *
+ * @deprecated
+ * @since 1.8.0
+ */
+ public function preLogin($uid, $password)
+ {
+
+ if (!$this->appService->isCasInitialized()) {
+
+ try {
+
+ $this->appService->init();
+ } catch (PhpUserCasLibraryNotFoundException $e) {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::FATAL, 'Fatal error with code: ' . $e->getCode() . ' and message: ' . $e->getMessage());
+
+ return FALSE;
+ }
+ };
+
+ if ($uid instanceof \OCP\IUser) {
+
+ $user = $uid;
+ $uid = $user->getUID();
+ }
+ else {
+
+ $user = $this->userManager->get($uid);
+ }
+
+ if (\phpCAS::isAuthenticated() && !$this->userSession->isLoggedIn()) {
+
+ #$casUid = \phpCAS::getUser();
+ $casUid = $this->userService->getUserId();
+
+ if ($casUid === $uid) {
+
+ if (boolval($this->config->getAppValue($this->appName, 'cas_autocreate'))) {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, 'phpCas pre login hook triggered. User: ' . $uid);
+
+ // Autocreate user if needed or create a new account in CAS Backend
+ if (is_null($user)) {
+
+ // create users if they do not exist
+ if (preg_match('/[^a-zA-Z0-9 _\.@\-]/', $uid)) {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, 'Invalid username "' . $uid . '", allowed chars "a-zA-Z0-9" and "_.@-" ');
+
+ return FALSE;
+ } else {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, 'phpCAS creating a new user with UID: ' . $uid);
+
+ /** @var bool|\OCP\IUser the created user or false $uid */
+ $user = $this->userService->create($uid, $this->backend);
+
+ if ($user instanceof \OCP\IUser) {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, 'phpCAS created new user with UID: ' . $uid);
+ }
+ }
+ } else {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, 'phpCAS no new user has been created.');
+ }
+ }
+
+ # Update the Backend of the user if necessary
+ #$this->userService->updateBackend($user);
+ }
+ } else {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, 'phpCas pre login hook NOT triggered. User: ' . $uid);
+ }
+
+ return TRUE;
+ }
+
+
+ /**
+ * postLogin method to update user data.
+ *
+ * @param mixed $uid
+ * @param string $password
+ * @return bool
+ */
+ public function postLogin($uid, $password)
+ {
+
+ if (!$this->appService->isCasInitialized()) {
+
+ try {
+
+ $this->appService->init();
+ } catch (PhpUserCasLibraryNotFoundException $e) {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::FATAL, 'Fatal error with code: ' . $e->getCode() . ' and message: ' . $e->getMessage());
+
+ return FALSE;
+ }
+ };
+
+ if ($uid instanceof \OCP\IUser) {
+
+ $user = $uid;
+ $uid = $user->getUID();
+ } else {
+
+ $user = $this->userManager->get($uid);
+ }
+
+ if (\phpCAS::isAuthenticated() && $this->userSession->isLoggedIn()) {
+
+ if (boolval($this->config->getAppValue($this->appName, 'cas_update_user_data'))) {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, 'phpCas post login hook triggered. User: ' . $uid);
+
+ // $cas_attributes may vary in name, therefore attributes are fetched to $attributes
+
+ #$casUid = \phpCAS::getUser();
+ $casUid = $this->userService->getUserId();
+
+ if ($casUid === $uid) {
+
+ # Update the Backend of the user if necessary
+ #$this->userService->updateBackend($user);
+
+ $casAttributes = \phpCAS::getAttributes();
+
+ # Test if an attribute parser added a new dimension to our attributes array
+ if (array_key_exists('attributes', $casAttributes)) {
+
+ $newAttributes = $casAttributes['attributes'];
+
+ unset($casAttributes['attributes']);
+
+ $casAttributes = array_merge($casAttributes, $newAttributes);
+ }
+
+ $casAttributesString = '';
+ foreach ($casAttributes as $key => $attribute) {
+
+ $attributeString = $this->convertArrayAttributeValuesForDebug($attribute);
+
+ $casAttributesString .= $key . ': ' . $attributeString . '; ';
+ }
+
+ // parameters
+ $attributes = array();
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, 'Attributes for the user: ' . $uid . ' => ' . $casAttributesString);
+
+
+ // DisplayName
+ $displayNameMapping = $this->config->getAppValue($this->appName, 'cas_displayName_mapping');
+
+ $displayNameMappingArray = explode("+", $displayNameMapping);
+
+ $attributes['cas_name'] = '';
+
+ foreach ($displayNameMappingArray as $displayNameMapping) {
+
+ if (array_key_exists($displayNameMapping, $casAttributes)) {
+
+ $attributes['cas_name'] .= $casAttributes[$displayNameMapping] . " ";
+ }
+ }
+
+ $attributes['cas_name'] = trim($attributes['cas_name']);
+
+ if ($attributes['cas_name'] === '' && array_key_exists('displayName', $casAttributes)) {
+
+ $attributes['cas_name'] = $casAttributes['displayName'];
+ }
+
+
+ // E-Mail
+ $mailMapping = $this->config->getAppValue($this->appName, 'cas_email_mapping');
+ if (array_key_exists($mailMapping, $casAttributes)) {
+
+ $attributes['cas_email'] = $casAttributes[$mailMapping];
+ } else if (array_key_exists('mail', $casAttributes)) {
+
+ $attributes['cas_email'] = $casAttributes['mail'];
+ }
+
+
+ // Group handling
+ $groupMapping = $this->config->getAppValue($this->appName, 'cas_group_mapping');
+ $defaultGroup = $this->config->getAppValue($this->appName, 'cas_default_group');
+ # Test for mapped attribute from settings
+ if (array_key_exists($groupMapping, $casAttributes)) {
+
+ $attributes['cas_groups'] = $casAttributes[$groupMapping];
+ } # Test for standard 'groups' attribute
+ else if (array_key_exists('groups', $casAttributes)) {
+
+ $attributes['cas_groups'] = $casAttributes['groups'];
+ } else if (is_string($defaultGroup) && strlen($defaultGroup) > 0) {
+
+ $attributes['cas_groups'] = array($defaultGroup);
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, 'Using default group "' . $defaultGroup . '" for the user: ' . $uid);
+ }
+
+ // Group Quota handling
+ $groupQuotas = $this->config->getAppValue($this->appName, 'cas_access_group_quotas');
+ $groupQuotas = explode(",", $groupQuotas);
+
+ foreach ($groupQuotas as $groupQuota) {
+
+ $groupQuota = explode(":", $groupQuota);
+
+ if (is_array($groupQuota) && count($groupQuota) === 2) {
+
+ $attributes['cas_group_quota'][$groupQuota[0]] = $groupQuota[1];
+ }
+ }
+
+ // User Quota handling
+ // Overwrites group quota
+ $userQuotaMapping = $this->config->getAppValue($this->appName, 'cas_quota_mapping');
+
+ #$this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, 'phpCas quota-mapping-contents: '.$userQuotaMapping);
+
+ if (array_key_exists($userQuotaMapping, $casAttributes)) {
+
+ $attributes['cas_quota'] = $casAttributes[$userQuotaMapping];
+ } else if (array_key_exists('quota', $casAttributes)) {
+
+ $attributes['cas_quota'] = $casAttributes['quota'];
+ }
+
+ // Try to update user attributes
+ $this->userService->updateUser($user, $attributes);
+ }
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, 'phpCas post login hook finished.');
+ }
+ } else {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, 'phpCas post login hook NOT triggered. User: ' . $uid);
+ }
+
+ return TRUE;
+ }
+
+ /**
+ * Logout hook method.
+ *
+ * @return boolean
+ */
+ public function postLogout()
+ {
+
+ if (!$this->appService->isCasInitialized()) {
+
+ try {
+
+ $this->appService->init();
+ } catch (PhpUserCasLibraryNotFoundException $e) {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::FATAL, 'Fatal error with code: ' . $e->getCode() . ' and message: ' . $e->getMessage());
+
+ return FALSE;
+ }
+ };
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, 'Logout hook triggered.');
+
+ if (!boolval($this->config->getAppValue($this->appName, 'cas_disable_logout'))) {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, 'phpCAS logging out.');
+
+ # Reset cookie
+ setcookie("user_cas_redirect_url", '/', 0, '/');
+
+ \phpCAS::logout(array("service" => $this->appService->getAbsoluteURL('/')));
+
+ } else {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, 'phpCAS not logging out, because CAS logout was disabled.');
+ }
+
+ return TRUE;
+ }
+
+
+ /**
+ * Convert CAS Attribute values for debug reasons
+ *
+ * @param $attributes
+ * @return string
+ */
+ private function convertArrayAttributeValuesForDebug($attributes)
+ {
+
+ if (is_array($attributes)) {
+ $stringValue = '';
+
+ foreach ($attributes as $attribute) {
+
+ if (is_array($attribute)) {
+
+ $stringValue .= $this->convertArrayAttributeValuesForDebug($attribute);
+ } else {
+
+ $stringValue .= $attribute . ", ";
+ }
+ }
+
+ return $stringValue;
+ }
+
+ return $attributes;
+ }
+}
\ No newline at end of file
diff --git a/docker/volume/nextcloud/envole/app/user_cas/lib/Panels/Admin.php b/docker/volume/nextcloud/envole/app/user_cas/lib/Panels/Admin.php
new file mode 100644
index 0000000..0086aeb
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/lib/Panels/Admin.php
@@ -0,0 +1,136 @@
+
+ * @copyright Felix Rupp
+ *
+ * This library is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or any later version.
+ *
+ * This library is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU AFFERO GENERAL PUBLIC LICENSE for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public
+ * License along with this library. If not, see
+ * @copyright Felix Rupp
+ *
+ * @since 1.5
+ */
+class Admin implements ISettings
+{
+
+ /**
+ * @var array
+ */
+ private $params = array('cas_server_version', 'cas_server_hostname', 'cas_server_port', 'cas_server_path', 'cas_force_login', 'cas_force_login_exceptions','cas_autocreate',
+ 'cas_update_user_data', 'cas_keep_ticket_ids', 'cas_login_button_label', 'cas_protected_groups', 'cas_default_group', 'cas_ecas_attributeparserenabled', 'cas_userid_mapping', 'cas_email_mapping', 'cas_displayName_mapping', 'cas_group_mapping', 'cas_quota_mapping',
+ 'cas_cert_path', 'cas_debug_file', 'cas_php_cas_path', 'cas_link_to_ldap_backend', 'cas_disable_logout', 'cas_disable_singlesignout', 'cas_handlelogout_servers', 'cas_service_url', 'cas_access_allow_groups',
+ 'cas_access_group_quotas', 'cas_groups_letter_filter', 'cas_groups_letter_umlauts', 'cas_groups_json_decode', 'cas_groups_create_default_for_user', 'cas_groups_create_default_for_user_prefix',
+ 'cas_import_ad_protocol', 'cas_import_ad_host', 'cas_import_ad_port', 'cas_import_ad_user', 'cas_import_ad_domain', 'cas_import_ad_password', 'cas_import_ad_base_dn', 'cas_import_ad_sync_filter', 'cas_import_ad_sync_pagesize',
+ 'cas_import_map_uid', 'cas_import_map_displayname', 'cas_import_map_email', 'cas_import_map_groups', 'cas_import_map_groups_description', 'cas_import_map_quota', 'cas_import_map_enabled', 'cas_import_map_enabled_and_bitwise', 'cas_import_map_dn_filter', 'cas_import_map_dn', 'cas_import_merge', 'cas_import_merge_enabled',
+ 'cas_ecas_accepted_strengths', 'cas_ecas_retrieve_groups','cas_ecas_request_full_userdetails', 'cas_ecas_assurance_level','cas_use_proxy', 'cas_ecas_internal_ip_range', 'cas_shares_protected');
+
+ /**
+ * @var IConfig
+ */
+ private $config;
+
+ /**
+ * Admin constructor.
+ *
+ * @param IConfig $config
+ */
+ public function __construct(IConfig $config)
+ {
+ $this->config = $config;
+ }
+
+ /**
+ * @return string
+ */
+ public function getSectionID()
+ {
+ return 'authentication';
+ }
+
+ /**
+ * @see Nextcloud 13 support
+ *
+ * @return string
+ *
+ * @since 1.5.0
+ */
+ public function getSection()
+ {
+ return 'security';
+ }
+
+ /**
+ * @return int
+ */
+ public function getPriority()
+ {
+ return 50;
+ }
+
+ /**
+ * Get Panel
+ *
+ * @return Template
+ */
+ public function getPanel()
+ {
+
+ $tmpl = new Template('user_cas', 'admin');
+
+ foreach ($this->params as $param) {
+
+ $value = htmlentities($this->config->getAppValue('user_cas', $param));
+
+ $tmpl->assign($param, $value);
+ }
+
+ return $tmpl;
+ }
+
+ /**
+ * @see Nextcloud 13 support
+ *
+ * @return TemplateResponse
+ *
+ * @since 1.5.0
+ */
+ public function getForm()
+ {
+
+ $parameters = array();
+
+ foreach ($this->params as $param) {
+
+ $parameters[$param] = htmlentities($this->config->getAppValue('user_cas', $param));
+ }
+
+ return new TemplateResponse('user_cas', 'admin', $parameters);
+ }
+}
\ No newline at end of file
diff --git a/docker/volume/nextcloud/envole/app/user_cas/lib/Service/AppService.php b/docker/volume/nextcloud/envole/app/user_cas/lib/Service/AppService.php
new file mode 100644
index 0000000..ad7e722
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/lib/Service/AppService.php
@@ -0,0 +1,1026 @@
+
+ * @copyright Felix Rupp
+ *
+ * This library is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or any later version.
+ *
+ * This library is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU AFFERO GENERAL PUBLIC LICENSE for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public
+ * License along with this library. If not, see
+ * @copyright Felix Rupp
+ *
+ * @since 1.4.0
+ */
+class AppService
+{
+
+ /**
+ * @var string $appName
+ */
+ private $appName;
+
+ /**
+ * @var \OCP\IConfig $appConfig
+ */
+ private $config;
+
+ /**
+ * @var \OCA\UserCAS\Service\LoggingService
+ */
+ private $loggingService;
+
+ /**
+ * @var \OCP\IUserManager $userManager
+ */
+ private $userManager;
+
+ /**
+ * @var \OCP\IUserSession $userSession
+ */
+ private $userSession;
+
+ /**
+ * @var \OCP\IURLGenerator $urlGenerator
+ */
+ private $urlGenerator;
+
+ /**
+ * @var IAppManager $appManager
+ */
+ private $appManager;
+
+ /**
+ * @var string
+ */
+ private $casVersion;
+
+ /**
+ * @var string
+ */
+ private $casHostname;
+
+ /**
+ * @var int
+ */
+ private $casPort;
+
+ /**
+ * @var string
+ */
+ private $casPath;
+
+ /**
+ * @var string
+ */
+ private $casDebugFile;
+
+ /**
+ * @var string
+ */
+ private $casCertPath;
+
+ /**
+ * @var string
+ */
+ private $casPhpFile;
+
+ /**
+ * @var string
+ */
+ private $casServiceUrl;
+
+ /**
+ * @var boolean
+ */
+ private $casDisableLogout;
+
+ /**
+ * @var boolean
+ */
+ private $casDisableSinglesignout;
+
+ /**
+ * @var array
+ */
+ private $casHandleLogoutServers;
+
+ /**
+ * @var boolean
+ */
+ private $casKeepTicketIds;
+
+ /**
+ * @var string
+ */
+ private $cas_ecas_accepted_strengths;
+
+ /**
+ * @var string
+ */
+ private $cas_ecas_retrieve_groups;
+
+ /**
+ * @var string
+ */
+ private $cas_ecas_assurance_level;
+
+ /**
+ * @var boolean
+ */
+ private $cas_ecas_request_full_userdetails;
+
+ /**
+ * @var string
+ */
+ private $cas_ecas_internal_ip_range;
+
+ /**
+ * @var boolean
+ */
+ private $casInitialized;
+
+ /**
+ * @var boolean
+ */
+ private $ecasAttributeParserEnabled;
+
+ /**
+ * @var boolean
+ */
+ private $casUseProxy;
+
+ /**
+ * UserService constructor.
+ * @param $appName
+ * @param \OCP\IConfig $config
+ * @param \OCA\UserCAS\Service\LoggingService $loggingService
+ * @param \OCP\IUserManager $userManager
+ * @param \OCP\IUserSession $userSession
+ * @param \OCP\IURLGenerator $urlGenerator
+ * @param IAppManager $appManager
+ */
+ public function __construct($appName, IConfig $config, LoggingService $loggingService, IUserManager $userManager, IUserSession $userSession, IURLGenerator $urlGenerator, IAppManager $appManager)
+ {
+
+ $this->appName = $appName;
+ $this->config = $config;
+ $this->loggingService = $loggingService;
+ $this->userManager = $userManager;
+ $this->userSession = $userSession;
+ $this->urlGenerator = $urlGenerator;
+ $this->appManager = $appManager;
+ $this->casInitialized = FALSE;
+ }
+
+
+ /**
+ * init method.
+ * @throws PhpUserCasLibraryNotFoundException
+ */
+ public function init()
+ {
+
+ $serverHostName = (isset($_SERVER['SERVER_NAME'])) ? $_SERVER['SERVER_NAME'] : '';
+
+ // Gather all app config values
+ $this->casVersion = $this->config->getAppValue($this->appName, 'cas_server_version', '3.0');
+ $this->casHostname = $this->config->getAppValue($this->appName, 'cas_server_hostname', $serverHostName);
+ $this->casPort = intval($this->config->getAppValue($this->appName, 'cas_server_port', 443));
+ $this->casPath = $this->config->getAppValue($this->appName, 'cas_server_path', '/cas');
+ $this->casServiceUrl = $this->config->getAppValue($this->appName, 'cas_service_url', '');
+ $this->casCertPath = $this->config->getAppValue($this->appName, 'cas_cert_path', '');
+
+
+ // Correctly handle cas server path for document root
+ if ($this->casPath === '/') {
+ $this->casPath = '';
+ }
+
+ $this->casUseProxy = boolval($this->config->getAppValue($this->appName, 'cas_use_proxy', false));
+ $this->casDisableLogout = boolval($this->config->getAppValue($this->appName, 'cas_disable_logout', false));
+ $this->casDisableSinglesignout = boolval($this->config->getAppValue($this->appName, 'cas_disable_singlesignout', false));
+ $logoutServersArray = explode(",", $this->config->getAppValue($this->appName, 'cas_handlelogout_servers', ''));
+ $this->casHandleLogoutServers = array();
+ $this->casKeepTicketIds = boolval($this->config->getAppValue($this->appName, 'cas_keep_ticket_ids', false));
+
+ # ECAS
+ $this->ecasAttributeParserEnabled = boolval($this->config->getAppValue($this->appName, 'cas_ecas_attributeparserenabled', false));
+ $this->cas_ecas_request_full_userdetails = boolval($this->config->getAppValue($this->appName, 'cas_ecas_request_full_userdetails', false));
+ $this->cas_ecas_accepted_strengths = $this->config->getAppValue($this->appName, 'cas_ecas_accepted_strengths');
+ $this->cas_ecas_retrieve_groups = $this->config->getAppValue($this->appName, 'cas_ecas_retrieve_groups');
+ $this->cas_ecas_assurance_level = $this->config->getAppValue($this->appName, 'cas_ecas_assurance_level');
+ $this->cas_ecas_internal_ip_range = $this->config->getAppValue($this->appName, 'cas_ecas_internal_ip_range');
+
+
+ foreach ($logoutServersArray as $casHandleLogoutServer) {
+
+ $casHandleLogoutServer = ltrim(trim($casHandleLogoutServer));
+
+ if (strlen($casHandleLogoutServer) > 4) {
+
+ $this->casHandleLogoutServers[] = $casHandleLogoutServer;
+ }
+ }
+
+ $this->casDebugFile = $this->config->getAppValue($this->appName, 'cas_debug_file', '');
+ $this->casPhpFile = $this->config->getAppValue($this->appName, 'cas_php_cas_path', '');
+
+ if (is_string($this->casPhpFile) && strlen($this->casPhpFile) > 0) {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, 'Use custom phpCAS file:: ' . $this->casPhpFile);
+ #\OCP\Util::writeLog('cas', 'Use custom phpCAS file:: ' . $this->casPhpFile, \OCA\UserCas\Service\LoggingService::DEBUG);
+
+ if (is_file($this->casPhpFile)) {
+
+ require_once("$this->casPhpFile");
+ } else {
+
+ throw new PhpUserCasLibraryNotFoundException('Your custom phpCAS library could not be loaded. The class was not found. Please disable the app with ./occ command or in Database and adjust the path to your library (or remove it to use the shipped library).', 500);
+ }
+
+ } else {
+
+ if (is_file(__DIR__ . '/../../vendor/jasig/phpcas/CAS.php')) {
+
+ require_once(__DIR__ . '/../../vendor/jasig/phpcas/CAS.php');
+ } else {
+
+ throw new PhpUserCasLibraryNotFoundException('phpCAS library could not be loaded. The class was not found.', 500);
+ }
+ }
+
+ if (!class_exists('\\phpCAS')) {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::ERROR, 'phpCAS library could not be loaded. The class was not found.');
+
+ throw new PhpUserCasLibraryNotFoundException('phpCAS library could not be loaded. The class was not found.', 500);
+ }
+
+ if (!\phpCAS::isInitialized()) {
+
+ try {
+
+ \phpCAS::setVerbose(FALSE);
+
+ if (!empty($this->casDebugFile)) {
+
+ \phpCAS::setDebug($this->casDebugFile);
+ \phpCAS::setVerbose(TRUE);
+ }
+
+ $serviceBasedUrl = $this->getServiceBasedUrl();
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::ERROR, 'MON SERVICE BASE = '.$serviceBasedUrl);
+
+ # Initialize client
+ if ($this->casUseProxy) {
+
+ \phpCAS::proxy($this->casVersion, $this->casHostname, (int)($this->casPort), $this->casPath, $serviceBasedUrl);
+ } else {
+
+ \phpCAS::client($this->casVersion, $this->casHostname, (int)($this->casPort), $this->casPath, $serviceBasedUrl);
+ }
+
+ # Handle SingleSignout requests
+ if (!$this->casDisableSinglesignout) {
+
+ \phpCAS::setSingleSignoutCallback([$this, 'casSingleSignOut']);
+ \phpCAS::handleLogoutRequests(true, $this->casHandleLogoutServers);
+ }
+
+ # Handle fixed service URL
+ if (!empty($this->casServiceUrl)) {
+
+ \phpCAS::setFixedServiceURL($this->casServiceUrl);
+ }
+
+ # Handle certificate
+ if (!empty($this->casCertPath)) {
+
+ \phpCAS::setCasServerCACert($this->casCertPath);
+ } else {
+
+ \phpCAS::setNoCasServerValidation();
+ }
+
+ # Handle keeping of cas-ticket-ids
+ if ($this->casKeepTicketIds) {
+
+ \phpCAS::setNoClearTicketsFromUrl();
+ }
+
+ # Handle ECAS Attributes if enabled
+ if ($this->ecasAttributeParserEnabled) {
+
+ if (is_file(__DIR__ . '/../../vendor/ec-europa/ecas-phpcas-parser/src/EcasPhpCASParser.php')) {
+
+ require_once(__DIR__ . '/../../vendor/ec-europa/ecas-phpcas-parser/src/EcasPhpCASParser.php');
+ } else {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::ERROR, 'phpCAS EcasPhpCASParser library could not be loaded. The class was not found.');
+
+ throw new PhpUserCasLibraryNotFoundException('phpCAS EcasPhpCASParser could not be loaded. The class was not found.', 500);
+ }
+
+ # Register the parser
+ \phpCAS::setCasAttributeParserCallback(array(new \EcasPhpCASParser\EcasPhpCASParser(), 'parse'));
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, "phpCAS EcasPhpCASParser has been successfully set.");
+ }
+
+ #### Register the new ticket validation url
+ if ((is_string($this->cas_ecas_retrieve_groups) && strlen($this->cas_ecas_retrieve_groups) > 0)
+ || ($this->cas_ecas_request_full_userdetails)
+ || (is_string($this->cas_ecas_assurance_level) && strlen($this->cas_ecas_assurance_level) > 0)
+ || (is_string($this->cas_ecas_accepted_strengths) && strlen($this->cas_ecas_accepted_strengths) > 0)) {
+
+
+ ## Check for external IP Ranges to en-/disable the Two-Factor-Authentication (AcceptedStrength at least MEDIUM)
+ if ($this->isIpInLocalRange($this->cas_ecas_internal_ip_range) && $this->cas_ecas_accepted_strengths !== '') {
+
+ $this->cas_ecas_accepted_strengths = 'BASIC';
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, "phpCAS ECAS AcceptedStrength Level is forced to BASIC, because the user is in the internal network. Test Address: " . $endIp . " | Users Remote Address: " . $remoteAddress);
+ }
+
+ # Add acceptedStrength Querystring Parameters
+ if (is_string($this->cas_ecas_accepted_strengths) && strlen($this->cas_ecas_accepted_strengths) > 0) {
+
+ # Register the new login url
+ $serverLoginUrl = \phpCAS::getServerLoginURL();
+
+ $serverLoginUrl = $this->buildQueryUrl($serverLoginUrl, 'acceptStrengths=' . urlencode($this->cas_ecas_accepted_strengths));
+
+ \phpCAS::setServerLoginURL($serverLoginUrl);
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, "phpCAS ECAS strength attribute has been successfully set. New service login URL: " . $serverLoginUrl);
+ }
+
+ ## Change validation URL based on ECAS assuranceLevel
+ $newProtocol = 'http://';
+ $newUrl = '';
+ $newSamlUrl = '';
+
+ if ($this->getCasPort() === 443) {
+
+ $newProtocol = 'https://';
+ }
+
+ if ($this->getCasVersion() === "1.0") {
+
+ $newUrl = $newProtocol . $this->getCasHostname() . $this->getCasPath() . '/validate';
+ } else if ($this->getCasVersion() === "2.0") {
+
+ $newUrl = $newProtocol . $this->getCasHostname() . $this->getCasPath() . '/serviceValidate';
+ } else if ($this->getCasVersion() === "3.0") {
+
+ $newUrl = $newProtocol . $this->getCasHostname() . $this->getCasPath() . '/p3/serviceValidate';
+ } else if ($this->getCasVersion() === "S1") {
+
+ $newSamlUrl = $newProtocol . $this->getCasHostname() . $this->getCasPath() . '/samlValidate';
+ }
+
+ if (is_string($this->cas_ecas_assurance_level) && $this->cas_ecas_assurance_level === 'LOW') {
+
+ $newUrl = $newProtocol . $this->getCasHostname() . $this->getCasPath() . '/laxValidate';
+ } else if (is_string($this->cas_ecas_assurance_level) && $this->cas_ecas_assurance_level === 'MEDIUM') {
+
+ $newUrl = $newProtocol . $this->getCasHostname() . $this->getCasPath() . '/sponsorValidate';
+ } else if (is_string($this->cas_ecas_assurance_level) && $this->cas_ecas_assurance_level === 'HIGH') {
+
+ $newUrl = $newProtocol . $this->getCasHostname() . $this->getCasPath() . '/interinstitutionalValidate';
+ } else if (is_string($this->cas_ecas_assurance_level) && $this->cas_ecas_assurance_level === 'TOP') {
+
+ $newUrl = $newProtocol . $this->getCasHostname() . $this->getCasPath() . '/strictValidate';
+ }
+
+ if (!empty($this->casServiceUrl)) {
+
+ $newUrl = $this->buildQueryUrl($newUrl, 'service=' . urlencode($this->casServiceUrl));
+ $newSamlUrl = $this->buildQueryUrl($newSamlUrl, 'TARGET=' . urlencode($this->casServiceUrl));
+ } else {
+
+ $newUrl = $this->buildQueryUrl($newUrl, 'service=' . urlencode(\phpCAS::getServiceURL()));
+ $newSamlUrl = $this->buildQueryUrl($newSamlUrl, 'TARGET=' . urlencode(\phpCAS::getServiceURL()));
+ }
+
+ # Add the groups to retrieve
+ if (is_string($this->cas_ecas_retrieve_groups) && strlen($this->cas_ecas_retrieve_groups) > 0) {
+
+ $newUrl = $this->buildQueryUrl($newUrl, 'groups=' . urlencode($this->cas_ecas_retrieve_groups));
+ $newSamlUrl = $this->buildQueryUrl($newSamlUrl, 'groups=' . urlencode($this->cas_ecas_retrieve_groups));
+ }
+
+ # Add the requestFullUserDetails flag
+ if ($this->cas_ecas_request_full_userdetails) {
+
+ $newUrl = $this->buildQueryUrl($newUrl, 'userDetails=' . urlencode('true'));
+ $newSamlUrl = $this->buildQueryUrl($newSamlUrl, 'userDetails=' . urlencode('true'));
+ }
+
+ # Set the user agent to mimic an ecas client
+ $userAgent = sprintf("ECAS PHP Client (%s, %s)",
+ '2.1.3',
+ $_SERVER['SERVER_SOFTWARE']);
+ \phpCAS::setExtraCurlOption(CURLOPT_USERAGENT, $userAgent);
+
+ # Set the new URLs
+ if ($this->getCasVersion() !== "S1" && !empty($newUrl)) {
+
+ \phpCAS::setServerServiceValidateURL($newUrl);
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, "phpCAS ECAS additional attributes have been successfully set. New CAS " . $this->getCasVersion() . " service validate URL: " . $newUrl);
+
+ } elseif ($this->getCasVersion() === "S1" && !empty($newSamlUrl)) {
+
+ \phpCAS::setServerSamlValidateURL($newSamlUrl);
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, "phpCAS ECAS additional attributes have been successfully set. New SAML 1.0 service validate URL: " . $newSamlUrl);
+ }
+ }
+
+
+ $this->casInitialized = TRUE;
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, "phpCAS has been successfully initialized.");
+
+ } catch (\CAS_Exception $e) {
+
+ \phpCAS::setVerbose(TRUE);
+
+ $this->casInitialized = FALSE;
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::ERROR, "phpCAS has thrown an exception with code: " . $e->getCode() . " and message: " . $e->getMessage() . ".");
+ }
+ } else {
+
+ $this->casInitialized = TRUE;
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, "phpCAS has already been initialized.");
+ }
+ }
+
+ /**
+ * Test if the instance is not a Nextcloud instance
+ *
+ * @return bool
+ */
+ public function isNotNextcloud()
+ {
+
+ require __DIR__ . '/../../../../version.php';
+
+ /**
+ * @var string $vendor The vendor of this instance
+ */
+
+ #$this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, "phpCAS vendor: ".$vendor);
+
+ if (strpos(strtolower($vendor), 'next') === FALSE) {
+
+ return TRUE;
+ }
+
+ return FALSE;
+ }
+
+ /**
+ * Check if login should be enforced using user_cas.
+ *
+ * @param $remoteAddress
+ * @param string $requestUri
+ * @return bool TRUE|FALSE
+ */
+ public function isEnforceAuthentication($remoteAddress, $requestUri)
+ {
+
+ $isEnforced = TRUE;
+
+ $forceLoginExceptions = $this->config->getAppValue($this->appName, 'cas_force_login_exceptions', '');
+ $forceLoginExceptionsArray = explode(',', $forceLoginExceptions);
+
+ # Enforce off
+ if ($this->config->getAppValue($this->appName, 'cas_force_login') !== '1') {
+
+ $isEnforced = FALSE;
+ } else {
+
+ # Check enforce IP ranges
+ foreach ($forceLoginExceptionsArray as $forceLoginException) {
+
+ $forceLoginExceptionRanges = explode('-', $forceLoginException);
+
+ if (isset($forceLoginExceptionRanges[0])) {
+
+ if (isset($forceLoginExceptionRanges[1])) {
+
+ $baseIpComponents = explode('.', $forceLoginExceptionRanges[0]);
+
+ $baseIp = $baseIpComponents[0] . '.' . $baseIpComponents[1] . '.';
+
+ $additionalIpComponents = explode('.', $forceLoginExceptionRanges[1]);
+
+ if (isset($additionalIpComponents[1]) && $additionalIpComponents[0]) {
+
+ # We have a two part range here (eg. 127.0.0.1-1.19) which means, we have to cover 127.0.0.1-127.0.0.254 and 127.0.1.1-127.0.1.19
+
+ for ($ipThirdPart = intval($baseIpComponents[2]); $ipThirdPart <= intval($additionalIpComponents[0]); $ipThirdPart++) {
+
+ if ($ipThirdPart !== intval($additionalIpComponents[0])) {
+
+ $ipFourthPartMax = 254;
+ } else {
+
+ $ipFourthPartMax = intval($additionalIpComponents[1]);
+ }
+
+ for ($ipFourthPart = intval($baseIpComponents[3]); $ipFourthPart <= $ipFourthPartMax; $ipFourthPart++) {
+
+ $endIp = $baseIp . $ipThirdPart . '.' . $ipFourthPart;
+
+ #$this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, "phpCAS Enforce Login IP checked: " . $endIp);
+
+ if ($remoteAddress === $endIp) {
+
+ $isEnforced = FALSE;
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, "phpCAS Enforce Login NOT triggered. Test Address: " . $endIp . " | Users Remote Address: " . $remoteAddress);
+ }
+ }
+ }
+
+ } elseif ($additionalIpComponents[0]) {
+
+ # We have a one part range here (eg. 127.0.0.1-19)
+
+ $newIp = $baseIp . $baseIpComponents[2] . '.';
+
+ for ($ipFourthPart = intval($baseIpComponents[3]); $ipFourthPart <= intval($additionalIpComponents[0]); $ipFourthPart++) {
+
+ $endIp = $newIp . $ipFourthPart;
+
+ if ($remoteAddress === $endIp) {
+
+ $isEnforced = FALSE;
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, "phpCAS Enforce Login NOT triggered. Test Address: " . $endIp . " | Users Remote Address: " . $remoteAddress);
+ }
+ }
+ }
+ } else {
+
+ # Single IP-Adress given
+ if ($remoteAddress === $forceLoginExceptionRanges[0]) {
+
+ $isEnforced = FALSE;
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, "phpCAS Enforce Login NOT triggered. Test Address: " . $forceLoginExceptionRanges[0] . " | Users Remote Address: " . $remoteAddress);
+ }
+ }
+ }
+ }
+ }
+
+ # User already logged in
+ if ($this->userSession->isLoggedIn()) {
+
+ $isEnforced = FALSE;
+ }
+
+ # Disable on Nextcloud login-flow use
+ if (!$this->isNotNextcloud() && strpos($requestUri, "/login/flow") !== FALSE) {
+
+ $isEnforced = FALSE;
+ }
+
+ return $isEnforced;
+ }
+
+ /**
+ * Check if public shares should be protected
+ *
+ * @return bool TRUE|FALSE
+ */
+ public function arePublicSharesProtected()
+ {
+ $protected = (bool)$this->config->getAppValue($this->appName, 'cas_shares_protected', FALSE);
+ $loggedIn = $this->userSession->isLoggedIn();
+
+ if($loggedIn && $protected) {
+ $protected = FALSE;
+ }
+
+ return $protected;
+ }
+
+ /**
+ * Register Login
+ *
+ */
+ public function registerLogIn()
+ {
+
+ $loginButtonLabel = $this->config->getAppValue($this->appName, 'cas_login_button_label', 'CAS Login');
+
+ // Login Button handling
+ if (strlen($loginButtonLabel) <= 0) {
+
+ $loginButtonLabel = 'CAS Login';
+ }
+
+ $this->unregisterLogin();
+
+ if ($this->isNotNextcloud()) {
+
+ /** @var array $loginAlternatives */
+ /*$loginAlternatives = $this->config->getSystemValue('login.alternatives', []);
+
+ $loginAlreadyRegistered = FALSE;
+
+ foreach ($loginAlternatives as $key => $loginAlternative) {
+
+ if (isset($loginAlternative['name']) && $loginAlternative['name'] === $loginButtonLabel) {
+
+ $loginAlternatives[$key]['href'] = $this->linkToRoute($this->appName . '.authentication.casLogin');
+ $this->config->setSystemValue('login.alternatives', $loginAlternatives);
+ $loginAlreadyRegistered = TRUE;
+ }
+ }
+
+ if (!$loginAlreadyRegistered) {*/
+
+ $loginAlternatives[] = ['href' => $this->linkToRoute($this->appName . '.authentication.casLogin'), 'name' => $loginButtonLabel, 'img' => $this->appManager->getAppWebPath($this->appName).'/img/cas-logo.png'];
+
+ $this->config->setSystemValue('login.alternatives', $loginAlternatives);
+ #}
+ } else {
+
+ #$this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, "phpCAS Nextcloud " . $version[0] . "." . $version[1] . "." . $version[2] . "." . " detected.");
+ \OC_App::registerLogIn(array('href' => $this->linkToRoute($this->appName . '.authentication.casLogin'), 'name' => $loginButtonLabel));
+ }
+ }
+
+ /**
+ * UnregisterLogin
+ */
+ public function unregisterLogin()
+ {
+
+ $loginButtonLabel = $this->config->getAppValue($this->appName, 'cas_login_button_label', 'CAS Login');
+
+ // Login Button handling
+ if (strlen($loginButtonLabel) <= 0) {
+
+ $loginButtonLabel = 'CAS Login';
+ }
+
+ if ($this->isNotNextcloud()) {
+
+ $loginAlternatives = $this->config->getSystemValue('login.alternatives', []);
+
+ foreach ($loginAlternatives as $key => $loginAlternative) {
+
+ if (isset($loginAlternative['name']) && ($loginAlternative['name'] === $loginButtonLabel || $loginAlternative['name'] === 'CAS Login')) {
+
+ unset($loginAlternatives[$key]);
+ }
+ }
+
+ $this->config->setSystemValue('login.alternatives', $loginAlternatives);
+ }
+ }
+
+ /**
+ * @return bool
+ */
+ public function isSetupValid()
+ {
+
+ $casHostname = $this->config->getAppValue($this->appName, 'cas_server_hostname');
+ $casPort = intval($this->config->getAppValue($this->appName, 'cas_server_port'));
+ $casPath = $this->config->getAppValue($this->appName, 'cas_server_path');
+
+ if (is_string($casHostname) && strlen($casHostname) > 1 && is_int($casPort) && $casPort > 1 && is_string($casPath) && strpos($casPath, "/") === 0) {
+
+ return TRUE;
+ }
+
+ return FALSE;
+ }
+
+ /**
+ * Create a link to $route with URLGenerator.
+ *
+ * @param string $route
+ * @param array $arguments
+ * @return string
+ */
+ public function linkToRoute($route, $arguments = array())
+ {
+
+ return $this->urlGenerator->linkToRoute($route, $arguments);
+ }
+
+ /**
+ * Create an absolute link to $route with URLGenerator.
+ *
+ * @param string $route
+ * @param array $arguments
+ * @return string
+ */
+ public function linkToRouteAbsolute($route, $arguments = array())
+ {
+
+ return $this->urlGenerator->linkToRouteAbsolute($route, $arguments);
+ }
+
+ /**
+ * Create an url relative to owncloud host
+ *
+ * @param string $url
+ * @return mixed
+ */
+ public function getAbsoluteURL($url)
+ {
+
+ return $this->urlGenerator->getAbsoluteURL($url);
+ }
+
+ /**
+ * @return boolean
+ */
+ public function isCasInitialized()
+ {
+ return $this->casInitialized;
+ }
+
+ /**
+ * This method is used to append query parameters to an url. Since the url
+ * might already contain parameter it has to be detected and to build a proper
+ * URL
+ *
+ * @param string $url base url to add the query params to
+ * @param string $query params in query form with & separated
+ *
+ * @return string url with query params
+ */
+ private function buildQueryUrl($url, $query)
+ {
+ $url .= (strstr($url, '?') === false) ? '?' : '&';
+ $url .= $query;
+ return $url;
+ }
+
+
+ /**
+ * Test if the client’s IP adress is in our local range
+ *
+ * @param string|array $internalIps
+ * @return bool TRUE|FALSE
+ */
+ private function isIpInLocalRange($internalIps)
+ {
+
+ if (is_string($internalIps)) {
+
+ $internalIps = explode(',', $internalIps);
+ }
+
+ $remoteAddress = $_SERVER['REMOTE_ADDR'];
+
+ $proxyHeader = "HTTP_X_FORWARDED_FOR";
+
+ # Header can contain multiple IP-s of proxies that are passed through.
+ # Only the IP added by the last proxy (last IP in the list) can be trusted.
+ if (array_key_exists($proxyHeader, $_SERVER)) {
+
+ $explodedProxyHeader = explode(",", $_SERVER[$proxyHeader]);
+ $proxyIp = trim(end($explodedProxyHeader));
+
+ if (filter_var($proxyIp, FILTER_VALIDATE_IP)) {
+
+ $remoteAddress = $proxyIp;
+ }
+ }
+
+ # Check enforce IP ranges for acceptedStrength attribute
+ foreach ($internalIps as $internalIp) {
+
+ $internalIpRanges = explode('-', $internalIp);
+
+ if (isset($internalIpRanges[0])) {
+
+ if (isset($internalIpRanges[1])) {
+
+ $baseIpComponents = explode('.', $internalIpRanges[0]);
+
+ $baseIp = $baseIpComponents[0] . '.' . $baseIpComponents[1] . '.';
+
+ $additionalIpComponents = explode('.', $internalIpRanges[1]);
+
+ if (isset($additionalIpComponents[1]) && $additionalIpComponents[0]) {
+
+ # We have a two part range here (eg. 127.0.0.1-1.19) which means, we have to cover 127.0.0.1-127.0.0.254 and 127.0.1.1-127.0.1.19
+
+ for ($ipThirdPart = intval($baseIpComponents[2]); $ipThirdPart <= intval($additionalIpComponents[0]); $ipThirdPart++) {
+
+ if ($ipThirdPart !== intval($additionalIpComponents[0])) {
+
+ $ipFourthPartMax = 254;
+ } else {
+
+ $ipFourthPartMax = intval($additionalIpComponents[1]);
+ }
+
+ for ($ipFourthPart = intval($baseIpComponents[3]); $ipFourthPart <= $ipFourthPartMax; $ipFourthPart++) {
+
+ $endIp = $baseIp . $ipThirdPart . '.' . $ipFourthPart;
+
+ #$this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, "phpCAS Enforce Login IP checked: " . $endIp);
+
+ if ($remoteAddress === $endIp) {
+
+ return TRUE;
+
+ /*if ($this->cas_ecas_accepted_strengths !== '') {
+
+ $this->cas_ecas_accepted_strengths = 'BASIC';
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, "phpCAS ECAS AcceptedStrength Level is forced to BASIC, because the user is in the internal network. Test Address: " . $endIp . " | Users Remote Address: " . $remoteAddress);
+ }*/
+ }
+ }
+ }
+
+ } elseif ($additionalIpComponents[0]) {
+
+ # We have a one part range here (eg. 127.0.0.1-19)
+
+ $newIp = $baseIp . $baseIpComponents[2] . '.';
+
+ for ($ipFourthPart = intval($baseIpComponents[3]); $ipFourthPart <= intval($additionalIpComponents[0]); $ipFourthPart++) {
+
+ $endIp = $newIp . $ipFourthPart;
+
+ if ($remoteAddress === $endIp) {
+
+ return TRUE;
+
+ /*if ($this->cas_ecas_accepted_strengths !== '') {
+
+ $this->cas_ecas_accepted_strengths = 'BASIC';
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, "phpCAS ECAS AcceptedStrength is forced to BASIC, because the user is in the internal network. Test Address: " . $endIp . " | Users Remote Address: " . $remoteAddress);
+ }*/
+ }
+ }
+ }
+ } else {
+
+ # Single IP-Adress given
+ if ($remoteAddress === $internalIpRanges[0]) {
+
+ return TRUE;
+
+ /*if ($this->cas_ecas_accepted_strengths !== '') {
+
+ $this->cas_ecas_accepted_strengths = 'BASIC';
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, "phpCAS ECAS AcceptedStrength is forced to BASIC, because the user is in the internal network. Test Address: " . $internalIpRanges[0] . " | Users Remote Address: " . $remoteAddress);
+ }*/
+ }
+ }
+ }
+ }
+
+ return FALSE;
+ }
+
+ /**
+ * Callback function for CAS singleSignOut call
+ *
+ * @author Vincent
+ *
+ * @param string $ticket Ticket Object
+ */
+ public function casSingleSignOut($ticket)
+ {
+ // Extract the userID from the SAML Request
+ $decodedLogoutRequest = urldecode($_POST['logoutRequest']);
+ preg_match(
+ "|]*>(.*)|",
+ $decodedLogoutRequest, $tick, PREG_OFFSET_CAPTURE, 3
+ );
+ $wrappedSamlNameId = preg_replace(
+ '|]*>|', '', $tick[0][0]
+ );
+ $nameId = preg_replace(
+ '||', '', $wrappedSamlNameId
+ );
+
+ //Kill Session Of UserID:
+ $this->killSessionUserName($nameId);
+ }
+
+ /**
+ * Kill the username's session.
+ *
+ * @author Vincent
+ * @author Felix Rupp
+ *
+ * @param string $username The username of the user.
+ * @return NULL
+ */
+ private function killSessionUserName($username)
+ {
+
+ if ($this->userManager->userExists($username)) {
+
+ $tokenType = IToken::TEMPORARY_TOKEN;
+
+ $sql = "DELETE FROM oc_authtoken WHERE uid = ? AND type = ? AND password IS NULL;";
+ $stmt = \OC::$server->getDatabaseConnection()->prepare($sql);
+ $stmt->bindParam(1, $username, \PDO::PARAM_STR);
+ $stmt->bindParam(2, $tokenType, \PDO::PARAM_INT);
+
+ $stmt->execute();
+ }
+
+ return NULL;
+ }
+
+
+ ## Setters/Getters
+
+ /**
+ * @return string
+ */
+ public function getAppName()
+ {
+ return $this->appName;
+ }
+
+ /**
+ * @return string
+ */
+ public function getCasVersion()
+ {
+ return $this->casVersion;
+ }
+
+ /**
+ * @return string
+ */
+ public function getCasHostname()
+ {
+ return $this->casHostname;
+ }
+
+ /**
+ * @return int
+ */
+ public function getCasPort()
+ {
+ return $this->casPort;
+ }
+
+ /**
+ * @return string
+ */
+ public function getCasPath()
+ {
+ return $this->casPath;
+ }
+
+ private function getServiceBasedUrl(): string {
+ $overwrite = \OC::$server->getConfig()->getSystemValue('overwrite.cli.url');
+ if($overwrite) return $overwrite;
+
+ $httpProtocol = \OC::$server->getConfig()->getSystemValue('protocol');
+ $currentUrl = $_SERVER['SERVER_NAME'];
+
+ return $httpProtocol . $currentUrl;
+ }
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/lib/Service/Import/AdImporter.php b/docker/volume/nextcloud/envole/app/user_cas/lib/Service/Import/AdImporter.php
new file mode 100644
index 0000000..d5af4b0
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/lib/Service/Import/AdImporter.php
@@ -0,0 +1,477 @@
+
+ * @copyright Felix Rupp
+ *
+ * @since 1.0.0
+ */
+class AdImporter implements ImporterInterface
+{
+
+ /**
+ * @var boolean|resource
+ */
+ private $ldapConnection;
+
+ /**
+ * @var MergerInterface $merger
+ */
+ private $merger;
+
+ /**
+ * @var LoggerInterface $logger
+ */
+ private $logger;
+
+ /**
+ * @var IConfig
+ */
+ private $config;
+
+ /**
+ * @var string $appName
+ */
+ private $appName = 'user_cas';
+
+
+ /**
+ * AdImporter constructor.
+ * @param IConfig $config
+ */
+ public function __construct(IConfig $config)
+ {
+
+ $this->config = $config;
+ }
+
+
+ /**
+ * @param LoggerInterface $logger
+ *
+ * @throws \Exception
+ */
+ public function init(LoggerInterface $logger)
+ {
+
+ $this->merger = new AdUserMerger($logger);
+ $this->logger = $logger;
+
+ $this->ldapConnect();
+ $this->ldapBind();
+
+ $this->logger->info("Init complete.");
+ }
+
+ /**
+ * @throws \Exception
+ */
+ public function close()
+ {
+
+ $this->ldapClose();
+ }
+
+ /**
+ * Get User data
+ *
+ * @return array User data
+ */
+ public function getUsers()
+ {
+
+ $uidAttribute = $this->config->getAppValue($this->appName, 'cas_import_map_uid');
+
+ $displayNameAttribute1 = $this->config->getAppValue($this->appName, 'cas_import_map_displayname');
+ $displayNameAttribute2 = '';
+
+ if (strpos($displayNameAttribute1, "+") !== FALSE) {
+ $displayNameAttributes = explode("+", $displayNameAttribute1);
+ $displayNameAttribute1 = $displayNameAttributes[0];
+ $displayNameAttribute2 = $displayNameAttributes[1];
+ }
+
+
+ $emailAttribute = $this->config->getAppValue($this->appName, 'cas_import_map_email');
+ $groupsAttribute = $this->config->getAppValue($this->appName, 'cas_import_map_groups');
+ $quotaAttribute = $this->config->getAppValue($this->appName, 'cas_import_map_quota');
+ $enableAttribute = $this->config->getAppValue($this->appName, 'cas_import_map_enabled');
+ $dnAttribute = $this->config->getAppValue($this->appName, 'cas_import_map_dn');
+ $mergeAttribute = boolval($this->config->getAppValue($this->appName, 'cas_import_merge'));
+ $primaryAccountDnStartswWith = $this->config->getAppValue($this->appName, 'cas_import_map_dn_filter');
+ $preferEnabledAccountsOverDisabled = boolval($this->config->getAppValue($this->appName, 'cas_import_merge_enabled'));
+ $andEnableAttributeBitwise = $this->config->getAppValue($this->appName, 'cas_import_map_enabled_and_bitwise');
+
+ $keep = [$uidAttribute, $displayNameAttribute1, $displayNameAttribute2, $emailAttribute, $groupsAttribute, $quotaAttribute, $enableAttribute, $dnAttribute];
+
+ $groupAttrField = $this->config->getAppValue($this->appName, 'cas_import_map_groups_description');
+ $groupsKeep = [$groupAttrField];
+
+ $pageSize = $this->config->getAppValue($this->appName, 'cas_import_ad_sync_pagesize');
+
+ $users = [];
+
+ $this->logger->info("Getting all users from the AD …");
+
+ # Get all members of the sync group
+ $memberPages = $this->getLdapList($this->config->getAppValue($this->appName, 'cas_import_ad_base_dn'), $this->config->getAppValue($this->appName, 'cas_import_ad_sync_filter'), $keep, $pageSize);
+
+ foreach ($memberPages as $memberPage) {
+
+ #var_dump($memberPage["count"]);
+
+ for ($key = 0; $key < $memberPage["count"]; $key++) {
+
+ $m = $memberPage[$key];
+
+ # Each attribute is returned as an array, the first key is [count], [0]+ will contain the actual value(s)
+ $employeeID = isset($m[$uidAttribute][0]) ? $m[$uidAttribute][0] : "";
+ $mail = isset($m[$emailAttribute][0]) ? $m[$emailAttribute][0] : "";
+ $dn = isset($m[$dnAttribute]) ? $m[$dnAttribute] : "";
+
+ $displayName = $employeeID;
+
+ if (isset($m[$displayNameAttribute1][0])) {
+
+ $displayName = $m[$displayNameAttribute1][0];
+
+ if (strlen($displayNameAttribute2) > 0 && isset($m[$displayNameAttribute2][0])) {
+
+ $displayName .= " " . $m[$displayNameAttribute2][0];
+ }
+ } else {
+
+ if (strlen($displayNameAttribute2) > 0 && isset($m[$displayNameAttribute2][0])) {
+
+ $displayName = $m[$displayNameAttribute2][0];
+ }
+ }
+
+ $quota = isset($m[$quotaAttribute][0]) ? intval($m[$quotaAttribute][0]) : 0;
+
+
+ $enable = 1;
+
+ # Shift enable attribute bytewise?
+ if (isset($m[$enableAttribute][0])) {
+
+ if (strlen($andEnableAttributeBitwise) > 0) {
+
+ if (is_numeric($andEnableAttributeBitwise)) {
+
+ $andEnableAttributeBitwise = intval($andEnableAttributeBitwise);
+ }
+
+ $enable = intval((intval($m[$enableAttribute][0]) & $andEnableAttributeBitwise) == 0);
+ } else {
+
+ $enable = intval($m[$enableAttribute][0]);
+ }
+ }
+
+ $groupsArray = [];
+
+ $addUser = FALSE;
+
+ if (isset($m[$groupsAttribute][0])) {
+
+ # Cycle all groups of the user
+ for ($j = 0; $j < $m[$groupsAttribute]["count"]; $j++) {
+
+ # Check if user has MAP_GROUPS attribute
+ if (isset($m[$groupsAttribute][$j])) {
+
+ $addUser = TRUE; # Only add user if the group has a MAP_GROUPS attribute
+
+ $groupCn = $m[$groupsAttribute][$j];
+
+ # Retrieve the MAP_GROUPS_FIELD attribute of the group
+ $groupAttr = $this->getLdapAttributes($groupCn, $groupsKeep);
+ $groupName = '';
+
+ if (isset($groupAttr[$groupAttrField][0])) {
+
+ $groupName = $groupAttr[$groupAttrField][0];
+
+ /*# Replace umlauts
+ if (boolval($this->config->getAppValue($this->appName, 'cas_import_map_groups_letter_umlauts'))) {
+
+ $groupName = str_replace("Ä", "Ae", $groupName);
+ $groupName = str_replace("Ö", "Oe", $groupName);
+ $groupName = str_replace("Ü", "Ue", $groupName);
+ $groupName = str_replace("ä", "ae", $groupName);
+ $groupName = str_replace("ö", "oe", $groupName);
+ $groupName = str_replace("ü", "ue", $groupName);
+ $groupName = str_replace("ß", "ss", $groupName);
+ }
+
+ # Filter unwanted characters
+ $nameFilter = $this->config->getAppValue($this->appName, 'cas_import_map_groups_letter_filter');
+
+ if (strlen($nameFilter) > 0) {
+
+ $groupName = preg_replace("/[^" . $nameFilter . "]+/", "", $groupName);
+ }
+
+ # Filter length to max 64 chars
+ $groupName = substr($groupName, 0, 64);*/
+ }
+ else {
+
+ $groupCnArray = explode(",", $groupCn);
+ $groupName = substr($groupCnArray[0], 3, strlen($groupCnArray[0]));
+ }
+
+ if (strlen($groupName) > 0) {
+
+ $groupsArray[] = $groupName;
+ }
+ }
+ }
+ }
+
+ # Fill the users array only if we have an employeeId and addUser is true
+ if (isset($employeeID) && $addUser) {
+
+ $this->merger->mergeUsers($users, ['uid' => $employeeID, 'displayName' => $displayName, 'email' => $mail, 'quota' => $quota, 'groups' => $groupsArray, 'enable' => $enable, 'dn' => $dn], $mergeAttribute, $preferEnabledAccountsOverDisabled, $primaryAccountDnStartswWith);
+ }
+ }
+ }
+
+ $this->logger->info("Users have been retrieved.");
+
+ return $users;
+ }
+
+
+ /**
+ * List ldap entries in the base dn
+ *
+ * @param string $object_dn
+ * @param $filter
+ * @param array $keepAtributes
+ * @param $pageSize
+ * @return array
+ */
+ protected function getLdapList($object_dn, $filter, $keepAtributes, $pageSize)
+ {
+
+ $cookie = '';
+ $members = [];
+
+ do {
+
+ // Query Group members
+ ldap_control_paged_result($this->ldapConnection, $pageSize, false, $cookie);
+
+ $results = ldap_search($this->ldapConnection, $object_dn, $filter, $keepAtributes/*, array("member;range=$range_start-$range_end")*/) or die('Error searching LDAP: ' . ldap_error($this->ldapConnection));
+ $members[] = ldap_get_entries($this->ldapConnection, $results);
+
+ ldap_control_paged_result_response($this->ldapConnection, $results, $cookie);
+
+ } while ($cookie !== null && $cookie != '');
+
+ // Return sorted member list
+ sort($members);
+
+ return $members;
+ }
+
+
+ /**
+ * @param string $user_dn
+ * @param bool $keep
+ * @return array Attribute list
+ */
+ protected function getLdapAttributes($user_dn, $keep = false)
+ {
+
+ if (!isset($this->ldapConnection)) die('Error, no LDAP connection established');
+ if (empty($user_dn)) die('Error, no LDAP user specified');
+
+ // Disable pagination setting, not needed for individual attribute queries
+ ldap_control_paged_result($this->ldapConnection, 1);
+
+ // Query user attributes
+ $results = (($keep) ? ldap_search($this->ldapConnection, $user_dn, 'cn=*', $keep) : ldap_search($this->ldapConnection, $user_dn, 'cn=*'))
+ or die('Error searching LDAP: ' . ldap_error($this->ldapConnection));
+
+ $attributes = ldap_get_entries($this->ldapConnection, $results);
+
+ $this->logger->debug("AD attributes successfully retrieved.");
+
+ // Return attributes list
+ if (isset($attributes[0])) return $attributes[0];
+ else return array();
+ }
+
+
+ /**
+ * Connect ldap
+ *
+ * @return bool|resource
+ * @throws \Exception
+ */
+ protected function ldapConnect()
+ {
+ try {
+
+ $host = $this->config->getAppValue($this->appName, 'cas_import_ad_host');
+
+ $this->ldapConnection = ldap_connect($this->config->getAppValue($this->appName, 'cas_import_ad_protocol') . $host . ":" . $this->config->getAppValue($this->appName, 'cas_import_ad_port')) or die("Could not connect to " . $host);
+
+ ldap_set_option($this->ldapConnection, LDAP_OPT_PROTOCOL_VERSION, 3);
+ ldap_set_option($this->ldapConnection, LDAP_OPT_REFERRALS, 0);
+ ldap_set_option($this->ldapConnection, LDAP_OPT_NETWORK_TIMEOUT, 10);
+
+ $this->logger->info("AD connected successfully.");
+
+ return $this->ldapConnection;
+ } catch (\Exception $e) {
+
+ throw $e;
+ }
+ }
+
+ /**
+ * Bind ldap
+ *
+ * @throws \Exception
+ */
+ protected function ldapBind()
+ {
+
+ try {
+
+ if ($this->ldapConnection) {
+
+ $ldapIsBound = ldap_bind($this->ldapConnection, $this->config->getAppValue($this->appName, 'cas_import_ad_user') . "@" . $this->config->getAppValue($this->appName, 'cas_import_ad_domain'), $this->config->getAppValue($this->appName, 'cas_import_ad_password'));
+
+ if (!$ldapIsBound) {
+
+ throw new \Exception("LDAP bind failed. Error: " . ldap_error($this->ldapConnection));
+ } else {
+
+ $this->logger->info("AD bound successfully.");
+ }
+ }
+ } catch (\Exception $e) {
+
+ throw $e;
+ }
+ }
+
+ /**
+ * Unbind ldap
+ *
+ * @throws \Exception
+ */
+ protected function ldapUnbind()
+ {
+
+ try {
+
+ ldap_unbind($this->ldapConnection);
+
+ $this->logger->info("AD unbound successfully.");
+ } catch (\Exception $e) {
+
+ throw $e;
+ }
+ }
+
+ /**
+ * Close ldap connection
+ *
+ * @throws \Exception
+ */
+ protected function ldapClose()
+ {
+ try {
+
+ ldap_close($this->ldapConnection);
+
+ $this->logger->info("AD connection closed successfully.");
+ } catch (\Exception $e) {
+
+ throw $e;
+ }
+ }
+
+ /**
+ * @param array $exportData
+ */
+ public function exportAsCsv(array $exportData)
+ {
+
+ $this->logger->info("Exporting users to .csv …");
+
+ $fp = fopen('accounts.csv', 'wa+');
+
+ fputcsv($fp, ["UID", "displayName", "email", "quota", "groups", "enabled"]);
+
+ foreach ($exportData as $fields) {
+
+ for ($i = 0; $i < count($fields); $i++) {
+
+ if (is_array($fields[$i])) {
+
+ $fields[$i] = $this->multiImplode($fields[$i], " ");
+ }
+ }
+
+ fputcsv($fp, $fields);
+ }
+
+ fclose($fp);
+
+ $this->logger->info("CSV export finished.");
+ }
+
+ /**
+ * @param array $exportData
+ */
+ public function exportAsText(array $exportData)
+ {
+
+ $this->logger->info("Exporting users to .txt …");
+
+ file_put_contents('accounts.txt', serialize($exportData));
+
+ $this->logger->info("TXT export finished.");
+ }
+
+ /**
+ * @param array $array
+ * @param string $glue
+ * @return bool|string
+ */
+ private function multiImplode($array, $glue)
+ {
+ $ret = '';
+
+ foreach ($array as $item) {
+ if (is_array($item)) {
+ $ret .= $this->multiImplode($item, $glue) . $glue;
+ } else {
+ $ret .= $item . $glue;
+ }
+ }
+
+ $ret = substr($ret, 0, 0 - strlen($glue));
+
+ return $ret;
+ }
+}
\ No newline at end of file
diff --git a/docker/volume/nextcloud/envole/app/user_cas/lib/Service/Import/ImporterInterface.php b/docker/volume/nextcloud/envole/app/user_cas/lib/Service/Import/ImporterInterface.php
new file mode 100644
index 0000000..ec21a68
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/lib/Service/Import/ImporterInterface.php
@@ -0,0 +1,34 @@
+
+ * @copyright Felix Rupp
+ *
+ * @since 1.0.0
+ */
+interface ImporterInterface
+{
+
+ /**
+ * @param LoggerInterface $logger
+ */
+ public function init(LoggerInterface $logger);
+
+ public function close();
+
+ public function getUsers();
+
+ /**
+ * @param array $userData
+ */
+ public function exportAsCsv(array $userData);
+}
\ No newline at end of file
diff --git a/docker/volume/nextcloud/envole/app/user_cas/lib/Service/LoggingService.php b/docker/volume/nextcloud/envole/app/user_cas/lib/Service/LoggingService.php
new file mode 100644
index 0000000..5962e0b
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/lib/Service/LoggingService.php
@@ -0,0 +1,101 @@
+
+ * @copyright Felix Rupp
+ *
+ * This library is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or any later version.
+ *
+ * This library is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU AFFERO GENERAL PUBLIC LICENSE for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public
+ * License along with this library. If not, see
+ * @copyright Felix Rupp
+ *
+ * @since 1.5.0
+ */
+class LoggingService
+{
+
+ /**
+ * @since 1.6.1
+ */
+ const DEBUG = 0;
+ /**
+ * @since 1.6.1
+ */
+ const INFO = 1;
+ /**
+ * @since 1.6.1
+ */
+ const WARN = 2;
+ /**
+ * @since 1.6.1
+ */
+ const ERROR = 3;
+ /**
+ * @since 1.6.1
+ */
+ const FATAL = 4;
+
+ /**
+ * @var string $appName
+ */
+ private $appName;
+
+ /**
+ * @var \OCP\IConfig $appConfig
+ */
+ private $config;
+
+ /**
+ * @var \OCP\ILogger $logger
+ */
+ private $logger;
+
+ /**
+ * LoggingService constructor.
+ * @param string $appName
+ * @param \OCP\IConfig $config
+ * @param \OCP\ILogger $logger
+ */
+ public function __construct($appName, IConfig $config, ILogger $logger)
+ {
+
+ $this->appName = $appName;
+ $this->config = $config;
+ $this->logger = $logger;
+ }
+
+ /**
+ * @param mixed $level
+ * @param string $message
+ */
+ public function write($level, $message)
+ {
+
+ $this->logger->log($level, $message, ['app' => $this->appName]);
+ }
+}
\ No newline at end of file
diff --git a/docker/volume/nextcloud/envole/app/user_cas/lib/Service/Merge/AdUserMerger.php b/docker/volume/nextcloud/envole/app/user_cas/lib/Service/Merge/AdUserMerger.php
new file mode 100644
index 0000000..c5240af
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/lib/Service/Merge/AdUserMerger.php
@@ -0,0 +1,89 @@
+
+ * @copyright Felix Rupp
+ *
+ * @since 1.0.0
+ */
+class AdUserMerger implements MergerInterface
+{
+
+
+ /**
+ * @var LoggerInterface
+ */
+ protected $logger;
+
+
+ /**
+ * AdUserMerger constructor.
+ * @param LoggerInterface $logger
+ */
+ public function __construct(LoggerInterface $logger)
+ {
+ $this->logger = $logger;
+ }
+
+ /**
+ * Merge users method
+ *
+ * @param array $userStack
+ * @param array $userToMerge
+ * @param bool $merge
+ * @param bool $preferEnabledAccountsOverDisabled
+ * @param string $primaryAccountDnStartswWith
+ */
+ public function mergeUsers(array &$userStack, array $userToMerge, $merge, $preferEnabledAccountsOverDisabled, $primaryAccountDnStartswWith)
+ {
+ # User already in stack
+ if ($merge && isset($userStack[$userToMerge["uid"]])) {
+
+ $this->logger->debug("User " . $userToMerge["uid"] . " has to be merged …");
+
+ // Check if accounts are enabled or disabled
+ // if both disabled, first account stays
+ // if one is enabled, use this account
+ // if both enabled, use information of $primaryAccountDnStartswWith
+
+ if ($preferEnabledAccountsOverDisabled && $userStack[$userToMerge["uid"]]['enable'] == 0 && $userToMerge['enable'] == 1) { # First disabled, second enabled and $preferEnabledAccountsOverDisabled is true
+
+ $this->logger->info("User " . $userToMerge["uid"] . " is merged because first account was disabled.");
+
+ $userStack[$userToMerge["uid"]] = $userToMerge;
+ }
+ elseif(!$preferEnabledAccountsOverDisabled && $userStack[$userToMerge["uid"]]['enable'] == 0 && $userToMerge['enable'] == 1) { # First disabled, second enabled and $preferEnabledAccountsOverDisabled is false
+
+ $this->logger->info("User " . $userToMerge["uid"] . " has not been merged, second enabled account was not preferred, because of preferEnabledAccountsOverDisabled option.");
+ }
+ elseif ($userStack[$userToMerge["uid"]]['enable'] == 1 && $userToMerge['enable'] == 1) { # Both enabled
+
+ if (strpos(strtolower($userToMerge['dn']), strtolower($primaryAccountDnStartswWith) !== FALSE)) {
+
+ $this->logger->info("User " . $userToMerge["uid"] . " is merged because second account is primary, based on merge filter.");
+
+ $userStack[$userToMerge["uid"]] = $userToMerge;
+ }
+ else {
+
+ $this->logger->info("User " . $userToMerge["uid"] . " has not been merged, second account was not primary, based on merge filter.");
+ }
+ } else {
+
+ $this->logger->info("User " . $userToMerge["uid"] . " has not been merged, second account was disabled, first account was enabled.");
+ }
+ } else { # User not in stack
+
+ $userStack[$userToMerge["uid"]] = $userToMerge;
+ }
+ }
+}
\ No newline at end of file
diff --git a/docker/volume/nextcloud/envole/app/user_cas/lib/Service/Merge/MergerInterface.php b/docker/volume/nextcloud/envole/app/user_cas/lib/Service/Merge/MergerInterface.php
new file mode 100644
index 0000000..cf2c058
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/lib/Service/Merge/MergerInterface.php
@@ -0,0 +1,20 @@
+
+ * @copyright Felix Rupp
+ *
+ * @since 1.0.0
+ */
+interface MergerInterface
+{
+
+ public function mergeUsers(array &$userStack, array $userToMerge, $merge, $preferEnabledAccountsOverDisabled, $primaryAccountDnStartswWith);
+}
\ No newline at end of file
diff --git a/docker/volume/nextcloud/envole/app/user_cas/lib/Service/UserService.php b/docker/volume/nextcloud/envole/app/user_cas/lib/Service/UserService.php
new file mode 100644
index 0000000..527a360
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/lib/Service/UserService.php
@@ -0,0 +1,680 @@
+
+ * @copyright Felix Rupp
+ *
+ * This library is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or any later version.
+ *
+ * This library is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU AFFERO GENERAL PUBLIC LICENSE for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public
+ * License along with this library. If not, see
+ * @copyright Felix Rupp
+ *
+ * @since 1.4
+ */
+class UserService
+{
+
+ /**
+ * @var string $appName
+ */
+ private $appName;
+
+ /**
+ * @var \OCP\IConfig $appConfig
+ */
+ private $config;
+
+ /**
+ * @var \OCP\IUserSession $userSession
+ */
+ private $userSession;
+
+ /**
+ * @var \OCP\IUserManager $userManager
+ */
+ private $userManager;
+
+ /**
+ * @var \OCP\IGroupManager
+ */
+ private $groupManager;
+
+ /**
+ * @var AppService $appService
+ */
+ private $appService;
+
+ /**
+ * @var LoggingService $loggingService
+ */
+ private $loggingService;
+
+
+ /**
+ * UserService constructor.
+ *
+ * @param $appName
+ * @param IConfig $config
+ * @param IUserManager $userManager
+ * @param IUserSession $userSession
+ * @param IGroupManager $groupManager
+ * @param AppService $appService
+ * @param LoggingService $loggingService
+ */
+ public function __construct($appName, IConfig $config, IUserManager $userManager, IUserSession $userSession, IGroupManager $groupManager, AppService $appService, LoggingService $loggingService)
+ {
+
+ $this->appName = $appName;
+ $this->config = $config;
+ $this->userManager = $userManager;
+ $this->userSession = $userSession;
+ $this->groupManager = $groupManager;
+ $this->appService = $appService;
+ $this->loggingService = $loggingService;
+ }
+
+ /**
+ * Login hook method.
+ *
+ * @param $request
+ * @param string $uid
+ * @param string $password
+ * @return bool
+ */
+ public function login($request, $uid, $password = '')
+ {
+
+ $this->loggingService->write(LoggingService::DEBUG, 'phpCAS login function step 1.');
+ #\OCP\Util::writeLog('cas', 'phpCAS login function step 1.', \OCA\UserCas\Service\LoggingService::DEBUG);
+
+ try {
+
+ if (!boolval($this->config->getAppValue($this->appName, 'cas_autocreate')) && !$this->userExists($uid)) {
+
+ $this->loggingService->write(LoggingService::DEBUG, 'phpCas autocreate disabled, and OC User does not exist, phpCas based login not possible. Bye.');
+
+ return FALSE;
+ }
+
+
+ # Check if user may be authorized based on groups or not
+ $cas_access_allow_groups = $this->config->getAppValue($this->appName, 'cas_access_allow_groups');
+ if (is_string($cas_access_allow_groups) && strlen($cas_access_allow_groups) > 0) {
+
+ $cas_access_allow_groups = explode(',', $cas_access_allow_groups);
+ $casAttributes = \phpCAS::getAttributes();
+ $casGroups = array();
+ $isAuthorized = FALSE;
+
+ $groupMapping = $this->config->getAppValue($this->appName, 'cas_group_mapping');
+
+ # Test if an attribute parser added a new dimension to our attributes array
+ if (array_key_exists('attributes', $casAttributes)) {
+
+ $newAttributes = $casAttributes['attributes'];
+
+ unset($casAttributes['attributes']);
+
+ $casAttributes = array_merge($casAttributes, $newAttributes);
+ }
+
+ # Test for mapped attribute from settings
+ if (array_key_exists($groupMapping, $casAttributes)) {
+
+ $casGroups = (array)$casAttributes[$groupMapping];
+ } # Test for standard 'groups' attribute
+ else if (array_key_exists('groups', $casAttributes)) {
+
+ if($this->config->getAppValue($this->appName, 'cas_groups_json_decode')) {
+
+ $casGroups = json_decode($casAttributes['groups']);
+ }
+ else {
+
+ $casGroups = (array)$casAttributes['groups'];
+ }
+ }
+
+ foreach ($casGroups as $casGroup) {
+
+ if (in_array($casGroup, $cas_access_allow_groups)) {
+
+ $this->loggingService->write(LoggingService::DEBUG, 'phpCas CAS users login has been authorized with group: ' . $casGroup);
+
+ $isAuthorized = TRUE;
+ } else {
+
+ $this->loggingService->write(LoggingService::DEBUG, 'phpCas CAS users login has not been authorized with group: ' . $casGroup . ', because the group was not in allowedGroups: ' . implode(", ", $cas_access_allow_groups));
+ }
+ }
+
+ if ($this->groupManager->isInGroup($uid, 'admin')) {
+
+ $this->loggingService->write(LoggingService::DEBUG, 'phpCas CAS users login has been authorized with group: admin');
+
+ $isAuthorized = TRUE;
+ }
+
+ if (!$isAuthorized) {
+
+ $this->loggingService->write(LoggingService::DEBUG, 'phpCas CAS user is not authorized to log into ownCloud. Bye.');
+
+ return FALSE;
+ }
+ }
+
+ $loginSuccessful = $this->userSession->login($uid, $password);
+
+ $this->loggingService->write(LoggingService::DEBUG, 'phpCAS login function result: ' . $loginSuccessful);
+ #\OCP\Util::writeLog('cas', 'phpCAS login function result: ' . $loginSuccessful, \OCA\UserCas\Service\LoggingService::DEBUG);
+
+ if ($loginSuccessful) {
+
+ return $this->userSession->createSessionToken($request, $this->userSession->getUser()->getUID(), $uid, NULL);
+ }
+
+ $this->loggingService->write(LoggingService::DEBUG, 'phpCAS login function not successful.');
+ #\OCP\Util::writeLog('cas', 'phpCAS login function not successful.', \OCA\UserCas\Service\LoggingService::DEBUG);
+
+ return FALSE;
+ } catch (\OC\User\LoginException $e) {
+
+ $this->loggingService->write(LoggingService::ERROR, 'Owncloud could not log in the user with UID: ' . $uid . '. Exception thrown with code: ' . $e->getCode() . ' and message: ' . $e->getMessage() . '.');
+ #\OCP\Util::writeLog('cas', 'Owncloud could not log in the user with UID: ' . $uid . '. Exception thrown with code: ' . $e->getCode() . ' and message: ' . $e->getMessage() . '.', \OCA\UserCas\Service\LoggingService::ERROR);
+
+ return FALSE;
+ }
+ }
+
+
+ /**
+ * Logout function
+ *
+ * @return bool|void
+ */
+ public function logout()
+ {
+
+ return $this->userSession->logout();
+ }
+
+ /**
+ * IsLoggedIn method.
+ *
+ * @return boolean
+ */
+ public function isLoggedIn()
+ {
+
+ return $this->userSession->isLoggedIn();
+ }
+
+ /**
+ * @param string $userId
+ * @param UserCasBackendInterface $backend
+ * @return boolean|\OCP\IUser the created user or false
+ */
+ public function create($userId, UserCasBackendInterface $backend)
+ {
+
+ $randomPassword = $this->getNewPassword();
+
+ if ($backend->implementsActions(\OC\User\Backend::CREATE_USER)) {
+
+ return $this->userManager->createUserFromBackend($userId, $randomPassword, $backend);
+ }
+
+ return FALSE;
+ }
+
+ /**
+ * @param string $userId
+ * @return mixed
+ */
+ public function userExists($userId)
+ {
+
+ return $this->userManager->userExists($userId);
+ }
+
+ /**
+ * @return string
+ */
+ public function getUserId()
+ {
+ $uid = \phpCAS::getUser();
+
+ $casAttributes = \phpCAS::getAttributes();
+
+ if($this->config->getAppValue($this->appName, 'cas_userid_mapping') && strlen($this->config->getAppValue($this->appName, 'cas_userid_mapping')) > 0) {
+
+ $userIdAttribute = $this->config->getAppValue($this->appName, 'cas_userid_mapping');
+ if(isset($casAttributes[$userIdAttribute])) {
+
+ $uid = $casAttributes[$userIdAttribute];
+ }
+ }
+
+ return $uid;
+ }
+
+ /**
+ * Update the user
+ *
+ * @param \OCP\IUser $user
+ * @param array $attributes
+ */
+ public function updateUser($user, $attributes)
+ {
+
+ $userId = $user->getUID();
+
+ /*$attributesString = '';
+ foreach ($attributes as $key => $attribute) {
+
+ $attributesString .= $key . ': ' . $attribute . '; ';
+ }*/
+
+ $newGroupQuota = NULL;
+
+ $this->loggingService->write(LoggingService::DEBUG, 'Updating data of the user: ' . $userId);
+ #\OCP\Util::writeLog('cas', 'Updating data of the user: ' . $userId, \OCA\UserCas\Service\LoggingService::DEBUG);
+ #\OCP\Util::writeLog('cas', 'Attributes: ' . $attributesString, \OCA\UserCas\Service\LoggingService::DEBUG);
+
+ if (isset($attributes['cas_email']) && is_object($user)) {
+
+ $this->updateMail($user, $attributes['cas_email']);
+ }
+ if (isset($attributes['cas_name']) && is_object($user)) {
+
+ $this->updateName($user, $attributes['cas_name']);
+ }
+ if (isset($attributes['cas_groups']) && is_object($user)) {
+
+ $this->updateGroups($user, $attributes['cas_groups'], $this->config->getAppValue($this->appName, 'cas_protected_groups'));
+ }
+ if (isset($attributes['cas_group_quota']) && is_object($user)) {
+
+ $newGroupQuota = $this->updateGroupQuota($user, $attributes['cas_group_quota']);
+ }
+ if (isset($attributes['cas_quota']) && is_object($user)) {
+
+ $this->updateQuota($user, $newGroupQuota, $attributes['cas_quota']);
+ }
+
+ $this->loggingService->write(LoggingService::DEBUG, 'Updating data finished.');
+ #\OCP\Util::writeLog('cas', 'Updating data finished.', \OCA\UserCas\Service\LoggingService::DEBUG);
+ }
+
+ /**
+ * Update the eMail address
+ *
+ * @param \OCP\IUser $user
+ * @param string|array $email
+ */
+ private function updateMail($user, $email)
+ {
+
+ if (is_array($email)) {
+
+ $email = $email[0];
+ }
+
+ if ($email !== $user->getEMailAddress()) {
+
+ $user->setEMailAddress($email);
+ $this->loggingService->write(LoggingService::DEBUG, 'Set email "' . $email . '" for the user: ' . $user->getUID());
+ #\OCP\Util::writeLog('cas', 'Set email "' . $email . '" for the user: ' . $user->getUID(), \OCA\UserCas\Service\LoggingService::DEBUG);
+ }
+ }
+
+ /**
+ * Update the display name
+ *
+ * @param \OCP\IUser $user
+ * @param string| $name
+ */
+ private function updateName($user, $name)
+ {
+
+ if (is_array($name)) {
+
+ $name = $name[0];
+ }
+
+ if ($name !== $user->getDisplayName() && strlen($name) > 0) {
+
+ $user->setDisplayName($name);
+ $this->loggingService->write(LoggingService::DEBUG, 'Set Name: ' . $name . ' for the user: ' . $user->getUID());
+ #\OCP\Util::writeLog('cas', 'Set Name: ' . $name . ' for the user: ' . $user->getUID(), \OCA\UserCas\Service\LoggingService::DEBUG);
+ }
+ }
+
+ /**
+ * Gets an array of groups and will try to add the group to OC and then add the user to the groups.
+ *
+ * @param \OCP\IUser $user
+ * @param string|array $groups
+ * @param string|array $protectedGroups
+ * @param bool $justCreated
+ */
+ public function updateGroups($user, $groups, $protectedGroups = '', $justCreated = false)
+ {
+
+ if (is_string($groups)) $groups = explode(",", $groups);
+ if (is_string($protectedGroups)) $protectedGroups = explode(",", $protectedGroups);
+
+ $uid = $user->getUID();
+
+ # Add default user group to groups and protectedGroups
+ if($this->config->getAppValue($this->appName, 'cas_groups_create_default_for_user')) {
+
+ $userGroupPrefix = $this->config->getAppValue($this->appName, 'cas_groups_create_default_for_user_prefix', '');
+
+ if(strpos($userGroupPrefix, '/') !== strlen($userGroupPrefix)) {
+
+ $userGroupPrefix .= '/';
+ }
+
+ $userGroupName = $userGroupPrefix.$uid;
+
+ $groups[] = $userGroupName;
+ $protectedGroups[] = $userGroupName;
+ }
+
+ if (!$justCreated) {
+
+ $oldGroups = $this->groupManager->getUserGroups($user);
+
+ foreach ($oldGroups as $group) {
+
+ if ($group instanceof \OCP\IGroup) {
+
+ $groupId = $group->getGID();
+
+ if (!in_array($groupId, $protectedGroups) && !in_array($groupId, $groups)) {
+
+ $group->removeUser($user);
+
+ $this->loggingService->write(LoggingService::DEBUG, "Removed '" . $uid . "' from the group '" . $groupId . "'");
+ #\OCP\Util::writeLog('cas', 'Removed "' . $uid . '" from the group "' . $groupId . '"', \OCA\UserCas\Service\LoggingService::DEBUG);
+ }
+ }
+ }
+ }
+
+ foreach ($groups as $group) {
+
+ $groupObject = NULL;
+
+ # Replace umlauts
+ if (boolval($this->config->getAppValue($this->appName, 'cas_groups_letter_umlauts'))) {
+
+ $group = str_replace("Ä", "Ae", $group);
+ $group = str_replace("Ö", "Oe", $group);
+ $group = str_replace("Ü", "Ue", $group);
+ $group = str_replace("ä", "ae", $group);
+ $group = str_replace("ö", "oe", $group);
+ $group = str_replace("ü", "ue", $group);
+ $group = str_replace("ß", "ss", $group);
+ }
+
+ # Filter unwanted characters
+ $nameFilter = $this->config->getAppValue($this->appName, 'cas_groups_letter_filter');
+
+ if (strlen($nameFilter) > 0) {
+
+ $group = preg_replace("/[^" . $nameFilter . "]+/", "", $group);
+ } else { # Use default filter
+
+ $group = preg_replace("/[^a-zA-Z0-9\.\-_ @\/]+/", "", $group);
+ }
+
+ # Filter length to max 64 chars
+ if (strlen($group) > 64) {
+
+ $group = substr($group, 0, 63) . "…";
+ }
+
+ if (!$this->groupManager->isInGroup($uid, $group)) {
+
+ if (!$this->groupManager->groupExists($group)) {
+
+ $groupObject = $this->groupManager->createGroup($group);
+
+ $this->loggingService->write(LoggingService::DEBUG, 'New group created: ' . $group);
+ #\OCP\Util::writeLog('cas', 'New group created: ' . $group, \OCA\UserCas\Service\LoggingService::DEBUG);
+ } else {
+
+ $groupObject = $this->groupManager->get($group);
+ }
+
+ $groupObject->addUser($user);
+
+ $this->loggingService->write(LoggingService::DEBUG, "Added '" . $uid . "' to the group '" . $group . "'");
+ #\OCP\Util::writeLog('cas', 'Added "' . $uid . '" to the group "' . $group . '"', \OCA\UserCas\Service\LoggingService::DEBUG);
+ }
+ }
+ }
+
+
+ /**
+ * @param \OCP\IUser $user
+ * @param int|boolean $newGroupQuota
+ * @param string $quota
+ */
+ public function updateQuota($user, $newGroupQuota, $quota = 'default')
+ {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, 'phpCas new UserQuota contents: ' . $quota . ' | New GroupQuota was: ' . $newGroupQuota);
+
+ $defaultQuota = $this->config->getAppValue('files', 'default_quota');
+
+ if ($defaultQuota === '') {
+
+ $defaultQuota = 'none';
+ }
+
+ $uid = $user->getUID();
+
+ if ($quota === 'none') {
+
+ $newQuota = PHP_INT_MAX;
+ } elseif ($quota === 'default') {
+
+ $newQuota = \OCP\Util::computerFileSize($defaultQuota);
+ } else {
+
+ $newQuota = \OCP\Util::computerFileSize($quota);
+ }
+
+ $usersOldQuota = $user->getQuota();
+
+ if ($usersOldQuota === 'none') {
+
+ $usersOldQuota = PHP_INT_MAX;
+ } elseif ($usersOldQuota === 'default') {
+
+ $usersOldQuota = \OCP\Util::computerFileSize($defaultQuota);
+ } else {
+
+ $usersOldQuota = \OCP\Util::computerFileSize($usersOldQuota);
+ }
+
+ $this->loggingService->write(LoggingService::DEBUG, "Default System Quota is: '" . $defaultQuota . "'");
+ $this->loggingService->write(LoggingService::DEBUG, "User '" . $uid . "' old computerized Quota is: '" . $usersOldQuota . "'");
+ $this->loggingService->write(LoggingService::DEBUG, "User '" . $uid . "' new computerized User Quota would be: '" . $newQuota . "'");
+
+ if ($usersOldQuota < $newQuota || ($usersOldQuota > $newQuota && $newGroupQuota != NULL)) {
+
+ $user->setQuota($newQuota);
+
+ $this->loggingService->write(LoggingService::DEBUG, "User '" . $uid . "' has new Quota: '" . $newQuota . "'");
+ }
+ }
+
+ /**
+ * @param \OCP\IUser $user
+ * @param array $groupQuotas
+ * @return int New Quota
+ */
+ private function updateGroupQuota($user, $groupQuotas)
+ {
+
+ $defaultQuota = $this->config->getAppValue('files', 'default_quota');
+
+ if ($defaultQuota === '') {
+
+ $defaultQuota = 'none';
+ }
+
+ $uid = $user->getUID();
+ $collectedQuotas = array();
+
+ foreach ($groupQuotas as $groupName => $groupQuota) {
+
+ if ($this->groupManager->isInGroup($uid, $groupName)) {
+
+ if ($groupQuota === 'none') {
+
+ $collectedQuotas[PHP_INT_MAX] = $groupQuota;
+ } elseif ($groupQuota === 'default') {
+
+ $defaultQuotaFilesize = \OCP\Util::computerFileSize($defaultQuota);
+
+ $collectedQuotas[$defaultQuotaFilesize] = $groupQuota;
+ } else {
+
+ $groupQuotaComputerFilesize = \OCP\Util::computerFileSize($groupQuota);
+ $collectedQuotas[$groupQuotaComputerFilesize] = $groupQuota;
+ }
+ }
+ }
+
+ # Sort descending by key
+ krsort($collectedQuotas);
+
+ $newQuota = \OCP\Util::computerFileSize(array_shift($collectedQuotas));
+
+ $usersOldQuota = $user->getQuota();
+
+ if ($usersOldQuota === 'none') {
+
+ $usersOldQuota = PHP_INT_MAX;
+ } elseif ($usersOldQuota === 'default') {
+
+ $usersOldQuota = \OCP\Util::computerFileSize($defaultQuota);
+ } else {
+
+ $usersOldQuota = \OCP\Util::computerFileSize($usersOldQuota);
+ }
+
+ $this->loggingService->write(LoggingService::DEBUG, "Default System Quota is: '" . $defaultQuota . "'");
+ $this->loggingService->write(LoggingService::DEBUG, "User '" . $uid . "' old computerized Quota is: '" . $usersOldQuota . "'");
+ $this->loggingService->write(LoggingService::DEBUG, "User '" . $uid . "' new computerized Group Quota would be: '" . $newQuota . "'");
+
+ if ($usersOldQuota < $newQuota) {
+
+ $user->setQuota($newQuota);
+
+ $this->loggingService->write(LoggingService::DEBUG, "User '" . $uid . "' has new Quota: '" . $newQuota . "'");
+
+ return $newQuota;
+ }
+
+ return $usersOldQuota;
+ }
+
+ /**
+ * Register User Backend.
+ *
+ * @param UserCasBackendInterface $backend
+ */
+ public function registerBackend(UserCasBackendInterface $backend)
+ {
+
+ $this->userManager->registerBackend($backend);
+ }
+
+ /**
+ * Update the backend of the user on ownCloud
+ *
+ * @param \OCP\IUser $user
+ * @return bool|int|\OC_DB_StatementWrapper
+ *
+ * @deprecated
+ **/
+ public function updateBackend(\OCP\IUser $user)
+ {
+
+ try {
+
+ $uid = $user->getUID();
+ $result = false;
+
+ if ($this->appService->isNotNextcloud()) {
+
+ if (!is_null($user) && ($user->getBackendClassName() === 'OC\User\Database' || $user->getBackendClassName() === "Database")) {
+
+ $query = \OC_DB::prepare('UPDATE `*PREFIX*accounts` SET `backend` = ? WHERE LOWER(`user_id`) = LOWER(?)');
+ $result = $query->execute([get_class($this->getBackend()), $uid]);
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, 'phpCAS user existing in database backend, move to CAS-Backend with result: ' . $result);
+ }
+ }
+
+ return $result;
+ } catch (\Exception $e) {
+
+ return false;
+ }
+ }
+
+ /**
+ * Generate a random PW with special char symbol characters
+ *
+ * @return string New Password
+ */
+ protected function getNewPassword()
+ {
+
+ $newPasswordCharsLower = \OC::$server->getSecureRandom()->generate(8, \OCP\Security\ISecureRandom::CHAR_LOWER);
+ $newPasswordCharsUpper = \OC::$server->getSecureRandom()->generate(4, \OCP\Security\ISecureRandom::CHAR_UPPER);
+ $newPasswordNumbers = \OC::$server->getSecureRandom()->generate(4, \OCP\Security\ISecureRandom::CHAR_DIGITS);
+ $newPasswordSymbols = \OC::$server->getSecureRandom()->generate(4, \OCP\Security\ISecureRandom::CHAR_SYMBOLS);
+
+ return str_shuffle($newPasswordCharsLower . $newPasswordCharsUpper . $newPasswordNumbers . $newPasswordSymbols);
+ }
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/lib/User/Backend.php b/docker/volume/nextcloud/envole/app/user_cas/lib/User/Backend.php
new file mode 100644
index 0000000..c512d43
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/lib/User/Backend.php
@@ -0,0 +1,301 @@
+
+ * @copyright Felix Rupp
+ *
+ * This library is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or any later version.
+ *
+ * This library is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU AFFERO GENERAL PUBLIC LICENSE for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public
+ * License along with this library. If not, see
+ * @copyright Felix Rupp
+ *
+ * @since 1.4.0
+ */
+class Backend extends Database implements UserInterface, IUserBackend, IProvidesHomeBackend, IProvidesDisplayNameBackend, UserCasBackendInterface
+{
+
+ /**
+ * @var string
+ */
+ protected $appName;
+
+ /**
+ * @var IConfig
+ */
+ protected $config;
+
+ /**
+ * @var \OCA\UserCAS\Service\LoggingService $loggingService
+ */
+ protected $loggingService;
+
+ /**
+ * @var \OCA\UserCAS\Service\AppService $appService
+ */
+ protected $appService;
+
+ /**
+ * @var \OCA\UserCAS\Service\UserService $userService
+ */
+ protected $userService;
+
+
+ /**
+ * @var \OCP\IUserManager $userManager
+ */
+ protected $userManager;
+
+
+ /**
+ * Backend constructor.
+ * @param string $appName
+ * @param IConfig $config
+ * @param LoggingService $loggingService
+ * @param AppService $appService
+ * @param IUserManager $userManager
+ * @param UserService $userService
+ */
+ public function __construct($appName, IConfig $config, LoggingService $loggingService, AppService $appService, IUserManager $userManager, UserService $userService)
+ {
+
+ parent::__construct();
+ $this->appName = $appName;
+ $this->loggingService = $loggingService;
+ $this->appService = $appService;
+ $this->userService = $userService;
+ $this->config = $config;
+ $this->userManager = $userManager;
+ }
+
+
+ /**
+ * Backend name to be shown in user management
+ * @return string the name of the backend to be shown
+ */
+ public function getBackendName()
+ {
+
+ return "CAS";
+ }
+
+
+ /**
+ * @param string $uid
+ * @param string $password
+ * @return string|bool The users UID or false
+ */
+ public function checkPassword($uid, $password)
+ {
+
+ if (!$this->appService->isCasInitialized()) {
+
+ try {
+
+ $this->appService->init();
+ } catch (PhpUserCasLibraryNotFoundException $e) {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::ERROR, 'Fatal error with code: ' . $e->getCode() . ' and message: ' . $e->getMessage());
+
+ return FALSE;
+ }
+ }
+
+ if (\phpCAS::isInitialized()) {
+
+ if ($uid === FALSE) {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::ERROR, 'phpCAS returned no user.');
+ }
+
+ if (\phpCAS::isAuthenticated()) {
+
+ #$casUid = \phpCAS::getUser();
+ $casUid = $this->userService->getUserId();
+
+ $isAuthorized = TRUE;
+ $createUser = TRUE;
+
+
+ # Check if user may be authorized based on groups or not
+ $cas_access_allow_groups = $this->config->getAppValue($this->appName, 'cas_access_allow_groups');
+ if (is_string($cas_access_allow_groups) && strlen($cas_access_allow_groups) > 0) {
+
+ $cas_access_allow_groups = explode(',', $cas_access_allow_groups);
+ $casAttributes = \phpCAS::getAttributes();
+ $casGroups = array();
+ $groupMapping = $this->config->getAppValue($this->appName, 'cas_group_mapping');
+
+ # Test if an attribute parser added a new dimension to our attributes array
+ if (array_key_exists('attributes', $casAttributes)) {
+
+ $newAttributes = $casAttributes['attributes'];
+
+ unset($casAttributes['attributes']);
+
+ $casAttributes = array_merge($casAttributes, $newAttributes);
+ }
+
+ # Test for mapped attribute from settings
+ if (array_key_exists($groupMapping, $casAttributes)) {
+
+ $casGroups = (array)$casAttributes[$groupMapping];
+ } # Test for standard 'groups' attribute
+ else if (array_key_exists('groups', $casAttributes)) {
+
+ if ($this->config->getAppValue($this->appName, 'cas_groups_json_decode')) {
+
+ $casGroups = json_decode($casAttributes['groups']);
+ } else {
+
+ $casGroups = (array)$casAttributes['groups'];
+ }
+ }
+
+ $isAuthorized = FALSE;
+
+ foreach ($casGroups as $casGroup) {
+
+ if (in_array($casGroup, $cas_access_allow_groups)) {
+
+ $this->loggingService->write(LoggingService::DEBUG, 'phpCas CAS users login has been authorized with group: ' . $casGroup);
+
+ $isAuthorized = TRUE;
+ } else {
+
+ $this->loggingService->write(LoggingService::DEBUG, 'phpCas CAS users login has not been authorized with group: ' . $casGroup . ', because the group was not in allowedGroups: ' . implode(", ", $cas_access_allow_groups));
+ }
+ }
+ }
+
+
+ // Autocreate user if needed or create a new account in CAS Backend
+ if (!$this->userManager->userExists($uid) && boolval($this->config->getAppValue($this->appName, 'cas_autocreate'))) {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, 'phpCAS creating a new user with UID: ' . $uid);
+ } elseif (!$this->userManager->userExists($uid) && !boolval($this->config->getAppValue($this->appName, 'cas_autocreate'))) {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, 'phpCAS no new user has been created.');
+
+ $createUser = FALSE;
+ }
+
+ // Finalize check
+ if ($casUid === $uid && $isAuthorized && $createUser) {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, 'phpCAS user password has been checked.');
+
+ return $uid;
+ }
+ }
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, 'phpCAS user password has been checked, user not logged in.');
+
+ return FALSE;
+ } else {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::ERROR, 'phpCAS has not been initialized.');
+ return FALSE;
+ }
+ }
+
+
+ /**
+ * @param string $uid
+ * @return bool|string
+ */
+ public function getDisplayName($uid)
+ {
+
+ $displayName = $uid;
+
+ if (!$this->appService->isCasInitialized()) {
+
+ try {
+
+ $this->appService->init();
+ } catch (PhpUserCasLibraryNotFoundException $e) {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::ERROR, 'Fatal error with code: ' . $e->getCode() . ' and message: ' . $e->getMessage());
+
+ return $displayName;
+ }
+ }
+
+ if (\phpCAS::isInitialized()) {
+
+ if (\phpCAS::isAuthenticated()) {
+
+ $casAttributes = \phpCAS::getAttributes();
+
+ # Test if an attribute parser added a new dimension to our attributes array
+ if (array_key_exists('attributes', $casAttributes)) {
+
+ $newAttributes = $casAttributes['attributes'];
+
+ unset($casAttributes['attributes']);
+
+ $casAttributes = array_merge($casAttributes, $newAttributes);
+ }
+
+ // DisplayName
+ $displayNameMapping = $this->config->getAppValue($this->appName, 'cas_displayName_mapping');
+
+ $displayNameMappingArray = explode("+", $displayNameMapping);
+
+ $displayName = '';
+
+ foreach ($displayNameMappingArray as $displayNameMapping) {
+
+ if (array_key_exists($displayNameMapping, $casAttributes)) {
+
+ $displayName .= $casAttributes[$displayNameMapping] . " ";
+ }
+ }
+
+ $displayName = trim($displayName);
+
+ if ($displayName === '' && array_key_exists('displayName', $casAttributes)) {
+
+ $displayName = $casAttributes['displayName'];
+ }
+ }
+ }
+
+ return $displayName;
+ }
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/lib/User/NextBackend.php b/docker/volume/nextcloud/envole/app/user_cas/lib/User/NextBackend.php
new file mode 100644
index 0000000..fefa6de
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/lib/User/NextBackend.php
@@ -0,0 +1,263 @@
+
+ * @copyright Felix Rupp
+ *
+ * This library is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE
+ * License as published by the Free Software Foundation; either
+ * version 3 of the License, or any later version.
+ *
+ * This library is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU AFFERO GENERAL PUBLIC LICENSE for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public
+ * License along with this library. If not, see
+ * @copyright Felix Rupp
+ *
+ * @since 1.4.0
+ */
+class NextBackend extends Database implements UserInterface, IUserBackend, ICheckPasswordBackend, UserCasBackendInterface
+{
+
+ /**
+ * @var string
+ */
+ protected $appName;
+
+ /**
+ * @var IConfig
+ */
+ protected $config;
+
+ /**
+ * @var \OCA\UserCAS\Service\LoggingService $loggingService
+ */
+ protected $loggingService;
+
+ /**
+ * @var \OCA\UserCAS\Service\AppService $appService
+ */
+ protected $appService;
+
+ /**
+ * @var \OCP\IUserManager;
+ */
+ protected $userManager;
+
+ /**
+ * @var \OCA\UserCAS\Service\UserService $userService
+ */
+ protected $userService;
+
+
+ /**
+ * Backend constructor.
+ *
+ * @param string $appName
+ * @param IConfig $config
+ * @param LoggingService $loggingService
+ * @param AppService $appService
+ * @param IUserManager $userManager
+ * @param UserService $userService
+ */
+ public function __construct($appName, IConfig $config, LoggingService $loggingService, AppService $appService, IUserManager $userManager, UserService $userService)
+ {
+
+ parent::__construct();
+ $this->appName = $appName;
+ $this->loggingService = $loggingService;
+ $this->appService = $appService;
+ $this->config = $config;
+ $this->userManager = $userManager;
+ $this->userService = $userService;
+ }
+
+
+ /**
+ * Backend name to be shown in user management
+ *
+ * @return string the name of the backend to be shown
+ */
+ public function getBackendName()
+ {
+
+ return "CAS";
+ }
+
+
+ /**
+ * Check the password
+ *
+ * @param string $loginName
+ * @param string $password
+ * @return string|bool The users UID or false
+ */
+ public function checkPassword(string $loginName, string $password)
+ {
+
+ if (!$this->appService->isCasInitialized()) {
+
+ try {
+
+ $this->appService->init();
+ } catch (PhpUserCasLibraryNotFoundException $e) {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::ERROR, 'Fatal error with code: ' . $e->getCode() . ' and message: ' . $e->getMessage());
+
+ return FALSE;
+ }
+ }
+
+ if (\phpCAS::isInitialized()) {
+
+ if ($loginName === FALSE) {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::ERROR, 'phpCAS returned no user.');
+ }
+
+ if (\phpCAS::isAuthenticated()) {
+
+ #$casUid = \phpCAS::getUser();
+ $casUid = $this->userService->getUserId();
+
+ $isAuthorized = TRUE;
+ $createUser = TRUE;
+
+
+ # Check if user may be authorized based on groups or not
+ $cas_access_allow_groups = $this->config->getAppValue($this->appName, 'cas_access_allow_groups');
+ if (is_string($cas_access_allow_groups) && strlen($cas_access_allow_groups) > 0) {
+
+ $cas_access_allow_groups = explode(',', $cas_access_allow_groups);
+ $casAttributes = \phpCAS::getAttributes();
+ $casGroups = array();
+ $groupMapping = $this->config->getAppValue($this->appName, 'cas_group_mapping');
+
+ # Test if an attribute parser added a new dimension to our attributes array
+ if (array_key_exists('attributes', $casAttributes)) {
+
+ $newAttributes = $casAttributes['attributes'];
+
+ unset($casAttributes['attributes']);
+
+ $casAttributes = array_merge($casAttributes, $newAttributes);
+ }
+
+ # Test for mapped attribute from settings
+ if (array_key_exists($groupMapping, $casAttributes)) {
+
+ $casGroups = (array)$casAttributes[$groupMapping];
+ } # Test for standard 'groups' attribute
+ else if (array_key_exists('groups', $casAttributes)) {
+
+ if ($this->config->getAppValue($this->appName, 'cas_groups_json_decode')) {
+
+ $casGroups = json_decode($casAttributes['groups']);
+ } else {
+
+ $casGroups = (array)$casAttributes['groups'];
+ }
+ }
+
+ $isAuthorized = FALSE;
+
+ foreach ($casGroups as $casGroup) {
+
+ if (in_array($casGroup, $cas_access_allow_groups)) {
+
+ $this->loggingService->write(LoggingService::DEBUG, 'phpCas CAS users login has been authorized with group: ' . $casGroup);
+
+ $isAuthorized = TRUE;
+ } else {
+
+ $this->loggingService->write(LoggingService::DEBUG, 'phpCas CAS users login has not been authorized with group: ' . $casGroup . ', because the group was not in allowedGroups: ' . implode(", ", $cas_access_allow_groups));
+ }
+ }
+ }
+
+
+ // Autocreate user if needed or create a new account in CAS Backend
+ if (!$this->userManager->userExists($loginName) && boolval($this->config->getAppValue($this->appName, 'cas_autocreate'))) {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, 'phpCAS creating a new user with UID: ' . $loginName);
+
+ try {
+
+ $createUser = $this->userService->create($loginName, $this);
+
+ if (!$createUser instanceof IUser) {
+
+ $createUser = FALSE;
+ }
+ } catch (\Exception $e) {
+
+ $createUser = FALSE;
+ }
+ } elseif (!$this->userManager->userExists($loginName) && !boolval($this->config->getAppValue($this->appName, 'cas_autocreate'))) {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, 'phpCAS no new user has been created.');
+
+ $createUser = FALSE;
+ }
+
+ // Finalize check
+ if ($casUid === $loginName && $isAuthorized && $createUser) {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::DEBUG, 'phpCAS user password has been checked.');
+
+ return $loginName;
+ }
+ }
+
+ return FALSE;
+ } else {
+
+ $this->loggingService->write(\OCA\UserCas\Service\LoggingService::ERROR, 'phpCAS has not been initialized.');
+ return FALSE;
+ }
+ }
+
+ /**
+ * Get the real UID
+ *
+ * @param string $uid
+ * @return string
+ *
+ * @since 1.8.0
+ */
+ public function getRealUID(string $uid): string
+ {
+
+ return $uid;
+ }
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/lib/User/UserCasBackendInterface.php b/docker/volume/nextcloud/envole/app/user_cas/lib/User/UserCasBackendInterface.php
new file mode 100644
index 0000000..8478e50
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/lib/User/UserCasBackendInterface.php
@@ -0,0 +1,23 @@
+
+ * @copyright Felix Rupp
+ */
+interface UserCasBackendInterface extends UserInterface
+{
+}
\ No newline at end of file
diff --git a/docker/volume/nextcloud/envole/app/user_cas/templates/admin.php b/docker/volume/nextcloud/envole/app/user_cas/templates/admin.php
new file mode 100644
index 0000000..bdf185e
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/templates/admin.php
@@ -0,0 +1,441 @@
+
+ * @copyright Felix Rupp
+ *
+ * @license AGPL-3.0
+ *
+ * This code is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License, version 3,
+ * as published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License, version 3,
+ * along with this program. If not, see
+ *
+ * @license AGPL-3.0
+ *
+ * This code is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License, version 3,
+ * as published by the Free Software Foundation.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License, version 3,
+ * along with this program. If not, see
+ t($_['errorCode']));?>: t($_['errorMessage'])); ?>
+
+
+
+
+
+
+
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/autoload.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/autoload.php
new file mode 100644
index 0000000..164244c
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/autoload.php
@@ -0,0 +1,7 @@
+
+ * Jordi Boggiano
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Composer\Autoload;
+
+/**
+ * ClassLoader implements a PSR-0, PSR-4 and classmap class loader.
+ *
+ * $loader = new \Composer\Autoload\ClassLoader();
+ *
+ * // register classes with namespaces
+ * $loader->add('Symfony\Component', __DIR__.'/component');
+ * $loader->add('Symfony', __DIR__.'/framework');
+ *
+ * // activate the autoloader
+ * $loader->register();
+ *
+ * // to enable searching the include path (eg. for PEAR packages)
+ * $loader->setUseIncludePath(true);
+ *
+ * In this example, if you try to use a class in the Symfony\Component
+ * namespace or one of its children (Symfony\Component\Console for instance),
+ * the autoloader will first look for the class under the component/
+ * directory, and it will then fallback to the framework/ directory if not
+ * found before giving up.
+ *
+ * This class is loosely based on the Symfony UniversalClassLoader.
+ *
+ * @author Fabien Potencier
+ * @author Jordi Boggiano
+ * @see https://www.php-fig.org/psr/psr-0/
+ * @see https://www.php-fig.org/psr/psr-4/
+ */
+class ClassLoader
+{
+ /** @var ?string */
+ private $vendorDir;
+
+ // PSR-4
+ /**
+ * @var array[]
+ * @psalm-var array>
+ */
+ private $prefixLengthsPsr4 = array();
+ /**
+ * @var array[]
+ * @psalm-var array>
+ */
+ private $prefixDirsPsr4 = array();
+ /**
+ * @var array[]
+ * @psalm-var array
+ */
+ private $fallbackDirsPsr4 = array();
+
+ // PSR-0
+ /**
+ * @var array[]
+ * @psalm-var array>
+ */
+ private $prefixesPsr0 = array();
+ /**
+ * @var array[]
+ * @psalm-var array
+ */
+ private $fallbackDirsPsr0 = array();
+
+ /** @var bool */
+ private $useIncludePath = false;
+
+ /**
+ * @var string[]
+ * @psalm-var array
+ */
+ private $classMap = array();
+
+ /** @var bool */
+ private $classMapAuthoritative = false;
+
+ /**
+ * @var bool[]
+ * @psalm-var array
+ */
+ private $missingClasses = array();
+
+ /** @var ?string */
+ private $apcuPrefix;
+
+ /**
+ * @var self[]
+ */
+ private static $registeredLoaders = array();
+
+ /**
+ * @param ?string $vendorDir
+ */
+ public function __construct($vendorDir = null)
+ {
+ $this->vendorDir = $vendorDir;
+ }
+
+ /**
+ * @return string[]
+ */
+ public function getPrefixes()
+ {
+ if (!empty($this->prefixesPsr0)) {
+ return call_user_func_array('array_merge', array_values($this->prefixesPsr0));
+ }
+
+ return array();
+ }
+
+ /**
+ * @return array[]
+ * @psalm-return array>
+ */
+ public function getPrefixesPsr4()
+ {
+ return $this->prefixDirsPsr4;
+ }
+
+ /**
+ * @return array[]
+ * @psalm-return array
+ */
+ public function getFallbackDirs()
+ {
+ return $this->fallbackDirsPsr0;
+ }
+
+ /**
+ * @return array[]
+ * @psalm-return array
+ */
+ public function getFallbackDirsPsr4()
+ {
+ return $this->fallbackDirsPsr4;
+ }
+
+ /**
+ * @return string[] Array of classname => path
+ * @psalm-return array
+ */
+ public function getClassMap()
+ {
+ return $this->classMap;
+ }
+
+ /**
+ * @param string[] $classMap Class to filename map
+ * @psalm-param array $classMap
+ *
+ * @return void
+ */
+ public function addClassMap(array $classMap)
+ {
+ if ($this->classMap) {
+ $this->classMap = array_merge($this->classMap, $classMap);
+ } else {
+ $this->classMap = $classMap;
+ }
+ }
+
+ /**
+ * Registers a set of PSR-0 directories for a given prefix, either
+ * appending or prepending to the ones previously set for this prefix.
+ *
+ * @param string $prefix The prefix
+ * @param string[]|string $paths The PSR-0 root directories
+ * @param bool $prepend Whether to prepend the directories
+ *
+ * @return void
+ */
+ public function add($prefix, $paths, $prepend = false)
+ {
+ if (!$prefix) {
+ if ($prepend) {
+ $this->fallbackDirsPsr0 = array_merge(
+ (array) $paths,
+ $this->fallbackDirsPsr0
+ );
+ } else {
+ $this->fallbackDirsPsr0 = array_merge(
+ $this->fallbackDirsPsr0,
+ (array) $paths
+ );
+ }
+
+ return;
+ }
+
+ $first = $prefix[0];
+ if (!isset($this->prefixesPsr0[$first][$prefix])) {
+ $this->prefixesPsr0[$first][$prefix] = (array) $paths;
+
+ return;
+ }
+ if ($prepend) {
+ $this->prefixesPsr0[$first][$prefix] = array_merge(
+ (array) $paths,
+ $this->prefixesPsr0[$first][$prefix]
+ );
+ } else {
+ $this->prefixesPsr0[$first][$prefix] = array_merge(
+ $this->prefixesPsr0[$first][$prefix],
+ (array) $paths
+ );
+ }
+ }
+
+ /**
+ * Registers a set of PSR-4 directories for a given namespace, either
+ * appending or prepending to the ones previously set for this namespace.
+ *
+ * @param string $prefix The prefix/namespace, with trailing '\\'
+ * @param string[]|string $paths The PSR-4 base directories
+ * @param bool $prepend Whether to prepend the directories
+ *
+ * @throws \InvalidArgumentException
+ *
+ * @return void
+ */
+ public function addPsr4($prefix, $paths, $prepend = false)
+ {
+ if (!$prefix) {
+ // Register directories for the root namespace.
+ if ($prepend) {
+ $this->fallbackDirsPsr4 = array_merge(
+ (array) $paths,
+ $this->fallbackDirsPsr4
+ );
+ } else {
+ $this->fallbackDirsPsr4 = array_merge(
+ $this->fallbackDirsPsr4,
+ (array) $paths
+ );
+ }
+ } elseif (!isset($this->prefixDirsPsr4[$prefix])) {
+ // Register directories for a new namespace.
+ $length = strlen($prefix);
+ if ('\\' !== $prefix[$length - 1]) {
+ throw new \InvalidArgumentException("A non-empty PSR-4 prefix must end with a namespace separator.");
+ }
+ $this->prefixLengthsPsr4[$prefix[0]][$prefix] = $length;
+ $this->prefixDirsPsr4[$prefix] = (array) $paths;
+ } elseif ($prepend) {
+ // Prepend directories for an already registered namespace.
+ $this->prefixDirsPsr4[$prefix] = array_merge(
+ (array) $paths,
+ $this->prefixDirsPsr4[$prefix]
+ );
+ } else {
+ // Append directories for an already registered namespace.
+ $this->prefixDirsPsr4[$prefix] = array_merge(
+ $this->prefixDirsPsr4[$prefix],
+ (array) $paths
+ );
+ }
+ }
+
+ /**
+ * Registers a set of PSR-0 directories for a given prefix,
+ * replacing any others previously set for this prefix.
+ *
+ * @param string $prefix The prefix
+ * @param string[]|string $paths The PSR-0 base directories
+ *
+ * @return void
+ */
+ public function set($prefix, $paths)
+ {
+ if (!$prefix) {
+ $this->fallbackDirsPsr0 = (array) $paths;
+ } else {
+ $this->prefixesPsr0[$prefix[0]][$prefix] = (array) $paths;
+ }
+ }
+
+ /**
+ * Registers a set of PSR-4 directories for a given namespace,
+ * replacing any others previously set for this namespace.
+ *
+ * @param string $prefix The prefix/namespace, with trailing '\\'
+ * @param string[]|string $paths The PSR-4 base directories
+ *
+ * @throws \InvalidArgumentException
+ *
+ * @return void
+ */
+ public function setPsr4($prefix, $paths)
+ {
+ if (!$prefix) {
+ $this->fallbackDirsPsr4 = (array) $paths;
+ } else {
+ $length = strlen($prefix);
+ if ('\\' !== $prefix[$length - 1]) {
+ throw new \InvalidArgumentException("A non-empty PSR-4 prefix must end with a namespace separator.");
+ }
+ $this->prefixLengthsPsr4[$prefix[0]][$prefix] = $length;
+ $this->prefixDirsPsr4[$prefix] = (array) $paths;
+ }
+ }
+
+ /**
+ * Turns on searching the include path for class files.
+ *
+ * @param bool $useIncludePath
+ *
+ * @return void
+ */
+ public function setUseIncludePath($useIncludePath)
+ {
+ $this->useIncludePath = $useIncludePath;
+ }
+
+ /**
+ * Can be used to check if the autoloader uses the include path to check
+ * for classes.
+ *
+ * @return bool
+ */
+ public function getUseIncludePath()
+ {
+ return $this->useIncludePath;
+ }
+
+ /**
+ * Turns off searching the prefix and fallback directories for classes
+ * that have not been registered with the class map.
+ *
+ * @param bool $classMapAuthoritative
+ *
+ * @return void
+ */
+ public function setClassMapAuthoritative($classMapAuthoritative)
+ {
+ $this->classMapAuthoritative = $classMapAuthoritative;
+ }
+
+ /**
+ * Should class lookup fail if not found in the current class map?
+ *
+ * @return bool
+ */
+ public function isClassMapAuthoritative()
+ {
+ return $this->classMapAuthoritative;
+ }
+
+ /**
+ * APCu prefix to use to cache found/not-found classes, if the extension is enabled.
+ *
+ * @param string|null $apcuPrefix
+ *
+ * @return void
+ */
+ public function setApcuPrefix($apcuPrefix)
+ {
+ $this->apcuPrefix = function_exists('apcu_fetch') && filter_var(ini_get('apc.enabled'), FILTER_VALIDATE_BOOLEAN) ? $apcuPrefix : null;
+ }
+
+ /**
+ * The APCu prefix in use, or null if APCu caching is not enabled.
+ *
+ * @return string|null
+ */
+ public function getApcuPrefix()
+ {
+ return $this->apcuPrefix;
+ }
+
+ /**
+ * Registers this instance as an autoloader.
+ *
+ * @param bool $prepend Whether to prepend the autoloader or not
+ *
+ * @return void
+ */
+ public function register($prepend = false)
+ {
+ spl_autoload_register(array($this, 'loadClass'), true, $prepend);
+
+ if (null === $this->vendorDir) {
+ return;
+ }
+
+ if ($prepend) {
+ self::$registeredLoaders = array($this->vendorDir => $this) + self::$registeredLoaders;
+ } else {
+ unset(self::$registeredLoaders[$this->vendorDir]);
+ self::$registeredLoaders[$this->vendorDir] = $this;
+ }
+ }
+
+ /**
+ * Unregisters this instance as an autoloader.
+ *
+ * @return void
+ */
+ public function unregister()
+ {
+ spl_autoload_unregister(array($this, 'loadClass'));
+
+ if (null !== $this->vendorDir) {
+ unset(self::$registeredLoaders[$this->vendorDir]);
+ }
+ }
+
+ /**
+ * Loads the given class or interface.
+ *
+ * @param string $class The name of the class
+ * @return true|null True if loaded, null otherwise
+ */
+ public function loadClass($class)
+ {
+ if ($file = $this->findFile($class)) {
+ includeFile($file);
+
+ return true;
+ }
+
+ return null;
+ }
+
+ /**
+ * Finds the path to the file where the class is defined.
+ *
+ * @param string $class The name of the class
+ *
+ * @return string|false The path if found, false otherwise
+ */
+ public function findFile($class)
+ {
+ // class map lookup
+ if (isset($this->classMap[$class])) {
+ return $this->classMap[$class];
+ }
+ if ($this->classMapAuthoritative || isset($this->missingClasses[$class])) {
+ return false;
+ }
+ if (null !== $this->apcuPrefix) {
+ $file = apcu_fetch($this->apcuPrefix.$class, $hit);
+ if ($hit) {
+ return $file;
+ }
+ }
+
+ $file = $this->findFileWithExtension($class, '.php');
+
+ // Search for Hack files if we are running on HHVM
+ if (false === $file && defined('HHVM_VERSION')) {
+ $file = $this->findFileWithExtension($class, '.hh');
+ }
+
+ if (null !== $this->apcuPrefix) {
+ apcu_add($this->apcuPrefix.$class, $file);
+ }
+
+ if (false === $file) {
+ // Remember that this class does not exist.
+ $this->missingClasses[$class] = true;
+ }
+
+ return $file;
+ }
+
+ /**
+ * Returns the currently registered loaders indexed by their corresponding vendor directories.
+ *
+ * @return self[]
+ */
+ public static function getRegisteredLoaders()
+ {
+ return self::$registeredLoaders;
+ }
+
+ /**
+ * @param string $class
+ * @param string $ext
+ * @return string|false
+ */
+ private function findFileWithExtension($class, $ext)
+ {
+ // PSR-4 lookup
+ $logicalPathPsr4 = strtr($class, '\\', DIRECTORY_SEPARATOR) . $ext;
+
+ $first = $class[0];
+ if (isset($this->prefixLengthsPsr4[$first])) {
+ $subPath = $class;
+ while (false !== $lastPos = strrpos($subPath, '\\')) {
+ $subPath = substr($subPath, 0, $lastPos);
+ $search = $subPath . '\\';
+ if (isset($this->prefixDirsPsr4[$search])) {
+ $pathEnd = DIRECTORY_SEPARATOR . substr($logicalPathPsr4, $lastPos + 1);
+ foreach ($this->prefixDirsPsr4[$search] as $dir) {
+ if (file_exists($file = $dir . $pathEnd)) {
+ return $file;
+ }
+ }
+ }
+ }
+ }
+
+ // PSR-4 fallback dirs
+ foreach ($this->fallbackDirsPsr4 as $dir) {
+ if (file_exists($file = $dir . DIRECTORY_SEPARATOR . $logicalPathPsr4)) {
+ return $file;
+ }
+ }
+
+ // PSR-0 lookup
+ if (false !== $pos = strrpos($class, '\\')) {
+ // namespaced class name
+ $logicalPathPsr0 = substr($logicalPathPsr4, 0, $pos + 1)
+ . strtr(substr($logicalPathPsr4, $pos + 1), '_', DIRECTORY_SEPARATOR);
+ } else {
+ // PEAR-like class name
+ $logicalPathPsr0 = strtr($class, '_', DIRECTORY_SEPARATOR) . $ext;
+ }
+
+ if (isset($this->prefixesPsr0[$first])) {
+ foreach ($this->prefixesPsr0[$first] as $prefix => $dirs) {
+ if (0 === strpos($class, $prefix)) {
+ foreach ($dirs as $dir) {
+ if (file_exists($file = $dir . DIRECTORY_SEPARATOR . $logicalPathPsr0)) {
+ return $file;
+ }
+ }
+ }
+ }
+ }
+
+ // PSR-0 fallback dirs
+ foreach ($this->fallbackDirsPsr0 as $dir) {
+ if (file_exists($file = $dir . DIRECTORY_SEPARATOR . $logicalPathPsr0)) {
+ return $file;
+ }
+ }
+
+ // PSR-0 include paths.
+ if ($this->useIncludePath && $file = stream_resolve_include_path($logicalPathPsr0)) {
+ return $file;
+ }
+
+ return false;
+ }
+}
+
+/**
+ * Scope isolated include.
+ *
+ * Prevents access to $this/self from included files.
+ *
+ * @param string $file
+ * @return void
+ * @private
+ */
+function includeFile($file)
+{
+ include $file;
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/InstalledVersions.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/InstalledVersions.php
new file mode 100644
index 0000000..d50e0c9
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/InstalledVersions.php
@@ -0,0 +1,350 @@
+
+ * Jordi Boggiano
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Composer;
+
+use Composer\Autoload\ClassLoader;
+use Composer\Semver\VersionParser;
+
+/**
+ * This class is copied in every Composer installed project and available to all
+ *
+ * See also https://getcomposer.org/doc/07-runtime.md#installed-versions
+ *
+ * To require its presence, you can require `composer-runtime-api ^2.0`
+ */
+class InstalledVersions
+{
+ /**
+ * @var mixed[]|null
+ * @psalm-var array{root: array{name: string, version: string, reference: string, pretty_version: string, aliases: string[], dev: bool, install_path: string, type: string}, versions: array}|array{}|null
+ */
+ private static $installed;
+
+ /**
+ * @var bool|null
+ */
+ private static $canGetVendors;
+
+ /**
+ * @var array[]
+ * @psalm-var array}>
+ */
+ private static $installedByVendor = array();
+
+ /**
+ * Returns a list of all package names which are present, either by being installed, replaced or provided
+ *
+ * @return string[]
+ * @psalm-return list
+ */
+ public static function getInstalledPackages()
+ {
+ $packages = array();
+ foreach (self::getInstalled() as $installed) {
+ $packages[] = array_keys($installed['versions']);
+ }
+
+ if (1 === \count($packages)) {
+ return $packages[0];
+ }
+
+ return array_keys(array_flip(\call_user_func_array('array_merge', $packages)));
+ }
+
+ /**
+ * Returns a list of all package names with a specific type e.g. 'library'
+ *
+ * @param string $type
+ * @return string[]
+ * @psalm-return list
+ */
+ public static function getInstalledPackagesByType($type)
+ {
+ $packagesByType = array();
+
+ foreach (self::getInstalled() as $installed) {
+ foreach ($installed['versions'] as $name => $package) {
+ if (isset($package['type']) && $package['type'] === $type) {
+ $packagesByType[] = $name;
+ }
+ }
+ }
+
+ return $packagesByType;
+ }
+
+ /**
+ * Checks whether the given package is installed
+ *
+ * This also returns true if the package name is provided or replaced by another package
+ *
+ * @param string $packageName
+ * @param bool $includeDevRequirements
+ * @return bool
+ */
+ public static function isInstalled($packageName, $includeDevRequirements = true)
+ {
+ foreach (self::getInstalled() as $installed) {
+ if (isset($installed['versions'][$packageName])) {
+ return $includeDevRequirements || empty($installed['versions'][$packageName]['dev_requirement']);
+ }
+ }
+
+ return false;
+ }
+
+ /**
+ * Checks whether the given package satisfies a version constraint
+ *
+ * e.g. If you want to know whether version 2.3+ of package foo/bar is installed, you would call:
+ *
+ * Composer\InstalledVersions::satisfies(new VersionParser, 'foo/bar', '^2.3')
+ *
+ * @param VersionParser $parser Install composer/semver to have access to this class and functionality
+ * @param string $packageName
+ * @param string|null $constraint A version constraint to check for, if you pass one you have to make sure composer/semver is required by your package
+ * @return bool
+ */
+ public static function satisfies(VersionParser $parser, $packageName, $constraint)
+ {
+ $constraint = $parser->parseConstraints($constraint);
+ $provided = $parser->parseConstraints(self::getVersionRanges($packageName));
+
+ return $provided->matches($constraint);
+ }
+
+ /**
+ * Returns a version constraint representing all the range(s) which are installed for a given package
+ *
+ * It is easier to use this via isInstalled() with the $constraint argument if you need to check
+ * whether a given version of a package is installed, and not just whether it exists
+ *
+ * @param string $packageName
+ * @return string Version constraint usable with composer/semver
+ */
+ public static function getVersionRanges($packageName)
+ {
+ foreach (self::getInstalled() as $installed) {
+ if (!isset($installed['versions'][$packageName])) {
+ continue;
+ }
+
+ $ranges = array();
+ if (isset($installed['versions'][$packageName]['pretty_version'])) {
+ $ranges[] = $installed['versions'][$packageName]['pretty_version'];
+ }
+ if (array_key_exists('aliases', $installed['versions'][$packageName])) {
+ $ranges = array_merge($ranges, $installed['versions'][$packageName]['aliases']);
+ }
+ if (array_key_exists('replaced', $installed['versions'][$packageName])) {
+ $ranges = array_merge($ranges, $installed['versions'][$packageName]['replaced']);
+ }
+ if (array_key_exists('provided', $installed['versions'][$packageName])) {
+ $ranges = array_merge($ranges, $installed['versions'][$packageName]['provided']);
+ }
+
+ return implode(' || ', $ranges);
+ }
+
+ throw new \OutOfBoundsException('Package "' . $packageName . '" is not installed');
+ }
+
+ /**
+ * @param string $packageName
+ * @return string|null If the package is being replaced or provided but is not really installed, null will be returned as version, use satisfies or getVersionRanges if you need to know if a given version is present
+ */
+ public static function getVersion($packageName)
+ {
+ foreach (self::getInstalled() as $installed) {
+ if (!isset($installed['versions'][$packageName])) {
+ continue;
+ }
+
+ if (!isset($installed['versions'][$packageName]['version'])) {
+ return null;
+ }
+
+ return $installed['versions'][$packageName]['version'];
+ }
+
+ throw new \OutOfBoundsException('Package "' . $packageName . '" is not installed');
+ }
+
+ /**
+ * @param string $packageName
+ * @return string|null If the package is being replaced or provided but is not really installed, null will be returned as version, use satisfies or getVersionRanges if you need to know if a given version is present
+ */
+ public static function getPrettyVersion($packageName)
+ {
+ foreach (self::getInstalled() as $installed) {
+ if (!isset($installed['versions'][$packageName])) {
+ continue;
+ }
+
+ if (!isset($installed['versions'][$packageName]['pretty_version'])) {
+ return null;
+ }
+
+ return $installed['versions'][$packageName]['pretty_version'];
+ }
+
+ throw new \OutOfBoundsException('Package "' . $packageName . '" is not installed');
+ }
+
+ /**
+ * @param string $packageName
+ * @return string|null If the package is being replaced or provided but is not really installed, null will be returned as reference
+ */
+ public static function getReference($packageName)
+ {
+ foreach (self::getInstalled() as $installed) {
+ if (!isset($installed['versions'][$packageName])) {
+ continue;
+ }
+
+ if (!isset($installed['versions'][$packageName]['reference'])) {
+ return null;
+ }
+
+ return $installed['versions'][$packageName]['reference'];
+ }
+
+ throw new \OutOfBoundsException('Package "' . $packageName . '" is not installed');
+ }
+
+ /**
+ * @param string $packageName
+ * @return string|null If the package is being replaced or provided but is not really installed, null will be returned as install path. Packages of type metapackages also have a null install path.
+ */
+ public static function getInstallPath($packageName)
+ {
+ foreach (self::getInstalled() as $installed) {
+ if (!isset($installed['versions'][$packageName])) {
+ continue;
+ }
+
+ return isset($installed['versions'][$packageName]['install_path']) ? $installed['versions'][$packageName]['install_path'] : null;
+ }
+
+ throw new \OutOfBoundsException('Package "' . $packageName . '" is not installed');
+ }
+
+ /**
+ * @return array
+ * @psalm-return array{name: string, version: string, reference: string, pretty_version: string, aliases: string[], dev: bool, install_path: string, type: string}
+ */
+ public static function getRootPackage()
+ {
+ $installed = self::getInstalled();
+
+ return $installed[0]['root'];
+ }
+
+ /**
+ * Returns the raw installed.php data for custom implementations
+ *
+ * @deprecated Use getAllRawData() instead which returns all datasets for all autoloaders present in the process. getRawData only returns the first dataset loaded, which may not be what you expect.
+ * @return array[]
+ * @psalm-return array{root: array{name: string, version: string, reference: string, pretty_version: string, aliases: string[], dev: bool, install_path: string, type: string}, versions: array}
+ */
+ public static function getRawData()
+ {
+ @trigger_error('getRawData only returns the first dataset loaded, which may not be what you expect. Use getAllRawData() instead which returns all datasets for all autoloaders present in the process.', E_USER_DEPRECATED);
+
+ if (null === self::$installed) {
+ // only require the installed.php file if this file is loaded from its dumped location,
+ // and not from its source location in the composer/composer package, see https://github.com/composer/composer/issues/9937
+ if (substr(__DIR__, -8, 1) !== 'C') {
+ self::$installed = include __DIR__ . '/installed.php';
+ } else {
+ self::$installed = array();
+ }
+ }
+
+ return self::$installed;
+ }
+
+ /**
+ * Returns the raw data of all installed.php which are currently loaded for custom implementations
+ *
+ * @return array[]
+ * @psalm-return list}>
+ */
+ public static function getAllRawData()
+ {
+ return self::getInstalled();
+ }
+
+ /**
+ * Lets you reload the static array from another file
+ *
+ * This is only useful for complex integrations in which a project needs to use
+ * this class but then also needs to execute another project's autoloader in process,
+ * and wants to ensure both projects have access to their version of installed.php.
+ *
+ * A typical case would be PHPUnit, where it would need to make sure it reads all
+ * the data it needs from this class, then call reload() with
+ * `require $CWD/vendor/composer/installed.php` (or similar) as input to make sure
+ * the project in which it runs can then also use this class safely, without
+ * interference between PHPUnit's dependencies and the project's dependencies.
+ *
+ * @param array[] $data A vendor/composer/installed.php data set
+ * @return void
+ *
+ * @psalm-param array{root: array{name: string, version: string, reference: string, pretty_version: string, aliases: string[], dev: bool, install_path: string, type: string}, versions: array} $data
+ */
+ public static function reload($data)
+ {
+ self::$installed = $data;
+ self::$installedByVendor = array();
+ }
+
+ /**
+ * @return array[]
+ * @psalm-return list}>
+ */
+ private static function getInstalled()
+ {
+ if (null === self::$canGetVendors) {
+ self::$canGetVendors = method_exists('Composer\Autoload\ClassLoader', 'getRegisteredLoaders');
+ }
+
+ $installed = array();
+
+ if (self::$canGetVendors) {
+ foreach (ClassLoader::getRegisteredLoaders() as $vendorDir => $loader) {
+ if (isset(self::$installedByVendor[$vendorDir])) {
+ $installed[] = self::$installedByVendor[$vendorDir];
+ } elseif (is_file($vendorDir.'/composer/installed.php')) {
+ $installed[] = self::$installedByVendor[$vendorDir] = require $vendorDir.'/composer/installed.php';
+ if (null === self::$installed && strtr($vendorDir.'/composer', '\\', '/') === strtr(__DIR__, '\\', '/')) {
+ self::$installed = $installed[count($installed) - 1];
+ }
+ }
+ }
+ }
+
+ if (null === self::$installed) {
+ // only require the installed.php file if this file is loaded from its dumped location,
+ // and not from its source location in the composer/composer package, see https://github.com/composer/composer/issues/9937
+ if (substr(__DIR__, -8, 1) !== 'C') {
+ self::$installed = require __DIR__ . '/installed.php';
+ } else {
+ self::$installed = array();
+ }
+ }
+ $installed[] = self::$installed;
+
+ return $installed;
+ }
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/LICENSE b/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/LICENSE
new file mode 100644
index 0000000..62ecfd8
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/LICENSE
@@ -0,0 +1,19 @@
+Copyright (c) Nils Adermann, Jordi Boggiano
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is furnished
+to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/autoload_classmap.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/autoload_classmap.php
new file mode 100644
index 0000000..339c917
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/autoload_classmap.php
@@ -0,0 +1,62 @@
+ $vendorDir . '/jasig/phpcas/source/CAS/AuthenticationException.php',
+ 'CAS_Client' => $vendorDir . '/jasig/phpcas/source/CAS/Client.php',
+ 'CAS_CookieJar' => $vendorDir . '/jasig/phpcas/source/CAS/CookieJar.php',
+ 'CAS_Exception' => $vendorDir . '/jasig/phpcas/source/CAS/Exception.php',
+ 'CAS_GracefullTerminationException' => $vendorDir . '/jasig/phpcas/source/CAS/GracefullTerminationException.php',
+ 'CAS_InvalidArgumentException' => $vendorDir . '/jasig/phpcas/source/CAS/InvalidArgumentException.php',
+ 'CAS_Languages_Catalan' => $vendorDir . '/jasig/phpcas/source/CAS/Languages/Catalan.php',
+ 'CAS_Languages_ChineseSimplified' => $vendorDir . '/jasig/phpcas/source/CAS/Languages/ChineseSimplified.php',
+ 'CAS_Languages_English' => $vendorDir . '/jasig/phpcas/source/CAS/Languages/English.php',
+ 'CAS_Languages_French' => $vendorDir . '/jasig/phpcas/source/CAS/Languages/French.php',
+ 'CAS_Languages_Galego' => $vendorDir . '/jasig/phpcas/source/CAS/Languages/Galego.php',
+ 'CAS_Languages_German' => $vendorDir . '/jasig/phpcas/source/CAS/Languages/German.php',
+ 'CAS_Languages_Greek' => $vendorDir . '/jasig/phpcas/source/CAS/Languages/Greek.php',
+ 'CAS_Languages_Japanese' => $vendorDir . '/jasig/phpcas/source/CAS/Languages/Japanese.php',
+ 'CAS_Languages_LanguageInterface' => $vendorDir . '/jasig/phpcas/source/CAS/Languages/LanguageInterface.php',
+ 'CAS_Languages_Portuguese' => $vendorDir . '/jasig/phpcas/source/CAS/Languages/Portuguese.php',
+ 'CAS_Languages_Spanish' => $vendorDir . '/jasig/phpcas/source/CAS/Languages/Spanish.php',
+ 'CAS_OutOfSequenceBeforeAuthenticationCallException' => $vendorDir . '/jasig/phpcas/source/CAS/OutOfSequenceBeforeAuthenticationCallException.php',
+ 'CAS_OutOfSequenceBeforeClientException' => $vendorDir . '/jasig/phpcas/source/CAS/OutOfSequenceBeforeClientException.php',
+ 'CAS_OutOfSequenceBeforeProxyException' => $vendorDir . '/jasig/phpcas/source/CAS/OutOfSequenceBeforeProxyException.php',
+ 'CAS_OutOfSequenceException' => $vendorDir . '/jasig/phpcas/source/CAS/OutOfSequenceException.php',
+ 'CAS_PGTStorage_AbstractStorage' => $vendorDir . '/jasig/phpcas/source/CAS/PGTStorage/AbstractStorage.php',
+ 'CAS_PGTStorage_Db' => $vendorDir . '/jasig/phpcas/source/CAS/PGTStorage/Db.php',
+ 'CAS_PGTStorage_File' => $vendorDir . '/jasig/phpcas/source/CAS/PGTStorage/File.php',
+ 'CAS_ProxiedService' => $vendorDir . '/jasig/phpcas/source/CAS/ProxiedService.php',
+ 'CAS_ProxiedService_Abstract' => $vendorDir . '/jasig/phpcas/source/CAS/ProxiedService/Abstract.php',
+ 'CAS_ProxiedService_Exception' => $vendorDir . '/jasig/phpcas/source/CAS/ProxiedService/Exception.php',
+ 'CAS_ProxiedService_Http' => $vendorDir . '/jasig/phpcas/source/CAS/ProxiedService/Http.php',
+ 'CAS_ProxiedService_Http_Abstract' => $vendorDir . '/jasig/phpcas/source/CAS/ProxiedService/Http/Abstract.php',
+ 'CAS_ProxiedService_Http_Get' => $vendorDir . '/jasig/phpcas/source/CAS/ProxiedService/Http/Get.php',
+ 'CAS_ProxiedService_Http_Post' => $vendorDir . '/jasig/phpcas/source/CAS/ProxiedService/Http/Post.php',
+ 'CAS_ProxiedService_Imap' => $vendorDir . '/jasig/phpcas/source/CAS/ProxiedService/Imap.php',
+ 'CAS_ProxiedService_Testable' => $vendorDir . '/jasig/phpcas/source/CAS/ProxiedService/Testable.php',
+ 'CAS_ProxyChain' => $vendorDir . '/jasig/phpcas/source/CAS/ProxyChain.php',
+ 'CAS_ProxyChain_AllowedList' => $vendorDir . '/jasig/phpcas/source/CAS/ProxyChain/AllowedList.php',
+ 'CAS_ProxyChain_Any' => $vendorDir . '/jasig/phpcas/source/CAS/ProxyChain/Any.php',
+ 'CAS_ProxyChain_Interface' => $vendorDir . '/jasig/phpcas/source/CAS/ProxyChain/Interface.php',
+ 'CAS_ProxyChain_Trusted' => $vendorDir . '/jasig/phpcas/source/CAS/ProxyChain/Trusted.php',
+ 'CAS_ProxyTicketException' => $vendorDir . '/jasig/phpcas/source/CAS/ProxyTicketException.php',
+ 'CAS_Request_AbstractRequest' => $vendorDir . '/jasig/phpcas/source/CAS/Request/AbstractRequest.php',
+ 'CAS_Request_CurlMultiRequest' => $vendorDir . '/jasig/phpcas/source/CAS/Request/CurlMultiRequest.php',
+ 'CAS_Request_CurlRequest' => $vendorDir . '/jasig/phpcas/source/CAS/Request/CurlRequest.php',
+ 'CAS_Request_Exception' => $vendorDir . '/jasig/phpcas/source/CAS/Request/Exception.php',
+ 'CAS_Request_MultiRequestInterface' => $vendorDir . '/jasig/phpcas/source/CAS/Request/MultiRequestInterface.php',
+ 'CAS_Request_RequestInterface' => $vendorDir . '/jasig/phpcas/source/CAS/Request/RequestInterface.php',
+ 'CAS_ServiceBaseUrl_AllowedListDiscovery' => $vendorDir . '/jasig/phpcas/source/CAS/ServiceBaseUrl/AllowedListDiscovery.php',
+ 'CAS_ServiceBaseUrl_Base' => $vendorDir . '/jasig/phpcas/source/CAS/ServiceBaseUrl/Base.php',
+ 'CAS_ServiceBaseUrl_Interface' => $vendorDir . '/jasig/phpcas/source/CAS/ServiceBaseUrl/Interface.php',
+ 'CAS_ServiceBaseUrl_Static' => $vendorDir . '/jasig/phpcas/source/CAS/ServiceBaseUrl/Static.php',
+ 'CAS_Session_PhpSession' => $vendorDir . '/jasig/phpcas/source/CAS/Session/PhpSession.php',
+ 'CAS_TypeMismatchException' => $vendorDir . '/jasig/phpcas/source/CAS/TypeMismatchException.php',
+ 'Composer\\InstalledVersions' => $vendorDir . '/composer/InstalledVersions.php',
+ 'phpCAS' => $vendorDir . '/jasig/phpcas/source/CAS.php',
+);
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/autoload_files.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/autoload_files.php
new file mode 100644
index 0000000..a57cecd
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/autoload_files.php
@@ -0,0 +1,10 @@
+ $vendorDir . '/jasig/phpcas/source/CAS.php',
+);
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/autoload_namespaces.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/autoload_namespaces.php
new file mode 100644
index 0000000..b7fc012
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/autoload_namespaces.php
@@ -0,0 +1,9 @@
+ array($vendorDir . '/psr/log/src'),
+ 'EcasPhpCASParser\\' => array($vendorDir . '/ec-europa/ecas-phpcas-parser/src'),
+);
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/autoload_real.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/autoload_real.php
new file mode 100644
index 0000000..7356aaa
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/autoload_real.php
@@ -0,0 +1,80 @@
+= 50600 && !defined('HHVM_VERSION') && (!function_exists('zend_loader_file_encoded') || !zend_loader_file_encoded());
+ if ($useStaticLoader) {
+ require __DIR__ . '/autoload_static.php';
+
+ call_user_func(\Composer\Autoload\ComposerStaticInit693962d224b97822c6484f42a89fec4f::getInitializer($loader));
+ } else {
+ $map = require __DIR__ . '/autoload_namespaces.php';
+ foreach ($map as $namespace => $path) {
+ $loader->set($namespace, $path);
+ }
+
+ $map = require __DIR__ . '/autoload_psr4.php';
+ foreach ($map as $namespace => $path) {
+ $loader->setPsr4($namespace, $path);
+ }
+
+ $classMap = require __DIR__ . '/autoload_classmap.php';
+ if ($classMap) {
+ $loader->addClassMap($classMap);
+ }
+ }
+
+ $loader->register(true);
+
+ if ($useStaticLoader) {
+ $includeFiles = Composer\Autoload\ComposerStaticInit693962d224b97822c6484f42a89fec4f::$files;
+ } else {
+ $includeFiles = require __DIR__ . '/autoload_files.php';
+ }
+ foreach ($includeFiles as $fileIdentifier => $file) {
+ composerRequire693962d224b97822c6484f42a89fec4f($fileIdentifier, $file);
+ }
+
+ return $loader;
+ }
+}
+
+/**
+ * @param string $fileIdentifier
+ * @param string $file
+ * @return void
+ */
+function composerRequire693962d224b97822c6484f42a89fec4f($fileIdentifier, $file)
+{
+ if (empty($GLOBALS['__composer_autoload_files'][$fileIdentifier])) {
+ $GLOBALS['__composer_autoload_files'][$fileIdentifier] = true;
+
+ require $file;
+ }
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/autoload_static.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/autoload_static.php
new file mode 100644
index 0000000..fd3ad66
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/autoload_static.php
@@ -0,0 +1,100 @@
+ __DIR__ . '/..' . '/jasig/phpcas/source/CAS.php',
+ );
+
+ public static $prefixLengthsPsr4 = array (
+ 'P' =>
+ array (
+ 'Psr\\Log\\' => 8,
+ ),
+ 'E' =>
+ array (
+ 'EcasPhpCASParser\\' => 17,
+ ),
+ );
+
+ public static $prefixDirsPsr4 = array (
+ 'Psr\\Log\\' =>
+ array (
+ 0 => __DIR__ . '/..' . '/psr/log/src',
+ ),
+ 'EcasPhpCASParser\\' =>
+ array (
+ 0 => __DIR__ . '/..' . '/ec-europa/ecas-phpcas-parser/src',
+ ),
+ );
+
+ public static $classMap = array (
+ 'CAS_AuthenticationException' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/AuthenticationException.php',
+ 'CAS_Client' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/Client.php',
+ 'CAS_CookieJar' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/CookieJar.php',
+ 'CAS_Exception' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/Exception.php',
+ 'CAS_GracefullTerminationException' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/GracefullTerminationException.php',
+ 'CAS_InvalidArgumentException' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/InvalidArgumentException.php',
+ 'CAS_Languages_Catalan' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/Languages/Catalan.php',
+ 'CAS_Languages_ChineseSimplified' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/Languages/ChineseSimplified.php',
+ 'CAS_Languages_English' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/Languages/English.php',
+ 'CAS_Languages_French' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/Languages/French.php',
+ 'CAS_Languages_Galego' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/Languages/Galego.php',
+ 'CAS_Languages_German' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/Languages/German.php',
+ 'CAS_Languages_Greek' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/Languages/Greek.php',
+ 'CAS_Languages_Japanese' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/Languages/Japanese.php',
+ 'CAS_Languages_LanguageInterface' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/Languages/LanguageInterface.php',
+ 'CAS_Languages_Portuguese' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/Languages/Portuguese.php',
+ 'CAS_Languages_Spanish' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/Languages/Spanish.php',
+ 'CAS_OutOfSequenceBeforeAuthenticationCallException' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/OutOfSequenceBeforeAuthenticationCallException.php',
+ 'CAS_OutOfSequenceBeforeClientException' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/OutOfSequenceBeforeClientException.php',
+ 'CAS_OutOfSequenceBeforeProxyException' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/OutOfSequenceBeforeProxyException.php',
+ 'CAS_OutOfSequenceException' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/OutOfSequenceException.php',
+ 'CAS_PGTStorage_AbstractStorage' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/PGTStorage/AbstractStorage.php',
+ 'CAS_PGTStorage_Db' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/PGTStorage/Db.php',
+ 'CAS_PGTStorage_File' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/PGTStorage/File.php',
+ 'CAS_ProxiedService' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/ProxiedService.php',
+ 'CAS_ProxiedService_Abstract' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/ProxiedService/Abstract.php',
+ 'CAS_ProxiedService_Exception' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/ProxiedService/Exception.php',
+ 'CAS_ProxiedService_Http' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/ProxiedService/Http.php',
+ 'CAS_ProxiedService_Http_Abstract' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/ProxiedService/Http/Abstract.php',
+ 'CAS_ProxiedService_Http_Get' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/ProxiedService/Http/Get.php',
+ 'CAS_ProxiedService_Http_Post' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/ProxiedService/Http/Post.php',
+ 'CAS_ProxiedService_Imap' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/ProxiedService/Imap.php',
+ 'CAS_ProxiedService_Testable' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/ProxiedService/Testable.php',
+ 'CAS_ProxyChain' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/ProxyChain.php',
+ 'CAS_ProxyChain_AllowedList' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/ProxyChain/AllowedList.php',
+ 'CAS_ProxyChain_Any' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/ProxyChain/Any.php',
+ 'CAS_ProxyChain_Interface' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/ProxyChain/Interface.php',
+ 'CAS_ProxyChain_Trusted' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/ProxyChain/Trusted.php',
+ 'CAS_ProxyTicketException' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/ProxyTicketException.php',
+ 'CAS_Request_AbstractRequest' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/Request/AbstractRequest.php',
+ 'CAS_Request_CurlMultiRequest' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/Request/CurlMultiRequest.php',
+ 'CAS_Request_CurlRequest' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/Request/CurlRequest.php',
+ 'CAS_Request_Exception' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/Request/Exception.php',
+ 'CAS_Request_MultiRequestInterface' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/Request/MultiRequestInterface.php',
+ 'CAS_Request_RequestInterface' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/Request/RequestInterface.php',
+ 'CAS_ServiceBaseUrl_AllowedListDiscovery' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/ServiceBaseUrl/AllowedListDiscovery.php',
+ 'CAS_ServiceBaseUrl_Base' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/ServiceBaseUrl/Base.php',
+ 'CAS_ServiceBaseUrl_Interface' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/ServiceBaseUrl/Interface.php',
+ 'CAS_ServiceBaseUrl_Static' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/ServiceBaseUrl/Static.php',
+ 'CAS_Session_PhpSession' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/Session/PhpSession.php',
+ 'CAS_TypeMismatchException' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS/TypeMismatchException.php',
+ 'Composer\\InstalledVersions' => __DIR__ . '/..' . '/composer/InstalledVersions.php',
+ 'phpCAS' => __DIR__ . '/..' . '/jasig/phpcas/source/CAS.php',
+ );
+
+ public static function getInitializer(ClassLoader $loader)
+ {
+ return \Closure::bind(function () use ($loader) {
+ $loader->prefixLengthsPsr4 = ComposerStaticInit693962d224b97822c6484f42a89fec4f::$prefixLengthsPsr4;
+ $loader->prefixDirsPsr4 = ComposerStaticInit693962d224b97822c6484f42a89fec4f::$prefixDirsPsr4;
+ $loader->classMap = ComposerStaticInit693962d224b97822c6484f42a89fec4f::$classMap;
+
+ }, null, ClassLoader::class);
+ }
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/installed.json b/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/installed.json
new file mode 100644
index 0000000..b3adc96
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/installed.json
@@ -0,0 +1,177 @@
+{
+ "packages": [
+ {
+ "name": "ec-europa/ecas-phpcas-parser",
+ "version": "0.3",
+ "version_normalized": "0.3.0.0",
+ "source": {
+ "type": "git",
+ "url": "https://github.com/ec-europa/ecas-phpcas-parser.git",
+ "reference": "1ecfb9a80ab0832580d9dbbdc38632d720659057"
+ },
+ "dist": {
+ "type": "zip",
+ "url": "https://api.github.com/repos/ec-europa/ecas-phpcas-parser/zipball/1ecfb9a80ab0832580d9dbbdc38632d720659057",
+ "reference": "1ecfb9a80ab0832580d9dbbdc38632d720659057",
+ "shasum": ""
+ },
+ "require": {
+ "jasig/phpcas": ">=1.3.5 <2.0"
+ },
+ "time": "2017-04-14T09:26:19+00:00",
+ "type": "library",
+ "installation-source": "dist",
+ "autoload": {
+ "psr-4": {
+ "EcasPhpCASParser\\": "src"
+ }
+ },
+ "notification-url": "https://packagist.org/downloads/",
+ "license": [
+ "EUPL"
+ ],
+ "authors": [
+ {
+ "name": "Gregory Boddin",
+ "email": "gregory@siwhine.net"
+ }
+ ],
+ "description": "phpCAS attribute parser for ECAS",
+ "support": {
+ "issues": "https://github.com/ec-europa/ecas-phpcas-parser/issues",
+ "source": "https://github.com/ec-europa/ecas-phpcas-parser/tree/0.3"
+ },
+ "abandoned": true,
+ "install-path": "../ec-europa/ecas-phpcas-parser"
+ },
+ {
+ "name": "jasig/phpcas",
+ "version": "1.6.1",
+ "version_normalized": "1.6.1.0",
+ "source": {
+ "type": "git",
+ "url": "https://github.com/apereo/phpCAS.git",
+ "reference": "c129708154852656aabb13d8606cd5b12dbbabac"
+ },
+ "dist": {
+ "type": "zip",
+ "url": "https://api.github.com/repos/apereo/phpCAS/zipball/c129708154852656aabb13d8606cd5b12dbbabac",
+ "reference": "c129708154852656aabb13d8606cd5b12dbbabac",
+ "shasum": ""
+ },
+ "require": {
+ "ext-curl": "*",
+ "ext-dom": "*",
+ "php": ">=7.1.0",
+ "psr/log": "^1.0 || ^2.0 || ^3.0"
+ },
+ "require-dev": {
+ "monolog/monolog": "^1.0.0 || ^2.0.0",
+ "phpstan/phpstan": "^1.5",
+ "phpunit/phpunit": ">=7.5"
+ },
+ "time": "2023-02-19T19:52:35+00:00",
+ "type": "library",
+ "extra": {
+ "branch-alias": {
+ "dev-master": "1.3.x-dev"
+ }
+ },
+ "installation-source": "dist",
+ "autoload": {
+ "files": [
+ "source/CAS.php"
+ ],
+ "classmap": [
+ "source/"
+ ]
+ },
+ "notification-url": "https://packagist.org/downloads/",
+ "license": [
+ "Apache-2.0"
+ ],
+ "authors": [
+ {
+ "name": "Joachim Fritschi",
+ "email": "jfritschi@freenet.de",
+ "homepage": "https://github.com/jfritschi"
+ },
+ {
+ "name": "Adam Franco",
+ "homepage": "https://github.com/adamfranco"
+ },
+ {
+ "name": "Henry Pan",
+ "homepage": "https://github.com/phy25"
+ }
+ ],
+ "description": "Provides a simple API for authenticating users against a CAS server",
+ "homepage": "https://wiki.jasig.org/display/CASC/phpCAS",
+ "keywords": [
+ "apereo",
+ "cas",
+ "jasig"
+ ],
+ "support": {
+ "issues": "https://github.com/apereo/phpCAS/issues",
+ "source": "https://github.com/apereo/phpCAS/tree/1.6.1"
+ },
+ "install-path": "../jasig/phpcas"
+ },
+ {
+ "name": "psr/log",
+ "version": "3.0.0",
+ "version_normalized": "3.0.0.0",
+ "source": {
+ "type": "git",
+ "url": "https://github.com/php-fig/log.git",
+ "reference": "fe5ea303b0887d5caefd3d431c3e61ad47037001"
+ },
+ "dist": {
+ "type": "zip",
+ "url": "https://api.github.com/repos/php-fig/log/zipball/fe5ea303b0887d5caefd3d431c3e61ad47037001",
+ "reference": "fe5ea303b0887d5caefd3d431c3e61ad47037001",
+ "shasum": ""
+ },
+ "require": {
+ "php": ">=8.0.0"
+ },
+ "time": "2021-07-14T16:46:02+00:00",
+ "type": "library",
+ "extra": {
+ "branch-alias": {
+ "dev-master": "3.x-dev"
+ }
+ },
+ "installation-source": "dist",
+ "autoload": {
+ "psr-4": {
+ "Psr\\Log\\": "src"
+ }
+ },
+ "notification-url": "https://packagist.org/downloads/",
+ "license": [
+ "MIT"
+ ],
+ "authors": [
+ {
+ "name": "PHP-FIG",
+ "homepage": "https://www.php-fig.org/"
+ }
+ ],
+ "description": "Common interface for logging libraries",
+ "homepage": "https://github.com/php-fig/log",
+ "keywords": [
+ "log",
+ "psr",
+ "psr-3"
+ ],
+ "support": {
+ "source": "https://github.com/php-fig/log/tree/3.0.0"
+ },
+ "install-path": "../psr/log"
+ }
+ ],
+ "dev": true,
+ "dev-package-names": []
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/installed.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/installed.php
new file mode 100644
index 0000000..005e62b
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/installed.php
@@ -0,0 +1,50 @@
+ array(
+ 'pretty_version' => '1.0.0+no-version-set',
+ 'version' => '1.0.0.0',
+ 'type' => 'library',
+ 'install_path' => __DIR__ . '/../../',
+ 'aliases' => array(),
+ 'reference' => NULL,
+ 'name' => 'felixrupp/user_cas',
+ 'dev' => true,
+ ),
+ 'versions' => array(
+ 'ec-europa/ecas-phpcas-parser' => array(
+ 'pretty_version' => '0.3',
+ 'version' => '0.3.0.0',
+ 'type' => 'library',
+ 'install_path' => __DIR__ . '/../ec-europa/ecas-phpcas-parser',
+ 'aliases' => array(),
+ 'reference' => '1ecfb9a80ab0832580d9dbbdc38632d720659057',
+ 'dev_requirement' => false,
+ ),
+ 'felixrupp/user_cas' => array(
+ 'pretty_version' => '1.0.0+no-version-set',
+ 'version' => '1.0.0.0',
+ 'type' => 'library',
+ 'install_path' => __DIR__ . '/../../',
+ 'aliases' => array(),
+ 'reference' => NULL,
+ 'dev_requirement' => false,
+ ),
+ 'jasig/phpcas' => array(
+ 'pretty_version' => '1.6.1',
+ 'version' => '1.6.1.0',
+ 'type' => 'library',
+ 'install_path' => __DIR__ . '/../jasig/phpcas',
+ 'aliases' => array(),
+ 'reference' => 'c129708154852656aabb13d8606cd5b12dbbabac',
+ 'dev_requirement' => false,
+ ),
+ 'psr/log' => array(
+ 'pretty_version' => '3.0.0',
+ 'version' => '3.0.0.0',
+ 'type' => 'library',
+ 'install_path' => __DIR__ . '/../psr/log',
+ 'aliases' => array(),
+ 'reference' => 'fe5ea303b0887d5caefd3d431c3e61ad47037001',
+ 'dev_requirement' => false,
+ ),
+ ),
+);
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/platform_check.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/platform_check.php
new file mode 100644
index 0000000..4c3a5d6
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/composer/platform_check.php
@@ -0,0 +1,26 @@
+= 80100)) {
+ $issues[] = 'Your Composer dependencies require a PHP version ">= 8.1.0". You are running ' . PHP_VERSION . '.';
+}
+
+if ($issues) {
+ if (!headers_sent()) {
+ header('HTTP/1.1 500 Internal Server Error');
+ }
+ if (!ini_get('display_errors')) {
+ if (PHP_SAPI === 'cli' || PHP_SAPI === 'phpdbg') {
+ fwrite(STDERR, 'Composer detected issues in your platform:' . PHP_EOL.PHP_EOL . implode(PHP_EOL, $issues) . PHP_EOL.PHP_EOL);
+ } elseif (!headers_sent()) {
+ echo 'Composer detected issues in your platform:' . PHP_EOL.PHP_EOL . str_replace('You are running '.PHP_VERSION.'.', '', implode(PHP_EOL, $issues)) . PHP_EOL.PHP_EOL;
+ }
+ }
+ trigger_error(
+ 'Composer detected issues in your platform: ' . implode(' ', $issues),
+ E_USER_ERROR
+ );
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/ec-europa/ecas-phpcas-parser/.gitignore b/docker/volume/nextcloud/envole/app/user_cas/vendor/ec-europa/ecas-phpcas-parser/.gitignore
new file mode 100644
index 0000000..3ce5adb
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/ec-europa/ecas-phpcas-parser/.gitignore
@@ -0,0 +1,2 @@
+.idea
+vendor
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/ec-europa/ecas-phpcas-parser/README.md b/docker/volume/nextcloud/envole/app/user_cas/vendor/ec-europa/ecas-phpcas-parser/README.md
new file mode 100644
index 0000000..796c6c9
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/ec-europa/ecas-phpcas-parser/README.md
@@ -0,0 +1,106 @@
+#EcasPhpCASParser
+
+## Why
+Default parsing of ECAS attributes is currently broken with phpCAS,
+groups end-up in an un-parsable concentaned string.
+
+### before
+```
+array (size=21)
+ 'user' => string 'gboddin' (length=7)
+ 'departmentNumber' => string 'xxxx' (length=13)
+ 'email' => string 'xxx' (length=31)
+ 'employeeNumber' => string 'xxx' (length=8)
+ 'employeeType' => string 'x' (length=1)
+ 'firstName' => string 'Gregory' (length=7)
+ 'lastName' => string 'BODDIN' (length=6)
+ 'domain' => string 'xxxxx' (length=12)
+ 'domainUsername' => string 'gboddin' (length=7)
+ 'telephoneNumber' => string 'xxx' (length=5)
+ 'locale' => string 'en' (length=2)
+ 'assuranceLevel' => string 'xx' (length=2)
+ 'uid' => string 'gboddin' (length=7)
+ 'orgId' => string 'xxxx' (length=6)
+ 'groups' => string 'GROUP1GROUP2GROUP3GROUP4GROUP5' (length=28)
+ 'strength' => string 'STRONG' (length=6)
+ 'authenticationFactors' => "xxxxgboddin"
+ 'loginDate' => string '2016-06-29T10:53:06.399+02:00' (length=29)
+ 'sso' => string 'true' (length=4)
+ 'ticketType' => string 'SERVICE' (length=7)
+```
+### after
+```
+array (size=21)
+ 'user' => string 'gboddin' (length=7)
+ 'departmentNumber' => string 'xxxx' (length=13)
+ 'email' => string 'xxx' (length=31)
+ 'employeeNumber' => string 'xxx' (length=8)
+ 'employeeType' => string 'x' (length=1)
+ 'firstName' => string 'Gregory' (length=7)
+ 'lastName' => string 'BODDIN' (length=6)
+ 'domain' => string 'xxxxx' (length=12)
+ 'domainUsername' => string 'gboddin' (length=7)
+ 'telephoneNumber' => string 'xxx' (length=5)
+ 'locale' => string 'en' (length=2)
+ 'assuranceLevel' => string 'xx' (length=2)
+ 'uid' => string 'gboddin' (length=7)
+ 'orgId' => string 'xxxx' (length=6)
+ 'groups' =>
+ array (size=18)
+ 0 => string 'GROUP1' (length=6)
+ 1 => string 'GROUP2' (length=6)
+ 2 => string 'GROUP3' (length=6)
+ 3 => string 'GROUP4' (length=6)
+ 4 => string 'GROUP5' (length=6)
+ 'strength' => string 'STRONG' (length=6)
+ 'loginDate' => string '2016-06-29T10:53:06.399+02:00' (length=29)
+ 'authenticationFactors' =>
+ array (size=1)
+ 'password' => string 'gboddin' (length=7)
+ 'sms' => string 'xxxxxxx' (length=7)
+ 'sso' => string 'true' (length=4)
+ 'ticketType' => string 'SERVICE' (length=7)
+```
+## Installation
+
+Add to with composer :
+
+```sh
+composer require ec-europa/ecas-phpcas-parser:~0.3
+
+```
+
+## Usage
+
+```php
+//config the client client as usual
+phpCAS::client(
+ constant($config['cas.version']),
+ $config['cas.host'],
+ (int) $config['cas.port'],
+ $config['cas.uri'],
+ false
+);
+
+//set the attribute callback
+phpCAS::setCasAttributeParserCallback(
+ array(
+ new \EcasPhpCASParser\EcasPhpCASParser(),
+ 'parse'
+ )
+);
+
+```
+
+## ECAS auth success XML example :
+```xml
+
+ gboddin
+
+ GROUP1
+ GROUP1
+
+ SERVICE
+
+
+```
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/ec-europa/ecas-phpcas-parser/composer.json b/docker/volume/nextcloud/envole/app/user_cas/vendor/ec-europa/ecas-phpcas-parser/composer.json
new file mode 100644
index 0000000..28fa651
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/ec-europa/ecas-phpcas-parser/composer.json
@@ -0,0 +1,20 @@
+{
+ "name": "ec-europa/ecas-phpcas-parser",
+ "description": "phpCAS attribute parser for ECAS",
+ "type": "library",
+ "autoload": {
+ "psr-4": {
+ "EcasPhpCASParser\\": "src"
+ }
+ },
+ "require": {
+ "jasig/phpcas": ">=1.3.5 <2.0"
+ },
+ "license": "EUPL",
+ "authors": [
+ {
+ "name": "Gregory Boddin",
+ "email": "gregory@siwhine.net"
+ }
+ ]
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/ec-europa/ecas-phpcas-parser/composer.lock b/docker/volume/nextcloud/envole/app/user_cas/vendor/ec-europa/ecas-phpcas-parser/composer.lock
new file mode 100644
index 0000000..babe0fd
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/ec-europa/ecas-phpcas-parser/composer.lock
@@ -0,0 +1,75 @@
+{
+ "_readme": [
+ "This file locks the dependencies of your project to a known state",
+ "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#composer-lock-the-lock-file",
+ "This file is @generated automatically"
+ ],
+ "hash": "b0d2c119b48fbf5e04775e8d415897ca",
+ "content-hash": "c27794c08b193708f4d149e70b33a9c8",
+ "packages": [
+ {
+ "name": "jasig/phpcas",
+ "version": "dev-master",
+ "source": {
+ "type": "git",
+ "url": "https://github.com/Jasig/phpCAS.git",
+ "reference": "23a0b46db6092710e6a37badde6689b7977c3a56"
+ },
+ "dist": {
+ "type": "zip",
+ "url": "https://api.github.com/repos/Jasig/phpCAS/zipball/23a0b46db6092710e6a37badde6689b7977c3a56",
+ "reference": "23a0b46db6092710e6a37badde6689b7977c3a56",
+ "shasum": ""
+ },
+ "require": {
+ "ext-curl": "*",
+ "php": ">=5.4.0"
+ },
+ "require-dev": {
+ "phpunit/phpunit": "~3.7.10"
+ },
+ "type": "library",
+ "extra": {
+ "branch-alias": {
+ "dev-master": "1.3.x-dev"
+ }
+ },
+ "autoload": {
+ "classmap": [
+ "source/"
+ ]
+ },
+ "notification-url": "https://packagist.org/downloads/",
+ "license": [
+ "Apache-2.0"
+ ],
+ "authors": [
+ {
+ "name": "Joachim Fritschi",
+ "homepage": "https://wiki.jasig.org/display/~fritschi"
+ },
+ {
+ "name": "Adam Franco",
+ "homepage": "https://wiki.jasig.org/display/~adamfranco"
+ }
+ ],
+ "description": "Provides a simple API for authenticating users against a CAS server",
+ "homepage": "https://wiki.jasig.org/display/CASC/phpCAS",
+ "keywords": [
+ "cas",
+ "jasig"
+ ],
+ "time": "2016-07-10 12:56:11"
+ }
+ ],
+ "packages-dev": [],
+ "aliases": [],
+ "minimum-stability": "stable",
+ "stability-flags": {
+ "jasig/phpcas": 20
+ },
+ "prefer-stable": false,
+ "prefer-lowest": false,
+ "platform": [],
+ "platform-dev": []
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/ec-europa/ecas-phpcas-parser/src/EcasPhpCASParser.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/ec-europa/ecas-phpcas-parser/src/EcasPhpCASParser.php
new file mode 100644
index 0000000..d14556d
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/ec-europa/ecas-phpcas-parser/src/EcasPhpCASParser.php
@@ -0,0 +1,77 @@
+
+ * @license GPL https://www.gnu.org/licenses/gpl.txt
+ * @link https://github.com/ec-europa/ecas-phpcas-parser
+ */
+ use phpCAS;
+ class EcasPhpCASParser
+ {
+ /**
+ * Class EcasPhpCASParser
+ * @param \DOMElement $root XML element coming from phpCAS
+ * @return array Attributes
+ * @see \phpCAS
+ */
+ public function parse(\DOMElement $root)
+ {
+ phpCAS::trace('Found attribute '.$root->nodeName);
+ $result = array();
+
+ if ($root->hasAttributes()) {
+ $attrs = $root->attributes;
+ foreach ($attrs as $attr) {
+ if ($attr->name == 'number') {
+ continue;
+ }
+ phpCAS::trace(
+ 'Additional attribute '.$attr->name.' : '.$attr->value
+ );
+ $result['@attributes'][$attr->name] = $attr->value;
+ }
+ }
+
+ if ($root->hasChildNodes()) {
+ $children = $root->childNodes;
+ if ($children->length == 1) {
+ $child = $children->item(0);
+ if ($child->nodeType == XML_TEXT_NODE) {
+ $result['_value'] = $child->nodeValue;
+ return count($result) == 1
+ ? $result['_value']
+ : $result;
+ }
+ }
+ $groups = array();
+ foreach ($children as $child) {
+ $nodeName = str_replace('cas:', '', $child->nodeName);
+ phpCAS::traceBegin();
+ if ($nodeName == 'groups' ) {
+ $result['groups'] = array();
+ phpCas::traceBegin();
+ foreach ($child->childNodes as $groupChild) {
+ $result['groups'][]
+ = $this->parse($groupChild);
+ }
+ phpCAS::traceEnd('Parsed groups');
+ } elseif (!isset($result[$nodeName])) {
+ $result[$nodeName] = $this->parse($child);
+ } else {
+ if (!isset($groups[$nodeName])) {
+ $result[$nodeName] = array($result[$nodeName]);
+ $groups[$nodeName] = 1;
+ }
+ $result[$nodeName][] = $this->parse($child);
+ }
+ phpCAS::traceEnd();
+
+ }
+ }
+ return $result;
+ }
+ }
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/CAS.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/CAS.php
new file mode 100644
index 0000000..6ddcf07
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/CAS.php
@@ -0,0 +1,32 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+require_once __DIR__.'/source/CAS.php';
+
+trigger_error('Including CAS.php is deprecated. Install phpCAS using composer instead.', E_USER_DEPRECATED);
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/LICENSE b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/LICENSE
new file mode 100644
index 0000000..261eeb9
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/LICENSE
@@ -0,0 +1,201 @@
+ Apache License
+ Version 2.0, January 2004
+ http://www.apache.org/licenses/
+
+ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+ 1. Definitions.
+
+ "License" shall mean the terms and conditions for use, reproduction,
+ and distribution as defined by Sections 1 through 9 of this document.
+
+ "Licensor" shall mean the copyright owner or entity authorized by
+ the copyright owner that is granting the License.
+
+ "Legal Entity" shall mean the union of the acting entity and all
+ other entities that control, are controlled by, or are under common
+ control with that entity. For the purposes of this definition,
+ "control" means (i) the power, direct or indirect, to cause the
+ direction or management of such entity, whether by contract or
+ otherwise, or (ii) ownership of fifty percent (50%) or more of the
+ outstanding shares, or (iii) beneficial ownership of such entity.
+
+ "You" (or "Your") shall mean an individual or Legal Entity
+ exercising permissions granted by this License.
+
+ "Source" form shall mean the preferred form for making modifications,
+ including but not limited to software source code, documentation
+ source, and configuration files.
+
+ "Object" form shall mean any form resulting from mechanical
+ transformation or translation of a Source form, including but
+ not limited to compiled object code, generated documentation,
+ and conversions to other media types.
+
+ "Work" shall mean the work of authorship, whether in Source or
+ Object form, made available under the License, as indicated by a
+ copyright notice that is included in or attached to the work
+ (an example is provided in the Appendix below).
+
+ "Derivative Works" shall mean any work, whether in Source or Object
+ form, that is based on (or derived from) the Work and for which the
+ editorial revisions, annotations, elaborations, or other modifications
+ represent, as a whole, an original work of authorship. For the purposes
+ of this License, Derivative Works shall not include works that remain
+ separable from, or merely link (or bind by name) to the interfaces of,
+ the Work and Derivative Works thereof.
+
+ "Contribution" shall mean any work of authorship, including
+ the original version of the Work and any modifications or additions
+ to that Work or Derivative Works thereof, that is intentionally
+ submitted to Licensor for inclusion in the Work by the copyright owner
+ or by an individual or Legal Entity authorized to submit on behalf of
+ the copyright owner. For the purposes of this definition, "submitted"
+ means any form of electronic, verbal, or written communication sent
+ to the Licensor or its representatives, including but not limited to
+ communication on electronic mailing lists, source code control systems,
+ and issue tracking systems that are managed by, or on behalf of, the
+ Licensor for the purpose of discussing and improving the Work, but
+ excluding communication that is conspicuously marked or otherwise
+ designated in writing by the copyright owner as "Not a Contribution."
+
+ "Contributor" shall mean Licensor and any individual or Legal Entity
+ on behalf of whom a Contribution has been received by Licensor and
+ subsequently incorporated within the Work.
+
+ 2. Grant of Copyright License. Subject to the terms and conditions of
+ this License, each Contributor hereby grants to You a perpetual,
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+ copyright license to reproduce, prepare Derivative Works of,
+ publicly display, publicly perform, sublicense, and distribute the
+ Work and such Derivative Works in Source or Object form.
+
+ 3. Grant of Patent License. Subject to the terms and conditions of
+ this License, each Contributor hereby grants to You a perpetual,
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+ (except as stated in this section) patent license to make, have made,
+ use, offer to sell, sell, import, and otherwise transfer the Work,
+ where such license applies only to those patent claims licensable
+ by such Contributor that are necessarily infringed by their
+ Contribution(s) alone or by combination of their Contribution(s)
+ with the Work to which such Contribution(s) was submitted. If You
+ institute patent litigation against any entity (including a
+ cross-claim or counterclaim in a lawsuit) alleging that the Work
+ or a Contribution incorporated within the Work constitutes direct
+ or contributory patent infringement, then any patent licenses
+ granted to You under this License for that Work shall terminate
+ as of the date such litigation is filed.
+
+ 4. Redistribution. You may reproduce and distribute copies of the
+ Work or Derivative Works thereof in any medium, with or without
+ modifications, and in Source or Object form, provided that You
+ meet the following conditions:
+
+ (a) You must give any other recipients of the Work or
+ Derivative Works a copy of this License; and
+
+ (b) You must cause any modified files to carry prominent notices
+ stating that You changed the files; and
+
+ (c) You must retain, in the Source form of any Derivative Works
+ that You distribute, all copyright, patent, trademark, and
+ attribution notices from the Source form of the Work,
+ excluding those notices that do not pertain to any part of
+ the Derivative Works; and
+
+ (d) If the Work includes a "NOTICE" text file as part of its
+ distribution, then any Derivative Works that You distribute must
+ include a readable copy of the attribution notices contained
+ within such NOTICE file, excluding those notices that do not
+ pertain to any part of the Derivative Works, in at least one
+ of the following places: within a NOTICE text file distributed
+ as part of the Derivative Works; within the Source form or
+ documentation, if provided along with the Derivative Works; or,
+ within a display generated by the Derivative Works, if and
+ wherever such third-party notices normally appear. The contents
+ of the NOTICE file are for informational purposes only and
+ do not modify the License. You may add Your own attribution
+ notices within Derivative Works that You distribute, alongside
+ or as an addendum to the NOTICE text from the Work, provided
+ that such additional attribution notices cannot be construed
+ as modifying the License.
+
+ You may add Your own copyright statement to Your modifications and
+ may provide additional or different license terms and conditions
+ for use, reproduction, or distribution of Your modifications, or
+ for any such Derivative Works as a whole, provided Your use,
+ reproduction, and distribution of the Work otherwise complies with
+ the conditions stated in this License.
+
+ 5. Submission of Contributions. Unless You explicitly state otherwise,
+ any Contribution intentionally submitted for inclusion in the Work
+ by You to the Licensor shall be under the terms and conditions of
+ this License, without any additional terms or conditions.
+ Notwithstanding the above, nothing herein shall supersede or modify
+ the terms of any separate license agreement you may have executed
+ with Licensor regarding such Contributions.
+
+ 6. Trademarks. This License does not grant permission to use the trade
+ names, trademarks, service marks, or product names of the Licensor,
+ except as required for reasonable and customary use in describing the
+ origin of the Work and reproducing the content of the NOTICE file.
+
+ 7. Disclaimer of Warranty. Unless required by applicable law or
+ agreed to in writing, Licensor provides the Work (and each
+ Contributor provides its Contributions) on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+ implied, including, without limitation, any warranties or conditions
+ of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+ PARTICULAR PURPOSE. You are solely responsible for determining the
+ appropriateness of using or redistributing the Work and assume any
+ risks associated with Your exercise of permissions under this License.
+
+ 8. Limitation of Liability. In no event and under no legal theory,
+ whether in tort (including negligence), contract, or otherwise,
+ unless required by applicable law (such as deliberate and grossly
+ negligent acts) or agreed to in writing, shall any Contributor be
+ liable to You for damages, including any direct, indirect, special,
+ incidental, or consequential damages of any character arising as a
+ result of this License or out of the use or inability to use the
+ Work (including but not limited to damages for loss of goodwill,
+ work stoppage, computer failure or malfunction, or any and all
+ other commercial damages or losses), even if such Contributor
+ has been advised of the possibility of such damages.
+
+ 9. Accepting Warranty or Additional Liability. While redistributing
+ the Work or Derivative Works thereof, You may choose to offer,
+ and charge a fee for, acceptance of support, warranty, indemnity,
+ or other liability obligations and/or rights consistent with this
+ License. However, in accepting such obligations, You may act only
+ on Your own behalf and on Your sole responsibility, not on behalf
+ of any other Contributor, and only if You agree to indemnify,
+ defend, and hold each Contributor harmless for any liability
+ incurred by, or claims asserted against, such Contributor by reason
+ of your accepting any such warranty or additional liability.
+
+ END OF TERMS AND CONDITIONS
+
+ APPENDIX: How to apply the Apache License to your work.
+
+ To apply the Apache License to your work, attach the following
+ boilerplate notice, with the fields enclosed by brackets "[]"
+ replaced with your own identifying information. (Don't include
+ the brackets!) The text should be enclosed in the appropriate
+ comment syntax for the file format. We also recommend that a
+ file or class name and description of purpose be included on the
+ same "printed page" as the copyright notice for easier
+ identification within third-party archives.
+
+ Copyright [yyyy] [name of copyright owner]
+
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/NOTICE b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/NOTICE
new file mode 100644
index 0000000..70d9ffc
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/NOTICE
@@ -0,0 +1,81 @@
+Copyright 2007-2011, JA-SIG, Inc.
+This project includes software developed by Jasig.
+http://www.jasig.org/
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this software except in compliance with the License.
+You may obtain a copy of the License at:
+
+http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+===========================================================================
+
+Copyright © 2003-2007, The ESUP-Portail consortium
+
+Requirements for sources originally licensed under the New BSD License:
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions
+are met:
+
+- Redistributions of source code must retain the above copyright notice,
+this list of conditions and the following disclaimer.
+
+- Redistributions in binary form must reproduce the above copyright notice,
+this list of conditions and the following disclaimer in the documentation
+and/or other materials provided with the distribution.
+
+- Neither the name of JA-SIG, Inc. nor the names of its contributors may be
+used to endorse or promote products derived from this software without
+specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
+LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+POSSIBILITY OF SUCH DAMAGE.
+
+===========================================================================
+
+Copyright (c) 2009, Regents of the University of Nebraska
+All rights reserved.
+
+Requirements for CAS_Autloader originally licensed under the New BSD License:
+
+Redistribution and use in source and binary forms, with or without modification,
+are permitted provided that the following conditions are met:
+
+Redistributions of source code must retain the above copyright notice, this list
+of conditions and the following disclaimer.
+
+Redistributions in binary form must reproduce the above copyright notice, this
+list of conditions and the following disclaimer in the documentation and/or
+other materials provided with the distribution.
+
+Neither the name of the University of Nebraska nor the names of its contributors
+may be used to endorse or promote products derived from this software without
+specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
+LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+POSSIBILITY OF SUCH DAMAGE.
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/README.md b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/README.md
new file mode 100644
index 0000000..d481289
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/README.md
@@ -0,0 +1,35 @@
+phpCAS
+=======
+
+phpCAS is an authentication library that allows PHP applications to easily authenticate
+users via a Central Authentication Service (CAS) server.
+
+Please see the wiki website for more information:
+
+https://apereo.github.io/phpCAS/
+
+Api documentation can be found here:
+
+https://apereo.github.io/phpCAS/api/
+
+
+[](https://github.com/apereo/phpCAS/actions/workflows/test.yml)
+
+LICENSE
+-------
+
+Copyright 2007-2020, Apereo Foundation.
+This project includes software developed by Apereo Foundation.
+http://www.apereo.org/
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this software except in compliance with the License.
+You may obtain a copy of the License at:
+
+http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/composer.json b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/composer.json
new file mode 100644
index 0000000..bf8a17c
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/composer.json
@@ -0,0 +1,55 @@
+{
+ "name" : "apereo/phpcas",
+ "description" : "Provides a simple API for authenticating users against a CAS server",
+ "keywords" : [
+ "cas",
+ "jasig",
+ "apereo"
+ ],
+ "homepage" : "https://wiki.jasig.org/display/CASC/phpCAS",
+ "type" : "library",
+ "license" : "Apache-2.0",
+ "authors" : [{
+ "name" : "Joachim Fritschi",
+ "homepage" : "https://github.com/jfritschi",
+ "email" : "jfritschi@freenet.de"
+ }, {
+ "name" : "Adam Franco",
+ "homepage" : "https://github.com/adamfranco"
+ }, {
+ "name" : "Henry Pan",
+ "homepage" : "https://github.com/phy25"
+ }
+ ],
+ "require" : {
+ "php" : ">=7.1.0",
+ "ext-curl" : "*",
+ "ext-dom" : "*",
+ "psr/log" : "^1.0 || ^2.0 || ^3.0"
+ },
+ "require-dev" : {
+ "monolog/monolog" : "^1.0.0 || ^2.0.0",
+ "phpunit/phpunit" : ">=7.5",
+ "phpstan/phpstan" : "^1.5"
+ },
+ "autoload" : {
+ "files": ["source/CAS.php"],
+ "classmap" : [
+ "source/"
+ ]
+ },
+ "autoload-dev" : {
+ "psr-4" : {
+ "PhpCas\\" : "test/CAS/"
+ }
+ },
+ "scripts" : {
+ "test" : "phpunit",
+ "phpstan" : "phpstan"
+ },
+ "extra" : {
+ "branch-alias" : {
+ "dev-master" : "1.3.x-dev"
+ }
+ }
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS.php
new file mode 100644
index 0000000..71c0475
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS.php
@@ -0,0 +1,2083 @@
+
+ * @author Olivier Berger
+ * @author Brett Bieber
+ * @author Joachim Fritschi
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ * @ingroup public
+ */
+
+use Psr\Log\LoggerInterface;
+
+//
+// hack by Vangelis Haniotakis to handle the absence of $_SERVER['REQUEST_URI']
+// in IIS
+//
+if (!isset($_SERVER['REQUEST_URI']) && isset($_SERVER['SCRIPT_NAME']) && isset($_SERVER['QUERY_STRING'])) {
+ $_SERVER['REQUEST_URI'] = $_SERVER['SCRIPT_NAME'] . '?' . $_SERVER['QUERY_STRING'];
+}
+
+
+// ########################################################################
+// CONSTANTS
+// ########################################################################
+
+// ------------------------------------------------------------------------
+// CAS VERSIONS
+// ------------------------------------------------------------------------
+
+/**
+ * phpCAS version. accessible for the user by phpCAS::getVersion().
+ */
+define('PHPCAS_VERSION', '1.6.1');
+
+/**
+ * @addtogroup public
+ * @{
+ */
+
+/**
+ * phpCAS supported protocols. accessible for the user by phpCAS::getSupportedProtocols().
+ */
+
+/**
+ * CAS version 1.0
+ */
+define("CAS_VERSION_1_0", '1.0');
+/*!
+ * CAS version 2.0
+*/
+define("CAS_VERSION_2_0", '2.0');
+/**
+ * CAS version 3.0
+ */
+define("CAS_VERSION_3_0", '3.0');
+
+// ------------------------------------------------------------------------
+// SAML defines
+// ------------------------------------------------------------------------
+
+/**
+ * SAML protocol
+ */
+define("SAML_VERSION_1_1", 'S1');
+
+/**
+ * XML header for SAML POST
+ */
+define("SAML_XML_HEADER", '');
+
+/**
+ * SOAP envelope for SAML POST
+ */
+define("SAML_SOAP_ENV", '');
+
+/**
+ * SAMLP request
+ */
+define("SAMLP_REQUEST", '');
+define("SAMLP_REQUEST_CLOSE", ' ');
+
+/**
+ * SAMLP artifact tag (for the ticket)
+ */
+define("SAML_ASSERTION_ARTIFACT", '');
+
+/**
+ * SAMLP close
+ */
+define("SAML_ASSERTION_ARTIFACT_CLOSE", ' ');
+
+/**
+ * SOAP body close
+ */
+define("SAML_SOAP_BODY_CLOSE", ' ');
+
+/**
+ * SOAP envelope close
+ */
+define("SAML_SOAP_ENV_CLOSE", '
+ * @author Olivier Berger
+ * @author Brett Bieber
+ * @author Joachim Fritschi
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+class phpCAS
+{
+
+ /**
+ * This variable is used by the interface class phpCAS.
+ *
+ * @var CAS_Client
+ * @hideinitializer
+ */
+ private static $_PHPCAS_CLIENT;
+
+ /**
+ * @var array
+ * This variable is used to store where the initializer is called from
+ * (to print a comprehensive error in case of multiple calls).
+ *
+ * @hideinitializer
+ */
+ private static $_PHPCAS_INIT_CALL;
+
+ /**
+ * @var array
+ * This variable is used to store phpCAS debug mode.
+ *
+ * @hideinitializer
+ */
+ private static $_PHPCAS_DEBUG;
+
+ /**
+ * This variable is used to enable verbose mode
+ * This pevents debug info to be show to the user. Since it's a security
+ * feature the default is false
+ *
+ * @hideinitializer
+ */
+ private static $_PHPCAS_VERBOSE = false;
+
+
+ // ########################################################################
+ // INITIALIZATION
+ // ########################################################################
+
+ /**
+ * @addtogroup publicInit
+ * @{
+ */
+
+ /**
+ * phpCAS client initializer.
+ *
+ * @param string $server_version the version of the CAS server
+ * @param string $server_hostname the hostname of the CAS server
+ * @param int $server_port the port the CAS server is running on
+ * @param string $server_uri the URI the CAS server is responding on
+ * @param string|string[]|CAS_ServiceBaseUrl_Interface
+ * $service_base_url the base URL (protocol, host and the
+ * optional port) of the CAS client; pass
+ * in an array to use auto discovery with
+ * an allowlist; pass in
+ * CAS_ServiceBaseUrl_Interface for custom
+ * behavior. Added in 1.6.0. Similar to
+ * serverName config in other CAS clients.
+ * @param bool $changeSessionID Allow phpCAS to change the session_id
+ * (Single Sign Out/handleLogoutRequests
+ * is based on that change)
+ * @param \SessionHandlerInterface $sessionHandler the session handler
+ *
+ * @return void a newly created CAS_Client object
+ * @note Only one of the phpCAS::client() and phpCAS::proxy functions should be
+ * called, only once, and before all other methods (except phpCAS::getVersion()
+ * and phpCAS::setDebug()).
+ */
+ public static function client($server_version, $server_hostname,
+ $server_port, $server_uri, $service_base_url,
+ $changeSessionID = true, \SessionHandlerInterface $sessionHandler = null
+ ) {
+ phpCAS :: traceBegin();
+ if (is_object(self::$_PHPCAS_CLIENT)) {
+ phpCAS :: error(self::$_PHPCAS_INIT_CALL['method'] . '() has already been called (at ' . self::$_PHPCAS_INIT_CALL['file'] . ':' . self::$_PHPCAS_INIT_CALL['line'] . ')');
+ }
+
+ // store where the initializer is called from
+ $dbg = debug_backtrace();
+ self::$_PHPCAS_INIT_CALL = array (
+ 'done' => true,
+ 'file' => $dbg[0]['file'],
+ 'line' => $dbg[0]['line'],
+ 'method' => __CLASS__ . '::' . __FUNCTION__
+ );
+
+ // initialize the object $_PHPCAS_CLIENT
+ try {
+ self::$_PHPCAS_CLIENT = new CAS_Client(
+ $server_version, false, $server_hostname, $server_port, $server_uri, $service_base_url,
+ $changeSessionID, $sessionHandler
+ );
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+ phpCAS :: traceEnd();
+ }
+
+ /**
+ * phpCAS proxy initializer.
+ *
+ * @param string $server_version the version of the CAS server
+ * @param string $server_hostname the hostname of the CAS server
+ * @param string $server_port the port the CAS server is running on
+ * @param string $server_uri the URI the CAS server is responding on
+ * @param string|string[]|CAS_ServiceBaseUrl_Interface
+ * $service_base_url the base URL (protocol, host and the
+ * optional port) of the CAS client; pass
+ * in an array to use auto discovery with
+ * an allowlist; pass in
+ * CAS_ServiceBaseUrl_Interface for custom
+ * behavior. Added in 1.6.0. Similar to
+ * serverName config in other CAS clients.
+ * @param bool $changeSessionID Allow phpCAS to change the session_id
+ * (Single Sign Out/handleLogoutRequests
+ * is based on that change)
+ * @param \SessionHandlerInterface $sessionHandler the session handler
+ *
+ * @return void a newly created CAS_Client object
+ * @note Only one of the phpCAS::client() and phpCAS::proxy functions should be
+ * called, only once, and before all other methods (except phpCAS::getVersion()
+ * and phpCAS::setDebug()).
+ */
+ public static function proxy($server_version, $server_hostname,
+ $server_port, $server_uri, $service_base_url,
+ $changeSessionID = true, \SessionHandlerInterface $sessionHandler = null
+ ) {
+ phpCAS :: traceBegin();
+ if (is_object(self::$_PHPCAS_CLIENT)) {
+ phpCAS :: error(self::$_PHPCAS_INIT_CALL['method'] . '() has already been called (at ' . self::$_PHPCAS_INIT_CALL['file'] . ':' . self::$_PHPCAS_INIT_CALL['line'] . ')');
+ }
+
+ // store where the initialzer is called from
+ $dbg = debug_backtrace();
+ self::$_PHPCAS_INIT_CALL = array (
+ 'done' => true,
+ 'file' => $dbg[0]['file'],
+ 'line' => $dbg[0]['line'],
+ 'method' => __CLASS__ . '::' . __FUNCTION__
+ );
+
+ // initialize the object $_PHPCAS_CLIENT
+ try {
+ self::$_PHPCAS_CLIENT = new CAS_Client(
+ $server_version, true, $server_hostname, $server_port, $server_uri, $service_base_url,
+ $changeSessionID, $sessionHandler
+ );
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+ phpCAS :: traceEnd();
+ }
+
+ /**
+ * Answer whether or not the client or proxy has been initialized
+ *
+ * @return bool
+ */
+ public static function isInitialized ()
+ {
+ return (is_object(self::$_PHPCAS_CLIENT));
+ }
+
+ /** @} */
+ // ########################################################################
+ // DEBUGGING
+ // ########################################################################
+
+ /**
+ * @addtogroup publicDebug
+ * @{
+ */
+
+ /**
+ * Set/unset PSR-3 logger
+ *
+ * @param LoggerInterface $logger the PSR-3 logger used for logging, or
+ * null to stop logging.
+ *
+ * @return void
+ */
+ public static function setLogger($logger = null)
+ {
+ if (empty(self::$_PHPCAS_DEBUG['unique_id'])) {
+ self::$_PHPCAS_DEBUG['unique_id'] = substr(strtoupper(md5(uniqid(''))), 0, 4);
+ }
+ self::$_PHPCAS_DEBUG['logger'] = $logger;
+ self::$_PHPCAS_DEBUG['indent'] = 0;
+ phpCAS :: trace('START ('.date("Y-m-d H:i:s").') phpCAS-' . PHPCAS_VERSION . ' ******************');
+ }
+
+ /**
+ * Set/unset debug mode
+ *
+ * @param string $filename the name of the file used for logging, or false
+ * to stop debugging.
+ *
+ * @return void
+ *
+ * @deprecated
+ */
+ public static function setDebug($filename = '')
+ {
+ trigger_error('phpCAS::setDebug() is deprecated in favor of phpCAS::setLogger().', E_USER_DEPRECATED);
+
+ if ($filename != false && gettype($filename) != 'string') {
+ phpCAS :: error('type mismatched for parameter $dbg (should be false or the name of the log file)');
+ }
+ if ($filename === false) {
+ self::$_PHPCAS_DEBUG['filename'] = false;
+
+ } else {
+ if (empty ($filename)) {
+ if (preg_match('/^Win.*/', getenv('OS'))) {
+ if (isset ($_ENV['TMP'])) {
+ $debugDir = $_ENV['TMP'] . '/';
+ } else {
+ $debugDir = '';
+ }
+ } else {
+ $debugDir = DEFAULT_DEBUG_DIR;
+ }
+ $filename = $debugDir . 'phpCAS.log';
+ }
+
+ if (empty (self::$_PHPCAS_DEBUG['unique_id'])) {
+ self::$_PHPCAS_DEBUG['unique_id'] = substr(strtoupper(md5(uniqid(''))), 0, 4);
+ }
+
+ self::$_PHPCAS_DEBUG['filename'] = $filename;
+ self::$_PHPCAS_DEBUG['indent'] = 0;
+
+ phpCAS :: trace('START ('.date("Y-m-d H:i:s").') phpCAS-' . PHPCAS_VERSION . ' ******************');
+ }
+ }
+
+ /**
+ * Enable verbose errors messages in the website output
+ * This is a security relevant since internal status info may leak an may
+ * help an attacker. Default is therefore false
+ *
+ * @param bool $verbose enable verbose output
+ *
+ * @return void
+ */
+ public static function setVerbose($verbose)
+ {
+ if ($verbose === true) {
+ self::$_PHPCAS_VERBOSE = true;
+ } else {
+ self::$_PHPCAS_VERBOSE = false;
+ }
+ }
+
+
+ /**
+ * Show is verbose mode is on
+ *
+ * @return bool verbose
+ */
+ public static function getVerbose()
+ {
+ return self::$_PHPCAS_VERBOSE;
+ }
+
+ /**
+ * Logs a string in debug mode.
+ *
+ * @param string $str the string to write
+ *
+ * @return void
+ * @private
+ */
+ public static function log($str)
+ {
+ $indent_str = ".";
+
+
+ if (isset(self::$_PHPCAS_DEBUG['logger']) || !empty(self::$_PHPCAS_DEBUG['filename'])) {
+ for ($i = 0; $i < self::$_PHPCAS_DEBUG['indent']; $i++) {
+
+ $indent_str .= '| ';
+ }
+ // allow for multiline output with proper identing. Usefull for
+ // dumping cas answers etc.
+ $str2 = str_replace("\n", "\n" . self::$_PHPCAS_DEBUG['unique_id'] . ' ' . $indent_str, $str);
+ $str3 = self::$_PHPCAS_DEBUG['unique_id'] . ' ' . $indent_str . $str2;
+ if (isset(self::$_PHPCAS_DEBUG['logger'])) {
+ self::$_PHPCAS_DEBUG['logger']->info($str3);
+ }
+ if (!empty(self::$_PHPCAS_DEBUG['filename'])) {
+ // Check if file exists and modifiy file permissions to be only
+ // readable by the webserver
+ if (!file_exists(self::$_PHPCAS_DEBUG['filename'])) {
+ touch(self::$_PHPCAS_DEBUG['filename']);
+ // Chmod will fail on windows
+ @chmod(self::$_PHPCAS_DEBUG['filename'], 0600);
+ }
+ error_log($str3 . "\n", 3, self::$_PHPCAS_DEBUG['filename']);
+ }
+ }
+
+ }
+
+ /**
+ * This method is used by interface methods to print an error and where the
+ * function was originally called from.
+ *
+ * @param string $msg the message to print
+ *
+ * @return void
+ * @private
+ */
+ public static function error($msg)
+ {
+ phpCAS :: traceBegin();
+ $dbg = debug_backtrace();
+ $function = '?';
+ $file = '?';
+ $line = '?';
+ if (is_array($dbg)) {
+ for ($i = 1; $i < sizeof($dbg); $i++) {
+ if (is_array($dbg[$i]) && isset($dbg[$i]['class']) ) {
+ if ($dbg[$i]['class'] == __CLASS__) {
+ $function = $dbg[$i]['function'];
+ $file = $dbg[$i]['file'];
+ $line = $dbg[$i]['line'];
+ }
+ }
+ }
+ }
+ if (self::$_PHPCAS_VERBOSE) {
+ echo "
\nphpCAS error: " . __CLASS__ . "::" . $function . '(): ' . htmlentities($msg) . " in " . $file . " on line " . $line . "
\n";
+ }
+ phpCAS :: trace($msg . ' in ' . $file . 'on line ' . $line );
+ phpCAS :: traceEnd();
+
+ throw new CAS_GracefullTerminationException(__CLASS__ . "::" . $function . '(): ' . $msg);
+ }
+
+ /**
+ * This method is used to log something in debug mode.
+ *
+ * @param string $str string to log
+ *
+ * @return void
+ */
+ public static function trace($str)
+ {
+ $dbg = debug_backtrace();
+ phpCAS :: log($str . ' [' . basename($dbg[0]['file']) . ':' . $dbg[0]['line'] . ']');
+ }
+
+ /**
+ * This method is used to indicate the start of the execution of a function
+ * in debug mode.
+ *
+ * @return void
+ */
+ public static function traceBegin()
+ {
+ $dbg = debug_backtrace();
+ $str = '=> ';
+ if (!empty ($dbg[1]['class'])) {
+ $str .= $dbg[1]['class'] . '::';
+ }
+ $str .= $dbg[1]['function'] . '(';
+ if (is_array($dbg[1]['args'])) {
+ foreach ($dbg[1]['args'] as $index => $arg) {
+ if ($index != 0) {
+ $str .= ', ';
+ }
+ if (is_object($arg)) {
+ $str .= get_class($arg);
+ } else {
+ $str .= str_replace(array("\r\n", "\n", "\r"), "", var_export($arg, true));
+ }
+ }
+ }
+ if (isset($dbg[1]['file'])) {
+ $file = basename($dbg[1]['file']);
+ } else {
+ $file = 'unknown_file';
+ }
+ if (isset($dbg[1]['line'])) {
+ $line = $dbg[1]['line'];
+ } else {
+ $line = 'unknown_line';
+ }
+ $str .= ') [' . $file . ':' . $line . ']';
+ phpCAS :: log($str);
+ if (!isset(self::$_PHPCAS_DEBUG['indent'])) {
+ self::$_PHPCAS_DEBUG['indent'] = 0;
+ } else {
+ self::$_PHPCAS_DEBUG['indent']++;
+ }
+ }
+
+ /**
+ * This method is used to indicate the end of the execution of a function in
+ * debug mode.
+ *
+ * @param mixed $res the result of the function
+ *
+ * @return void
+ */
+ public static function traceEnd($res = '')
+ {
+ if (empty(self::$_PHPCAS_DEBUG['indent'])) {
+ self::$_PHPCAS_DEBUG['indent'] = 0;
+ } else {
+ self::$_PHPCAS_DEBUG['indent']--;
+ }
+ $str = '';
+ if (is_object($res)) {
+ $str .= '<= ' . get_class($res);
+ } else {
+ $str .= '<= ' . str_replace(array("\r\n", "\n", "\r"), "", var_export($res, true));
+ }
+
+ phpCAS :: log($str);
+ }
+
+ /**
+ * This method is used to indicate the end of the execution of the program
+ *
+ * @return void
+ */
+ public static function traceExit()
+ {
+ phpCAS :: log('exit()');
+ while (self::$_PHPCAS_DEBUG['indent'] > 0) {
+ phpCAS :: log('-');
+ self::$_PHPCAS_DEBUG['indent']--;
+ }
+ }
+
+ /** @} */
+ // ########################################################################
+ // INTERNATIONALIZATION
+ // ########################################################################
+ /**
+ * @addtogroup publicLang
+ * @{
+ */
+
+ /**
+ * This method is used to set the language used by phpCAS.
+ *
+ * @param string $lang string representing the language.
+ *
+ * @return void
+ *
+ * @sa PHPCAS_LANG_FRENCH, PHPCAS_LANG_ENGLISH
+ * @note Can be called only once.
+ */
+ public static function setLang($lang)
+ {
+ phpCAS::_validateClientExists();
+
+ try {
+ self::$_PHPCAS_CLIENT->setLang($lang);
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+ }
+
+ /** @} */
+ // ########################################################################
+ // VERSION
+ // ########################################################################
+ /**
+ * @addtogroup public
+ * @{
+ */
+
+ /**
+ * This method returns the phpCAS version.
+ *
+ * @return string the phpCAS version.
+ */
+ public static function getVersion()
+ {
+ return PHPCAS_VERSION;
+ }
+
+ /**
+ * This method returns supported protocols.
+ *
+ * @return array an array of all supported protocols. Use internal protocol name as array key.
+ */
+ public static function getSupportedProtocols()
+ {
+ $supportedProtocols = array();
+ $supportedProtocols[CAS_VERSION_1_0] = 'CAS 1.0';
+ $supportedProtocols[CAS_VERSION_2_0] = 'CAS 2.0';
+ $supportedProtocols[CAS_VERSION_3_0] = 'CAS 3.0';
+ $supportedProtocols[SAML_VERSION_1_1] = 'SAML 1.1';
+
+ return $supportedProtocols;
+ }
+
+ /** @} */
+ // ########################################################################
+ // HTML OUTPUT
+ // ########################################################################
+ /**
+ * @addtogroup publicOutput
+ * @{
+ */
+
+ /**
+ * This method sets the HTML header used for all outputs.
+ *
+ * @param string $header the HTML header.
+ *
+ * @return void
+ */
+ public static function setHTMLHeader($header)
+ {
+ phpCAS::_validateClientExists();
+
+ try {
+ self::$_PHPCAS_CLIENT->setHTMLHeader($header);
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+ }
+
+ /**
+ * This method sets the HTML footer used for all outputs.
+ *
+ * @param string $footer the HTML footer.
+ *
+ * @return void
+ */
+ public static function setHTMLFooter($footer)
+ {
+ phpCAS::_validateClientExists();
+
+ try {
+ self::$_PHPCAS_CLIENT->setHTMLFooter($footer);
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+ }
+
+ /** @} */
+ // ########################################################################
+ // PGT STORAGE
+ // ########################################################################
+ /**
+ * @addtogroup publicPGTStorage
+ * @{
+ */
+
+ /**
+ * This method can be used to set a custom PGT storage object.
+ *
+ * @param CAS_PGTStorage_AbstractStorage $storage a PGT storage object that inherits from the
+ * CAS_PGTStorage_AbstractStorage class
+ *
+ * @return void
+ */
+ public static function setPGTStorage($storage)
+ {
+ phpCAS :: traceBegin();
+ phpCAS::_validateProxyExists();
+
+ try {
+ self::$_PHPCAS_CLIENT->setPGTStorage($storage);
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+ phpCAS :: traceEnd();
+ }
+
+ /**
+ * This method is used to tell phpCAS to store the response of the
+ * CAS server to PGT requests in a database.
+ *
+ * @param string $dsn_or_pdo a dsn string to use for creating a PDO
+ * object or a PDO object
+ * @param string $username the username to use when connecting to the
+ * database
+ * @param string $password the password to use when connecting to the
+ * database
+ * @param string $table the table to use for storing and retrieving
+ * PGT's
+ * @param string $driver_options any driver options to use when connecting
+ * to the database
+ *
+ * @return void
+ */
+ public static function setPGTStorageDb($dsn_or_pdo, $username='',
+ $password='', $table='', $driver_options=null
+ ) {
+ phpCAS :: traceBegin();
+ phpCAS::_validateProxyExists();
+
+ try {
+ self::$_PHPCAS_CLIENT->setPGTStorageDb($dsn_or_pdo, $username, $password, $table, $driver_options);
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+ phpCAS :: traceEnd();
+ }
+
+ /**
+ * This method is used to tell phpCAS to store the response of the
+ * CAS server to PGT requests onto the filesystem.
+ *
+ * @param string $path the path where the PGT's should be stored
+ *
+ * @return void
+ */
+ public static function setPGTStorageFile($path = '')
+ {
+ phpCAS :: traceBegin();
+ phpCAS::_validateProxyExists();
+
+ try {
+ self::$_PHPCAS_CLIENT->setPGTStorageFile($path);
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+ phpCAS :: traceEnd();
+ }
+ /** @} */
+ // ########################################################################
+ // ACCESS TO EXTERNAL SERVICES
+ // ########################################################################
+ /**
+ * @addtogroup publicServices
+ * @{
+ */
+
+ /**
+ * Answer a proxy-authenticated service handler.
+ *
+ * @param string $type The service type. One of
+ * PHPCAS_PROXIED_SERVICE_HTTP_GET; PHPCAS_PROXIED_SERVICE_HTTP_POST;
+ * PHPCAS_PROXIED_SERVICE_IMAP
+ *
+ * @return CAS_ProxiedService
+ * @throws InvalidArgumentException If the service type is unknown.
+ */
+ public static function getProxiedService ($type)
+ {
+ phpCAS :: traceBegin();
+ phpCAS::_validateProxyExists();
+
+ try {
+ $res = self::$_PHPCAS_CLIENT->getProxiedService($type);
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+
+ phpCAS :: traceEnd();
+ return $res;
+ }
+
+ /**
+ * Initialize a proxied-service handler with the proxy-ticket it should use.
+ *
+ * @param CAS_ProxiedService $proxiedService Proxied Service Handler
+ *
+ * @return void
+ * @throws CAS_ProxyTicketException If there is a proxy-ticket failure.
+ * The code of the Exception will be one of:
+ * PHPCAS_SERVICE_PT_NO_SERVER_RESPONSE
+ * PHPCAS_SERVICE_PT_BAD_SERVER_RESPONSE
+ * PHPCAS_SERVICE_PT_FAILURE
+ */
+ public static function initializeProxiedService (CAS_ProxiedService $proxiedService)
+ {
+ phpCAS::_validateProxyExists();
+
+ try {
+ self::$_PHPCAS_CLIENT->initializeProxiedService($proxiedService);
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+ }
+
+ /**
+ * This method is used to access an HTTP[S] service.
+ *
+ * @param string $url the service to access.
+ * @param int &$err_code an error code Possible values are
+ * PHPCAS_SERVICE_OK (on success), PHPCAS_SERVICE_PT_NO_SERVER_RESPONSE,
+ * PHPCAS_SERVICE_PT_BAD_SERVER_RESPONSE, PHPCAS_SERVICE_PT_FAILURE,
+ * PHPCAS_SERVICE_NOT_AVAILABLE.
+ * @param string &$output the output of the service (also used to give an
+ * error message on failure).
+ *
+ * @return bool true on success, false otherwise (in this later case,
+ * $err_code gives the reason why it failed and $output contains an error
+ * message).
+ */
+ public static function serviceWeb($url, & $err_code, & $output)
+ {
+ phpCAS :: traceBegin();
+ phpCAS::_validateProxyExists();
+
+ try {
+ $res = self::$_PHPCAS_CLIENT->serviceWeb($url, $err_code, $output);
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+
+ phpCAS :: traceEnd($res);
+ return $res;
+ }
+
+ /**
+ * This method is used to access an IMAP/POP3/NNTP service.
+ *
+ * @param string $url a string giving the URL of the service,
+ * including the mailing box for IMAP URLs, as accepted by imap_open().
+ * @param string $service a string giving for CAS retrieve Proxy ticket
+ * @param string $flags options given to imap_open().
+ * @param int &$err_code an error code Possible values are
+ * PHPCAS_SERVICE_OK (on success), PHPCAS_SERVICE_PT_NO_SERVER_RESPONSE,
+ * PHPCAS_SERVICE_PT_BAD_SERVER_RESPONSE, PHPCAS_SERVICE_PT_FAILURE,
+ * PHPCAS_SERVICE_NOT_AVAILABLE.
+ * @param string &$err_msg an error message on failure
+ * @param string &$pt the Proxy Ticket (PT) retrieved from the CAS
+ * server to access the URL on success, false on error).
+ *
+ * @return object|false IMAP stream on success, false otherwise (in this later
+ * case, $err_code gives the reason why it failed and $err_msg contains an
+ * error message).
+ */
+ public static function serviceMail($url, $service, $flags, & $err_code, & $err_msg, & $pt)
+ {
+ phpCAS :: traceBegin();
+ phpCAS::_validateProxyExists();
+
+ try {
+ $res = self::$_PHPCAS_CLIENT->serviceMail($url, $service, $flags, $err_code, $err_msg, $pt);
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+
+ phpCAS :: traceEnd($res);
+ return $res;
+ }
+
+ /** @} */
+ // ########################################################################
+ // AUTHENTICATION
+ // ########################################################################
+ /**
+ * @addtogroup publicAuth
+ * @{
+ */
+
+ /**
+ * Set the times authentication will be cached before really accessing the
+ * CAS server in gateway mode:
+ * - -1: check only once, and then never again (until you pree login)
+ * - 0: always check
+ * - n: check every "n" time
+ *
+ * @param int $n an integer.
+ *
+ * @return void
+ */
+ public static function setCacheTimesForAuthRecheck($n)
+ {
+ phpCAS::_validateClientExists();
+
+ try {
+ self::$_PHPCAS_CLIENT->setCacheTimesForAuthRecheck($n);
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+ }
+
+
+ /**
+ * Set a callback function to be run when receiving CAS attributes
+ *
+ * The callback function will be passed an $success_elements
+ * payload of the response (\DOMElement) as its first parameter.
+ *
+ * @param string $function Callback function
+ * @param array $additionalArgs optional array of arguments
+ *
+ * @return void
+ */
+ public static function setCasAttributeParserCallback($function, array $additionalArgs = array())
+ {
+ phpCAS::_validateClientExists();
+
+ self::$_PHPCAS_CLIENT->setCasAttributeParserCallback($function, $additionalArgs);
+ }
+
+ /**
+ * Set a callback function to be run when a user authenticates.
+ *
+ * The callback function will be passed a $logoutTicket as its first
+ * parameter, followed by any $additionalArgs you pass. The $logoutTicket
+ * parameter is an opaque string that can be used to map the session-id to
+ * logout request in order to support single-signout in applications that
+ * manage their own sessions (rather than letting phpCAS start the session).
+ *
+ * phpCAS::forceAuthentication() will always exit and forward client unless
+ * they are already authenticated. To perform an action at the moment the user
+ * logs in (such as registering an account, performing logging, etc), register
+ * a callback function here.
+ *
+ * @param callable $function Callback function
+ * @param array $additionalArgs optional array of arguments
+ *
+ * @return void
+ */
+ public static function setPostAuthenticateCallback ($function, array $additionalArgs = array())
+ {
+ phpCAS::_validateClientExists();
+
+ self::$_PHPCAS_CLIENT->setPostAuthenticateCallback($function, $additionalArgs);
+ }
+
+ /**
+ * Set a callback function to be run when a single-signout request is
+ * received. The callback function will be passed a $logoutTicket as its
+ * first parameter, followed by any $additionalArgs you pass. The
+ * $logoutTicket parameter is an opaque string that can be used to map a
+ * session-id to the logout request in order to support single-signout in
+ * applications that manage their own sessions (rather than letting phpCAS
+ * start and destroy the session).
+ *
+ * @param callable $function Callback function
+ * @param array $additionalArgs optional array of arguments
+ *
+ * @return void
+ */
+ public static function setSingleSignoutCallback ($function, array $additionalArgs = array())
+ {
+ phpCAS::_validateClientExists();
+
+ self::$_PHPCAS_CLIENT->setSingleSignoutCallback($function, $additionalArgs);
+ }
+
+ /**
+ * This method is called to check if the user is already authenticated
+ * locally or has a global cas session. A already existing cas session is
+ * determined by a cas gateway call.(cas login call without any interactive
+ * prompt)
+ *
+ * @return bool true when the user is authenticated, false when a previous
+ * gateway login failed or the function will not return if the user is
+ * redirected to the cas server for a gateway login attempt
+ */
+ public static function checkAuthentication()
+ {
+ phpCAS :: traceBegin();
+ phpCAS::_validateClientExists();
+
+ $auth = self::$_PHPCAS_CLIENT->checkAuthentication();
+
+ // store where the authentication has been checked and the result
+ self::$_PHPCAS_CLIENT->markAuthenticationCall($auth);
+
+ phpCAS :: traceEnd($auth);
+ return $auth;
+ }
+
+ /**
+ * This method is called to force authentication if the user was not already
+ * authenticated. If the user is not authenticated, halt by redirecting to
+ * the CAS server.
+ *
+ * @return bool Authentication
+ */
+ public static function forceAuthentication()
+ {
+ phpCAS :: traceBegin();
+ phpCAS::_validateClientExists();
+ $auth = self::$_PHPCAS_CLIENT->forceAuthentication();
+
+ // store where the authentication has been checked and the result
+ self::$_PHPCAS_CLIENT->markAuthenticationCall($auth);
+
+ /* if (!$auth) {
+ phpCAS :: trace('user is not authenticated, redirecting to the CAS server');
+ self::$_PHPCAS_CLIENT->forceAuthentication();
+ } else {
+ phpCAS :: trace('no need to authenticate (user `' . phpCAS :: getUser() . '\' is already authenticated)');
+ }*/
+
+ phpCAS :: traceEnd();
+ return $auth;
+ }
+
+ /**
+ * This method is called to renew the authentication.
+ *
+ * @return void
+ **/
+ public static function renewAuthentication()
+ {
+ phpCAS :: traceBegin();
+ phpCAS::_validateClientExists();
+
+ $auth = self::$_PHPCAS_CLIENT->renewAuthentication();
+
+ // store where the authentication has been checked and the result
+ self::$_PHPCAS_CLIENT->markAuthenticationCall($auth);
+
+ //self::$_PHPCAS_CLIENT->renewAuthentication();
+ phpCAS :: traceEnd();
+ }
+
+ /**
+ * This method is called to check if the user is authenticated (previously or by
+ * tickets given in the URL).
+ *
+ * @return bool true when the user is authenticated.
+ */
+ public static function isAuthenticated()
+ {
+ phpCAS :: traceBegin();
+ phpCAS::_validateClientExists();
+
+ // call the isAuthenticated method of the $_PHPCAS_CLIENT object
+ $auth = self::$_PHPCAS_CLIENT->isAuthenticated();
+
+ // store where the authentication has been checked and the result
+ self::$_PHPCAS_CLIENT->markAuthenticationCall($auth);
+
+ phpCAS :: traceEnd($auth);
+ return $auth;
+ }
+
+ /**
+ * Checks whether authenticated based on $_SESSION. Useful to avoid
+ * server calls.
+ *
+ * @return bool true if authenticated, false otherwise.
+ * @since 0.4.22 by Brendan Arnold
+ */
+ public static function isSessionAuthenticated()
+ {
+ phpCAS::_validateClientExists();
+
+ return (self::$_PHPCAS_CLIENT->isSessionAuthenticated());
+ }
+
+ /**
+ * This method returns the CAS user's login name.
+ *
+ * @return string the login name of the authenticated user
+ * @warning should only be called after phpCAS::forceAuthentication()
+ * or phpCAS::checkAuthentication().
+ * */
+ public static function getUser()
+ {
+ phpCAS::_validateClientExists();
+
+ try {
+ return self::$_PHPCAS_CLIENT->getUser();
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+ }
+
+ /**
+ * Answer attributes about the authenticated user.
+ *
+ * @warning should only be called after phpCAS::forceAuthentication()
+ * or phpCAS::checkAuthentication().
+ *
+ * @return array
+ */
+ public static function getAttributes()
+ {
+ phpCAS::_validateClientExists();
+
+ try {
+ return self::$_PHPCAS_CLIENT->getAttributes();
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+ }
+
+ /**
+ * Answer true if there are attributes for the authenticated user.
+ *
+ * @warning should only be called after phpCAS::forceAuthentication()
+ * or phpCAS::checkAuthentication().
+ *
+ * @return bool
+ */
+ public static function hasAttributes()
+ {
+ phpCAS::_validateClientExists();
+
+ try {
+ return self::$_PHPCAS_CLIENT->hasAttributes();
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+ }
+
+ /**
+ * Answer true if an attribute exists for the authenticated user.
+ *
+ * @param string $key attribute name
+ *
+ * @return bool
+ * @warning should only be called after phpCAS::forceAuthentication()
+ * or phpCAS::checkAuthentication().
+ */
+ public static function hasAttribute($key)
+ {
+ phpCAS::_validateClientExists();
+
+ try {
+ return self::$_PHPCAS_CLIENT->hasAttribute($key);
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+ }
+
+ /**
+ * Answer an attribute for the authenticated user.
+ *
+ * @param string $key attribute name
+ *
+ * @return mixed string for a single value or an array if multiple values exist.
+ * @warning should only be called after phpCAS::forceAuthentication()
+ * or phpCAS::checkAuthentication().
+ */
+ public static function getAttribute($key)
+ {
+ phpCAS::_validateClientExists();
+
+ try {
+ return self::$_PHPCAS_CLIENT->getAttribute($key);
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+ }
+
+ /**
+ * Handle logout requests.
+ *
+ * @param bool $check_client additional safety check
+ * @param array $allowed_clients array of allowed clients
+ *
+ * @return void
+ */
+ public static function handleLogoutRequests($check_client = true, $allowed_clients = array())
+ {
+ phpCAS::_validateClientExists();
+
+ return (self::$_PHPCAS_CLIENT->handleLogoutRequests($check_client, $allowed_clients));
+ }
+
+ /**
+ * This method returns the URL to be used to login.
+ *
+ * @return string the login URL
+ */
+ public static function getServerLoginURL()
+ {
+ phpCAS::_validateClientExists();
+
+ return self::$_PHPCAS_CLIENT->getServerLoginURL();
+ }
+
+ /**
+ * Set the login URL of the CAS server.
+ *
+ * @param string $url the login URL
+ *
+ * @return void
+ * @since 0.4.21 by Wyman Chan
+ */
+ public static function setServerLoginURL($url = '')
+ {
+ phpCAS :: traceBegin();
+ phpCAS::_validateClientExists();
+
+ try {
+ self::$_PHPCAS_CLIENT->setServerLoginURL($url);
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+
+ phpCAS :: traceEnd();
+ }
+
+ /**
+ * Set the serviceValidate URL of the CAS server.
+ * Used for all CAS versions of URL validations.
+ * Examples:
+ * CAS 1.0 http://www.exemple.com/validate
+ * CAS 2.0 http://www.exemple.com/validateURL
+ * CAS 3.0 http://www.exemple.com/p3/serviceValidate
+ *
+ * @param string $url the serviceValidate URL
+ *
+ * @return void
+ */
+ public static function setServerServiceValidateURL($url = '')
+ {
+ phpCAS :: traceBegin();
+ phpCAS::_validateClientExists();
+
+ try {
+ self::$_PHPCAS_CLIENT->setServerServiceValidateURL($url);
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+
+ phpCAS :: traceEnd();
+ }
+
+ /**
+ * Set the proxyValidate URL of the CAS server.
+ * Used for all CAS versions of proxy URL validations
+ * Examples:
+ * CAS 1.0 http://www.exemple.com/
+ * CAS 2.0 http://www.exemple.com/proxyValidate
+ * CAS 3.0 http://www.exemple.com/p3/proxyValidate
+ *
+ * @param string $url the proxyValidate URL
+ *
+ * @return void
+ */
+ public static function setServerProxyValidateURL($url = '')
+ {
+ phpCAS :: traceBegin();
+ phpCAS::_validateClientExists();
+
+ try {
+ self::$_PHPCAS_CLIENT->setServerProxyValidateURL($url);
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+
+ phpCAS :: traceEnd();
+ }
+
+ /**
+ * Set the samlValidate URL of the CAS server.
+ *
+ * @param string $url the samlValidate URL
+ *
+ * @return void
+ */
+ public static function setServerSamlValidateURL($url = '')
+ {
+ phpCAS :: traceBegin();
+ phpCAS::_validateClientExists();
+
+ try {
+ self::$_PHPCAS_CLIENT->setServerSamlValidateURL($url);
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+
+ phpCAS :: traceEnd();
+ }
+
+ /**
+ * This method returns the URL to be used to logout.
+ *
+ * @return string the URL to use to log out
+ */
+ public static function getServerLogoutURL()
+ {
+ phpCAS::_validateClientExists();
+
+ return self::$_PHPCAS_CLIENT->getServerLogoutURL();
+ }
+
+ /**
+ * Set the logout URL of the CAS server.
+ *
+ * @param string $url the logout URL
+ *
+ * @return void
+ * @since 0.4.21 by Wyman Chan
+ */
+ public static function setServerLogoutURL($url = '')
+ {
+ phpCAS :: traceBegin();
+ phpCAS::_validateClientExists();
+
+ try {
+ self::$_PHPCAS_CLIENT->setServerLogoutURL($url);
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+
+ phpCAS :: traceEnd();
+ }
+
+ /**
+ * This method is used to logout from CAS.
+ *
+ * @param string $params an array that contains the optional url and
+ * service parameters that will be passed to the CAS server
+ *
+ * @return void
+ */
+ public static function logout($params = "")
+ {
+ phpCAS :: traceBegin();
+ phpCAS::_validateClientExists();
+
+ $parsedParams = array ();
+ if ($params != "") {
+ if (is_string($params)) {
+ phpCAS :: error('method `phpCAS::logout($url)\' is now deprecated, use `phpCAS::logoutWithUrl($url)\' instead');
+ }
+ if (!is_array($params)) {
+ phpCAS :: error('type mismatched for parameter $params (should be `array\')');
+ }
+ foreach ($params as $key => $value) {
+ if ($key != "service" && $key != "url") {
+ phpCAS :: error('only `url\' and `service\' parameters are allowed for method `phpCAS::logout($params)\'');
+ }
+ $parsedParams[$key] = $value;
+ }
+ }
+ self::$_PHPCAS_CLIENT->logout($parsedParams);
+ // never reached
+ phpCAS :: traceEnd();
+ }
+
+ /**
+ * This method is used to logout from CAS. Halts by redirecting to the CAS
+ * server.
+ *
+ * @param string $service a URL that will be transmitted to the CAS server
+ *
+ * @return void
+ */
+ public static function logoutWithRedirectService($service)
+ {
+ phpCAS :: traceBegin();
+ phpCAS::_validateClientExists();
+
+ if (!is_string($service)) {
+ phpCAS :: error('type mismatched for parameter $service (should be `string\')');
+ }
+ self::$_PHPCAS_CLIENT->logout(array ( "service" => $service ));
+ // never reached
+ phpCAS :: traceEnd();
+ }
+
+ /**
+ * This method is used to logout from CAS. Halts by redirecting to the CAS
+ * server.
+ *
+ * @param string $url a URL that will be transmitted to the CAS server
+ *
+ * @return void
+ * @deprecated The url parameter has been removed from the CAS server as of
+ * version 3.3.5.1
+ */
+ public static function logoutWithUrl($url)
+ {
+ trigger_error('Function deprecated for cas servers >= 3.3.5.1', E_USER_DEPRECATED);
+ phpCAS :: traceBegin();
+ if (!is_object(self::$_PHPCAS_CLIENT)) {
+ phpCAS :: error('this method should only be called after ' . __CLASS__ . '::client() or' . __CLASS__ . '::proxy()');
+ }
+ if (!is_string($url)) {
+ phpCAS :: error('type mismatched for parameter $url (should be `string\')');
+ }
+ self::$_PHPCAS_CLIENT->logout(array ( "url" => $url ));
+ // never reached
+ phpCAS :: traceEnd();
+ }
+
+ /**
+ * This method is used to logout from CAS. Halts by redirecting to the CAS
+ * server.
+ *
+ * @param string $service a URL that will be transmitted to the CAS server
+ * @param string $url a URL that will be transmitted to the CAS server
+ *
+ * @return void
+ *
+ * @deprecated The url parameter has been removed from the CAS server as of
+ * version 3.3.5.1
+ */
+ public static function logoutWithRedirectServiceAndUrl($service, $url)
+ {
+ trigger_error('Function deprecated for cas servers >= 3.3.5.1', E_USER_DEPRECATED);
+ phpCAS :: traceBegin();
+ phpCAS::_validateClientExists();
+
+ if (!is_string($service)) {
+ phpCAS :: error('type mismatched for parameter $service (should be `string\')');
+ }
+ if (!is_string($url)) {
+ phpCAS :: error('type mismatched for parameter $url (should be `string\')');
+ }
+ self::$_PHPCAS_CLIENT->logout(
+ array (
+ "service" => $service,
+ "url" => $url
+ )
+ );
+ // never reached
+ phpCAS :: traceEnd();
+ }
+
+ /**
+ * Set the fixed URL that will be used by the CAS server to transmit the
+ * PGT. When this method is not called, a phpCAS script uses its own URL
+ * for the callback.
+ *
+ * @param string $url the URL
+ *
+ * @return void
+ */
+ public static function setFixedCallbackURL($url = '')
+ {
+ phpCAS :: traceBegin();
+ phpCAS::_validateProxyExists();
+
+ try {
+ self::$_PHPCAS_CLIENT->setCallbackURL($url);
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+
+ phpCAS :: traceEnd();
+ }
+
+ /**
+ * Set the fixed URL that will be set as the CAS service parameter. When this
+ * method is not called, a phpCAS script uses its own URL.
+ *
+ * @param string $url the URL
+ *
+ * @return void
+ */
+ public static function setFixedServiceURL($url)
+ {
+ phpCAS :: traceBegin();
+ phpCAS::_validateProxyExists();
+
+ try {
+ self::$_PHPCAS_CLIENT->setURL($url);
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+
+ phpCAS :: traceEnd();
+ }
+
+ /**
+ * Get the URL that is set as the CAS service parameter.
+ *
+ * @return string Service Url
+ */
+ public static function getServiceURL()
+ {
+ phpCAS::_validateProxyExists();
+ return (self::$_PHPCAS_CLIENT->getURL());
+ }
+
+ /**
+ * Retrieve a Proxy Ticket from the CAS server.
+ *
+ * @param string $target_service Url string of service to proxy
+ * @param int &$err_code error code
+ * @param string &$err_msg error message
+ *
+ * @return string Proxy Ticket
+ */
+ public static function retrievePT($target_service, & $err_code, & $err_msg)
+ {
+ phpCAS::_validateProxyExists();
+
+ try {
+ return (self::$_PHPCAS_CLIENT->retrievePT($target_service, $err_code, $err_msg));
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+ }
+
+ /**
+ * Set the certificate of the CAS server CA and if the CN should be properly
+ * verified.
+ *
+ * @param string $cert CA certificate file name
+ * @param bool $validate_cn Validate CN in certificate (default true)
+ *
+ * @return void
+ */
+ public static function setCasServerCACert($cert, $validate_cn = true)
+ {
+ phpCAS :: traceBegin();
+ phpCAS::_validateClientExists();
+
+ try {
+ self::$_PHPCAS_CLIENT->setCasServerCACert($cert, $validate_cn);
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+
+ phpCAS :: traceEnd();
+ }
+
+ /**
+ * Set no SSL validation for the CAS server.
+ *
+ * @return void
+ */
+ public static function setNoCasServerValidation()
+ {
+ phpCAS :: traceBegin();
+ phpCAS::_validateClientExists();
+
+ phpCAS :: trace('You have configured no validation of the legitimacy of the cas server. This is not recommended for production use.');
+ self::$_PHPCAS_CLIENT->setNoCasServerValidation();
+ phpCAS :: traceEnd();
+ }
+
+
+ /**
+ * Disable the removal of a CAS-Ticket from the URL when authenticating
+ * DISABLING POSES A SECURITY RISK:
+ * We normally remove the ticket by an additional redirect as a security
+ * precaution to prevent a ticket in the HTTP_REFERRER or be carried over in
+ * the URL parameter
+ *
+ * @return void
+ */
+ public static function setNoClearTicketsFromUrl()
+ {
+ phpCAS :: traceBegin();
+ phpCAS::_validateClientExists();
+
+ self::$_PHPCAS_CLIENT->setNoClearTicketsFromUrl();
+ phpCAS :: traceEnd();
+ }
+
+ /** @} */
+
+ /**
+ * Change CURL options.
+ * CURL is used to connect through HTTPS to CAS server
+ *
+ * @param string $key the option key
+ * @param string $value the value to set
+ *
+ * @return void
+ */
+ public static function setExtraCurlOption($key, $value)
+ {
+ phpCAS :: traceBegin();
+ phpCAS::_validateClientExists();
+
+ self::$_PHPCAS_CLIENT->setExtraCurlOption($key, $value);
+ phpCAS :: traceEnd();
+ }
+
+ /**
+ * Set a salt/seed for the session-id hash to make it harder to guess.
+ *
+ * When $changeSessionID = true phpCAS will create a session-id that is derived
+ * from the service ticket. Doing so allows phpCAS to look-up and destroy the
+ * proper session on single-log-out requests. While the service tickets
+ * provided by the CAS server may include enough data to generate a strong
+ * hash, clients may provide an additional salt to ensure that session ids
+ * are not guessable if the session tickets do not have enough entropy.
+ *
+ * @param string $salt The salt to combine with the session ticket.
+ *
+ * @return void
+ */
+ public static function setSessionIdSalt($salt) {
+ phpCAS :: traceBegin();
+ phpCAS::_validateClientExists();
+ self::$_PHPCAS_CLIENT->setSessionIdSalt($salt);
+ phpCAS :: traceEnd();
+ }
+
+ /**
+ * If you want your service to be proxied you have to enable it (default
+ * disabled) and define an accepable list of proxies that are allowed to
+ * proxy your service.
+ *
+ * Add each allowed proxy definition object. For the normal CAS_ProxyChain
+ * class, the constructor takes an array of proxies to match. The list is in
+ * reverse just as seen from the service. Proxies have to be defined in reverse
+ * from the service to the user. If a user hits service A and gets proxied via
+ * B to service C the list of acceptable on C would be array(B,A). The definition
+ * of an individual proxy can be either a string or a regexp (preg_match is used)
+ * that will be matched against the proxy list supplied by the cas server
+ * when validating the proxy tickets. The strings are compared starting from
+ * the beginning and must fully match with the proxies in the list.
+ * Example:
+ * phpCAS::allowProxyChain(new CAS_ProxyChain(array(
+ * 'https://app.example.com/'
+ * )));
+ * phpCAS::allowProxyChain(new CAS_ProxyChain(array(
+ * '/^https:\/\/app[0-9]\.example\.com\/rest\//',
+ * 'http://client.example.com/'
+ * )));
+ *
+ * For quick testing or in certain production screnarios you might want to
+ * allow allow any other valid service to proxy your service. To do so, add
+ * the "Any" chain:
+ * phpCAS::allowProxyChain(new CAS_ProxyChain_Any);
+ * THIS SETTING IS HOWEVER NOT RECOMMENDED FOR PRODUCTION AND HAS SECURITY
+ * IMPLICATIONS: YOU ARE ALLOWING ANY SERVICE TO ACT ON BEHALF OF A USER
+ * ON THIS SERVICE.
+ *
+ * @param CAS_ProxyChain_Interface $proxy_chain A proxy-chain that will be
+ * matched against the proxies requesting access
+ *
+ * @return void
+ */
+ public static function allowProxyChain(CAS_ProxyChain_Interface $proxy_chain)
+ {
+ phpCAS :: traceBegin();
+ phpCAS::_validateClientExists();
+
+ if (self::$_PHPCAS_CLIENT->getServerVersion() !== CAS_VERSION_2_0
+ && self::$_PHPCAS_CLIENT->getServerVersion() !== CAS_VERSION_3_0
+ ) {
+ phpCAS :: error('this method can only be used with the cas 2.0/3.0 protocols');
+ }
+ self::$_PHPCAS_CLIENT->getAllowedProxyChains()->allowProxyChain($proxy_chain);
+ phpCAS :: traceEnd();
+ }
+
+ /**
+ * Answer an array of proxies that are sitting in front of this application.
+ * This method will only return a non-empty array if we have received and
+ * validated a Proxy Ticket.
+ *
+ * @return array
+ * @access public
+ * @since 6/25/09
+ */
+ public static function getProxies ()
+ {
+ phpCAS::_validateProxyExists();
+
+ return(self::$_PHPCAS_CLIENT->getProxies());
+ }
+
+ // ########################################################################
+ // PGTIOU/PGTID and logoutRequest rebroadcasting
+ // ########################################################################
+
+ /**
+ * Add a pgtIou/pgtId and logoutRequest rebroadcast node.
+ *
+ * @param string $rebroadcastNodeUrl The rebroadcast node URL. Can be
+ * hostname or IP.
+ *
+ * @return void
+ */
+ public static function addRebroadcastNode($rebroadcastNodeUrl)
+ {
+ phpCAS::traceBegin();
+ phpCAS::log('rebroadcastNodeUrl:'.$rebroadcastNodeUrl);
+ phpCAS::_validateClientExists();
+
+ try {
+ self::$_PHPCAS_CLIENT->addRebroadcastNode($rebroadcastNodeUrl);
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+
+ phpCAS::traceEnd();
+ }
+
+ /**
+ * This method is used to add header parameters when rebroadcasting
+ * pgtIou/pgtId or logoutRequest.
+ *
+ * @param String $header Header to send when rebroadcasting.
+ *
+ * @return void
+ */
+ public static function addRebroadcastHeader($header)
+ {
+ phpCAS :: traceBegin();
+ phpCAS::_validateClientExists();
+
+ try {
+ self::$_PHPCAS_CLIENT->addRebroadcastHeader($header);
+ } catch (Exception $e) {
+ phpCAS :: error(get_class($e) . ': ' . $e->getMessage());
+ }
+
+ phpCAS :: traceEnd();
+ }
+
+ /**
+ * Checks if a client already exists
+ *
+ * @throws CAS_OutOfSequenceBeforeClientException
+ *
+ * @return void
+ */
+ private static function _validateClientExists()
+ {
+ if (!is_object(self::$_PHPCAS_CLIENT)) {
+ throw new CAS_OutOfSequenceBeforeClientException();
+ }
+ }
+
+ /**
+ * Checks of a proxy client aready exists
+ *
+ * @throws CAS_OutOfSequenceBeforeProxyException
+ *
+ * @return void
+ */
+ private static function _validateProxyExists()
+ {
+ if (!is_object(self::$_PHPCAS_CLIENT)) {
+ throw new CAS_OutOfSequenceBeforeProxyException();
+ }
+ }
+
+ /**
+ * @return CAS_Client
+ */
+ public static function getCasClient()
+ {
+ return self::$_PHPCAS_CLIENT;
+ }
+
+ /**
+ * For testing purposes, use this method to set the client to a test double
+ *
+ * @return void
+ */
+ public static function setCasClient(\CAS_Client $client)
+ {
+ self::$_PHPCAS_CLIENT = $client;
+ }
+}
+// ########################################################################
+// DOCUMENTATION
+// ########################################################################
+
+// ########################################################################
+// MAIN PAGE
+
+/**
+ * @mainpage
+ *
+ * The following pages only show the source documentation.
+ *
+ */
+
+// ########################################################################
+// MODULES DEFINITION
+
+/** @defgroup public User interface */
+
+/** @defgroup publicInit Initialization
+ * @ingroup public */
+
+/** @defgroup publicAuth Authentication
+ * @ingroup public */
+
+/** @defgroup publicServices Access to external services
+ * @ingroup public */
+
+/** @defgroup publicConfig Configuration
+ * @ingroup public */
+
+/** @defgroup publicLang Internationalization
+ * @ingroup publicConfig */
+
+/** @defgroup publicOutput HTML output
+ * @ingroup publicConfig */
+
+/** @defgroup publicPGTStorage PGT storage
+ * @ingroup publicConfig */
+
+/** @defgroup publicDebug Debugging
+ * @ingroup public */
+
+/** @defgroup internal Implementation */
+
+/** @defgroup internalAuthentication Authentication
+ * @ingroup internal */
+
+/** @defgroup internalBasic CAS Basic client features (CAS 1.0, Service Tickets)
+ * @ingroup internal */
+
+/** @defgroup internalProxy CAS Proxy features (CAS 2.0, Proxy Granting Tickets)
+ * @ingroup internal */
+
+/** @defgroup internalSAML CAS SAML features (SAML 1.1)
+ * @ingroup internal */
+
+/** @defgroup internalPGTStorage PGT storage
+ * @ingroup internalProxy */
+
+/** @defgroup internalPGTStorageDb PGT storage in a database
+ * @ingroup internalPGTStorage */
+
+/** @defgroup internalPGTStorageFile PGT storage on the filesystem
+ * @ingroup internalPGTStorage */
+
+/** @defgroup internalCallback Callback from the CAS server
+ * @ingroup internalProxy */
+
+/** @defgroup internalProxyServices Proxy other services
+ * @ingroup internalProxy */
+
+/** @defgroup internalService CAS client features (CAS 2.0, Proxied service)
+ * @ingroup internal */
+
+/** @defgroup internalConfig Configuration
+ * @ingroup internal */
+
+/** @defgroup internalBehave Internal behaviour of phpCAS
+ * @ingroup internalConfig */
+
+/** @defgroup internalOutput HTML output
+ * @ingroup internalConfig */
+
+/** @defgroup internalLang Internationalization
+ * @ingroup internalConfig
+ *
+ * To add a new language:
+ * - 1. define a new constant PHPCAS_LANG_XXXXXX in CAS/CAS.php
+ * - 2. copy any file from CAS/languages to CAS/languages/XXXXXX.php
+ * - 3. Make the translations
+ */
+
+/** @defgroup internalDebug Debugging
+ * @ingroup internal */
+
+/** @defgroup internalMisc Miscellaneous
+ * @ingroup internal */
+
+// ########################################################################
+// EXAMPLES
+
+/**
+ * @example example_simple.php
+ */
+/**
+ * @example example_service.php
+ */
+/**
+ * @example example_service_that_proxies.php
+ */
+/**
+ * @example example_service_POST.php
+ */
+/**
+ * @example example_proxy_serviceWeb.php
+ */
+/**
+ * @example example_proxy_serviceWeb_chaining.php
+ */
+/**
+ * @example example_proxy_POST.php
+ */
+/**
+ * @example example_proxy_GET.php
+ */
+/**
+ * @example example_lang.php
+ */
+/**
+ * @example example_html.php
+ */
+/**
+ * @example example_pgt_storage_file.php
+ */
+/**
+ * @example example_pgt_storage_db.php
+ */
+/**
+ * @example example_gateway.php
+ */
+/**
+ * @example example_logout.php
+ */
+/**
+ * @example example_rebroadcast.php
+ */
+/**
+ * @example example_custom_urls.php
+ */
+/**
+ * @example example_advanced_saml11.php
+ */
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/AuthenticationException.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/AuthenticationException.php
new file mode 100644
index 0000000..803c889
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/AuthenticationException.php
@@ -0,0 +1,115 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This interface defines methods that allow proxy-authenticated service handlers
+ * to interact with phpCAS.
+ *
+ * Proxy service handlers must implement this interface as well as call
+ * phpCAS::initializeProxiedService($this) at some point in their implementation.
+ *
+ * While not required, proxy-authenticated service handlers are encouraged to
+ * implement the CAS_ProxiedService_Testable interface to facilitate unit testing.
+ *
+ * @class CAS_AuthenticationException
+ * @category Authentication
+ * @package PhpCAS
+ * @author Joachim Fritschi
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+class CAS_AuthenticationException
+extends RuntimeException
+implements CAS_Exception
+{
+
+ /**
+ * This method is used to print the HTML output when the user was not
+ * authenticated.
+ *
+ * @param CAS_Client $client phpcas client
+ * @param string $failure the failure that occured
+ * @param string $cas_url the URL the CAS server was asked for
+ * @param bool $no_response the response from the CAS server (other
+ * parameters are ignored if TRUE)
+ * @param bool $bad_response bad response from the CAS server ($err_code
+ * and $err_msg ignored if TRUE)
+ * @param string $cas_response the response of the CAS server
+ * @param int $err_code the error code given by the CAS server
+ * @param string $err_msg the error message given by the CAS server
+ */
+ public function __construct($client,$failure,$cas_url,$no_response,
+ $bad_response=false,$cas_response='',$err_code=-1,$err_msg=''
+ ) {
+ $messages = array();
+ phpCAS::traceBegin();
+ $lang = $client->getLangObj();
+ $client->printHTMLHeader($lang->getAuthenticationFailed());
+
+ if (phpCAS::getVerbose()) {
+ printf(
+ $lang->getYouWereNotAuthenticated(),
+ htmlentities($client->getURL()),
+ $_SERVER['SERVER_ADMIN'] ?? ''
+ );
+ }
+
+ phpCAS::trace($messages[] = 'CAS URL: '.$cas_url);
+ phpCAS::trace($messages[] = 'Authentication failure: '.$failure);
+ if ( $no_response ) {
+ phpCAS::trace($messages[] = 'Reason: no response from the CAS server');
+ } else {
+ if ( $bad_response ) {
+ phpCAS::trace($messages[] = 'Reason: bad response from the CAS server');
+ } else {
+ switch ($client->getServerVersion()) {
+ case CAS_VERSION_1_0:
+ phpCAS::trace($messages[] = 'Reason: CAS error');
+ break;
+ case CAS_VERSION_2_0:
+ case CAS_VERSION_3_0:
+ if ( $err_code === -1 ) {
+ phpCAS::trace($messages[] = 'Reason: no CAS error');
+ } else {
+ phpCAS::trace($messages[] = 'Reason: ['.$err_code.'] CAS error: '.$err_msg);
+ }
+ break;
+ }
+ }
+ phpCAS::trace($messages[] = 'CAS response: '.$cas_response);
+ }
+ $client->printHTMLFooter();
+ phpCAS::traceExit();
+
+ parent::__construct(implode("\n", $messages));
+ }
+
+}
+?>
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Autoload.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Autoload.php
new file mode 100644
index 0000000..29395d5
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Autoload.php
@@ -0,0 +1,95 @@
+
+ * @copyright 2008 Regents of the University of Nebraska
+ * @license http://www1.unl.edu/wdn/wiki/Software_License BSD License
+ * @link http://code.google.com/p/simplecas/
+ **/
+
+/**
+ * Autoload a class
+ *
+ * @param string $class Classname to load
+ *
+ * @return bool
+ */
+function CAS_autoload($class)
+{
+ // Static to hold the Include Path to CAS
+ static $include_path;
+ // Check only for CAS classes
+ if (substr($class, 0, 4) !== 'CAS_' && substr($class, 0, 7) !== 'PhpCas\\') {
+ return false;
+ }
+
+ // Setup the include path if it's not already set from a previous call
+ if (empty($include_path)) {
+ $include_path = array(dirname(__DIR__));
+ }
+
+ // Declare local variable to store the expected full path to the file
+ foreach ($include_path as $path) {
+ $class_path = str_replace('_', DIRECTORY_SEPARATOR, $class);
+ // PhpCas namespace mapping
+ if (substr($class_path, 0, 7) === 'PhpCas\\') {
+ $class_path = 'CAS' . DIRECTORY_SEPARATOR . substr($class_path, 7);
+ }
+
+ $file_path = $path . DIRECTORY_SEPARATOR . $class_path . '.php';
+ $fp = @fopen($file_path, 'r', true);
+ if ($fp) {
+ fclose($fp);
+ include $file_path;
+ if (!class_exists($class, false) && !interface_exists($class, false)) {
+ die(
+ new Exception(
+ 'Class ' . $class . ' was not present in ' .
+ $file_path .
+ ' [CAS_autoload]'
+ )
+ );
+ }
+ return true;
+ }
+ }
+
+ $e = new Exception(
+ 'Class ' . $class . ' could not be loaded from ' .
+ $file_path . ', file does not exist (Path="'
+ . implode(':', $include_path) .'") [CAS_autoload]'
+ );
+ $trace = $e->getTrace();
+ if (isset($trace[2]) && isset($trace[2]['function'])
+ && in_array($trace[2]['function'], array('class_exists', 'interface_exists', 'trait_exists'))
+ ) {
+ return false;
+ }
+ if (isset($trace[1]) && isset($trace[1]['function'])
+ && in_array($trace[1]['function'], array('class_exists', 'interface_exists', 'trait_exists'))
+ ) {
+ return false;
+ }
+ die ((string) $e);
+}
+
+// Set up autoload if not already configured by composer.
+if (!class_exists('CAS_Client'))
+{
+ trigger_error('phpCAS autoloader is deprecated. Install phpCAS using composer instead.', E_USER_DEPRECATED);
+ spl_autoload_register('CAS_autoload');
+ if (function_exists('__autoload')
+ && !in_array('__autoload', spl_autoload_functions())
+ ) {
+ // __autoload() was being used, but now would be ignored, add
+ // it to the autoload stack
+ spl_autoload_register('__autoload');
+ }
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Client.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Client.php
new file mode 100644
index 0000000..8ca9711
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Client.php
@@ -0,0 +1,4387 @@
+
+ * @author Olivier Berger
+ * @author Brett Bieber
+ * @author Joachim Fritschi
+ * @author Adam Franco
+ * @author Tobias Schiebeck
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * The CAS_Client class is a client interface that provides CAS authentication
+ * to PHP applications.
+ *
+ * @class CAS_Client
+ * @category Authentication
+ * @package PhpCAS
+ * @author Pascal Aubry
+ * @author Olivier Berger
+ * @author Brett Bieber
+ * @author Joachim Fritschi
+ * @author Adam Franco
+ * @author Tobias Schiebeck
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ *
+ */
+
+class CAS_Client
+{
+
+ // ########################################################################
+ // HTML OUTPUT
+ // ########################################################################
+ /**
+ * @addtogroup internalOutput
+ * @{
+ */
+
+ /**
+ * This method filters a string by replacing special tokens by appropriate values
+ * and prints it. The corresponding tokens are taken into account:
+ * - __CAS_VERSION__
+ * - __PHPCAS_VERSION__
+ * - __SERVER_BASE_URL__
+ *
+ * Used by CAS_Client::PrintHTMLHeader() and CAS_Client::printHTMLFooter().
+ *
+ * @param string $str the string to filter and output
+ *
+ * @return void
+ */
+ private function _htmlFilterOutput($str)
+ {
+ $str = str_replace('__CAS_VERSION__', $this->getServerVersion(), $str);
+ $str = str_replace('__PHPCAS_VERSION__', phpCAS::getVersion(), $str);
+ $str = str_replace('__SERVER_BASE_URL__', $this->_getServerBaseURL(), $str);
+ echo $str;
+ }
+
+ /**
+ * A string used to print the header of HTML pages. Written by
+ * CAS_Client::setHTMLHeader(), read by CAS_Client::printHTMLHeader().
+ *
+ * @hideinitializer
+ * @see CAS_Client::setHTMLHeader, CAS_Client::printHTMLHeader()
+ */
+ private $_output_header = '';
+
+ /**
+ * This method prints the header of the HTML output (after filtering). If
+ * CAS_Client::setHTMLHeader() was not used, a default header is output.
+ *
+ * @param string $title the title of the page
+ *
+ * @return void
+ * @see _htmlFilterOutput()
+ */
+ public function printHTMLHeader($title)
+ {
+ if (!phpCAS::getVerbose()) {
+ return;
+ }
+
+ $this->_htmlFilterOutput(
+ str_replace(
+ '__TITLE__', $title,
+ (empty($this->_output_header)
+ ? '__TITLE__ __TITLE__
'
+ : $this->_output_header)
+ )
+ );
+ }
+
+ /**
+ * A string used to print the footer of HTML pages. Written by
+ * CAS_Client::setHTMLFooter(), read by printHTMLFooter().
+ *
+ * @hideinitializer
+ * @see CAS_Client::setHTMLFooter, CAS_Client::printHTMLFooter()
+ */
+ private $_output_footer = '';
+
+ /**
+ * This method prints the footer of the HTML output (after filtering). If
+ * CAS_Client::setHTMLFooter() was not used, a default footer is output.
+ *
+ * @return void
+ * @see _htmlFilterOutput()
+ */
+ public function printHTMLFooter()
+ {
+ if (!phpCAS::getVerbose()) {
+ return;
+ }
+
+ $lang = $this->getLangObj();
+ $message = empty($this->_output_footer)
+ ? '
phpCAS __PHPCAS_VERSION__ ' . $lang->getUsingServer() .
+ ' __SERVER_BASE_URL__ (CAS __CAS_VERSION__)'
+ : $this->_output_footer;
+
+ $this->_htmlFilterOutput($message);
+ }
+
+ /**
+ * This method set the HTML header used for all outputs.
+ *
+ * @param string $header the HTML header.
+ *
+ * @return void
+ */
+ public function setHTMLHeader($header)
+ {
+ // Argument Validation
+ if (gettype($header) != 'string')
+ throw new CAS_TypeMismatchException($header, '$header', 'string');
+
+ $this->_output_header = $header;
+ }
+
+ /**
+ * This method set the HTML footer used for all outputs.
+ *
+ * @param string $footer the HTML footer.
+ *
+ * @return void
+ */
+ public function setHTMLFooter($footer)
+ {
+ // Argument Validation
+ if (gettype($footer) != 'string')
+ throw new CAS_TypeMismatchException($footer, '$footer', 'string');
+
+ $this->_output_footer = $footer;
+ }
+
+ /**
+ * Simple wrapper for printf function, that respects
+ * phpCAS verbosity setting.
+ *
+ * @param string $format
+ * @param string|int|float ...$values
+ *
+ * @see printf()
+ */
+ private function printf(string $format, ...$values): void
+ {
+ if (phpCAS::getVerbose()) {
+ printf($format, ...$values);
+ }
+ }
+
+ /** @} */
+
+
+ // ########################################################################
+ // INTERNATIONALIZATION
+ // ########################################################################
+ /**
+ * @addtogroup internalLang
+ * @{
+ */
+ /**
+ * A string corresponding to the language used by phpCAS. Written by
+ * CAS_Client::setLang(), read by CAS_Client::getLang().
+
+ * @note debugging information is always in english (debug purposes only).
+ */
+ private $_lang = PHPCAS_LANG_DEFAULT;
+
+ /**
+ * This method is used to set the language used by phpCAS.
+ *
+ * @param string $lang representing the language.
+ *
+ * @return void
+ */
+ public function setLang($lang)
+ {
+ // Argument Validation
+ if (gettype($lang) != 'string')
+ throw new CAS_TypeMismatchException($lang, '$lang', 'string');
+
+ phpCAS::traceBegin();
+ $obj = new $lang();
+ if (!($obj instanceof CAS_Languages_LanguageInterface)) {
+ throw new CAS_InvalidArgumentException(
+ '$className must implement the CAS_Languages_LanguageInterface'
+ );
+ }
+ $this->_lang = $lang;
+ phpCAS::traceEnd();
+ }
+ /**
+ * Create the language
+ *
+ * @return CAS_Languages_LanguageInterface object implementing the class
+ */
+ public function getLangObj()
+ {
+ $classname = $this->_lang;
+ return new $classname();
+ }
+
+ /** @} */
+ // ########################################################################
+ // CAS SERVER CONFIG
+ // ########################################################################
+ /**
+ * @addtogroup internalConfig
+ * @{
+ */
+
+ /**
+ * a record to store information about the CAS server.
+ * - $_server['version']: the version of the CAS server
+ * - $_server['hostname']: the hostname of the CAS server
+ * - $_server['port']: the port the CAS server is running on
+ * - $_server['uri']: the base URI the CAS server is responding on
+ * - $_server['base_url']: the base URL of the CAS server
+ * - $_server['login_url']: the login URL of the CAS server
+ * - $_server['service_validate_url']: the service validating URL of the
+ * CAS server
+ * - $_server['proxy_url']: the proxy URL of the CAS server
+ * - $_server['proxy_validate_url']: the proxy validating URL of the CAS server
+ * - $_server['logout_url']: the logout URL of the CAS server
+ *
+ * $_server['version'], $_server['hostname'], $_server['port'] and
+ * $_server['uri'] are written by CAS_Client::CAS_Client(), read by
+ * CAS_Client::getServerVersion(), CAS_Client::_getServerHostname(),
+ * CAS_Client::_getServerPort() and CAS_Client::_getServerURI().
+ *
+ * The other fields are written and read by CAS_Client::_getServerBaseURL(),
+ * CAS_Client::getServerLoginURL(), CAS_Client::getServerServiceValidateURL(),
+ * CAS_Client::getServerProxyValidateURL() and CAS_Client::getServerLogoutURL().
+ *
+ * @hideinitializer
+ */
+ private $_server = array(
+ 'version' => '',
+ 'hostname' => 'none',
+ 'port' => -1,
+ 'uri' => 'none');
+
+ /**
+ * This method is used to retrieve the version of the CAS server.
+ *
+ * @return string the version of the CAS server.
+ */
+ public function getServerVersion()
+ {
+ return $this->_server['version'];
+ }
+
+ /**
+ * This method is used to retrieve the hostname of the CAS server.
+ *
+ * @return string the hostname of the CAS server.
+ */
+ private function _getServerHostname()
+ {
+ return $this->_server['hostname'];
+ }
+
+ /**
+ * This method is used to retrieve the port of the CAS server.
+ *
+ * @return int the port of the CAS server.
+ */
+ private function _getServerPort()
+ {
+ return $this->_server['port'];
+ }
+
+ /**
+ * This method is used to retrieve the URI of the CAS server.
+ *
+ * @return string a URI.
+ */
+ private function _getServerURI()
+ {
+ return $this->_server['uri'];
+ }
+
+ /**
+ * This method is used to retrieve the base URL of the CAS server.
+ *
+ * @return string a URL.
+ */
+ private function _getServerBaseURL()
+ {
+ // the URL is build only when needed
+ if ( empty($this->_server['base_url']) ) {
+ $this->_server['base_url'] = 'https://' . $this->_getServerHostname();
+ if ($this->_getServerPort()!=443) {
+ $this->_server['base_url'] .= ':'
+ .$this->_getServerPort();
+ }
+ $this->_server['base_url'] .= $this->_getServerURI();
+ }
+ return $this->_server['base_url'];
+ }
+
+ /**
+ * This method is used to retrieve the login URL of the CAS server.
+ *
+ * @param bool $gateway true to check authentication, false to force it
+ * @param bool $renew true to force the authentication with the CAS server
+ *
+ * @return string a URL.
+ * @note It is recommended that CAS implementations ignore the "gateway"
+ * parameter if "renew" is set
+ */
+ public function getServerLoginURL($gateway=false,$renew=false)
+ {
+ phpCAS::traceBegin();
+ // the URL is build only when needed
+ if ( empty($this->_server['login_url']) ) {
+ $this->_server['login_url'] = $this->_buildQueryUrl($this->_getServerBaseURL().'login','service='.urlencode($this->getURL()));
+ }
+ $url = $this->_server['login_url'];
+ if ($renew) {
+ // It is recommended that when the "renew" parameter is set, its
+ // value be "true"
+ $url = $this->_buildQueryUrl($url, 'renew=true');
+ } elseif ($gateway) {
+ // It is recommended that when the "gateway" parameter is set, its
+ // value be "true"
+ $url = $this->_buildQueryUrl($url, 'gateway=true');
+ }
+ phpCAS::traceEnd($url);
+ return $url;
+ }
+
+ /**
+ * This method sets the login URL of the CAS server.
+ *
+ * @param string $url the login URL
+ *
+ * @return string login url
+ */
+ public function setServerLoginURL($url)
+ {
+ // Argument Validation
+ if (gettype($url) != 'string')
+ throw new CAS_TypeMismatchException($url, '$url', 'string');
+
+ return $this->_server['login_url'] = $url;
+ }
+
+
+ /**
+ * This method sets the serviceValidate URL of the CAS server.
+ *
+ * @param string $url the serviceValidate URL
+ *
+ * @return string serviceValidate URL
+ */
+ public function setServerServiceValidateURL($url)
+ {
+ // Argument Validation
+ if (gettype($url) != 'string')
+ throw new CAS_TypeMismatchException($url, '$url', 'string');
+
+ return $this->_server['service_validate_url'] = $url;
+ }
+
+
+ /**
+ * This method sets the proxyValidate URL of the CAS server.
+ *
+ * @param string $url the proxyValidate URL
+ *
+ * @return string proxyValidate URL
+ */
+ public function setServerProxyValidateURL($url)
+ {
+ // Argument Validation
+ if (gettype($url) != 'string')
+ throw new CAS_TypeMismatchException($url, '$url', 'string');
+
+ return $this->_server['proxy_validate_url'] = $url;
+ }
+
+
+ /**
+ * This method sets the samlValidate URL of the CAS server.
+ *
+ * @param string $url the samlValidate URL
+ *
+ * @return string samlValidate URL
+ */
+ public function setServerSamlValidateURL($url)
+ {
+ // Argument Validation
+ if (gettype($url) != 'string')
+ throw new CAS_TypeMismatchException($url, '$url', 'string');
+
+ return $this->_server['saml_validate_url'] = $url;
+ }
+
+
+ /**
+ * This method is used to retrieve the service validating URL of the CAS server.
+ *
+ * @return string serviceValidate URL.
+ */
+ public function getServerServiceValidateURL()
+ {
+ phpCAS::traceBegin();
+ // the URL is build only when needed
+ if ( empty($this->_server['service_validate_url']) ) {
+ switch ($this->getServerVersion()) {
+ case CAS_VERSION_1_0:
+ $this->_server['service_validate_url'] = $this->_getServerBaseURL()
+ .'validate';
+ break;
+ case CAS_VERSION_2_0:
+ $this->_server['service_validate_url'] = $this->_getServerBaseURL()
+ .'serviceValidate';
+ break;
+ case CAS_VERSION_3_0:
+ $this->_server['service_validate_url'] = $this->_getServerBaseURL()
+ .'p3/serviceValidate';
+ break;
+ }
+ }
+ $url = $this->_buildQueryUrl(
+ $this->_server['service_validate_url'],
+ 'service='.urlencode($this->getURL())
+ );
+ phpCAS::traceEnd($url);
+ return $url;
+ }
+ /**
+ * This method is used to retrieve the SAML validating URL of the CAS server.
+ *
+ * @return string samlValidate URL.
+ */
+ public function getServerSamlValidateURL()
+ {
+ phpCAS::traceBegin();
+ // the URL is build only when needed
+ if ( empty($this->_server['saml_validate_url']) ) {
+ switch ($this->getServerVersion()) {
+ case SAML_VERSION_1_1:
+ $this->_server['saml_validate_url'] = $this->_getServerBaseURL().'samlValidate';
+ break;
+ }
+ }
+
+ $url = $this->_buildQueryUrl(
+ $this->_server['saml_validate_url'],
+ 'TARGET='.urlencode($this->getURL())
+ );
+ phpCAS::traceEnd($url);
+ return $url;
+ }
+
+ /**
+ * This method is used to retrieve the proxy validating URL of the CAS server.
+ *
+ * @return string proxyValidate URL.
+ */
+ public function getServerProxyValidateURL()
+ {
+ phpCAS::traceBegin();
+ // the URL is build only when needed
+ if ( empty($this->_server['proxy_validate_url']) ) {
+ switch ($this->getServerVersion()) {
+ case CAS_VERSION_1_0:
+ $this->_server['proxy_validate_url'] = '';
+ break;
+ case CAS_VERSION_2_0:
+ $this->_server['proxy_validate_url'] = $this->_getServerBaseURL().'proxyValidate';
+ break;
+ case CAS_VERSION_3_0:
+ $this->_server['proxy_validate_url'] = $this->_getServerBaseURL().'p3/proxyValidate';
+ break;
+ }
+ }
+ $url = $this->_buildQueryUrl(
+ $this->_server['proxy_validate_url'],
+ 'service='.urlencode($this->getURL())
+ );
+ phpCAS::traceEnd($url);
+ return $url;
+ }
+
+
+ /**
+ * This method is used to retrieve the proxy URL of the CAS server.
+ *
+ * @return string proxy URL.
+ */
+ public function getServerProxyURL()
+ {
+ // the URL is build only when needed
+ if ( empty($this->_server['proxy_url']) ) {
+ switch ($this->getServerVersion()) {
+ case CAS_VERSION_1_0:
+ $this->_server['proxy_url'] = '';
+ break;
+ case CAS_VERSION_2_0:
+ case CAS_VERSION_3_0:
+ $this->_server['proxy_url'] = $this->_getServerBaseURL().'proxy';
+ break;
+ }
+ }
+ return $this->_server['proxy_url'];
+ }
+
+ /**
+ * This method is used to retrieve the logout URL of the CAS server.
+ *
+ * @return string logout URL.
+ */
+ public function getServerLogoutURL()
+ {
+ // the URL is build only when needed
+ if ( empty($this->_server['logout_url']) ) {
+ $this->_server['logout_url'] = $this->_getServerBaseURL().'logout';
+ }
+ return $this->_server['logout_url'];
+ }
+
+ /**
+ * This method sets the logout URL of the CAS server.
+ *
+ * @param string $url the logout URL
+ *
+ * @return string logout url
+ */
+ public function setServerLogoutURL($url)
+ {
+ // Argument Validation
+ if (gettype($url) != 'string')
+ throw new CAS_TypeMismatchException($url, '$url', 'string');
+
+ return $this->_server['logout_url'] = $url;
+ }
+
+ /**
+ * An array to store extra curl options.
+ */
+ private $_curl_options = array();
+
+ /**
+ * This method is used to set additional user curl options.
+ *
+ * @param string $key name of the curl option
+ * @param string $value value of the curl option
+ *
+ * @return void
+ */
+ public function setExtraCurlOption($key, $value)
+ {
+ $this->_curl_options[$key] = $value;
+ }
+
+ /** @} */
+
+ // ########################################################################
+ // Change the internal behaviour of phpcas
+ // ########################################################################
+
+ /**
+ * @addtogroup internalBehave
+ * @{
+ */
+
+ /**
+ * The class to instantiate for making web requests in readUrl().
+ * The class specified must implement the CAS_Request_RequestInterface.
+ * By default CAS_Request_CurlRequest is used, but this may be overridden to
+ * supply alternate request mechanisms for testing.
+ */
+ private $_requestImplementation = 'CAS_Request_CurlRequest';
+
+ /**
+ * Override the default implementation used to make web requests in readUrl().
+ * This class must implement the CAS_Request_RequestInterface.
+ *
+ * @param string $className name of the RequestImplementation class
+ *
+ * @return void
+ */
+ public function setRequestImplementation ($className)
+ {
+ $obj = new $className;
+ if (!($obj instanceof CAS_Request_RequestInterface)) {
+ throw new CAS_InvalidArgumentException(
+ '$className must implement the CAS_Request_RequestInterface'
+ );
+ }
+ $this->_requestImplementation = $className;
+ }
+
+ /**
+ * @var boolean $_clearTicketsFromUrl; If true, phpCAS will clear session
+ * tickets from the URL after a successful authentication.
+ */
+ private $_clearTicketsFromUrl = true;
+
+ /**
+ * Configure the client to not send redirect headers and call exit() on
+ * authentication success. The normal redirect is used to remove the service
+ * ticket from the client's URL, but for running unit tests we need to
+ * continue without exiting.
+ *
+ * Needed for testing authentication
+ *
+ * @return void
+ */
+ public function setNoClearTicketsFromUrl ()
+ {
+ $this->_clearTicketsFromUrl = false;
+ }
+
+ /**
+ * @var callback $_attributeParserCallbackFunction;
+ */
+ private $_casAttributeParserCallbackFunction = null;
+
+ /**
+ * @var array $_attributeParserCallbackArgs;
+ */
+ private $_casAttributeParserCallbackArgs = array();
+
+ /**
+ * Set a callback function to be run when parsing CAS attributes
+ *
+ * The callback function will be passed a XMLNode as its first parameter,
+ * followed by any $additionalArgs you pass.
+ *
+ * @param string $function callback function to call
+ * @param array $additionalArgs optional array of arguments
+ *
+ * @return void
+ */
+ public function setCasAttributeParserCallback($function, array $additionalArgs = array())
+ {
+ $this->_casAttributeParserCallbackFunction = $function;
+ $this->_casAttributeParserCallbackArgs = $additionalArgs;
+ }
+
+ /** @var callable $_postAuthenticateCallbackFunction;
+ */
+ private $_postAuthenticateCallbackFunction = null;
+
+ /**
+ * @var array $_postAuthenticateCallbackArgs;
+ */
+ private $_postAuthenticateCallbackArgs = array();
+
+ /**
+ * Set a callback function to be run when a user authenticates.
+ *
+ * The callback function will be passed a $logoutTicket as its first parameter,
+ * followed by any $additionalArgs you pass. The $logoutTicket parameter is an
+ * opaque string that can be used to map a session-id to the logout request
+ * in order to support single-signout in applications that manage their own
+ * sessions (rather than letting phpCAS start the session).
+ *
+ * phpCAS::forceAuthentication() will always exit and forward client unless
+ * they are already authenticated. To perform an action at the moment the user
+ * logs in (such as registering an account, performing logging, etc), register
+ * a callback function here.
+ *
+ * @param callable $function callback function to call
+ * @param array $additionalArgs optional array of arguments
+ *
+ * @return void
+ */
+ public function setPostAuthenticateCallback ($function, array $additionalArgs = array())
+ {
+ $this->_postAuthenticateCallbackFunction = $function;
+ $this->_postAuthenticateCallbackArgs = $additionalArgs;
+ }
+
+ /**
+ * @var callable $_signoutCallbackFunction;
+ */
+ private $_signoutCallbackFunction = null;
+
+ /**
+ * @var array $_signoutCallbackArgs;
+ */
+ private $_signoutCallbackArgs = array();
+
+ /**
+ * Set a callback function to be run when a single-signout request is received.
+ *
+ * The callback function will be passed a $logoutTicket as its first parameter,
+ * followed by any $additionalArgs you pass. The $logoutTicket parameter is an
+ * opaque string that can be used to map a session-id to the logout request in
+ * order to support single-signout in applications that manage their own sessions
+ * (rather than letting phpCAS start and destroy the session).
+ *
+ * @param callable $function callback function to call
+ * @param array $additionalArgs optional array of arguments
+ *
+ * @return void
+ */
+ public function setSingleSignoutCallback ($function, array $additionalArgs = array())
+ {
+ $this->_signoutCallbackFunction = $function;
+ $this->_signoutCallbackArgs = $additionalArgs;
+ }
+
+ // ########################################################################
+ // Methods for supplying code-flow feedback to integrators.
+ // ########################################################################
+
+ /**
+ * Ensure that this is actually a proxy object or fail with an exception
+ *
+ * @throws CAS_OutOfSequenceBeforeProxyException
+ *
+ * @return void
+ */
+ public function ensureIsProxy()
+ {
+ if (!$this->isProxy()) {
+ throw new CAS_OutOfSequenceBeforeProxyException();
+ }
+ }
+
+ /**
+ * Mark the caller of authentication. This will help client integraters determine
+ * problems with their code flow if they call a function such as getUser() before
+ * authentication has occurred.
+ *
+ * @param bool $auth True if authentication was successful, false otherwise.
+ *
+ * @return null
+ */
+ public function markAuthenticationCall ($auth)
+ {
+ // store where the authentication has been checked and the result
+ $dbg = debug_backtrace();
+ $this->_authentication_caller = array (
+ 'file' => $dbg[1]['file'],
+ 'line' => $dbg[1]['line'],
+ 'method' => $dbg[1]['class'] . '::' . $dbg[1]['function'],
+ 'result' => (boolean)$auth
+ );
+ }
+ private $_authentication_caller;
+
+ /**
+ * Answer true if authentication has been checked.
+ *
+ * @return bool
+ */
+ public function wasAuthenticationCalled ()
+ {
+ return !empty($this->_authentication_caller);
+ }
+
+ /**
+ * Ensure that authentication was checked. Terminate with exception if no
+ * authentication was performed
+ *
+ * @throws CAS_OutOfSequenceBeforeAuthenticationCallException
+ *
+ * @return void
+ */
+ private function _ensureAuthenticationCalled()
+ {
+ if (!$this->wasAuthenticationCalled()) {
+ throw new CAS_OutOfSequenceBeforeAuthenticationCallException();
+ }
+ }
+
+ /**
+ * Answer the result of the authentication call.
+ *
+ * Throws a CAS_OutOfSequenceException if wasAuthenticationCalled() is false
+ * and markAuthenticationCall() didn't happen.
+ *
+ * @return bool
+ */
+ public function wasAuthenticationCallSuccessful ()
+ {
+ $this->_ensureAuthenticationCalled();
+ return $this->_authentication_caller['result'];
+ }
+
+
+ /**
+ * Ensure that authentication was checked. Terminate with exception if no
+ * authentication was performed
+ *
+ * @throws CAS_OutOfSequenceException
+ *
+ * @return void
+ */
+ public function ensureAuthenticationCallSuccessful()
+ {
+ $this->_ensureAuthenticationCalled();
+ if (!$this->_authentication_caller['result']) {
+ throw new CAS_OutOfSequenceException(
+ 'authentication was checked (by '
+ . $this->getAuthenticationCallerMethod()
+ . '() at ' . $this->getAuthenticationCallerFile()
+ . ':' . $this->getAuthenticationCallerLine()
+ . ') but the method returned false'
+ );
+ }
+ }
+
+ /**
+ * Answer information about the authentication caller.
+ *
+ * Throws a CAS_OutOfSequenceException if wasAuthenticationCalled() is false
+ * and markAuthenticationCall() didn't happen.
+ *
+ * @return string the file that called authentication
+ */
+ public function getAuthenticationCallerFile ()
+ {
+ $this->_ensureAuthenticationCalled();
+ return $this->_authentication_caller['file'];
+ }
+
+ /**
+ * Answer information about the authentication caller.
+ *
+ * Throws a CAS_OutOfSequenceException if wasAuthenticationCalled() is false
+ * and markAuthenticationCall() didn't happen.
+ *
+ * @return int the line that called authentication
+ */
+ public function getAuthenticationCallerLine ()
+ {
+ $this->_ensureAuthenticationCalled();
+ return $this->_authentication_caller['line'];
+ }
+
+ /**
+ * Answer information about the authentication caller.
+ *
+ * Throws a CAS_OutOfSequenceException if wasAuthenticationCalled() is false
+ * and markAuthenticationCall() didn't happen.
+ *
+ * @return string the method that called authentication
+ */
+ public function getAuthenticationCallerMethod ()
+ {
+ $this->_ensureAuthenticationCalled();
+ return $this->_authentication_caller['method'];
+ }
+
+ /** @} */
+
+ // ########################################################################
+ // CONSTRUCTOR
+ // ########################################################################
+ /**
+ * @addtogroup internalConfig
+ * @{
+ */
+
+ /**
+ * CAS_Client constructor.
+ *
+ * @param string $server_version the version of the CAS server
+ * @param bool $proxy true if the CAS client is a CAS proxy
+ * @param string $server_hostname the hostname of the CAS server
+ * @param int $server_port the port the CAS server is running on
+ * @param string $server_uri the URI the CAS server is responding on
+ * @param bool $changeSessionID Allow phpCAS to change the session_id
+ * (Single Sign Out/handleLogoutRequests
+ * is based on that change)
+ * @param string|string[]|CAS_ServiceBaseUrl_Interface
+ * $service_base_url the base URL (protocol, host and the
+ * optional port) of the CAS client; pass
+ * in an array to use auto discovery with
+ * an allowlist; pass in
+ * CAS_ServiceBaseUrl_Interface for custom
+ * behavior. Added in 1.6.0. Similar to
+ * serverName config in other CAS clients.
+ * @param \SessionHandlerInterface $sessionHandler the session handler
+ *
+ * @return self a newly created CAS_Client object
+ */
+ public function __construct(
+ $server_version,
+ $proxy,
+ $server_hostname,
+ $server_port,
+ $server_uri,
+ $service_base_url,
+ $changeSessionID = true,
+ \SessionHandlerInterface $sessionHandler = null
+ ) {
+ // Argument validation
+ if (gettype($server_version) != 'string')
+ throw new CAS_TypeMismatchException($server_version, '$server_version', 'string');
+ if (gettype($proxy) != 'boolean')
+ throw new CAS_TypeMismatchException($proxy, '$proxy', 'boolean');
+ if (gettype($server_hostname) != 'string')
+ throw new CAS_TypeMismatchException($server_hostname, '$server_hostname', 'string');
+ if (gettype($server_port) != 'integer')
+ throw new CAS_TypeMismatchException($server_port, '$server_port', 'integer');
+ if (gettype($server_uri) != 'string')
+ throw new CAS_TypeMismatchException($server_uri, '$server_uri', 'string');
+ if (gettype($changeSessionID) != 'boolean')
+ throw new CAS_TypeMismatchException($changeSessionID, '$changeSessionID', 'boolean');
+
+ $this->_setServiceBaseUrl($service_base_url);
+
+ if (empty($sessionHandler)) {
+ $sessionHandler = new CAS_Session_PhpSession;
+ }
+
+ phpCAS::traceBegin();
+ // true : allow to change the session_id(), false session_id won't be
+ // changed and logout won't be handled because of that
+ $this->_setChangeSessionID($changeSessionID);
+
+ $this->setSessionHandler($sessionHandler);
+
+ if (!$this->_isLogoutRequest()) {
+ if (session_id() === "") {
+ // skip Session Handling for logout requests and if don't want it
+ session_start();
+ phpCAS :: trace("Starting a new session " . session_id());
+ }
+ }
+
+ // Only for debug purposes
+ if ($this->isSessionAuthenticated()){
+ phpCAS :: trace("Session is authenticated as: " . $this->getSessionValue('user'));
+ } else {
+ phpCAS :: trace("Session is not authenticated");
+ }
+ // are we in proxy mode ?
+ $this->_proxy = $proxy;
+
+ // Make cookie handling available.
+ if ($this->isProxy()) {
+ if (!$this->hasSessionValue('service_cookies')) {
+ $this->setSessionValue('service_cookies', array());
+ }
+ // TODO remove explicit call to $_SESSION
+ $this->_serviceCookieJar = new CAS_CookieJar(
+ $_SESSION[static::PHPCAS_SESSION_PREFIX]['service_cookies']
+ );
+ }
+
+ // check version
+ $supportedProtocols = phpCAS::getSupportedProtocols();
+ if (isset($supportedProtocols[$server_version]) === false) {
+ phpCAS::error(
+ 'this version of CAS (`'.$server_version
+ .'\') is not supported by phpCAS '.phpCAS::getVersion()
+ );
+ }
+
+ if ($server_version === CAS_VERSION_1_0 && $this->isProxy()) {
+ phpCAS::error(
+ 'CAS proxies are not supported in CAS '.$server_version
+ );
+ }
+
+ $this->_server['version'] = $server_version;
+
+ // check hostname
+ if ( empty($server_hostname)
+ || !preg_match('/[\.\d\-a-z]*/', $server_hostname)
+ ) {
+ phpCAS::error('bad CAS server hostname (`'.$server_hostname.'\')');
+ }
+ $this->_server['hostname'] = $server_hostname;
+
+ // check port
+ if ( $server_port == 0
+ || !is_int($server_port)
+ ) {
+ phpCAS::error('bad CAS server port (`'.$server_hostname.'\')');
+ }
+ $this->_server['port'] = $server_port;
+
+ // check URI
+ if ( !preg_match('/[\.\d\-_a-z\/]*/', $server_uri) ) {
+ phpCAS::error('bad CAS server URI (`'.$server_uri.'\')');
+ }
+ // add leading and trailing `/' and remove doubles
+ if(strstr($server_uri, '?') === false) $server_uri .= '/';
+ $server_uri = preg_replace('/\/\//', '/', '/'.$server_uri);
+ $this->_server['uri'] = $server_uri;
+
+ // set to callback mode if PgtIou and PgtId CGI GET parameters are provided
+ if ( $this->isProxy() ) {
+ if(!empty($_GET['pgtIou'])&&!empty($_GET['pgtId'])) {
+ $this->_setCallbackMode(true);
+ $this->_setCallbackModeUsingPost(false);
+ } elseif (!empty($_POST['pgtIou'])&&!empty($_POST['pgtId'])) {
+ $this->_setCallbackMode(true);
+ $this->_setCallbackModeUsingPost(true);
+ } else {
+ $this->_setCallbackMode(false);
+ $this->_setCallbackModeUsingPost(false);
+ }
+
+
+ }
+
+ if ( $this->_isCallbackMode() ) {
+ //callback mode: check that phpCAS is secured
+ if ( !$this->getServiceBaseUrl()->isHttps() ) {
+ phpCAS::error(
+ 'CAS proxies must be secured to use phpCAS; PGT\'s will not be received from the CAS server'
+ );
+ }
+ } else {
+ //normal mode: get ticket and remove it from CGI parameters for
+ // developers
+ $ticket = (isset($_GET['ticket']) ? $_GET['ticket'] : '');
+ if (preg_match('/^[SP]T-/', $ticket) ) {
+ phpCAS::trace('Ticket \''.$ticket.'\' found');
+ $this->setTicket($ticket);
+ unset($_GET['ticket']);
+ } else if ( !empty($ticket) ) {
+ //ill-formed ticket, halt
+ phpCAS::error(
+ 'ill-formed ticket found in the URL (ticket=`'
+ .htmlentities($ticket).'\')'
+ );
+ }
+
+ }
+ phpCAS::traceEnd();
+ }
+
+ /** @} */
+
+ // XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+ // XX XX
+ // XX Session Handling XX
+ // XX XX
+ // XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+
+ /**
+ * @addtogroup internalConfig
+ * @{
+ */
+
+ /** The session prefix for phpCAS values */
+ const PHPCAS_SESSION_PREFIX = 'phpCAS';
+
+ /**
+ * @var bool A variable to whether phpcas will use its own session handling. Default = true
+ * @hideinitializer
+ */
+ private $_change_session_id = true;
+
+ /**
+ * @var SessionHandlerInterface
+ */
+ private $_sessionHandler;
+
+ /**
+ * Set a parameter whether to allow phpCAS to change session_id
+ *
+ * @param bool $allowed allow phpCAS to change session_id
+ *
+ * @return void
+ */
+ private function _setChangeSessionID($allowed)
+ {
+ $this->_change_session_id = $allowed;
+ }
+
+ /**
+ * Get whether phpCAS is allowed to change session_id
+ *
+ * @return bool
+ */
+ public function getChangeSessionID()
+ {
+ return $this->_change_session_id;
+ }
+
+ /**
+ * Set the session handler.
+ *
+ * @param \SessionHandlerInterface $sessionHandler
+ *
+ * @return bool
+ */
+ public function setSessionHandler(\SessionHandlerInterface $sessionHandler)
+ {
+ $this->_sessionHandler = $sessionHandler;
+ if (session_status() !== PHP_SESSION_ACTIVE) {
+ return session_set_save_handler($this->_sessionHandler, true);
+ }
+ return true;
+ }
+
+ /**
+ * Get a session value using the given key.
+ *
+ * @param string $key
+ * @param mixed $default default value if the key is not set
+ *
+ * @return mixed
+ */
+ protected function getSessionValue($key, $default = null)
+ {
+ $this->validateSession($key);
+
+ if (isset($_SESSION[static::PHPCAS_SESSION_PREFIX][$key])) {
+ return $_SESSION[static::PHPCAS_SESSION_PREFIX][$key];
+ }
+
+ return $default;
+ }
+
+ /**
+ * Determine whether a session value is set or not.
+ *
+ * To check if a session value is empty or not please use
+ * !!(getSessionValue($key)).
+ *
+ * @param string $key
+ *
+ * @return bool
+ */
+ protected function hasSessionValue($key)
+ {
+ $this->validateSession($key);
+
+ return isset($_SESSION[static::PHPCAS_SESSION_PREFIX][$key]);
+ }
+
+ /**
+ * Set a session value using the given key and value.
+ *
+ * @param string $key
+ * @param mixed $value
+ *
+ * @return string
+ */
+ protected function setSessionValue($key, $value)
+ {
+ $this->validateSession($key);
+
+ $this->ensureSessionArray();
+ $_SESSION[static::PHPCAS_SESSION_PREFIX][$key] = $value;
+ }
+
+ /**
+ * Ensure that the session array is initialized before writing to it.
+ */
+ protected function ensureSessionArray() {
+ // init phpCAS session array
+ if (!isset($_SESSION[static::PHPCAS_SESSION_PREFIX])
+ || !is_array($_SESSION[static::PHPCAS_SESSION_PREFIX])) {
+ $_SESSION[static::PHPCAS_SESSION_PREFIX] = array();
+ }
+ }
+
+ /**
+ * Remove a session value with the given key.
+ *
+ * @param string $key
+ */
+ protected function removeSessionValue($key)
+ {
+ $this->validateSession($key);
+
+ if (isset($_SESSION[static::PHPCAS_SESSION_PREFIX][$key])) {
+ unset($_SESSION[static::PHPCAS_SESSION_PREFIX][$key]);
+ return true;
+ }
+
+ return false;
+ }
+
+ /**
+ * Remove all phpCAS session values.
+ */
+ protected function clearSessionValues()
+ {
+ unset($_SESSION[static::PHPCAS_SESSION_PREFIX]);
+ }
+
+ /**
+ * Ensure $key is a string for session utils input
+ *
+ * @param string $key
+ *
+ * @return bool
+ */
+ protected function validateSession($key)
+ {
+ if (!is_string($key)) {
+ throw new InvalidArgumentException('Session key must be a string.');
+ }
+
+ return true;
+ }
+
+ /**
+ * Renaming the session
+ *
+ * @param string $ticket name of the ticket
+ *
+ * @return void
+ */
+ protected function _renameSession($ticket)
+ {
+ phpCAS::traceBegin();
+ if ($this->getChangeSessionID()) {
+ if (!empty($this->_user)) {
+ $old_session = $_SESSION;
+ phpCAS :: trace("Killing session: ". session_id());
+ session_destroy();
+ // set up a new session, of name based on the ticket
+ $session_id = $this->_sessionIdForTicket($ticket);
+ phpCAS :: trace("Starting session: ". $session_id);
+ session_id($session_id);
+ session_start();
+ phpCAS :: trace("Restoring old session vars");
+ $_SESSION = $old_session;
+ } else {
+ phpCAS :: trace (
+ 'Session should only be renamed after successfull authentication'
+ );
+ }
+ } else {
+ phpCAS :: trace(
+ "Skipping session rename since phpCAS is not handling the session."
+ );
+ }
+ phpCAS::traceEnd();
+ }
+
+ /** @} */
+
+ // XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+ // XX XX
+ // XX AUTHENTICATION XX
+ // XX XX
+ // XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+
+ /**
+ * @addtogroup internalAuthentication
+ * @{
+ */
+
+ /**
+ * The Authenticated user. Written by CAS_Client::_setUser(), read by
+ * CAS_Client::getUser().
+ *
+ * @hideinitializer
+ */
+ private $_user = '';
+
+ /**
+ * This method sets the CAS user's login name.
+ *
+ * @param string $user the login name of the authenticated user.
+ *
+ * @return void
+ */
+ private function _setUser($user)
+ {
+ $this->_user = $user;
+ }
+
+ /**
+ * This method returns the CAS user's login name.
+ *
+ * @return string the login name of the authenticated user
+ *
+ * @warning should be called only after CAS_Client::forceAuthentication() or
+ * CAS_Client::isAuthenticated(), otherwise halt with an error.
+ */
+ public function getUser()
+ {
+ // Sequence validation
+ $this->ensureAuthenticationCallSuccessful();
+
+ return $this->_getUser();
+ }
+
+ /**
+ * This method returns the CAS user's login name.
+ *
+ * @return string the login name of the authenticated user
+ *
+ * @warning should be called only after CAS_Client::forceAuthentication() or
+ * CAS_Client::isAuthenticated(), otherwise halt with an error.
+ */
+ private function _getUser()
+ {
+ // This is likely a duplicate check that could be removed....
+ if ( empty($this->_user) ) {
+ phpCAS::error(
+ 'this method should be used only after '.__CLASS__
+ .'::forceAuthentication() or '.__CLASS__.'::isAuthenticated()'
+ );
+ }
+ return $this->_user;
+ }
+
+ /**
+ * The Authenticated users attributes. Written by
+ * CAS_Client::setAttributes(), read by CAS_Client::getAttributes().
+ * @attention client applications should use phpCAS::getAttributes().
+ *
+ * @hideinitializer
+ */
+ private $_attributes = array();
+
+ /**
+ * Set an array of attributes
+ *
+ * @param array $attributes a key value array of attributes
+ *
+ * @return void
+ */
+ public function setAttributes($attributes)
+ {
+ $this->_attributes = $attributes;
+ }
+
+ /**
+ * Get an key values arry of attributes
+ *
+ * @return array of attributes
+ */
+ public function getAttributes()
+ {
+ // Sequence validation
+ $this->ensureAuthenticationCallSuccessful();
+ // This is likely a duplicate check that could be removed....
+ if ( empty($this->_user) ) {
+ // if no user is set, there shouldn't be any attributes also...
+ phpCAS::error(
+ 'this method should be used only after '.__CLASS__
+ .'::forceAuthentication() or '.__CLASS__.'::isAuthenticated()'
+ );
+ }
+ return $this->_attributes;
+ }
+
+ /**
+ * Check whether attributes are available
+ *
+ * @return bool attributes available
+ */
+ public function hasAttributes()
+ {
+ // Sequence validation
+ $this->ensureAuthenticationCallSuccessful();
+
+ return !empty($this->_attributes);
+ }
+ /**
+ * Check whether a specific attribute with a name is available
+ *
+ * @param string $key name of attribute
+ *
+ * @return bool is attribute available
+ */
+ public function hasAttribute($key)
+ {
+ // Sequence validation
+ $this->ensureAuthenticationCallSuccessful();
+
+ return $this->_hasAttribute($key);
+ }
+
+ /**
+ * Check whether a specific attribute with a name is available
+ *
+ * @param string $key name of attribute
+ *
+ * @return bool is attribute available
+ */
+ private function _hasAttribute($key)
+ {
+ return (is_array($this->_attributes)
+ && array_key_exists($key, $this->_attributes));
+ }
+
+ /**
+ * Get a specific attribute by name
+ *
+ * @param string $key name of attribute
+ *
+ * @return string attribute values
+ */
+ public function getAttribute($key)
+ {
+ // Sequence validation
+ $this->ensureAuthenticationCallSuccessful();
+
+ if ($this->_hasAttribute($key)) {
+ return $this->_attributes[$key];
+ }
+ }
+
+ /**
+ * This method is called to renew the authentication of the user
+ * If the user is authenticated, renew the connection
+ * If not, redirect to CAS
+ *
+ * @return bool true when the user is authenticated; otherwise halt.
+ */
+ public function renewAuthentication()
+ {
+ phpCAS::traceBegin();
+ // Either way, the user is authenticated by CAS
+ $this->removeSessionValue('auth_checked');
+ if ( $this->isAuthenticated(true) ) {
+ phpCAS::trace('user already authenticated');
+ $res = true;
+ } else {
+ $this->redirectToCas(false, true);
+ // never reached
+ $res = false;
+ }
+ phpCAS::traceEnd();
+ return $res;
+ }
+
+ /**
+ * This method is called to be sure that the user is authenticated. When not
+ * authenticated, halt by redirecting to the CAS server; otherwise return true.
+ *
+ * @return bool true when the user is authenticated; otherwise halt.
+ */
+ public function forceAuthentication()
+ {
+ phpCAS::traceBegin();
+
+ if ( $this->isAuthenticated() ) {
+ // the user is authenticated, nothing to be done.
+ phpCAS::trace('no need to authenticate');
+ $res = true;
+ } else {
+ // the user is not authenticated, redirect to the CAS server
+ $this->removeSessionValue('auth_checked');
+ $this->redirectToCas(false/* no gateway */);
+ // never reached
+ $res = false;
+ }
+ phpCAS::traceEnd($res);
+ return $res;
+ }
+
+ /**
+ * An integer that gives the number of times authentication will be cached
+ * before rechecked.
+ *
+ * @hideinitializer
+ */
+ private $_cache_times_for_auth_recheck = 0;
+
+ /**
+ * Set the number of times authentication will be cached before rechecked.
+ *
+ * @param int $n number of times to wait for a recheck
+ *
+ * @return void
+ */
+ public function setCacheTimesForAuthRecheck($n)
+ {
+ if (gettype($n) != 'integer')
+ throw new CAS_TypeMismatchException($n, '$n', 'string');
+
+ $this->_cache_times_for_auth_recheck = $n;
+ }
+
+ /**
+ * This method is called to check whether the user is authenticated or not.
+ *
+ * @return bool true when the user is authenticated, false when a previous
+ * gateway login failed or the function will not return if the user is
+ * redirected to the cas server for a gateway login attempt
+ */
+ public function checkAuthentication()
+ {
+ phpCAS::traceBegin();
+ $res = false; // default
+ if ( $this->isAuthenticated() ) {
+ phpCAS::trace('user is authenticated');
+ /* The 'auth_checked' variable is removed just in case it's set. */
+ $this->removeSessionValue('auth_checked');
+ $res = true;
+ } else if ($this->getSessionValue('auth_checked')) {
+ // the previous request has redirected the client to the CAS server
+ // with gateway=true
+ $this->removeSessionValue('auth_checked');
+ } else {
+ // avoid a check against CAS on every request
+ // we need to write this back to session later
+ $unauth_count = $this->getSessionValue('unauth_count', -2);
+
+ if (($unauth_count != -2
+ && $this->_cache_times_for_auth_recheck == -1)
+ || ($unauth_count >= 0
+ && $unauth_count < $this->_cache_times_for_auth_recheck)
+ ) {
+ if ($this->_cache_times_for_auth_recheck != -1) {
+ $unauth_count++;
+ phpCAS::trace(
+ 'user is not authenticated (cached for '
+ .$unauth_count.' times of '
+ .$this->_cache_times_for_auth_recheck.')'
+ );
+ } else {
+ phpCAS::trace(
+ 'user is not authenticated (cached for until login pressed)'
+ );
+ }
+ $this->setSessionValue('unauth_count', $unauth_count);
+ } else {
+ $this->setSessionValue('unauth_count', 0);
+ $this->setSessionValue('auth_checked', true);
+ phpCAS::trace('user is not authenticated (cache reset)');
+ $this->redirectToCas(true/* gateway */);
+ // never reached
+ }
+ }
+ phpCAS::traceEnd($res);
+ return $res;
+ }
+
+ /**
+ * This method is called to check if the user is authenticated (previously or by
+ * tickets given in the URL).
+ *
+ * @param bool $renew true to force the authentication with the CAS server
+ *
+ * @return bool true when the user is authenticated. Also may redirect to the
+ * same URL without the ticket.
+ */
+ public function isAuthenticated($renew=false)
+ {
+ phpCAS::traceBegin();
+ $res = false;
+
+ if ( $this->_wasPreviouslyAuthenticated() ) {
+ if ($this->hasTicket()) {
+ // User has a additional ticket but was already authenticated
+ phpCAS::trace(
+ 'ticket was present and will be discarded, use renewAuthenticate()'
+ );
+ if ($this->_clearTicketsFromUrl) {
+ phpCAS::trace("Prepare redirect to : ".$this->getURL());
+ session_write_close();
+ header('Location: '.$this->getURL());
+ flush();
+ phpCAS::traceExit();
+ throw new CAS_GracefullTerminationException();
+ } else {
+ phpCAS::trace(
+ 'Already authenticated, but skipping ticket clearing since setNoClearTicketsFromUrl() was used.'
+ );
+ $res = true;
+ }
+ } else {
+ // the user has already (previously during the session) been
+ // authenticated, nothing to be done.
+ phpCAS::trace(
+ 'user was already authenticated, no need to look for tickets'
+ );
+ $res = true;
+ }
+
+ // Mark the auth-check as complete to allow post-authentication
+ // callbacks to make use of phpCAS::getUser() and similar methods
+ $this->markAuthenticationCall($res);
+ } else {
+ if ($this->hasTicket()) {
+ $validate_url = '';
+ $text_response = '';
+ $tree_response = '';
+
+ switch ($this->getServerVersion()) {
+ case CAS_VERSION_1_0:
+ // if a Service Ticket was given, validate it
+ phpCAS::trace(
+ 'CAS 1.0 ticket `'.$this->getTicket().'\' is present'
+ );
+ $this->validateCAS10(
+ $validate_url, $text_response, $tree_response, $renew
+ ); // if it fails, it halts
+ phpCAS::trace(
+ 'CAS 1.0 ticket `'.$this->getTicket().'\' was validated'
+ );
+ $this->setSessionValue('user', $this->_getUser());
+ $res = true;
+ $logoutTicket = $this->getTicket();
+ break;
+ case CAS_VERSION_2_0:
+ case CAS_VERSION_3_0:
+ // if a Proxy Ticket was given, validate it
+ phpCAS::trace(
+ 'CAS '.$this->getServerVersion().' ticket `'.$this->getTicket().'\' is present'
+ );
+ $this->validateCAS20(
+ $validate_url, $text_response, $tree_response, $renew
+ ); // note: if it fails, it halts
+ phpCAS::trace(
+ 'CAS '.$this->getServerVersion().' ticket `'.$this->getTicket().'\' was validated'
+ );
+ if ( $this->isProxy() ) {
+ $this->_validatePGT(
+ $validate_url, $text_response, $tree_response
+ ); // idem
+ phpCAS::trace('PGT `'.$this->_getPGT().'\' was validated');
+ $this->setSessionValue('pgt', $this->_getPGT());
+ }
+ $this->setSessionValue('user', $this->_getUser());
+ if (!empty($this->_attributes)) {
+ $this->setSessionValue('attributes', $this->_attributes);
+ }
+ $proxies = $this->getProxies();
+ if (!empty($proxies)) {
+ $this->setSessionValue('proxies', $this->getProxies());
+ }
+ $res = true;
+ $logoutTicket = $this->getTicket();
+ break;
+ case SAML_VERSION_1_1:
+ // if we have a SAML ticket, validate it.
+ phpCAS::trace(
+ 'SAML 1.1 ticket `'.$this->getTicket().'\' is present'
+ );
+ $this->validateSA(
+ $validate_url, $text_response, $tree_response, $renew
+ ); // if it fails, it halts
+ phpCAS::trace(
+ 'SAML 1.1 ticket `'.$this->getTicket().'\' was validated'
+ );
+ $this->setSessionValue('user', $this->_getUser());
+ $this->setSessionValue('attributes', $this->_attributes);
+ $res = true;
+ $logoutTicket = $this->getTicket();
+ break;
+ default:
+ phpCAS::trace('Protocol error');
+ break;
+ }
+ } else {
+ // no ticket given, not authenticated
+ phpCAS::trace('no ticket found');
+ }
+
+ // Mark the auth-check as complete to allow post-authentication
+ // callbacks to make use of phpCAS::getUser() and similar methods
+ $this->markAuthenticationCall($res);
+
+ if ($res) {
+ // call the post-authenticate callback if registered.
+ if ($this->_postAuthenticateCallbackFunction) {
+ $args = $this->_postAuthenticateCallbackArgs;
+ array_unshift($args, $logoutTicket);
+ call_user_func_array(
+ $this->_postAuthenticateCallbackFunction, $args
+ );
+ }
+
+ // if called with a ticket parameter, we need to redirect to the
+ // app without the ticket so that CAS-ification is transparent
+ // to the browser (for later POSTS) most of the checks and
+ // errors should have been made now, so we're safe for redirect
+ // without masking error messages. remove the ticket as a
+ // security precaution to prevent a ticket in the HTTP_REFERRER
+ if ($this->_clearTicketsFromUrl) {
+ phpCAS::trace("Prepare redirect to : ".$this->getURL());
+ session_write_close();
+ header('Location: '.$this->getURL());
+ flush();
+ phpCAS::traceExit();
+ throw new CAS_GracefullTerminationException();
+ }
+ }
+ }
+ phpCAS::traceEnd($res);
+ return $res;
+ }
+
+ /**
+ * This method tells if the current session is authenticated.
+ *
+ * @return bool true if authenticated based soley on $_SESSION variable
+ */
+ public function isSessionAuthenticated ()
+ {
+ return !!$this->getSessionValue('user');
+ }
+
+ /**
+ * This method tells if the user has already been (previously) authenticated
+ * by looking into the session variables.
+ *
+ * @note This function switches to callback mode when needed.
+ *
+ * @return bool true when the user has already been authenticated; false otherwise.
+ */
+ private function _wasPreviouslyAuthenticated()
+ {
+ phpCAS::traceBegin();
+
+ if ( $this->_isCallbackMode() ) {
+ // Rebroadcast the pgtIou and pgtId to all nodes
+ if ($this->_rebroadcast&&!isset($_POST['rebroadcast'])) {
+ $this->_rebroadcast(self::PGTIOU);
+ }
+ $this->_callback();
+ }
+
+ $auth = false;
+
+ if ( $this->isProxy() ) {
+ // CAS proxy: username and PGT must be present
+ if ( $this->isSessionAuthenticated()
+ && $this->getSessionValue('pgt')
+ ) {
+ // authentication already done
+ $this->_setUser($this->getSessionValue('user'));
+ if ($this->hasSessionValue('attributes')) {
+ $this->setAttributes($this->getSessionValue('attributes'));
+ }
+ $this->_setPGT($this->getSessionValue('pgt'));
+ phpCAS::trace(
+ 'user = `'.$this->getSessionValue('user').'\', PGT = `'
+ .$this->getSessionValue('pgt').'\''
+ );
+
+ // Include the list of proxies
+ if ($this->hasSessionValue('proxies')) {
+ $this->_setProxies($this->getSessionValue('proxies'));
+ phpCAS::trace(
+ 'proxies = "'
+ .implode('", "', $this->getSessionValue('proxies')).'"'
+ );
+ }
+
+ $auth = true;
+ } elseif ( $this->isSessionAuthenticated()
+ && !$this->getSessionValue('pgt')
+ ) {
+ // these two variables should be empty or not empty at the same time
+ phpCAS::trace(
+ 'username found (`'.$this->getSessionValue('user')
+ .'\') but PGT is empty'
+ );
+ // unset all tickets to enforce authentication
+ $this->clearSessionValues();
+ $this->setTicket('');
+ } elseif ( !$this->isSessionAuthenticated()
+ && $this->getSessionValue('pgt')
+ ) {
+ // these two variables should be empty or not empty at the same time
+ phpCAS::trace(
+ 'PGT found (`'.$this->getSessionValue('pgt')
+ .'\') but username is empty'
+ );
+ // unset all tickets to enforce authentication
+ $this->clearSessionValues();
+ $this->setTicket('');
+ } else {
+ phpCAS::trace('neither user nor PGT found');
+ }
+ } else {
+ // `simple' CAS client (not a proxy): username must be present
+ if ( $this->isSessionAuthenticated() ) {
+ // authentication already done
+ $this->_setUser($this->getSessionValue('user'));
+ if ($this->hasSessionValue('attributes')) {
+ $this->setAttributes($this->getSessionValue('attributes'));
+ }
+ phpCAS::trace('user = `'.$this->getSessionValue('user').'\'');
+
+ // Include the list of proxies
+ if ($this->hasSessionValue('proxies')) {
+ $this->_setProxies($this->getSessionValue('proxies'));
+ phpCAS::trace(
+ 'proxies = "'
+ .implode('", "', $this->getSessionValue('proxies')).'"'
+ );
+ }
+
+ $auth = true;
+ } else {
+ phpCAS::trace('no user found');
+ }
+ }
+
+ phpCAS::traceEnd($auth);
+ return $auth;
+ }
+
+ /**
+ * This method is used to redirect the client to the CAS server.
+ * It is used by CAS_Client::forceAuthentication() and
+ * CAS_Client::checkAuthentication().
+ *
+ * @param bool $gateway true to check authentication, false to force it
+ * @param bool $renew true to force the authentication with the CAS server
+ *
+ * @return void
+ */
+ public function redirectToCas($gateway=false,$renew=false)
+ {
+ phpCAS::traceBegin();
+ $cas_url = $this->getServerLoginURL($gateway, $renew);
+ session_write_close();
+ if (php_sapi_name() === 'cli') {
+ @header('Location: '.$cas_url);
+ } else {
+ header('Location: '.$cas_url);
+ }
+ phpCAS::trace("Redirect to : ".$cas_url);
+ $lang = $this->getLangObj();
+ $this->printHTMLHeader($lang->getAuthenticationWanted());
+ $this->printf(''. $lang->getShouldHaveBeenRedirected(). '
', $cas_url);
+ $this->printHTMLFooter();
+ phpCAS::traceExit();
+ throw new CAS_GracefullTerminationException();
+ }
+
+
+ /**
+ * This method is used to logout from CAS.
+ *
+ * @param array $params an array that contains the optional url and service
+ * parameters that will be passed to the CAS server
+ *
+ * @return void
+ */
+ public function logout($params)
+ {
+ phpCAS::traceBegin();
+ $cas_url = $this->getServerLogoutURL();
+ $paramSeparator = '?';
+ if (isset($params['url'])) {
+ $cas_url = $cas_url . $paramSeparator . "url="
+ . urlencode($params['url']);
+ $paramSeparator = '&';
+ }
+ if (isset($params['service'])) {
+ $cas_url = $cas_url . $paramSeparator . "service="
+ . urlencode($params['service']);
+ }
+ header('Location: '.$cas_url);
+ phpCAS::trace("Prepare redirect to : ".$cas_url);
+
+ phpCAS::trace("Destroying session : ".session_id());
+ session_unset();
+ session_destroy();
+ if (session_status() === PHP_SESSION_NONE) {
+ phpCAS::trace("Session terminated");
+ } else {
+ phpCAS::error("Session was not terminated");
+ phpCAS::trace("Session was not terminated");
+ }
+ $lang = $this->getLangObj();
+ $this->printHTMLHeader($lang->getLogout());
+ $this->printf(''.$lang->getShouldHaveBeenRedirected(). '
', $cas_url);
+ $this->printHTMLFooter();
+ phpCAS::traceExit();
+ throw new CAS_GracefullTerminationException();
+ }
+
+ /**
+ * Check of the current request is a logout request
+ *
+ * @return bool is logout request.
+ */
+ private function _isLogoutRequest()
+ {
+ return !empty($_POST['logoutRequest']);
+ }
+
+ /**
+ * This method handles logout requests.
+ *
+ * @param bool $check_client true to check the client bofore handling
+ * the request, false not to perform any access control. True by default.
+ * @param array $allowed_clients an array of host names allowed to send
+ * logout requests.
+ *
+ * @return void
+ */
+ public function handleLogoutRequests($check_client=true, $allowed_clients=array())
+ {
+ phpCAS::traceBegin();
+ if (!$this->_isLogoutRequest()) {
+ phpCAS::trace("Not a logout request");
+ phpCAS::traceEnd();
+ return;
+ }
+ if (!$this->getChangeSessionID()
+ && is_null($this->_signoutCallbackFunction)
+ ) {
+ phpCAS::trace(
+ "phpCAS can't handle logout requests if it is not allowed to change session_id."
+ );
+ }
+ phpCAS::trace("Logout requested");
+ $decoded_logout_rq = urldecode($_POST['logoutRequest']);
+ phpCAS::trace("SAML REQUEST: ".$decoded_logout_rq);
+ $allowed = false;
+ if ($check_client) {
+ if ($allowed_clients === array()) {
+ $allowed_clients = array( $this->_getServerHostname() );
+ }
+ $client_ip = $_SERVER['REMOTE_ADDR'];
+ $client = gethostbyaddr($client_ip);
+ phpCAS::trace("Client: ".$client."/".$client_ip);
+ foreach ($allowed_clients as $allowed_client) {
+ if (($client == $allowed_client)
+ || ($client_ip == $allowed_client)
+ ) {
+ phpCAS::trace(
+ "Allowed client '".$allowed_client
+ ."' matches, logout request is allowed"
+ );
+ $allowed = true;
+ break;
+ } else {
+ phpCAS::trace(
+ "Allowed client '".$allowed_client."' does not match"
+ );
+ }
+ }
+ } else {
+ phpCAS::trace("No access control set");
+ $allowed = true;
+ }
+ // If Logout command is permitted proceed with the logout
+ if ($allowed) {
+ phpCAS::trace("Logout command allowed");
+ // Rebroadcast the logout request
+ if ($this->_rebroadcast && !isset($_POST['rebroadcast'])) {
+ $this->_rebroadcast(self::LOGOUT);
+ }
+ // Extract the ticket from the SAML Request
+ preg_match(
+ "|(.*) |",
+ $decoded_logout_rq, $tick, PREG_OFFSET_CAPTURE, 3
+ );
+ $wrappedSamlSessionIndex = preg_replace(
+ '||', '', $tick[0][0]
+ );
+ $ticket2logout = preg_replace(
+ '| |', '', $wrappedSamlSessionIndex
+ );
+ phpCAS::trace("Ticket to logout: ".$ticket2logout);
+
+ // call the post-authenticate callback if registered.
+ if ($this->_signoutCallbackFunction) {
+ $args = $this->_signoutCallbackArgs;
+ array_unshift($args, $ticket2logout);
+ call_user_func_array($this->_signoutCallbackFunction, $args);
+ }
+
+ // If phpCAS is managing the session_id, destroy session thanks to
+ // session_id.
+ if ($this->getChangeSessionID()) {
+ $session_id = $this->_sessionIdForTicket($ticket2logout);
+ phpCAS::trace("Session id: ".$session_id);
+
+ // destroy a possible application session created before phpcas
+ if (session_id() !== "") {
+ session_unset();
+ session_destroy();
+ }
+ // fix session ID
+ session_id($session_id);
+ $_COOKIE[session_name()]=$session_id;
+ $_GET[session_name()]=$session_id;
+
+ // Overwrite session
+ session_start();
+ session_unset();
+ session_destroy();
+ phpCAS::trace("Session ". $session_id . " destroyed");
+ }
+ } else {
+ phpCAS::error("Unauthorized logout request from client '".$client."'");
+ phpCAS::trace("Unauthorized logout request from client '".$client."'");
+ }
+ flush();
+ phpCAS::traceExit();
+ throw new CAS_GracefullTerminationException();
+
+ }
+
+ /** @} */
+
+ // XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+ // XX XX
+ // XX BASIC CLIENT FEATURES (CAS 1.0) XX
+ // XX XX
+ // XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+
+ // ########################################################################
+ // ST
+ // ########################################################################
+ /**
+ * @addtogroup internalBasic
+ * @{
+ */
+
+ /**
+ * The Ticket provided in the URL of the request if present
+ * (empty otherwise). Written by CAS_Client::CAS_Client(), read by
+ * CAS_Client::getTicket() and CAS_Client::_hasPGT().
+ *
+ * @hideinitializer
+ */
+ private $_ticket = '';
+
+ /**
+ * This method returns the Service Ticket provided in the URL of the request.
+ *
+ * @return string service ticket.
+ */
+ public function getTicket()
+ {
+ return $this->_ticket;
+ }
+
+ /**
+ * This method stores the Service Ticket.
+ *
+ * @param string $st The Service Ticket.
+ *
+ * @return void
+ */
+ public function setTicket($st)
+ {
+ $this->_ticket = $st;
+ }
+
+ /**
+ * This method tells if a Service Ticket was stored.
+ *
+ * @return bool if a Service Ticket has been stored.
+ */
+ public function hasTicket()
+ {
+ return !empty($this->_ticket);
+ }
+
+ /** @} */
+
+ // ########################################################################
+ // ST VALIDATION
+ // ########################################################################
+ /**
+ * @addtogroup internalBasic
+ * @{
+ */
+
+ /**
+ * @var string the certificate of the CAS server CA.
+ *
+ * @hideinitializer
+ */
+ private $_cas_server_ca_cert = null;
+
+
+ /**
+
+ * validate CN of the CAS server certificate
+
+ *
+
+ * @hideinitializer
+
+ */
+
+ private $_cas_server_cn_validate = true;
+
+ /**
+ * Set to true not to validate the CAS server.
+ *
+ * @hideinitializer
+ */
+ private $_no_cas_server_validation = false;
+
+
+ /**
+ * Set the CA certificate of the CAS server.
+ *
+ * @param string $cert the PEM certificate file name of the CA that emited
+ * the cert of the server
+ * @param bool $validate_cn valiate CN of the CAS server certificate
+ *
+ * @return void
+ */
+ public function setCasServerCACert($cert, $validate_cn)
+ {
+ // Argument validation
+ if (gettype($cert) != 'string') {
+ throw new CAS_TypeMismatchException($cert, '$cert', 'string');
+ }
+ if (gettype($validate_cn) != 'boolean') {
+ throw new CAS_TypeMismatchException($validate_cn, '$validate_cn', 'boolean');
+ }
+ if (!file_exists($cert)) {
+ throw new CAS_InvalidArgumentException("Certificate file does not exist " . $this->_requestImplementation);
+ }
+ $this->_cas_server_ca_cert = $cert;
+ $this->_cas_server_cn_validate = $validate_cn;
+ }
+
+ /**
+ * Set no SSL validation for the CAS server.
+ *
+ * @return void
+ */
+ public function setNoCasServerValidation()
+ {
+ $this->_no_cas_server_validation = true;
+ }
+
+ /**
+ * This method is used to validate a CAS 1,0 ticket; halt on failure, and
+ * sets $validate_url, $text_reponse and $tree_response on success.
+ *
+ * @param string &$validate_url reference to the the URL of the request to
+ * the CAS server.
+ * @param string &$text_response reference to the response of the CAS
+ * server, as is (XML text).
+ * @param string &$tree_response reference to the response of the CAS
+ * server, as a DOM XML tree.
+ * @param bool $renew true to force the authentication with the CAS server
+ *
+ * @return bool true when successfull and issue a CAS_AuthenticationException
+ * and false on an error
+ * @throws CAS_AuthenticationException
+ */
+ public function validateCAS10(&$validate_url,&$text_response,&$tree_response,$renew=false)
+ {
+ phpCAS::traceBegin();
+ // build the URL to validate the ticket
+ $validate_url = $this->getServerServiceValidateURL()
+ .'&ticket='.urlencode($this->getTicket());
+
+ if ( $renew ) {
+ // pass the renew
+ $validate_url .= '&renew=true';
+ }
+
+ $headers = '';
+ $err_msg = '';
+ // open and read the URL
+ if ( !$this->_readURL($validate_url, $headers, $text_response, $err_msg) ) {
+ phpCAS::trace(
+ 'could not open URL \''.$validate_url.'\' to validate ('.$err_msg.')'
+ );
+ throw new CAS_AuthenticationException(
+ $this, 'CAS 1.0 ticket not validated', $validate_url,
+ true/*$no_response*/
+ );
+ }
+
+ if (preg_match('/^no\n/', $text_response)) {
+ phpCAS::trace('Ticket has not been validated');
+ throw new CAS_AuthenticationException(
+ $this, 'ST not validated', $validate_url, false/*$no_response*/,
+ false/*$bad_response*/, $text_response
+ );
+ } else if (!preg_match('/^yes\n/', $text_response)) {
+ phpCAS::trace('ill-formed response');
+ throw new CAS_AuthenticationException(
+ $this, 'Ticket not validated', $validate_url,
+ false/*$no_response*/, true/*$bad_response*/, $text_response
+ );
+ }
+ // ticket has been validated, extract the user name
+ $arr = preg_split('/\n/', $text_response);
+ $this->_setUser(trim($arr[1]));
+
+ $this->_renameSession($this->getTicket());
+
+ // at this step, ticket has been validated and $this->_user has been set,
+ phpCAS::traceEnd(true);
+ return true;
+ }
+
+ /** @} */
+
+
+ // ########################################################################
+ // SAML VALIDATION
+ // ########################################################################
+ /**
+ * @addtogroup internalSAML
+ * @{
+ */
+
+ /**
+ * This method is used to validate a SAML TICKET; halt on failure, and sets
+ * $validate_url, $text_reponse and $tree_response on success. These
+ * parameters are used later by CAS_Client::_validatePGT() for CAS proxies.
+ *
+ * @param string &$validate_url reference to the the URL of the request to
+ * the CAS server.
+ * @param string &$text_response reference to the response of the CAS
+ * server, as is (XML text).
+ * @param string &$tree_response reference to the response of the CAS
+ * server, as a DOM XML tree.
+ * @param bool $renew true to force the authentication with the CAS server
+ *
+ * @return bool true when successfull and issue a CAS_AuthenticationException
+ * and false on an error
+ *
+ * @throws CAS_AuthenticationException
+ */
+ public function validateSA(&$validate_url,&$text_response,&$tree_response,$renew=false)
+ {
+ phpCAS::traceBegin();
+ $result = false;
+ // build the URL to validate the ticket
+ $validate_url = $this->getServerSamlValidateURL();
+
+ if ( $renew ) {
+ // pass the renew
+ $validate_url .= '&renew=true';
+ }
+
+ $headers = '';
+ $err_msg = '';
+ // open and read the URL
+ if ( !$this->_readURL($validate_url, $headers, $text_response, $err_msg) ) {
+ phpCAS::trace(
+ 'could not open URL \''.$validate_url.'\' to validate ('.$err_msg.')'
+ );
+ throw new CAS_AuthenticationException(
+ $this, 'SA not validated', $validate_url, true/*$no_response*/
+ );
+ }
+
+ phpCAS::trace('server version: '.$this->getServerVersion());
+
+ // analyze the result depending on the version
+ switch ($this->getServerVersion()) {
+ case SAML_VERSION_1_1:
+ // create new DOMDocument Object
+ $dom = new DOMDocument();
+ // Fix possible whitspace problems
+ $dom->preserveWhiteSpace = false;
+ // read the response of the CAS server into a DOM object
+ if (!($dom->loadXML($text_response))) {
+ phpCAS::trace('dom->loadXML() failed');
+ throw new CAS_AuthenticationException(
+ $this, 'SA not validated', $validate_url,
+ false/*$no_response*/, true/*$bad_response*/,
+ $text_response
+ );
+ }
+ // read the root node of the XML tree
+ if (!($tree_response = $dom->documentElement)) {
+ phpCAS::trace('documentElement() failed');
+ throw new CAS_AuthenticationException(
+ $this, 'SA not validated', $validate_url,
+ false/*$no_response*/, true/*$bad_response*/,
+ $text_response
+ );
+ } else if ( $tree_response->localName != 'Envelope' ) {
+ // insure that tag name is 'Envelope'
+ phpCAS::trace(
+ 'bad XML root node (should be `Envelope\' instead of `'
+ .$tree_response->localName.'\''
+ );
+ throw new CAS_AuthenticationException(
+ $this, 'SA not validated', $validate_url,
+ false/*$no_response*/, true/*$bad_response*/,
+ $text_response
+ );
+ } else if ($tree_response->getElementsByTagName("NameIdentifier")->length != 0) {
+ // check for the NameIdentifier tag in the SAML response
+ $success_elements = $tree_response->getElementsByTagName("NameIdentifier");
+ phpCAS::trace('NameIdentifier found');
+ $user = trim($success_elements->item(0)->nodeValue);
+ phpCAS::trace('user = `'.$user.'`');
+ $this->_setUser($user);
+ $this->_setSessionAttributes($text_response);
+ $result = true;
+ } else {
+ phpCAS::trace('no tag found in SAML payload');
+ throw new CAS_AuthenticationException(
+ $this, 'SA not validated', $validate_url,
+ false/*$no_response*/, true/*$bad_response*/,
+ $text_response
+ );
+ }
+ }
+ if ($result) {
+ $this->_renameSession($this->getTicket());
+ }
+ // at this step, ST has been validated and $this->_user has been set,
+ phpCAS::traceEnd($result);
+ return $result;
+ }
+
+ /**
+ * This method will parse the DOM and pull out the attributes from the SAML
+ * payload and put them into an array, then put the array into the session.
+ *
+ * @param string $text_response the SAML payload.
+ *
+ * @return bool true when successfull and false if no attributes a found
+ */
+ private function _setSessionAttributes($text_response)
+ {
+ phpCAS::traceBegin();
+
+ $result = false;
+
+ $attr_array = array();
+
+ // create new DOMDocument Object
+ $dom = new DOMDocument();
+ // Fix possible whitspace problems
+ $dom->preserveWhiteSpace = false;
+ if (($dom->loadXML($text_response))) {
+ $xPath = new DOMXPath($dom);
+ $xPath->registerNamespace('samlp', 'urn:oasis:names:tc:SAML:1.0:protocol');
+ $xPath->registerNamespace('saml', 'urn:oasis:names:tc:SAML:1.0:assertion');
+ $nodelist = $xPath->query("//saml:Attribute");
+
+ if ($nodelist) {
+ foreach ($nodelist as $node) {
+ $xres = $xPath->query("saml:AttributeValue", $node);
+ $name = $node->getAttribute("AttributeName");
+ $value_array = array();
+ foreach ($xres as $node2) {
+ $value_array[] = $node2->nodeValue;
+ }
+ $attr_array[$name] = $value_array;
+ }
+ // UGent addition...
+ foreach ($attr_array as $attr_key => $attr_value) {
+ if (count($attr_value) > 1) {
+ $this->_attributes[$attr_key] = $attr_value;
+ phpCAS::trace("* " . $attr_key . "=" . print_r($attr_value, true));
+ } else {
+ $this->_attributes[$attr_key] = $attr_value[0];
+ phpCAS::trace("* " . $attr_key . "=" . $attr_value[0]);
+ }
+ }
+ $result = true;
+ } else {
+ phpCAS::trace("SAML Attributes are empty");
+ $result = false;
+ }
+ }
+ phpCAS::traceEnd($result);
+ return $result;
+ }
+
+ /** @} */
+
+ // XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+ // XX XX
+ // XX PROXY FEATURES (CAS 2.0) XX
+ // XX XX
+ // XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+
+ // ########################################################################
+ // PROXYING
+ // ########################################################################
+ /**
+ * @addtogroup internalProxy
+ * @{
+ */
+
+ /**
+ * @var bool is the client a proxy
+ * A boolean telling if the client is a CAS proxy or not. Written by
+ * CAS_Client::CAS_Client(), read by CAS_Client::isProxy().
+ */
+ private $_proxy;
+
+ /**
+ * @var CAS_CookieJar Handler for managing service cookies.
+ */
+ private $_serviceCookieJar;
+
+ /**
+ * Tells if a CAS client is a CAS proxy or not
+ *
+ * @return bool true when the CAS client is a CAS proxy, false otherwise
+ */
+ public function isProxy()
+ {
+ return $this->_proxy;
+ }
+
+
+ /** @} */
+ // ########################################################################
+ // PGT
+ // ########################################################################
+ /**
+ * @addtogroup internalProxy
+ * @{
+ */
+
+ /**
+ * the Proxy Grnting Ticket given by the CAS server (empty otherwise).
+ * Written by CAS_Client::_setPGT(), read by CAS_Client::_getPGT() and
+ * CAS_Client::_hasPGT().
+ *
+ * @hideinitializer
+ */
+ private $_pgt = '';
+
+ /**
+ * This method returns the Proxy Granting Ticket given by the CAS server.
+ *
+ * @return string the Proxy Granting Ticket.
+ */
+ private function _getPGT()
+ {
+ return $this->_pgt;
+ }
+
+ /**
+ * This method stores the Proxy Granting Ticket.
+ *
+ * @param string $pgt The Proxy Granting Ticket.
+ *
+ * @return void
+ */
+ private function _setPGT($pgt)
+ {
+ $this->_pgt = $pgt;
+ }
+
+ /**
+ * This method tells if a Proxy Granting Ticket was stored.
+ *
+ * @return bool true if a Proxy Granting Ticket has been stored.
+ */
+ private function _hasPGT()
+ {
+ return !empty($this->_pgt);
+ }
+
+ /** @} */
+
+ // ########################################################################
+ // CALLBACK MODE
+ // ########################################################################
+ /**
+ * @addtogroup internalCallback
+ * @{
+ */
+ /**
+ * each PHP script using phpCAS in proxy mode is its own callback to get the
+ * PGT back from the CAS server. callback_mode is detected by the constructor
+ * thanks to the GET parameters.
+ */
+
+ /**
+ * @var bool a boolean to know if the CAS client is running in callback mode. Written by
+ * CAS_Client::setCallBackMode(), read by CAS_Client::_isCallbackMode().
+ *
+ * @hideinitializer
+ */
+ private $_callback_mode = false;
+
+ /**
+ * This method sets/unsets callback mode.
+ *
+ * @param bool $callback_mode true to set callback mode, false otherwise.
+ *
+ * @return void
+ */
+ private function _setCallbackMode($callback_mode)
+ {
+ $this->_callback_mode = $callback_mode;
+ }
+
+ /**
+ * This method returns true when the CAS client is running in callback mode,
+ * false otherwise.
+ *
+ * @return bool A boolean.
+ */
+ private function _isCallbackMode()
+ {
+ return $this->_callback_mode;
+ }
+
+ /**
+ * @var bool a boolean to know if the CAS client is using POST parameters when in callback mode.
+ * Written by CAS_Client::_setCallbackModeUsingPost(), read by CAS_Client::_isCallbackModeUsingPost().
+ *
+ * @hideinitializer
+ */
+ private $_callback_mode_using_post = false;
+
+ /**
+ * This method sets/unsets usage of POST parameters in callback mode (default/false is GET parameters)
+ *
+ * @param bool $callback_mode_using_post true to use POST, false to use GET (default).
+ *
+ * @return void
+ */
+ private function _setCallbackModeUsingPost($callback_mode_using_post)
+ {
+ $this->_callback_mode_using_post = $callback_mode_using_post;
+ }
+
+ /**
+ * This method returns true when the callback mode is using POST, false otherwise.
+ *
+ * @return bool A boolean.
+ */
+ private function _isCallbackModeUsingPost()
+ {
+ return $this->_callback_mode_using_post;
+ }
+
+ /**
+ * the URL that should be used for the PGT callback (in fact the URL of the
+ * current request without any CGI parameter). Written and read by
+ * CAS_Client::_getCallbackURL().
+ *
+ * @hideinitializer
+ */
+ private $_callback_url = '';
+
+ /**
+ * This method returns the URL that should be used for the PGT callback (in
+ * fact the URL of the current request without any CGI parameter, except if
+ * phpCAS::setFixedCallbackURL() was used).
+ *
+ * @return string The callback URL
+ */
+ private function _getCallbackURL()
+ {
+ // the URL is built when needed only
+ if ( empty($this->_callback_url) ) {
+ // remove the ticket if present in the URL
+ $final_uri = $this->getServiceBaseUrl()->get();
+ $request_uri = $_SERVER['REQUEST_URI'];
+ $request_uri = preg_replace('/\?.*$/', '', $request_uri);
+ $final_uri .= $request_uri;
+ $this->_callback_url = $final_uri;
+ }
+ return $this->_callback_url;
+ }
+
+ /**
+ * This method sets the callback url.
+ *
+ * @param string $url url to set callback
+ *
+ * @return string the callback url
+ */
+ public function setCallbackURL($url)
+ {
+ // Sequence validation
+ $this->ensureIsProxy();
+ // Argument Validation
+ if (gettype($url) != 'string')
+ throw new CAS_TypeMismatchException($url, '$url', 'string');
+
+ return $this->_callback_url = $url;
+ }
+
+ /**
+ * This method is called by CAS_Client::CAS_Client() when running in callback
+ * mode. It stores the PGT and its PGT Iou, prints its output and halts.
+ *
+ * @return void
+ */
+ private function _callback()
+ {
+ phpCAS::traceBegin();
+ if ($this->_isCallbackModeUsingPost()) {
+ $pgtId = $_POST['pgtId'];
+ $pgtIou = $_POST['pgtIou'];
+ } else {
+ $pgtId = $_GET['pgtId'];
+ $pgtIou = $_GET['pgtIou'];
+ }
+ if (preg_match('/^PGTIOU-[\.\-\w]+$/', $pgtIou)) {
+ if (preg_match('/^[PT]GT-[\.\-\w]+$/', $pgtId)) {
+ phpCAS::trace('Storing PGT `'.$pgtId.'\' (id=`'.$pgtIou.'\')');
+ $this->_storePGT($pgtId, $pgtIou);
+ if ($this->isXmlResponse()) {
+ echo '' . "\r\n";
+ echo 'Storing PGT `'.$pgtId.'\' (id=`'.$pgtIou.'\').
';
+ $this->printHTMLFooter();
+ phpCAS::traceExit("HTML response sent");
+ }
+ phpCAS::traceExit("Successfull Callback");
+ } else {
+ phpCAS::error('PGT format invalid' . $pgtId);
+ phpCAS::traceExit('PGT format invalid' . $pgtId);
+ }
+ } else {
+ phpCAS::error('PGTiou format invalid' . $pgtIou);
+ phpCAS::traceExit('PGTiou format invalid' . $pgtIou);
+ }
+
+ // Flush the buffer to prevent from sending anything other then a 200
+ // Success Status back to the CAS Server. The Exception would normally
+ // report as a 500 error.
+ flush();
+ throw new CAS_GracefullTerminationException();
+ }
+
+ /**
+ * Check if application/xml or text/xml is pressent in HTTP_ACCEPT header values
+ * when return value is complex and contains attached q parameters.
+ * Example: HTTP_ACCEPT = text/html,application/xhtml+xml,application/xml;q=0.9
+ * @return bool
+ */
+ private function isXmlResponse()
+ {
+ if (!array_key_exists('HTTP_ACCEPT', $_SERVER)) {
+ return false;
+ }
+ if (strpos($_SERVER['HTTP_ACCEPT'], 'application/xml') === false && strpos($_SERVER['HTTP_ACCEPT'], 'text/xml') === false) {
+ return false;
+ }
+
+ return true;
+ }
+
+ /** @} */
+
+ // ########################################################################
+ // PGT STORAGE
+ // ########################################################################
+ /**
+ * @addtogroup internalPGTStorage
+ * @{
+ */
+
+ /**
+ * @var CAS_PGTStorage_AbstractStorage
+ * an instance of a class inheriting of PGTStorage, used to deal with PGT
+ * storage. Created by CAS_Client::setPGTStorageFile(), used
+ * by CAS_Client::setPGTStorageFile() and CAS_Client::_initPGTStorage().
+ *
+ * @hideinitializer
+ */
+ private $_pgt_storage = null;
+
+ /**
+ * This method is used to initialize the storage of PGT's.
+ * Halts on error.
+ *
+ * @return void
+ */
+ private function _initPGTStorage()
+ {
+ // if no SetPGTStorageXxx() has been used, default to file
+ if ( !is_object($this->_pgt_storage) ) {
+ $this->setPGTStorageFile();
+ }
+
+ // initializes the storage
+ $this->_pgt_storage->init();
+ }
+
+ /**
+ * This method stores a PGT. Halts on error.
+ *
+ * @param string $pgt the PGT to store
+ * @param string $pgt_iou its corresponding Iou
+ *
+ * @return void
+ */
+ private function _storePGT($pgt,$pgt_iou)
+ {
+ // ensure that storage is initialized
+ $this->_initPGTStorage();
+ // writes the PGT
+ $this->_pgt_storage->write($pgt, $pgt_iou);
+ }
+
+ /**
+ * This method reads a PGT from its Iou and deletes the corresponding
+ * storage entry.
+ *
+ * @param string $pgt_iou the PGT Iou
+ *
+ * @return string mul The PGT corresponding to the Iou, false when not found.
+ */
+ private function _loadPGT($pgt_iou)
+ {
+ // ensure that storage is initialized
+ $this->_initPGTStorage();
+ // read the PGT
+ return $this->_pgt_storage->read($pgt_iou);
+ }
+
+ /**
+ * This method can be used to set a custom PGT storage object.
+ *
+ * @param CAS_PGTStorage_AbstractStorage $storage a PGT storage object that
+ * inherits from the CAS_PGTStorage_AbstractStorage class
+ *
+ * @return void
+ */
+ public function setPGTStorage($storage)
+ {
+ // Sequence validation
+ $this->ensureIsProxy();
+
+ // check that the storage has not already been set
+ if ( is_object($this->_pgt_storage) ) {
+ phpCAS::error('PGT storage already defined');
+ }
+
+ // check to make sure a valid storage object was specified
+ if ( !($storage instanceof CAS_PGTStorage_AbstractStorage) )
+ throw new CAS_TypeMismatchException($storage, '$storage', 'CAS_PGTStorage_AbstractStorage object');
+
+ // store the PGTStorage object
+ $this->_pgt_storage = $storage;
+ }
+
+ /**
+ * This method is used to tell phpCAS to store the response of the
+ * CAS server to PGT requests in a database.
+ *
+ * @param string|PDO $dsn_or_pdo a dsn string to use for creating a PDO
+ * object or a PDO object
+ * @param string $username the username to use when connecting to the
+ * database
+ * @param string $password the password to use when connecting to the
+ * database
+ * @param string $table the table to use for storing and retrieving
+ * PGTs
+ * @param string $driver_options any driver options to use when connecting
+ * to the database
+ *
+ * @return void
+ */
+ public function setPGTStorageDb(
+ $dsn_or_pdo, $username='', $password='', $table='', $driver_options=null
+ ) {
+ // Sequence validation
+ $this->ensureIsProxy();
+
+ // Argument validation
+ if (!(is_object($dsn_or_pdo) && $dsn_or_pdo instanceof PDO) && !is_string($dsn_or_pdo))
+ throw new CAS_TypeMismatchException($dsn_or_pdo, '$dsn_or_pdo', 'string or PDO object');
+ if (gettype($username) != 'string')
+ throw new CAS_TypeMismatchException($username, '$username', 'string');
+ if (gettype($password) != 'string')
+ throw new CAS_TypeMismatchException($password, '$password', 'string');
+ if (gettype($table) != 'string')
+ throw new CAS_TypeMismatchException($table, '$password', 'string');
+
+ // create the storage object
+ $this->setPGTStorage(
+ new CAS_PGTStorage_Db(
+ $this, $dsn_or_pdo, $username, $password, $table, $driver_options
+ )
+ );
+ }
+
+ /**
+ * This method is used to tell phpCAS to store the response of the
+ * CAS server to PGT requests onto the filesystem.
+ *
+ * @param string $path the path where the PGT's should be stored
+ *
+ * @return void
+ */
+ public function setPGTStorageFile($path='')
+ {
+ // Sequence validation
+ $this->ensureIsProxy();
+
+ // Argument validation
+ if (gettype($path) != 'string')
+ throw new CAS_TypeMismatchException($path, '$path', 'string');
+
+ // create the storage object
+ $this->setPGTStorage(new CAS_PGTStorage_File($this, $path));
+ }
+
+
+ // ########################################################################
+ // PGT VALIDATION
+ // ########################################################################
+ /**
+ * This method is used to validate a PGT; halt on failure.
+ *
+ * @param string &$validate_url the URL of the request to the CAS server.
+ * @param string $text_response the response of the CAS server, as is
+ * (XML text); result of
+ * CAS_Client::validateCAS10() or
+ * CAS_Client::validateCAS20().
+ * @param DOMElement $tree_response the response of the CAS server, as a DOM XML
+ * tree; result of CAS_Client::validateCAS10() or CAS_Client::validateCAS20().
+ *
+ * @return bool true when successfull and issue a CAS_AuthenticationException
+ * and false on an error
+ *
+ * @throws CAS_AuthenticationException
+ */
+ private function _validatePGT(&$validate_url,$text_response,$tree_response)
+ {
+ phpCAS::traceBegin();
+ if ( $tree_response->getElementsByTagName("proxyGrantingTicket")->length == 0) {
+ phpCAS::trace(' not found');
+ // authentication succeded, but no PGT Iou was transmitted
+ throw new CAS_AuthenticationException(
+ $this, 'Ticket validated but no PGT Iou transmitted',
+ $validate_url, false/*$no_response*/, false/*$bad_response*/,
+ $text_response
+ );
+ } else {
+ // PGT Iou transmitted, extract it
+ $pgt_iou = trim(
+ $tree_response->getElementsByTagName("proxyGrantingTicket")->item(0)->nodeValue
+ );
+ if (preg_match('/^PGTIOU-[\.\-\w]+$/', $pgt_iou)) {
+ $pgt = $this->_loadPGT($pgt_iou);
+ if ( $pgt == false ) {
+ phpCAS::trace('could not load PGT');
+ throw new CAS_AuthenticationException(
+ $this,
+ 'PGT Iou was transmitted but PGT could not be retrieved',
+ $validate_url, false/*$no_response*/,
+ false/*$bad_response*/, $text_response
+ );
+ }
+ $this->_setPGT($pgt);
+ } else {
+ phpCAS::trace('PGTiou format error');
+ throw new CAS_AuthenticationException(
+ $this, 'PGT Iou was transmitted but has wrong format',
+ $validate_url, false/*$no_response*/, false/*$bad_response*/,
+ $text_response
+ );
+ }
+ }
+ phpCAS::traceEnd(true);
+ return true;
+ }
+
+ // ########################################################################
+ // PGT VALIDATION
+ // ########################################################################
+
+ /**
+ * This method is used to retrieve PT's from the CAS server thanks to a PGT.
+ *
+ * @param string $target_service the service to ask for with the PT.
+ * @param int &$err_code an error code (PHPCAS_SERVICE_OK on success).
+ * @param string &$err_msg an error message (empty on success).
+ *
+ * @return string|false a Proxy Ticket, or false on error.
+ */
+ public function retrievePT($target_service,&$err_code,&$err_msg)
+ {
+ // Argument validation
+ if (gettype($target_service) != 'string')
+ throw new CAS_TypeMismatchException($target_service, '$target_service', 'string');
+
+ phpCAS::traceBegin();
+
+ // by default, $err_msg is set empty and $pt to true. On error, $pt is
+ // set to false and $err_msg to an error message. At the end, if $pt is false
+ // and $error_msg is still empty, it is set to 'invalid response' (the most
+ // commonly encountered error).
+ $err_msg = '';
+
+ // build the URL to retrieve the PT
+ $cas_url = $this->getServerProxyURL().'?targetService='
+ .urlencode($target_service).'&pgt='.$this->_getPGT();
+
+ $headers = '';
+ $cas_response = '';
+ // open and read the URL
+ if ( !$this->_readURL($cas_url, $headers, $cas_response, $err_msg) ) {
+ phpCAS::trace(
+ 'could not open URL \''.$cas_url.'\' to validate ('.$err_msg.')'
+ );
+ $err_code = PHPCAS_SERVICE_PT_NO_SERVER_RESPONSE;
+ $err_msg = 'could not retrieve PT (no response from the CAS server)';
+ phpCAS::traceEnd(false);
+ return false;
+ }
+
+ $bad_response = false;
+
+ // create new DOMDocument object
+ $dom = new DOMDocument();
+ // Fix possible whitspace problems
+ $dom->preserveWhiteSpace = false;
+ // read the response of the CAS server into a DOM object
+ if ( !($dom->loadXML($cas_response))) {
+ phpCAS::trace('dom->loadXML() failed');
+ // read failed
+ $bad_response = true;
+ }
+
+ if ( !$bad_response ) {
+ // read the root node of the XML tree
+ if ( !($root = $dom->documentElement) ) {
+ phpCAS::trace('documentElement failed');
+ // read failed
+ $bad_response = true;
+ }
+ }
+
+ if ( !$bad_response ) {
+ // insure that tag name is 'serviceResponse'
+ if ( $root->localName != 'serviceResponse' ) {
+ phpCAS::trace('localName failed');
+ // bad root node
+ $bad_response = true;
+ }
+ }
+
+ if ( !$bad_response ) {
+ // look for a proxySuccess tag
+ if ( $root->getElementsByTagName("proxySuccess")->length != 0) {
+ $proxy_success_list = $root->getElementsByTagName("proxySuccess");
+
+ // authentication succeded, look for a proxyTicket tag
+ if ( $proxy_success_list->item(0)->getElementsByTagName("proxyTicket")->length != 0) {
+ $err_code = PHPCAS_SERVICE_OK;
+ $err_msg = '';
+ $pt = trim(
+ $proxy_success_list->item(0)->getElementsByTagName("proxyTicket")->item(0)->nodeValue
+ );
+ phpCAS::trace('original PT: '.trim($pt));
+ phpCAS::traceEnd($pt);
+ return $pt;
+ } else {
+ phpCAS::trace(' was found, but not ');
+ }
+ } else if ($root->getElementsByTagName("proxyFailure")->length != 0) {
+ // look for a proxyFailure tag
+ $proxy_failure_list = $root->getElementsByTagName("proxyFailure");
+
+ // authentication failed, extract the error
+ $err_code = PHPCAS_SERVICE_PT_FAILURE;
+ $err_msg = 'PT retrieving failed (code=`'
+ .$proxy_failure_list->item(0)->getAttribute('code')
+ .'\', message=`'
+ .trim($proxy_failure_list->item(0)->nodeValue)
+ .'\')';
+ phpCAS::traceEnd(false);
+ return false;
+ } else {
+ phpCAS::trace('neither nor found');
+ }
+ }
+
+ // at this step, we are sure that the response of the CAS server was
+ // illformed
+ $err_code = PHPCAS_SERVICE_PT_BAD_SERVER_RESPONSE;
+ $err_msg = 'Invalid response from the CAS server (response=`'
+ .$cas_response.'\')';
+
+ phpCAS::traceEnd(false);
+ return false;
+ }
+
+ /** @} */
+
+ // ########################################################################
+ // READ CAS SERVER ANSWERS
+ // ########################################################################
+
+ /**
+ * @addtogroup internalMisc
+ * @{
+ */
+
+ /**
+ * This method is used to acces a remote URL.
+ *
+ * @param string $url the URL to access.
+ * @param string &$headers an array containing the HTTP header lines of the
+ * response (an empty array on failure).
+ * @param string &$body the body of the response, as a string (empty on
+ * failure).
+ * @param string &$err_msg an error message, filled on failure.
+ *
+ * @return bool true on success, false otherwise (in this later case, $err_msg
+ * contains an error message).
+ */
+ private function _readURL($url, &$headers, &$body, &$err_msg)
+ {
+ phpCAS::traceBegin();
+ $className = $this->_requestImplementation;
+ $request = new $className();
+
+ if (count($this->_curl_options)) {
+ $request->setCurlOptions($this->_curl_options);
+ }
+
+ $request->setUrl($url);
+
+ if (empty($this->_cas_server_ca_cert) && !$this->_no_cas_server_validation) {
+ phpCAS::error(
+ 'one of the methods phpCAS::setCasServerCACert() or phpCAS::setNoCasServerValidation() must be called.'
+ );
+ }
+ if ($this->_cas_server_ca_cert != '') {
+ $request->setSslCaCert(
+ $this->_cas_server_ca_cert, $this->_cas_server_cn_validate
+ );
+ }
+
+ // add extra stuff if SAML
+ if ($this->getServerVersion() == SAML_VERSION_1_1) {
+ $request->addHeader("soapaction: http://www.oasis-open.org/committees/security");
+ $request->addHeader("cache-control: no-cache");
+ $request->addHeader("pragma: no-cache");
+ $request->addHeader("accept: text/xml");
+ $request->addHeader("connection: keep-alive");
+ $request->addHeader("content-type: text/xml");
+ $request->makePost();
+ $request->setPostBody($this->_buildSAMLPayload());
+ }
+
+ if ($request->send()) {
+ $headers = $request->getResponseHeaders();
+ $body = $request->getResponseBody();
+ $err_msg = '';
+ phpCAS::traceEnd(true);
+ return true;
+ } else {
+ $headers = '';
+ $body = '';
+ $err_msg = $request->getErrorMessage();
+ phpCAS::traceEnd(false);
+ return false;
+ }
+ }
+
+ /**
+ * This method is used to build the SAML POST body sent to /samlValidate URL.
+ *
+ * @return string the SOAP-encased SAMLP artifact (the ticket).
+ */
+ private function _buildSAMLPayload()
+ {
+ phpCAS::traceBegin();
+
+ //get the ticket
+ $sa = urlencode($this->getTicket());
+
+ $body = SAML_SOAP_ENV.SAML_SOAP_BODY.SAMLP_REQUEST
+ .SAML_ASSERTION_ARTIFACT.$sa.SAML_ASSERTION_ARTIFACT_CLOSE
+ .SAMLP_REQUEST_CLOSE.SAML_SOAP_BODY_CLOSE.SAML_SOAP_ENV_CLOSE;
+
+ phpCAS::traceEnd($body);
+ return ($body);
+ }
+
+ /** @} **/
+
+ // ########################################################################
+ // ACCESS TO EXTERNAL SERVICES
+ // ########################################################################
+
+ /**
+ * @addtogroup internalProxyServices
+ * @{
+ */
+
+
+ /**
+ * Answer a proxy-authenticated service handler.
+ *
+ * @param string $type The service type. One of:
+ * PHPCAS_PROXIED_SERVICE_HTTP_GET, PHPCAS_PROXIED_SERVICE_HTTP_POST,
+ * PHPCAS_PROXIED_SERVICE_IMAP
+ *
+ * @return CAS_ProxiedService
+ * @throws InvalidArgumentException If the service type is unknown.
+ */
+ public function getProxiedService ($type)
+ {
+ // Sequence validation
+ $this->ensureIsProxy();
+ $this->ensureAuthenticationCallSuccessful();
+
+ // Argument validation
+ if (gettype($type) != 'string')
+ throw new CAS_TypeMismatchException($type, '$type', 'string');
+
+ switch ($type) {
+ case PHPCAS_PROXIED_SERVICE_HTTP_GET:
+ case PHPCAS_PROXIED_SERVICE_HTTP_POST:
+ $requestClass = $this->_requestImplementation;
+ $request = new $requestClass();
+ if (count($this->_curl_options)) {
+ $request->setCurlOptions($this->_curl_options);
+ }
+ $proxiedService = new $type($request, $this->_serviceCookieJar);
+ if ($proxiedService instanceof CAS_ProxiedService_Testable) {
+ $proxiedService->setCasClient($this);
+ }
+ return $proxiedService;
+ case PHPCAS_PROXIED_SERVICE_IMAP;
+ $proxiedService = new CAS_ProxiedService_Imap($this->_getUser());
+ if ($proxiedService instanceof CAS_ProxiedService_Testable) {
+ $proxiedService->setCasClient($this);
+ }
+ return $proxiedService;
+ default:
+ throw new CAS_InvalidArgumentException(
+ "Unknown proxied-service type, $type."
+ );
+ }
+ }
+
+ /**
+ * Initialize a proxied-service handler with the proxy-ticket it should use.
+ *
+ * @param CAS_ProxiedService $proxiedService service handler
+ *
+ * @return void
+ *
+ * @throws CAS_ProxyTicketException If there is a proxy-ticket failure.
+ * The code of the Exception will be one of:
+ * PHPCAS_SERVICE_PT_NO_SERVER_RESPONSE
+ * PHPCAS_SERVICE_PT_BAD_SERVER_RESPONSE
+ * PHPCAS_SERVICE_PT_FAILURE
+ * @throws CAS_ProxiedService_Exception If there is a failure getting the
+ * url from the proxied service.
+ */
+ public function initializeProxiedService (CAS_ProxiedService $proxiedService)
+ {
+ // Sequence validation
+ $this->ensureIsProxy();
+ $this->ensureAuthenticationCallSuccessful();
+
+ $url = $proxiedService->getServiceUrl();
+ if (!is_string($url)) {
+ throw new CAS_ProxiedService_Exception(
+ "Proxied Service ".get_class($proxiedService)
+ ."->getServiceUrl() should have returned a string, returned a "
+ .gettype($url)." instead."
+ );
+ }
+ $pt = $this->retrievePT($url, $err_code, $err_msg);
+ if (!$pt) {
+ throw new CAS_ProxyTicketException($err_msg, $err_code);
+ }
+ $proxiedService->setProxyTicket($pt);
+ }
+
+ /**
+ * This method is used to access an HTTP[S] service.
+ *
+ * @param string $url the service to access.
+ * @param int &$err_code an error code Possible values are
+ * PHPCAS_SERVICE_OK (on success), PHPCAS_SERVICE_PT_NO_SERVER_RESPONSE,
+ * PHPCAS_SERVICE_PT_BAD_SERVER_RESPONSE, PHPCAS_SERVICE_PT_FAILURE,
+ * PHPCAS_SERVICE_NOT_AVAILABLE.
+ * @param string &$output the output of the service (also used to give an error
+ * message on failure).
+ *
+ * @return bool true on success, false otherwise (in this later case, $err_code
+ * gives the reason why it failed and $output contains an error message).
+ */
+ public function serviceWeb($url,&$err_code,&$output)
+ {
+ // Sequence validation
+ $this->ensureIsProxy();
+ $this->ensureAuthenticationCallSuccessful();
+
+ // Argument validation
+ if (gettype($url) != 'string')
+ throw new CAS_TypeMismatchException($url, '$url', 'string');
+
+ try {
+ $service = $this->getProxiedService(PHPCAS_PROXIED_SERVICE_HTTP_GET);
+ $service->setUrl($url);
+ $service->send();
+ $output = $service->getResponseBody();
+ $err_code = PHPCAS_SERVICE_OK;
+ return true;
+ } catch (CAS_ProxyTicketException $e) {
+ $err_code = $e->getCode();
+ $output = $e->getMessage();
+ return false;
+ } catch (CAS_ProxiedService_Exception $e) {
+ $lang = $this->getLangObj();
+ $output = sprintf(
+ $lang->getServiceUnavailable(), $url, $e->getMessage()
+ );
+ $err_code = PHPCAS_SERVICE_NOT_AVAILABLE;
+ return false;
+ }
+ }
+
+ /**
+ * This method is used to access an IMAP/POP3/NNTP service.
+ *
+ * @param string $url a string giving the URL of the service, including
+ * the mailing box for IMAP URLs, as accepted by imap_open().
+ * @param string $serviceUrl a string giving for CAS retrieve Proxy ticket
+ * @param string $flags options given to imap_open().
+ * @param int &$err_code an error code Possible values are
+ * PHPCAS_SERVICE_OK (on success), PHPCAS_SERVICE_PT_NO_SERVER_RESPONSE,
+ * PHPCAS_SERVICE_PT_BAD_SERVER_RESPONSE, PHPCAS_SERVICE_PT_FAILURE,
+ * PHPCAS_SERVICE_NOT_AVAILABLE.
+ * @param string &$err_msg an error message on failure
+ * @param string &$pt the Proxy Ticket (PT) retrieved from the CAS
+ * server to access the URL on success, false on error).
+ *
+ * @return object|false an IMAP stream on success, false otherwise (in this later
+ * case, $err_code gives the reason why it failed and $err_msg contains an
+ * error message).
+ */
+ public function serviceMail($url,$serviceUrl,$flags,&$err_code,&$err_msg,&$pt)
+ {
+ // Sequence validation
+ $this->ensureIsProxy();
+ $this->ensureAuthenticationCallSuccessful();
+
+ // Argument validation
+ if (gettype($url) != 'string')
+ throw new CAS_TypeMismatchException($url, '$url', 'string');
+ if (gettype($serviceUrl) != 'string')
+ throw new CAS_TypeMismatchException($serviceUrl, '$serviceUrl', 'string');
+ if (gettype($flags) != 'integer')
+ throw new CAS_TypeMismatchException($flags, '$flags', 'string');
+
+ try {
+ $service = $this->getProxiedService(PHPCAS_PROXIED_SERVICE_IMAP);
+ $service->setServiceUrl($serviceUrl);
+ $service->setMailbox($url);
+ $service->setOptions($flags);
+
+ $stream = $service->open();
+ $err_code = PHPCAS_SERVICE_OK;
+ $pt = $service->getImapProxyTicket();
+ return $stream;
+ } catch (CAS_ProxyTicketException $e) {
+ $err_msg = $e->getMessage();
+ $err_code = $e->getCode();
+ $pt = false;
+ return false;
+ } catch (CAS_ProxiedService_Exception $e) {
+ $lang = $this->getLangObj();
+ $err_msg = sprintf(
+ $lang->getServiceUnavailable(),
+ $url,
+ $e->getMessage()
+ );
+ $err_code = PHPCAS_SERVICE_NOT_AVAILABLE;
+ $pt = false;
+ return false;
+ }
+ }
+
+ /** @} **/
+
+ // XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+ // XX XX
+ // XX PROXIED CLIENT FEATURES (CAS 2.0) XX
+ // XX XX
+ // XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+
+ // ########################################################################
+ // PT
+ // ########################################################################
+ /**
+ * @addtogroup internalService
+ * @{
+ */
+
+ /**
+ * This array will store a list of proxies in front of this application. This
+ * property will only be populated if this script is being proxied rather than
+ * accessed directly.
+ *
+ * It is set in CAS_Client::validateCAS20() and can be read by
+ * CAS_Client::getProxies()
+ *
+ * @access private
+ */
+ private $_proxies = array();
+
+ /**
+ * Answer an array of proxies that are sitting in front of this application.
+ *
+ * This method will only return a non-empty array if we have received and
+ * validated a Proxy Ticket.
+ *
+ * @return array
+ * @access public
+ */
+ public function getProxies()
+ {
+ return $this->_proxies;
+ }
+
+ /**
+ * Set the Proxy array, probably from persistant storage.
+ *
+ * @param array $proxies An array of proxies
+ *
+ * @return void
+ * @access private
+ */
+ private function _setProxies($proxies)
+ {
+ $this->_proxies = $proxies;
+ if (!empty($proxies)) {
+ // For proxy-authenticated requests people are not viewing the URL
+ // directly since the client is another application making a
+ // web-service call.
+ // Because of this, stripping the ticket from the URL is unnecessary
+ // and causes another web-service request to be performed. Additionally,
+ // if session handling on either the client or the server malfunctions
+ // then the subsequent request will not complete successfully.
+ $this->setNoClearTicketsFromUrl();
+ }
+ }
+
+ /**
+ * A container of patterns to be allowed as proxies in front of the cas client.
+ *
+ * @var CAS_ProxyChain_AllowedList
+ */
+ private $_allowed_proxy_chains;
+
+ /**
+ * Answer the CAS_ProxyChain_AllowedList object for this client.
+ *
+ * @return CAS_ProxyChain_AllowedList
+ */
+ public function getAllowedProxyChains ()
+ {
+ if (empty($this->_allowed_proxy_chains)) {
+ $this->_allowed_proxy_chains = new CAS_ProxyChain_AllowedList();
+ }
+ return $this->_allowed_proxy_chains;
+ }
+
+ /** @} */
+ // ########################################################################
+ // PT VALIDATION
+ // ########################################################################
+ /**
+ * @addtogroup internalProxied
+ * @{
+ */
+
+ /**
+ * This method is used to validate a cas 2.0 ST or PT; halt on failure
+ * Used for all CAS 2.0 validations
+ *
+ * @param string &$validate_url the url of the reponse
+ * @param string &$text_response the text of the repsones
+ * @param DOMElement &$tree_response the domxml tree of the respones
+ * @param bool $renew true to force the authentication with the CAS server
+ *
+ * @return bool true when successfull and issue a CAS_AuthenticationException
+ * and false on an error
+ *
+ * @throws CAS_AuthenticationException
+ */
+ public function validateCAS20(&$validate_url,&$text_response,&$tree_response, $renew=false)
+ {
+ phpCAS::traceBegin();
+ phpCAS::trace($text_response);
+ // build the URL to validate the ticket
+ if ($this->getAllowedProxyChains()->isProxyingAllowed()) {
+ $validate_url = $this->getServerProxyValidateURL().'&ticket='
+ .urlencode($this->getTicket());
+ } else {
+ $validate_url = $this->getServerServiceValidateURL().'&ticket='
+ .urlencode($this->getTicket());
+ }
+
+ if ( $this->isProxy() ) {
+ // pass the callback url for CAS proxies
+ $validate_url .= '&pgtUrl='.urlencode($this->_getCallbackURL());
+ }
+
+ if ( $renew ) {
+ // pass the renew
+ $validate_url .= '&renew=true';
+ }
+
+ // open and read the URL
+ if ( !$this->_readURL($validate_url, $headers, $text_response, $err_msg) ) {
+ phpCAS::trace(
+ 'could not open URL \''.$validate_url.'\' to validate ('.$err_msg.')'
+ );
+ throw new CAS_AuthenticationException(
+ $this, 'Ticket not validated', $validate_url,
+ true/*$no_response*/
+ );
+ }
+
+ // create new DOMDocument object
+ $dom = new DOMDocument();
+ // Fix possible whitspace problems
+ $dom->preserveWhiteSpace = false;
+ // CAS servers should only return data in utf-8
+ $dom->encoding = "utf-8";
+ // read the response of the CAS server into a DOMDocument object
+ if ( !($dom->loadXML($text_response))) {
+ // read failed
+ throw new CAS_AuthenticationException(
+ $this, 'Ticket not validated', $validate_url,
+ false/*$no_response*/, true/*$bad_response*/, $text_response
+ );
+ } else if ( !($tree_response = $dom->documentElement) ) {
+ // read the root node of the XML tree
+ // read failed
+ throw new CAS_AuthenticationException(
+ $this, 'Ticket not validated', $validate_url,
+ false/*$no_response*/, true/*$bad_response*/, $text_response
+ );
+ } else if ($tree_response->localName != 'serviceResponse') {
+ // insure that tag name is 'serviceResponse'
+ // bad root node
+ throw new CAS_AuthenticationException(
+ $this, 'Ticket not validated', $validate_url,
+ false/*$no_response*/, true/*$bad_response*/, $text_response
+ );
+ } else if ( $tree_response->getElementsByTagName("authenticationFailure")->length != 0) {
+ // authentication failed, extract the error code and message and throw exception
+ $auth_fail_list = $tree_response
+ ->getElementsByTagName("authenticationFailure");
+ throw new CAS_AuthenticationException(
+ $this, 'Ticket not validated', $validate_url,
+ false/*$no_response*/, false/*$bad_response*/,
+ $text_response,
+ $auth_fail_list->item(0)->getAttribute('code')/*$err_code*/,
+ trim($auth_fail_list->item(0)->nodeValue)/*$err_msg*/
+ );
+ } else if ($tree_response->getElementsByTagName("authenticationSuccess")->length != 0) {
+ // authentication succeded, extract the user name
+ $success_elements = $tree_response
+ ->getElementsByTagName("authenticationSuccess");
+ if ( $success_elements->item(0)->getElementsByTagName("user")->length == 0) {
+ // no user specified => error
+ throw new CAS_AuthenticationException(
+ $this, 'Ticket not validated', $validate_url,
+ false/*$no_response*/, true/*$bad_response*/, $text_response
+ );
+ } else {
+ $this->_setUser(
+ trim(
+ $success_elements->item(0)->getElementsByTagName("user")->item(0)->nodeValue
+ )
+ );
+ $this->_readExtraAttributesCas20($success_elements);
+ // Store the proxies we are sitting behind for authorization checking
+ $proxyList = array();
+ if ( sizeof($arr = $success_elements->item(0)->getElementsByTagName("proxy")) > 0) {
+ foreach ($arr as $proxyElem) {
+ phpCAS::trace("Found Proxy: ".$proxyElem->nodeValue);
+ $proxyList[] = trim($proxyElem->nodeValue);
+ }
+ $this->_setProxies($proxyList);
+ phpCAS::trace("Storing Proxy List");
+ }
+ // Check if the proxies in front of us are allowed
+ if (!$this->getAllowedProxyChains()->isProxyListAllowed($proxyList)) {
+ throw new CAS_AuthenticationException(
+ $this, 'Proxy not allowed', $validate_url,
+ false/*$no_response*/, true/*$bad_response*/,
+ $text_response
+ );
+ } else {
+ $result = true;
+ }
+ }
+ } else {
+ throw new CAS_AuthenticationException(
+ $this, 'Ticket not validated', $validate_url,
+ false/*$no_response*/, true/*$bad_response*/,
+ $text_response
+ );
+ }
+
+ $this->_renameSession($this->getTicket());
+
+ // at this step, Ticket has been validated and $this->_user has been set,
+
+ phpCAS::traceEnd($result);
+ return $result;
+ }
+
+ /**
+ * This method recursively parses the attribute XML.
+ * It also collapses name-value pairs into a single
+ * array entry. It parses all common formats of
+ * attributes and well formed XML files.
+ *
+ * @param string $root the DOM root element to be parsed
+ * @param string $namespace namespace of the elements
+ *
+ * @return an array of the parsed XML elements
+ *
+ * Formats tested:
+ *
+ * "Jasig Style" Attributes:
+ *
+ *
+ *
+ * jsmith
+ *
+ * RubyCAS
+ * Smith
+ * John
+ * CN=Staff,OU=Groups,DC=example,DC=edu
+ * CN=Spanish Department,OU=Departments,OU=Groups,DC=example,DC=edu
+ *
+ * PGTIOU-84678-8a9d2sfa23casd
+ *
+ *
+ *
+ * "Jasig Style" Attributes (longer version):
+ *
+ *
+ *
+ * jsmith
+ *
+ *
+ * surname
+ * Smith
+ *
+ *
+ * givenName
+ * John
+ *
+ *
+ * memberOf
+ * ['CN=Staff,OU=Groups,DC=example,DC=edu', 'CN=Spanish Department,OU=Departments,OU=Groups,DC=example,DC=edu']
+ *
+ *
+ * PGTIOU-84678-8a9d2sfa23casd
+ *
+ *
+ *
+ * "RubyCAS Style" attributes
+ *
+ *
+ *
+ * jsmith
+ *
+ * RubyCAS
+ * Smith
+ * John
+ * CN=Staff,OU=Groups,DC=example,DC=edu
+ * CN=Spanish Department,OU=Departments,OU=Groups,DC=example,DC=edu
+ *
+ * PGTIOU-84678-8a9d2sfa23casd
+ *
+ *
+ *
+ * "Name-Value" attributes.
+ *
+ * Attribute format from these mailing list thread:
+ * http://jasig.275507.n4.nabble.com/CAS-attributes-and-how-they-appear-in-the-CAS-response-td264272.html
+ * Note: This is a less widely used format, but in use by at least two institutions.
+ *
+ *
+ *
+ * jsmith
+ *
+ * PGTIOU-84678-8a9d2sfa23casd
+ *
+ *
+ *
+ * result:
+ *
+ * Array (
+ * [surname] => Smith
+ * [givenName] => John
+ * [memberOf] => Array (
+ * [0] => CN=Staff, OU=Groups, DC=example, DC=edu
+ * [1] => CN=Spanish Department, OU=Departments, OU=Groups, DC=example, DC=edu
+ * )
+ * )
+ */
+ private function _xml_to_array($root, $namespace = "cas")
+ {
+ $result = array();
+ if ($root->hasAttributes()) {
+ $attrs = $root->attributes;
+ $pair = array();
+ foreach ($attrs as $attr) {
+ if ($attr->name === "name") {
+ $pair['name'] = $attr->value;
+ } elseif ($attr->name === "value") {
+ $pair['value'] = $attr->value;
+ } else {
+ $result[$attr->name] = $attr->value;
+ }
+ if (array_key_exists('name', $pair) && array_key_exists('value', $pair)) {
+ $result[$pair['name']] = $pair['value'];
+ }
+ }
+ }
+ if ($root->hasChildNodes()) {
+ $children = $root->childNodes;
+ if ($children->length == 1) {
+ $child = $children->item(0);
+ if ($child->nodeType == XML_TEXT_NODE) {
+ $result['_value'] = $child->nodeValue;
+ return (count($result) == 1) ? $result['_value'] : $result;
+ }
+ }
+ $groups = array();
+ foreach ($children as $child) {
+ $child_nodeName = str_ireplace($namespace . ":", "", $child->nodeName);
+ if (in_array($child_nodeName, array("user", "proxies", "proxyGrantingTicket"))) {
+ continue;
+ }
+ if (!isset($result[$child_nodeName])) {
+ $res = $this->_xml_to_array($child, $namespace);
+ if (!empty($res)) {
+ $result[$child_nodeName] = $this->_xml_to_array($child, $namespace);
+ }
+ } else {
+ if (!isset($groups[$child_nodeName])) {
+ $result[$child_nodeName] = array($result[$child_nodeName]);
+ $groups[$child_nodeName] = 1;
+ }
+ $result[$child_nodeName][] = $this->_xml_to_array($child, $namespace);
+ }
+ }
+ }
+ return $result;
+ }
+
+ /**
+ * This method parses a "JSON-like array" of strings
+ * into an array of strings
+ *
+ * @param string $json_value the json-like string:
+ * e.g.:
+ * ['CN=Staff,OU=Groups,DC=example,DC=edu', 'CN=Spanish Department,OU=Departments,OU=Groups,DC=example,DC=edu']
+ *
+ * @return array of strings Description
+ * e.g.:
+ * Array (
+ * [0] => CN=Staff,OU=Groups,DC=example,DC=edu
+ * [1] => CN=Spanish Department,OU=Departments,OU=Groups,DC=example,DC=edu
+ * )
+ */
+ private function _parse_json_like_array_value($json_value)
+ {
+ $parts = explode(",", trim($json_value, "[]"));
+ $out = array();
+ $quote = '';
+ foreach ($parts as $part) {
+ $part = trim($part);
+ if ($quote === '') {
+ $value = "";
+ if ($this->_startsWith($part, '\'')) {
+ $quote = '\'';
+ } elseif ($this->_startsWith($part, '"')) {
+ $quote = '"';
+ } else {
+ $out[] = $part;
+ }
+ $part = ltrim($part, $quote);
+ }
+ if ($quote !== '') {
+ $value .= $part;
+ if ($this->_endsWith($part, $quote)) {
+ $out[] = rtrim($value, $quote);
+ $quote = '';
+ } else {
+ $value .= ", ";
+ };
+ }
+ }
+ return $out;
+ }
+
+ /**
+ * This method recursively removes unneccessary hirarchy levels in array-trees.
+ * into an array of strings
+ *
+ * @param array $arr the array to flatten
+ * e.g.:
+ * Array (
+ * [attributes] => Array (
+ * [attribute] => Array (
+ * [0] => Array (
+ * [name] => surname
+ * [value] => Smith
+ * )
+ * [1] => Array (
+ * [name] => givenName
+ * [value] => John
+ * )
+ * [2] => Array (
+ * [name] => memberOf
+ * [value] => ['CN=Staff,OU=Groups,DC=example,DC=edu', 'CN=Spanish Department,OU=Departments,OU=Groups,DC=example,DC=edu']
+ * )
+ * )
+ * )
+ * )
+ *
+ * @return array the flattened array
+ * e.g.:
+ * Array (
+ * [attribute] => Array (
+ * [surname] => Smith
+ * [givenName] => John
+ * [memberOf] => Array (
+ * [0] => CN=Staff, OU=Groups, DC=example, DC=edu
+ * [1] => CN=Spanish Department, OU=Departments, OU=Groups, DC=example, DC=edu
+ * )
+ * )
+ * )
+ */
+ private function _flatten_array($arr)
+ {
+ if (!is_array($arr)) {
+ if ($this->_startsWith($arr, '[') && $this->_endsWith($arr, ']')) {
+ return $this->_parse_json_like_array_value($arr);
+ } else {
+ return $arr;
+ }
+ }
+ $out = array();
+ foreach ($arr as $key => $val) {
+ if (!is_array($val)) {
+ $out[$key] = $val;
+ } else {
+ switch (count($val)) {
+ case 1 : {
+ $key = key($val);
+ if (array_key_exists($key, $out)) {
+ $value = $out[$key];
+ if (!is_array($value)) {
+ $out[$key] = array();
+ $out[$key][] = $value;
+ }
+ $out[$key][] = $this->_flatten_array($val[$key]);
+ } else {
+ $out[$key] = $this->_flatten_array($val[$key]);
+ };
+ break;
+ };
+ case 2 : {
+ if (array_key_exists("name", $val) && array_key_exists("value", $val)) {
+ $key = $val['name'];
+ if (array_key_exists($key, $out)) {
+ $value = $out[$key];
+ if (!is_array($value)) {
+ $out[$key] = array();
+ $out[$key][] = $value;
+ }
+ $out[$key][] = $this->_flatten_array($val['value']);
+ } else {
+ $out[$key] = $this->_flatten_array($val['value']);
+ };
+ } else {
+ $out[$key] = $this->_flatten_array($val);
+ }
+ break;
+ };
+ default: {
+ $out[$key] = $this->_flatten_array($val);
+ }
+ }
+ }
+ }
+ return $out;
+ }
+
+ /**
+ * This method will parse the DOM and pull out the attributes from the XML
+ * payload and put them into an array, then put the array into the session.
+ *
+ * @param DOMNodeList $success_elements payload of the response
+ *
+ * @return bool true when successfull, halt otherwise by calling
+ * CAS_Client::_authError().
+ */
+ private function _readExtraAttributesCas20($success_elements)
+ {
+ phpCAS::traceBegin();
+
+ $extra_attributes = array();
+ if ($this->_casAttributeParserCallbackFunction !== null
+ && is_callable($this->_casAttributeParserCallbackFunction)
+ ) {
+ array_unshift($this->_casAttributeParserCallbackArgs, $success_elements->item(0));
+ phpCAS :: trace("Calling attritubeParser callback");
+ $extra_attributes = call_user_func_array(
+ $this->_casAttributeParserCallbackFunction,
+ $this->_casAttributeParserCallbackArgs
+ );
+ } else {
+ phpCAS :: trace("Parse extra attributes: ");
+ $attributes = $this->_xml_to_array($success_elements->item(0));
+ phpCAS :: trace(print_r($attributes,true). "\nFLATTEN Array: ");
+ $extra_attributes = $this->_flatten_array($attributes);
+ phpCAS :: trace(print_r($extra_attributes, true)."\nFILTER : ");
+ if (array_key_exists("attribute", $extra_attributes)) {
+ $extra_attributes = $extra_attributes["attribute"];
+ } elseif (array_key_exists("attributes", $extra_attributes)) {
+ $extra_attributes = $extra_attributes["attributes"];
+ };
+ phpCAS :: trace(print_r($extra_attributes, true)."return");
+ }
+ $this->setAttributes($extra_attributes);
+ phpCAS::traceEnd();
+ return true;
+ }
+
+ /**
+ * Add an attribute value to an array of attributes.
+ *
+ * @param array &$attributeArray reference to array
+ * @param string $name name of attribute
+ * @param string $value value of attribute
+ *
+ * @return void
+ */
+ private function _addAttributeToArray(array &$attributeArray, $name, $value)
+ {
+ // If multiple attributes exist, add as an array value
+ if (isset($attributeArray[$name])) {
+ // Initialize the array with the existing value
+ if (!is_array($attributeArray[$name])) {
+ $existingValue = $attributeArray[$name];
+ $attributeArray[$name] = array($existingValue);
+ }
+
+ $attributeArray[$name][] = trim($value);
+ } else {
+ $attributeArray[$name] = trim($value);
+ }
+ }
+
+ /** @} */
+
+ // XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+ // XX XX
+ // XX MISC XX
+ // XX XX
+ // XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+
+ /**
+ * @addtogroup internalMisc
+ * @{
+ */
+
+ // ########################################################################
+ // URL
+ // ########################################################################
+ /**
+ * the URL of the current request (without any ticket CGI parameter). Written
+ * and read by CAS_Client::getURL().
+ *
+ * @hideinitializer
+ */
+ private $_url = '';
+
+
+ /**
+ * This method sets the URL of the current request
+ *
+ * @param string $url url to set for service
+ *
+ * @return void
+ */
+ public function setURL($url)
+ {
+ // Argument Validation
+ if (gettype($url) != 'string')
+ throw new CAS_TypeMismatchException($url, '$url', 'string');
+
+ $this->_url = $url;
+ }
+
+ /**
+ * This method returns the URL of the current request (without any ticket
+ * CGI parameter).
+ *
+ * @return string The URL
+ */
+ public function getURL()
+ {
+ phpCAS::traceBegin();
+ // the URL is built when needed only
+ if ( empty($this->_url) ) {
+ // remove the ticket if present in the URL
+ $final_uri = $this->getServiceBaseUrl()->get();
+ $request_uri = explode('?', $_SERVER['REQUEST_URI'], 2);
+ $final_uri .= $request_uri[0];
+
+ if (isset($request_uri[1]) && $request_uri[1]) {
+ $query_string= $this->_removeParameterFromQueryString('ticket', $request_uri[1]);
+
+ // If the query string still has anything left,
+ // append it to the final URI
+ if ($query_string !== '') {
+ $final_uri .= "?$query_string";
+ }
+ }
+
+ phpCAS::trace("Final URI: $final_uri");
+ $this->setURL($final_uri);
+ }
+ phpCAS::traceEnd($this->_url);
+ return $this->_url;
+ }
+
+ /**
+ * This method sets the base URL of the CAS server.
+ *
+ * @param string $url the base URL
+ *
+ * @return string base url
+ */
+ public function setBaseURL($url)
+ {
+ // Argument Validation
+ if (gettype($url) != 'string')
+ throw new CAS_TypeMismatchException($url, '$url', 'string');
+
+ return $this->_server['base_url'] = $url;
+ }
+
+ /**
+ * The ServiceBaseUrl object that provides base URL during service URL
+ * discovery process.
+ *
+ * @var CAS_ServiceBaseUrl_Interface
+ *
+ * @hideinitializer
+ */
+ private $_serviceBaseUrl = null;
+
+ /**
+ * Answer the CAS_ServiceBaseUrl_Interface object for this client.
+ *
+ * @return CAS_ServiceBaseUrl_Interface
+ */
+ public function getServiceBaseUrl()
+ {
+ if (empty($this->_serviceBaseUrl)) {
+ phpCAS::error("ServiceBaseUrl object is not initialized");
+ }
+ return $this->_serviceBaseUrl;
+ }
+
+ /**
+ * This method sets the service base URL used during service URL discovery process.
+ *
+ * This is required since phpCAS 1.6.0 to protect the integrity of the authentication.
+ *
+ * @since phpCAS 1.6.0
+ *
+ * @param $name can be any of the following:
+ * - A base URL string. The service URL discovery will always use this (protocol,
+ * hostname and optional port number) without using any external host names.
+ * - An array of base URL strings. The service URL discovery will check against
+ * this list before using the auto discovered base URL. If there is no match,
+ * the first base URL in the array will be used as the default. This option is
+ * helpful if your PHP website is accessible through multiple domains without a
+ * canonical name, or through both HTTP and HTTPS.
+ * - A class that implements CAS_ServiceBaseUrl_Interface. If you need to customize
+ * the base URL discovery behavior, you can pass in a class that implements the
+ * interface.
+ *
+ * @return void
+ */
+ private function _setServiceBaseUrl($name)
+ {
+ if (is_array($name)) {
+ $this->_serviceBaseUrl = new CAS_ServiceBaseUrl_AllowedListDiscovery($name);
+ } else if (is_string($name)) {
+ $this->_serviceBaseUrl = new CAS_ServiceBaseUrl_Static($name);
+ } else if ($name instanceof CAS_ServiceBaseUrl_Interface) {
+ $this->_serviceBaseUrl = $name;
+ } else {
+ throw new CAS_TypeMismatchException($name, '$name', 'array, string, or CAS_ServiceBaseUrl_Interface object');
+ }
+ }
+
+ /**
+ * Removes a parameter from a query string
+ *
+ * @param string $parameterName name of parameter
+ * @param string $queryString query string
+ *
+ * @return string new query string
+ *
+ * @link http://stackoverflow.com/questions/1842681/regular-expression-to-remove-one-parameter-from-query-string
+ */
+ private function _removeParameterFromQueryString($parameterName, $queryString)
+ {
+ $parameterName = preg_quote($parameterName);
+ return preg_replace(
+ "/&$parameterName(=[^&]*)?|^$parameterName(=[^&]*)?&?/",
+ '', $queryString
+ );
+ }
+
+ /**
+ * This method is used to append query parameters to an url. Since the url
+ * might already contain parameter it has to be detected and to build a proper
+ * URL
+ *
+ * @param string $url base url to add the query params to
+ * @param string $query params in query form with & separated
+ *
+ * @return string url with query params
+ */
+ private function _buildQueryUrl($url, $query)
+ {
+ $url .= (strstr($url, '?') === false) ? '?' : '&';
+ $url .= $query;
+ return $url;
+ }
+
+ /**
+ * This method tests if a string starts with a given character.
+ *
+ * @param string $text text to test
+ * @param string $char character to test for
+ *
+ * @return bool true if the $text starts with $char
+ */
+ private function _startsWith($text, $char)
+ {
+ return (strpos($text, $char) === 0);
+ }
+
+ /**
+ * This method tests if a string ends with a given character
+ *
+ * @param string $text text to test
+ * @param string $char character to test for
+ *
+ * @return bool true if the $text ends with $char
+ */
+ private function _endsWith($text, $char)
+ {
+ return (strpos(strrev($text), $char) === 0);
+ }
+
+ /**
+ * Answer a valid session-id given a CAS ticket.
+ *
+ * The output must be deterministic to allow single-log-out when presented with
+ * the ticket to log-out.
+ *
+ *
+ * @param string $ticket name of the ticket
+ *
+ * @return string
+ */
+ private function _sessionIdForTicket($ticket)
+ {
+ // Hash the ticket to ensure that the value meets the PHP 7.1 requirement
+ // that session-ids have a length between 22 and 256 characters.
+ return hash('sha256', $this->_sessionIdSalt . $ticket);
+ }
+
+ /**
+ * Set a salt/seed for the session-id hash to make it harder to guess.
+ *
+ * @var string $_sessionIdSalt
+ */
+ private $_sessionIdSalt = '';
+
+ /**
+ * Set a salt/seed for the session-id hash to make it harder to guess.
+ *
+ * @param string $salt
+ *
+ * @return void
+ */
+ public function setSessionIdSalt($salt) {
+ $this->_sessionIdSalt = (string)$salt;
+ }
+
+ // ########################################################################
+ // AUTHENTICATION ERROR HANDLING
+ // ########################################################################
+ /**
+ * This method is used to print the HTML output when the user was not
+ * authenticated.
+ *
+ * @param string $failure the failure that occured
+ * @param string $cas_url the URL the CAS server was asked for
+ * @param bool $no_response the response from the CAS server (other
+ * parameters are ignored if true)
+ * @param bool $bad_response bad response from the CAS server ($err_code
+ * and $err_msg ignored if true)
+ * @param string $cas_response the response of the CAS server
+ * @param int $err_code the error code given by the CAS server
+ * @param string $err_msg the error message given by the CAS server
+ *
+ * @return void
+ */
+ private function _authError(
+ $failure,
+ $cas_url,
+ $no_response=false,
+ $bad_response=false,
+ $cas_response='',
+ $err_code=-1,
+ $err_msg=''
+ ) {
+ phpCAS::traceBegin();
+ $lang = $this->getLangObj();
+ $this->printHTMLHeader($lang->getAuthenticationFailed());
+ $this->printf(
+ $lang->getYouWereNotAuthenticated(), htmlentities($this->getURL()),
+ isset($_SERVER['SERVER_ADMIN']) ? $_SERVER['SERVER_ADMIN']:''
+ );
+ phpCAS::trace('CAS URL: '.$cas_url);
+ phpCAS::trace('Authentication failure: '.$failure);
+ if ( $no_response ) {
+ phpCAS::trace('Reason: no response from the CAS server');
+ } else {
+ if ( $bad_response ) {
+ phpCAS::trace('Reason: bad response from the CAS server');
+ } else {
+ switch ($this->getServerVersion()) {
+ case CAS_VERSION_1_0:
+ phpCAS::trace('Reason: CAS error');
+ break;
+ case CAS_VERSION_2_0:
+ case CAS_VERSION_3_0:
+ if ( $err_code === -1 ) {
+ phpCAS::trace('Reason: no CAS error');
+ } else {
+ phpCAS::trace(
+ 'Reason: ['.$err_code.'] CAS error: '.$err_msg
+ );
+ }
+ break;
+ }
+ }
+ phpCAS::trace('CAS response: '.$cas_response);
+ }
+ $this->printHTMLFooter();
+ phpCAS::traceExit();
+ throw new CAS_GracefullTerminationException();
+ }
+
+ // ########################################################################
+ // PGTIOU/PGTID and logoutRequest rebroadcasting
+ // ########################################################################
+
+ /**
+ * Boolean of whether to rebroadcast pgtIou/pgtId and logoutRequest, and
+ * array of the nodes.
+ */
+ private $_rebroadcast = false;
+ private $_rebroadcast_nodes = array();
+
+ /**
+ * Constants used for determining rebroadcast node type.
+ */
+ const HOSTNAME = 0;
+ const IP = 1;
+
+ /**
+ * Determine the node type from the URL.
+ *
+ * @param String $nodeURL The node URL.
+ *
+ * @return int hostname
+ *
+ */
+ private function _getNodeType($nodeURL)
+ {
+ phpCAS::traceBegin();
+ if (preg_match("/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/", $nodeURL)) {
+ phpCAS::traceEnd(self::IP);
+ return self::IP;
+ } else {
+ phpCAS::traceEnd(self::HOSTNAME);
+ return self::HOSTNAME;
+ }
+ }
+
+ /**
+ * Store the rebroadcast node for pgtIou/pgtId and logout requests.
+ *
+ * @param string $rebroadcastNodeUrl The rebroadcast node URL.
+ *
+ * @return void
+ */
+ public function addRebroadcastNode($rebroadcastNodeUrl)
+ {
+ // Argument validation
+ if ( !(bool)preg_match("/^(http|https):\/\/([A-Z0-9][A-Z0-9_-]*(?:\.[A-Z0-9][A-Z0-9_-]*)+):?(\d+)?\/?/i", $rebroadcastNodeUrl))
+ throw new CAS_TypeMismatchException($rebroadcastNodeUrl, '$rebroadcastNodeUrl', 'url');
+
+ // Store the rebroadcast node and set flag
+ $this->_rebroadcast = true;
+ $this->_rebroadcast_nodes[] = $rebroadcastNodeUrl;
+ }
+
+ /**
+ * An array to store extra rebroadcast curl options.
+ */
+ private $_rebroadcast_headers = array();
+
+ /**
+ * This method is used to add header parameters when rebroadcasting
+ * pgtIou/pgtId or logoutRequest.
+ *
+ * @param string $header Header to send when rebroadcasting.
+ *
+ * @return void
+ */
+ public function addRebroadcastHeader($header)
+ {
+ if (gettype($header) != 'string')
+ throw new CAS_TypeMismatchException($header, '$header', 'string');
+
+ $this->_rebroadcast_headers[] = $header;
+ }
+
+ /**
+ * Constants used for determining rebroadcast type (logout or pgtIou/pgtId).
+ */
+ const LOGOUT = 0;
+ const PGTIOU = 1;
+
+ /**
+ * This method rebroadcasts logout/pgtIou requests. Can be LOGOUT,PGTIOU
+ *
+ * @param int $type type of rebroadcasting.
+ *
+ * @return void
+ */
+ private function _rebroadcast($type)
+ {
+ phpCAS::traceBegin();
+
+ $rebroadcast_curl_options = array(
+ CURLOPT_FAILONERROR => 1,
+ CURLOPT_FOLLOWLOCATION => 1,
+ CURLOPT_RETURNTRANSFER => 1,
+ CURLOPT_CONNECTTIMEOUT => 1,
+ CURLOPT_TIMEOUT => 4);
+
+ // Try to determine the IP address of the server
+ if (!empty($_SERVER['SERVER_ADDR'])) {
+ $ip = $_SERVER['SERVER_ADDR'];
+ } else if (!empty($_SERVER['LOCAL_ADDR'])) {
+ // IIS 7
+ $ip = $_SERVER['LOCAL_ADDR'];
+ }
+ // Try to determine the DNS name of the server
+ if (!empty($ip)) {
+ $dns = gethostbyaddr($ip);
+ }
+ $multiClassName = 'CAS_Request_CurlMultiRequest';
+ $multiRequest = new $multiClassName();
+
+ for ($i = 0; $i < sizeof($this->_rebroadcast_nodes); $i++) {
+ if ((($this->_getNodeType($this->_rebroadcast_nodes[$i]) == self::HOSTNAME) && !empty($dns) && (stripos($this->_rebroadcast_nodes[$i], $dns) === false))
+ || (($this->_getNodeType($this->_rebroadcast_nodes[$i]) == self::IP) && !empty($ip) && (stripos($this->_rebroadcast_nodes[$i], $ip) === false))
+ ) {
+ phpCAS::trace(
+ 'Rebroadcast target URL: '.$this->_rebroadcast_nodes[$i]
+ .$_SERVER['REQUEST_URI']
+ );
+ $className = $this->_requestImplementation;
+ $request = new $className();
+
+ $url = $this->_rebroadcast_nodes[$i].$_SERVER['REQUEST_URI'];
+ $request->setUrl($url);
+
+ if (count($this->_rebroadcast_headers)) {
+ $request->addHeaders($this->_rebroadcast_headers);
+ }
+
+ $request->makePost();
+ if ($type == self::LOGOUT) {
+ // Logout request
+ $request->setPostBody(
+ 'rebroadcast=false&logoutRequest='.$_POST['logoutRequest']
+ );
+ } else if ($type == self::PGTIOU) {
+ // pgtIou/pgtId rebroadcast
+ $request->setPostBody('rebroadcast=false');
+ }
+
+ $request->setCurlOptions($rebroadcast_curl_options);
+
+ $multiRequest->addRequest($request);
+ } else {
+ phpCAS::trace(
+ 'Rebroadcast not sent to self: '
+ .$this->_rebroadcast_nodes[$i].' == '.(!empty($ip)?$ip:'')
+ .'/'.(!empty($dns)?$dns:'')
+ );
+ }
+ }
+ // We need at least 1 request
+ if ($multiRequest->getNumRequests() > 0) {
+ $multiRequest->send();
+ }
+ phpCAS::traceEnd();
+ }
+
+ /** @} */
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/CookieJar.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/CookieJar.php
new file mode 100644
index 0000000..b243937
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/CookieJar.php
@@ -0,0 +1,385 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This class provides access to service cookies and handles parsing of response
+ * headers to pull out cookie values.
+ *
+ * @class CAS_CookieJar
+ * @category Authentication
+ * @package PhpCAS
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_CookieJar
+{
+
+ private $_cookies;
+
+ /**
+ * Create a new cookie jar by passing it a reference to an array in which it
+ * should store cookies.
+ *
+ * @param array &$storageArray Array to store cookies
+ *
+ * @return void
+ */
+ public function __construct (array &$storageArray)
+ {
+ $this->_cookies =& $storageArray;
+ }
+
+ /**
+ * Store cookies for a web service request.
+ * Cookie storage is based on RFC 2965: http://www.ietf.org/rfc/rfc2965.txt
+ *
+ * @param string $request_url The URL that generated the response headers.
+ * @param array $response_headers An array of the HTTP response header strings.
+ *
+ * @return void
+ *
+ * @access private
+ */
+ public function storeCookies ($request_url, $response_headers)
+ {
+ $urlParts = parse_url($request_url);
+ $defaultDomain = $urlParts['host'];
+
+ $cookies = $this->parseCookieHeaders($response_headers, $defaultDomain);
+
+ foreach ($cookies as $cookie) {
+ // Enforce the same-origin policy by verifying that the cookie
+ // would match the url that is setting it
+ if (!$this->cookieMatchesTarget($cookie, $urlParts)) {
+ continue;
+ }
+
+ // store the cookie
+ $this->storeCookie($cookie);
+
+ phpCAS::trace($cookie['name'].' -> '.$cookie['value']);
+ }
+ }
+
+ /**
+ * Retrieve cookies applicable for a web service request.
+ * Cookie applicability is based on RFC 2965: http://www.ietf.org/rfc/rfc2965.txt
+ *
+ * @param string $request_url The url that the cookies will be for.
+ *
+ * @return array An array containing cookies. E.g. array('name' => 'val');
+ *
+ * @access private
+ */
+ public function getCookies ($request_url)
+ {
+ if (!count($this->_cookies)) {
+ return array();
+ }
+
+ // If our request URL can't be parsed, no cookies apply.
+ $target = parse_url($request_url);
+ if ($target === false) {
+ return array();
+ }
+
+ $this->expireCookies();
+
+ $matching_cookies = array();
+ foreach ($this->_cookies as $key => $cookie) {
+ if ($this->cookieMatchesTarget($cookie, $target)) {
+ $matching_cookies[$cookie['name']] = $cookie['value'];
+ }
+ }
+ return $matching_cookies;
+ }
+
+
+ /**
+ * Parse Cookies without PECL
+ * From the comments in http://php.net/manual/en/function.http-parse-cookie.php
+ *
+ * @param array $header array of header lines.
+ * @param string $defaultDomain The domain to use if none is specified in
+ * the cookie.
+ *
+ * @return array of cookies
+ */
+ protected function parseCookieHeaders( $header, $defaultDomain )
+ {
+ phpCAS::traceBegin();
+ $cookies = array();
+ foreach ( $header as $line ) {
+ if ( preg_match('/^Set-Cookie2?: /i', $line)) {
+ $cookies[] = $this->parseCookieHeader($line, $defaultDomain);
+ }
+ }
+
+ phpCAS::traceEnd($cookies);
+ return $cookies;
+ }
+
+ /**
+ * Parse a single cookie header line.
+ *
+ * Based on RFC2965 http://www.ietf.org/rfc/rfc2965.txt
+ *
+ * @param string $line The header line.
+ * @param string $defaultDomain The domain to use if none is specified in
+ * the cookie.
+ *
+ * @return array
+ */
+ protected function parseCookieHeader ($line, $defaultDomain)
+ {
+ if (!$defaultDomain) {
+ throw new CAS_InvalidArgumentException(
+ '$defaultDomain was not provided.'
+ );
+ }
+
+ // Set our default values
+ $cookie = array(
+ 'domain' => $defaultDomain,
+ 'path' => '/',
+ 'secure' => false,
+ );
+
+ $line = preg_replace('/^Set-Cookie2?: /i', '', trim($line));
+
+ // trim any trailing semicolons.
+ $line = trim($line, ';');
+
+ phpCAS::trace("Cookie Line: $line");
+
+ // This implementation makes the assumption that semicolons will not
+ // be present in quoted attribute values. While attribute values that
+ // contain semicolons are allowed by RFC2965, they are hopefully rare
+ // enough to ignore for our purposes. Most browsers make the same
+ // assumption.
+ $attributeStrings = explode(';', $line);
+
+ foreach ( $attributeStrings as $attributeString ) {
+ // split on the first equals sign and use the rest as value
+ $attributeParts = explode('=', $attributeString, 2);
+
+ $attributeName = trim($attributeParts[0]);
+ $attributeNameLC = strtolower($attributeName);
+
+ if (isset($attributeParts[1])) {
+ $attributeValue = trim($attributeParts[1]);
+ // Values may be quoted strings.
+ if (strpos($attributeValue, '"') === 0) {
+ $attributeValue = trim($attributeValue, '"');
+ // unescape any escaped quotes:
+ $attributeValue = str_replace('\"', '"', $attributeValue);
+ }
+ } else {
+ $attributeValue = null;
+ }
+
+ switch ($attributeNameLC) {
+ case 'expires':
+ $cookie['expires'] = strtotime($attributeValue);
+ break;
+ case 'max-age':
+ $cookie['max-age'] = (int)$attributeValue;
+ // Set an expiry time based on the max-age
+ if ($cookie['max-age']) {
+ $cookie['expires'] = time() + $cookie['max-age'];
+ } else {
+ // If max-age is zero, then the cookie should be removed
+ // imediately so set an expiry before now.
+ $cookie['expires'] = time() - 1;
+ }
+ break;
+ case 'secure':
+ $cookie['secure'] = true;
+ break;
+ case 'domain':
+ case 'path':
+ case 'port':
+ case 'version':
+ case 'comment':
+ case 'commenturl':
+ case 'discard':
+ case 'httponly':
+ case 'samesite':
+ $cookie[$attributeNameLC] = $attributeValue;
+ break;
+ default:
+ $cookie['name'] = $attributeName;
+ $cookie['value'] = $attributeValue;
+ }
+ }
+
+ return $cookie;
+ }
+
+ /**
+ * Add, update, or remove a cookie.
+ *
+ * @param array $cookie A cookie array as created by parseCookieHeaders()
+ *
+ * @return void
+ *
+ * @access protected
+ */
+ protected function storeCookie ($cookie)
+ {
+ // Discard any old versions of this cookie.
+ $this->discardCookie($cookie);
+ $this->_cookies[] = $cookie;
+
+ }
+
+ /**
+ * Discard an existing cookie
+ *
+ * @param array $cookie An cookie
+ *
+ * @return void
+ *
+ * @access protected
+ */
+ protected function discardCookie ($cookie)
+ {
+ if (!isset($cookie['domain'])
+ || !isset($cookie['path'])
+ || !isset($cookie['path'])
+ ) {
+ throw new CAS_InvalidArgumentException('Invalid Cookie array passed.');
+ }
+
+ foreach ($this->_cookies as $key => $old_cookie) {
+ if ( $cookie['domain'] == $old_cookie['domain']
+ && $cookie['path'] == $old_cookie['path']
+ && $cookie['name'] == $old_cookie['name']
+ ) {
+ unset($this->_cookies[$key]);
+ }
+ }
+ }
+
+ /**
+ * Go through our stored cookies and remove any that are expired.
+ *
+ * @return void
+ *
+ * @access protected
+ */
+ protected function expireCookies ()
+ {
+ foreach ($this->_cookies as $key => $cookie) {
+ if (isset($cookie['expires']) && $cookie['expires'] < time()) {
+ unset($this->_cookies[$key]);
+ }
+ }
+ }
+
+ /**
+ * Answer true if cookie is applicable to a target.
+ *
+ * @param array $cookie An array of cookie attributes.
+ * @param array|false $target An array of URL attributes as generated by parse_url().
+ *
+ * @return bool
+ *
+ * @access private
+ */
+ protected function cookieMatchesTarget ($cookie, $target)
+ {
+ if (!is_array($target)) {
+ throw new CAS_InvalidArgumentException(
+ '$target must be an array of URL attributes as generated by parse_url().'
+ );
+ }
+ if (!isset($target['host'])) {
+ throw new CAS_InvalidArgumentException(
+ '$target must be an array of URL attributes as generated by parse_url().'
+ );
+ }
+
+ // Verify that the scheme matches
+ if ($cookie['secure'] && $target['scheme'] != 'https') {
+ return false;
+ }
+
+ // Verify that the host matches
+ // Match domain and mulit-host cookies
+ if (strpos($cookie['domain'], '.') === 0) {
+ // .host.domain.edu cookies are valid for host.domain.edu
+ if (substr($cookie['domain'], 1) == $target['host']) {
+ // continue with other checks
+ } else {
+ // non-exact host-name matches.
+ // check that the target host a.b.c.edu is within .b.c.edu
+ $pos = strripos($target['host'], $cookie['domain']);
+ if (!$pos) {
+ return false;
+ }
+ // verify that the cookie domain is the last part of the host.
+ if ($pos + strlen($cookie['domain']) != strlen($target['host'])) {
+ return false;
+ }
+ // verify that the host name does not contain interior dots as per
+ // RFC 2965 section 3.3.2 Rejecting Cookies
+ // http://www.ietf.org/rfc/rfc2965.txt
+ $hostname = substr($target['host'], 0, $pos);
+ if (strpos($hostname, '.') !== false) {
+ return false;
+ }
+ }
+ } else {
+ // If the cookie host doesn't begin with '.',
+ // the host must case-insensitive match exactly
+ if (strcasecmp($target['host'], $cookie['domain']) !== 0) {
+ return false;
+ }
+ }
+
+ // Verify that the port matches
+ if (isset($cookie['ports'])
+ && !in_array($target['port'], $cookie['ports'])
+ ) {
+ return false;
+ }
+
+ // Verify that the path matches
+ if (strpos($target['path'], $cookie['path']) !== 0) {
+ return false;
+ }
+
+ return true;
+ }
+
+}
+
+?>
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Exception.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Exception.php
new file mode 100644
index 0000000..2ff7cd6
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Exception.php
@@ -0,0 +1,59 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * A root exception interface for all exceptions in phpCAS.
+ *
+ * All exceptions thrown in phpCAS should implement this interface to allow them
+ * to be caught as a category by clients. Each phpCAS exception should extend
+ * an appropriate SPL exception class that best fits its type.
+ *
+ * For example, an InvalidArgumentException in phpCAS should be defined as
+ *
+ * class CAS_InvalidArgumentException
+ * extends InvalidArgumentException
+ * implements CAS_Exception
+ * { }
+ *
+ * This definition allows the CAS_InvalidArgumentException to be caught as either
+ * an InvalidArgumentException or as a CAS_Exception.
+ *
+ * @class CAS_Exception
+ * @category Authentication
+ * @package PhpCAS
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ *
+ */
+interface CAS_Exception
+{
+
+}
+?>
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/GracefullTerminationException.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/GracefullTerminationException.php
new file mode 100644
index 0000000..29aa638
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/GracefullTerminationException.php
@@ -0,0 +1,86 @@
+
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * An exception for terminatinating execution or to throw for unit testing
+ *
+ * @class CAS_GracefullTerminationException.php
+ * @category Authentication
+ * @package PhpCAS
+ * @author Joachim Fritschi
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+class CAS_GracefullTerminationException
+extends RuntimeException
+implements CAS_Exception
+{
+
+ /**
+ * Test if exceptions should be thrown or if we should just exit.
+ * In production usage we want to just exit cleanly when prompting the user
+ * for a redirect without filling the error logs with uncaught exceptions.
+ * In unit testing scenarios we cannot exit or we won't be able to continue
+ * with our tests.
+ *
+ * @param string $message Message Text
+ * @param int $code Error code
+ *
+ * @return self
+ */
+ public function __construct ($message = 'Terminate Gracefully', $code = 0)
+ {
+ // Exit cleanly to avoid filling up the logs with uncaught exceptions.
+ if (self::$_exitWhenThrown) {
+ exit;
+ } else {
+ // Throw exceptions to allow unit testing to continue;
+ parent::__construct($message, $code);
+ }
+ }
+
+ private static $_exitWhenThrown = true;
+ /**
+ * Force phpcas to thow Exceptions instead of calling exit()
+ * Needed for unit testing. Generally shouldn't be used in production due to
+ * an increase in Apache error logging if CAS_GracefulTerminiationExceptions
+ * are not caught and handled.
+ *
+ * @return void
+ */
+ public static function throwInsteadOfExiting()
+ {
+ self::$_exitWhenThrown = false;
+ }
+
+}
+?>
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/InvalidArgumentException.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/InvalidArgumentException.php
new file mode 100644
index 0000000..99be2ac
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/InvalidArgumentException.php
@@ -0,0 +1,46 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * Exception that denotes invalid arguments were passed.
+ *
+ * @class CAS_InvalidArgumentException
+ * @category Authentication
+ * @package PhpCAS
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_InvalidArgumentException
+extends InvalidArgumentException
+implements CAS_Exception
+{
+
+}
+?>
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/Catalan.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/Catalan.php
new file mode 100644
index 0000000..1ead905
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/Catalan.php
@@ -0,0 +1,114 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * Catalan language class
+ *
+ * @class CAS_Languages_Catalan
+ * @category Authentication
+ * @package PhpCAS
+ * @author Iván-Benjamín García Torà
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ *
+ * @sa @link internalLang Internationalization @endlink
+ * @ingroup internalLang
+ */
+class CAS_Languages_Catalan implements CAS_Languages_LanguageInterface
+{
+ /**
+ * Get the using server string
+ *
+ * @return string using server
+ */
+ public function getUsingServer()
+ {
+ return 'usant servidor';
+ }
+
+ /**
+ * Get authentication wanted string
+ *
+ * @return string authentication wanted
+ */
+ public function getAuthenticationWanted()
+ {
+ return 'Autentificació CAS necessària!';
+ }
+
+ /**
+ * Get logout string
+ *
+ * @return string logout
+ */
+ public function getLogout()
+ {
+ return 'Sortida de CAS necessària!';
+ }
+
+ /**
+ * Get the should have been redirected string
+ *
+ * @return string should habe been redirected
+ */
+ public function getShouldHaveBeenRedirected()
+ {
+ return 'Ja hauria d\ haver estat redireccionat al servidor CAS. Feu click aquí per a continuar.';
+ }
+
+ /**
+ * Get authentication failed string
+ *
+ * @return string authentication failed
+ */
+ public function getAuthenticationFailed()
+ {
+ return 'Autentificació CAS fallida!';
+ }
+
+ /**
+ * Get the your were not authenticated string
+ *
+ * @return string not authenticated
+ */
+ public function getYouWereNotAuthenticated()
+ {
+ return 'No estàs autentificat.
Pots tornar a intentar-ho fent click aquí.
Si el problema persisteix hauría de contactar amb l\'administrador d\'aquest llocc.
';
+ }
+
+ /**
+ * Get the service unavailable string
+ *
+ * @return string service unavailable
+ */
+ public function getServiceUnavailable()
+ {
+ return 'El servei `%s\' no està disponible (%s).';
+ }
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/ChineseSimplified.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/ChineseSimplified.php
new file mode 100644
index 0000000..5e33cb6
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/ChineseSimplified.php
@@ -0,0 +1,114 @@
+, Phy25
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * Chinese Simplified language class
+ *
+ * @class CAS_Languages_ChineseSimplified
+ * @category Authentication
+ * @package PhpCAS
+ * @author Pascal Aubry , Phy25
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ *
+ * @sa @link internalLang Internationalization @endlink
+ * @ingroup internalLang
+ */
+class CAS_Languages_ChineseSimplified implements CAS_Languages_LanguageInterface
+{
+ /**
+ * Get the using server string
+ *
+ * @return string using server
+ */
+ public function getUsingServer()
+ {
+ return '连接的服务器';
+ }
+
+ /**
+ * Get authentication wanted string
+ *
+ * @return string authentication wanted
+ */
+ public function getAuthenticationWanted()
+ {
+ return '请进行 CAS 认证！';
+ }
+
+ /**
+ * Get logout string
+ *
+ * @return string logout
+ */
+ public function getLogout()
+ {
+ return '请进行 CAS 登出！';
+ }
+
+ /**
+ * Get the should have been redirected string
+ *
+ * @return string should habe been redirected
+ */
+ public function getShouldHaveBeenRedirected()
+ {
+ return '你正被重定向到 CAS 服务器。点击这里继续。';
+ }
+
+ /**
+ * Get authentication failed string
+ *
+ * @return string authentication failed
+ */
+ public function getAuthenticationFailed()
+ {
+ return 'CAS 认证失败！';
+ }
+
+ /**
+ * Get the your were not authenticated string
+ *
+ * @return string not authenticated
+ */
+ public function getYouWereNotAuthenticated()
+ {
+ return '你没有成功登录。
你可以点击这里重新登录。
如果问题依然存在，请联系本站管理员。
';
+ }
+
+ /**
+ * Get the service unavailable string
+ *
+ * @return string service unavailable
+ */
+ public function getServiceUnavailable()
+ {
+ return '服务器 %s 不可用（%s）。';
+ }
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/English.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/English.php
new file mode 100644
index 0000000..cb13bde
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/English.php
@@ -0,0 +1,114 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * English language class
+ *
+ * @class CAS_Languages_English
+ * @category Authentication
+ * @package PhpCAS
+ * @author Pascal Aubry
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ *
+ * @sa @link internalLang Internationalization @endlink
+ * @ingroup internalLang
+ */
+class CAS_Languages_English implements CAS_Languages_LanguageInterface
+{
+ /**
+ * Get the using server string
+ *
+ * @return string using server
+ */
+ public function getUsingServer()
+ {
+ return 'using server';
+ }
+
+ /**
+ * Get authentication wanted string
+ *
+ * @return string authentication wanted
+ */
+ public function getAuthenticationWanted()
+ {
+ return 'CAS Authentication wanted!';
+ }
+
+ /**
+ * Get logout string
+ *
+ * @return string logout
+ */
+ public function getLogout()
+ {
+ return 'CAS logout wanted!';
+ }
+
+ /**
+ * Get the should have been redirected string
+ *
+ * @return string should habe been redirected
+ */
+ public function getShouldHaveBeenRedirected()
+ {
+ return 'You should already have been redirected to the CAS server. Click here to continue.';
+ }
+
+ /**
+ * Get authentication failed string
+ *
+ * @return string authentication failed
+ */
+ public function getAuthenticationFailed()
+ {
+ return 'CAS Authentication failed!';
+ }
+
+ /**
+ * Get the your were not authenticated string
+ *
+ * @return string not authenticated
+ */
+ public function getYouWereNotAuthenticated()
+ {
+ return 'You were not authenticated.
You may submit your request again by clicking here.
If the problem persists, you may contact the administrator of this site.
';
+ }
+
+ /**
+ * Get the service unavailable string
+ *
+ * @return string service unavailable
+ */
+ public function getServiceUnavailable()
+ {
+ return 'The service `%s\' is not available (%s).';
+ }
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/French.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/French.php
new file mode 100644
index 0000000..14f65ab
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/French.php
@@ -0,0 +1,116 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * French language class
+ *
+ * @class CAS_Languages_French
+ * @category Authentication
+ * @package PhpCAS
+ * @author Pascal Aubry
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ *
+ * @sa @link internalLang Internationalization @endlink
+ * @ingroup internalLang
+ */
+class CAS_Languages_French implements CAS_Languages_LanguageInterface
+{
+ /**
+ * Get the using server string
+ *
+ * @return string using server
+ */
+ public function getUsingServer()
+ {
+ return 'utilisant le serveur';
+ }
+
+ /**
+ * Get authentication wanted string
+ *
+ * @return string authentication wanted
+ */
+ public function getAuthenticationWanted()
+ {
+ return 'Authentication CAS nécessaire !';
+ }
+
+ /**
+ * Get logout string
+ *
+ * @return string logout
+ */
+ public function getLogout()
+ {
+ return 'Déconnexion demandée !';
+ }
+
+ /**
+ * Get the should have been redirected string
+ *
+ * @return string should habe been redirected
+ */
+ public function getShouldHaveBeenRedirected()
+ {
+ return 'Vous auriez du etre redirigé(e) vers le serveur CAS. Cliquez ici pour continuer.';
+ }
+
+ /**
+ * Get authentication failed string
+ *
+ * @return string authentication failed
+ */
+ public function getAuthenticationFailed()
+ {
+ return 'Authentification CAS infructueuse !';
+ }
+
+ /**
+ * Get the your were not authenticated string
+ *
+ * @return string not authenticated
+ */
+ public function getYouWereNotAuthenticated()
+ {
+ return 'Vous n\'avez pas été authentifié(e).
Vous pouvez soumettre votre requete à nouveau en cliquant ici.
Si le problème persiste, vous pouvez contacter l\'administrateur de ce site.
';
+ }
+
+ /**
+ * Get the service unavailable string
+ *
+ * @return string service unavailable
+ */
+ public function getServiceUnavailable()
+ {
+ return 'Le service `%s\' est indisponible (%s)';
+ }
+}
+
+?>
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/Galego.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/Galego.php
new file mode 100644
index 0000000..d5bf404
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/Galego.php
@@ -0,0 +1,117 @@
+aquí para continuar';
+ }
+
+ /**
+ * Get authentication failed string
+ *
+ * @return string authentication failed
+ */
+ public function getAuthenticationFailed()
+ {
+ return 'Autenticación CAS errada!';
+ }
+
+ /**
+ * Get the your were not authenticated string
+ *
+ * @return string not authenticated
+ */
+ public function getYouWereNotAuthenticated()
+ {
+ return '
+ Non estás autenticado
Podes volver tentalo facendo click aquí.
Se o problema persiste debería contactar con el administrador deste sitio.
';
+ }
+
+ /**
+ * Get the service unavailable string
+ *
+ * @return string service unavailable
+ */
+ public function getServiceUnavailable()
+ {
+ return 'O servizo `%s\' non está dispoñible (%s).';
+ }
+}
+?>
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/German.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/German.php
new file mode 100644
index 0000000..b718b14
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/German.php
@@ -0,0 +1,116 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * German language class
+ *
+ * @class CAS_Languages_German
+ * @category Authentication
+ * @package PhpCAS
+ * @author Henrik Genssen
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ *
+ * @sa @link internalLang Internationalization @endlink
+ * @ingroup internalLang
+ */
+class CAS_Languages_German implements CAS_Languages_LanguageInterface
+{
+ /**
+ * Get the using server string
+ *
+ * @return string using server
+ */
+ public function getUsingServer()
+ {
+ return 'via Server';
+ }
+
+ /**
+ * Get authentication wanted string
+ *
+ * @return string authentication wanted
+ */
+ public function getAuthenticationWanted()
+ {
+ return 'CAS Authentifizierung erforderlich!';
+ }
+
+ /**
+ * Get logout string
+ *
+ * @return string logout
+ */
+ public function getLogout()
+ {
+ return 'CAS Abmeldung!';
+ }
+
+ /**
+ * Get the should have been redirected string
+ *
+ * @return string should habe been redirected
+ */
+ public function getShouldHaveBeenRedirected()
+ {
+ return 'eigentlich häten Sie zum CAS Server weitergeleitet werden sollen. Drücken Sie hier um fortzufahren.';
+ }
+
+ /**
+ * Get authentication failed string
+ *
+ * @return string authentication failed
+ */
+ public function getAuthenticationFailed()
+ {
+ return 'CAS Anmeldung fehlgeschlagen!';
+ }
+
+ /**
+ * Get the your were not authenticated string
+ *
+ * @return string not authenticated
+ */
+ public function getYouWereNotAuthenticated()
+ {
+ return 'Sie wurden nicht angemeldet.
Um es erneut zu versuchen klicken Sie hier.
Wenn das Problem bestehen bleibt, kontaktieren Sie den Administrator dieser Seite.
';
+ }
+
+ /**
+ * Get the service unavailable string
+ *
+ * @return string service unavailable
+ */
+ public function getServiceUnavailable()
+ {
+ return 'Der Dienst `%s\' ist nicht verfügbar (%s).';
+ }
+}
+
+?>
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/Greek.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/Greek.php
new file mode 100644
index 0000000..1cfb107
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/Greek.php
@@ -0,0 +1,115 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * Greek language class
+ *
+ * @class CAS_Languages_Greek
+ * @category Authentication
+ * @package PhpCAS
+ * @author Vangelis Haniotakis
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ *
+ * @sa @link internalLang Internationalization @endlink
+ * @ingroup internalLang
+ */
+class CAS_Languages_Greek implements CAS_Languages_LanguageInterface
+{
+ /**
+ * Get the using server string
+ *
+ * @return string using server
+ */
+ public function getUsingServer()
+ {
+ return 'χρησιμοποιείται ο εξυπηρετητής';
+ }
+
+ /**
+ * Get authentication wanted string
+ *
+ * @return string authentication wanted
+ */
+ public function getAuthenticationWanted()
+ {
+ return 'Απαιτείται η ταυτοποίηση CAS!';
+ }
+
+ /**
+ * Get logout string
+ *
+ * @return string logout
+ */
+ public function getLogout()
+ {
+ return 'Απαιτείται η αποσύνδεση από CAS!';
+ }
+
+ /**
+ * Get the should have been redirected string
+ *
+ * @return string should habe been redirected
+ */
+ public function getShouldHaveBeenRedirected()
+ {
+ return 'Θα έπρεπε να είχατε ανακατευθυνθεί στον εξυπηρετητή CAS. Κάντε κλίκ εδώ για να συνεχίσετε.';
+ }
+
+ /**
+ * Get authentication failed string
+ *
+ * @return string authentication failed
+ */
+ public function getAuthenticationFailed()
+ {
+ return 'Η ταυτοποίηση CAS απέτυχε!';
+ }
+
+ /**
+ * Get the your were not authenticated string
+ *
+ * @return string not authenticated
+ */
+ public function getYouWereNotAuthenticated()
+ {
+ return 'Δεν ταυτοποιηθήκατε.
Μπορείτε να ξαναπροσπαθήσετε, κάνοντας κλίκ εδώ.
Εαν το πρόβλημα επιμείνει, ελάτε σε επαφή με τον διαχειριστή.
';
+ }
+
+ /**
+ * Get the service unavailable string
+ *
+ * @return string service unavailable
+ */
+ public function getServiceUnavailable()
+ {
+ return 'Η υπηρεσία `%s\' δεν είναι διαθέσιμη (%s).';
+ }
+}
+?>
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/Japanese.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/Japanese.php
new file mode 100644
index 0000000..5681484
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/Japanese.php
@@ -0,0 +1,113 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * Japanese language class. Now Encoding is UTF-8.
+ *
+ * @class CAS_Languages_Japanese
+ * @category Authentication
+ * @package PhpCAS
+ * @author fnorif
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ *
+ **/
+class CAS_Languages_Japanese implements CAS_Languages_LanguageInterface
+{
+ /**
+ * Get the using server string
+ *
+ * @return string using server
+ */
+ public function getUsingServer()
+ {
+ return 'サーバーを使っています。';
+ }
+
+ /**
+ * Get authentication wanted string
+ *
+ * @return string authentication wanted
+ */
+ public function getAuthenticationWanted()
+ {
+ return 'CASによる認証を行います。';
+ }
+
+ /**
+ * Get logout string
+ *
+ * @return string logout
+ */
+ public function getLogout()
+ {
+ return 'CASからログアウトします!';
+ }
+
+ /**
+ * Get the should have been redirected string
+ *
+ * @return string should habe been redirected
+ */
+ public function getShouldHaveBeenRedirected()
+ {
+ return 'CASサーバに行く必要があります。自動的に転送されない場合は こちら をクリックして続行します。';
+ }
+
+ /**
+ * Get authentication failed string
+ *
+ * @return string authentication failed
+ */
+ public function getAuthenticationFailed()
+ {
+ return 'CASによる認証に失敗しました。';
+ }
+
+ /**
+ * Get the your were not authenticated string
+ *
+ * @return string not authenticated
+ */
+ public function getYouWereNotAuthenticated()
+ {
+ return '認証できませんでした。
もう一度リクエストを送信する場合はこちらをクリック。
問題が解決しない場合は このサイトの管理者に問い合わせてください。
';
+ }
+
+ /**
+ * Get the service unavailable string
+ *
+ * @return string service unavailable
+ */
+ public function getServiceUnavailable()
+ {
+ return 'サービス `%s\' は利用できません (%s)。';
+ }
+}
+?>
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/LanguageInterface.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/LanguageInterface.php
new file mode 100644
index 0000000..dfb0ac5
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/LanguageInterface.php
@@ -0,0 +1,96 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * Language Interface class for all internationalization files
+ *
+ * @class CAS_Languages_LanguageInterface
+ * @category Authentication
+ * @package PhpCAS
+ * @author Joachim Fritschi
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ *
+ * @sa @link internalLang Internationalization @endlink
+ * @ingroup internalLang
+ */
+
+interface CAS_Languages_LanguageInterface
+{
+ /**
+ * Get the using server string
+ *
+ * @return string using server
+ */
+ public function getUsingServer();
+
+ /**
+ * Get authentication wanted string
+ *
+ * @return string authentication wanted
+ */
+ public function getAuthenticationWanted();
+
+ /**
+ * Get logout string
+ *
+ * @return string logout
+ */
+ public function getLogout();
+
+ /**
+ * Get the should have been redirected string
+ *
+ * @return string should habe been redirected
+ */
+ public function getShouldHaveBeenRedirected();
+
+ /**
+ * Get authentication failed string
+ *
+ * @return string authentication failed
+ */
+ public function getAuthenticationFailed();
+
+ /**
+ * Get the your were not authenticated string
+ *
+ * @return string not authenticated
+ */
+ public function getYouWereNotAuthenticated();
+
+ /**
+ * Get the service unavailable string
+ *
+ * @return string service unavailable
+ */
+ public function getServiceUnavailable();
+
+}
+?>
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/Portuguese.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/Portuguese.php
new file mode 100644
index 0000000..a927cad
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/Portuguese.php
@@ -0,0 +1,114 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://apereo.atlassian.net/wiki/spaces/CASC/pages/103252517/phpCAS
+ */
+
+/**
+ * Portuguese language class
+ *
+ * @class CAS_Languages_Portuguese
+ * @category Authentication
+ * @package PhpCAS
+ * @author Sherwin Harris
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://apereo.atlassian.net/wiki/spaces/CASC/pages/103252517/phpCAS
+ *
+ * @sa @link internalLang Internationalization @endlink
+ * @ingroup internalLang
+ */
+class CAS_Languages_Portuguese implements CAS_Languages_LanguageInterface
+{
+ /**
+ * Get the using server string
+ *
+ * @return string using server
+ */
+ public function getUsingServer()
+ {
+ return 'Usando o servidor';
+ }
+
+ /**
+ * Get authentication wanted string
+ *
+ * @return string authentication wanted
+ */
+ public function getAuthenticationWanted()
+ {
+ return 'A autenticação do servidor CAS desejado!';
+ }
+
+ /**
+ * Get logout string
+ *
+ * @return string logout
+ */
+ public function getLogout()
+ {
+ return 'Saida do servidor CAS desejado!';
+ }
+
+ /**
+ * Get the should have been redirected string
+ *
+ * @return string should have been redirected
+ */
+ public function getShouldHaveBeenRedirected()
+ {
+ return 'Você já deve ter sido redirecionado para o servidor CAS. Clique aqui para continuar';
+ }
+
+ /**
+ * Get authentication failed string
+ *
+ * @return string authentication failed
+ */
+ public function getAuthenticationFailed()
+ {
+ return 'A autenticação do servidor CAS falheu!';
+ }
+
+ /**
+ * Get the your were not authenticated string
+ *
+ * @return string not authenticated
+ */
+ public function getYouWereNotAuthenticated()
+ {
+ return 'Você não foi autenticado.
Você pode enviar sua solicitação novamente clicando aqui.
Se o problema persistir, você pode entrar em contato com o administrador deste site.
';
+ }
+
+ /**
+ * Get the service unavailable string
+ *
+ * @return string service unavailable
+ */
+ public function getServiceUnavailable()
+ {
+ return 'O serviço `%s\' não está disponível (%s).';
+ }
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/Spanish.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/Spanish.php
new file mode 100644
index 0000000..c6ea50e
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Languages/Spanish.php
@@ -0,0 +1,117 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * Spanish language class
+ *
+ * @class CAS_Languages_Spanish
+ * @category Authentication
+ * @package PhpCAS
+ * @author Iván-Benjamín García Torà
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ *
+
+ * @sa @link internalLang Internationalization @endlink
+ * @ingroup internalLang
+ */
+class CAS_Languages_Spanish implements CAS_Languages_LanguageInterface
+{
+
+ /**
+ * Get the using server string
+ *
+ * @return string using server
+ */
+ public function getUsingServer()
+ {
+ return 'usando servidor';
+ }
+
+ /**
+ * Get authentication wanted string
+ *
+ * @return string authentication wanted
+ */
+ public function getAuthenticationWanted()
+ {
+ return '¡Autentificación CAS necesaria!';
+ }
+
+ /**
+ * Get logout string
+ *
+ * @return string logout
+ */
+ public function getLogout()
+ {
+ return '¡Salida CAS necesaria!';
+ }
+
+ /**
+ * Get the should have been redirected string
+ *
+ * @return string should habe been redirected
+ */
+ public function getShouldHaveBeenRedirected()
+ {
+ return 'Ya debería haber sido redireccionado al servidor CAS. Haga click aquí para continuar.';
+ }
+
+ /**
+ * Get authentication failed string
+ *
+ * @return string authentication failed
+ */
+ public function getAuthenticationFailed()
+ {
+ return '¡Autentificación CAS fallida!';
+ }
+
+ /**
+ * Get the your were not authenticated string
+ *
+ * @return string not authenticated
+ */
+ public function getYouWereNotAuthenticated()
+ {
+ return 'No estás autentificado.
Puedes volver a intentarlo haciendo click aquí.
Si el problema persiste debería contactar con el administrador de este sitio.
';
+ }
+
+ /**
+ * Get the service unavailable string
+ *
+ * @return string service unavailable
+ */
+ public function getServiceUnavailable()
+ {
+ return 'El servicio `%s\' no está disponible (%s).';
+ }
+}
+?>
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/OutOfSequenceBeforeAuthenticationCallException.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/OutOfSequenceBeforeAuthenticationCallException.php
new file mode 100644
index 0000000..d4d7680
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/OutOfSequenceBeforeAuthenticationCallException.php
@@ -0,0 +1,56 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This class defines Exceptions that should be thrown when the sequence of
+ * operations is invalid. In this case it should be thrown when an
+ * authentication call has not yet happened.
+ *
+ * @class CAS_OutOfSequenceBeforeAuthenticationCallException
+ * @category Authentication
+ * @package PhpCAS
+ * @author Joachim Fritschi
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_OutOfSequenceBeforeAuthenticationCallException
+extends CAS_OutOfSequenceException
+implements CAS_Exception
+{
+ /**
+ * Return standard error meessage
+ *
+ * @return void
+ */
+ public function __construct ()
+ {
+ parent::__construct('An authentication call hasn\'t happened yet.');
+ }
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/OutOfSequenceBeforeClientException.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/OutOfSequenceBeforeClientException.php
new file mode 100644
index 0000000..6c2c39c
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/OutOfSequenceBeforeClientException.php
@@ -0,0 +1,58 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This class defines Exceptions that should be thrown when the sequence of
+ * operations is invalid. In this case it should be thrown when the client() or
+ * proxy() call has not yet happened and no client or proxy object exists.
+ *
+ * @class CAS_OutOfSequenceBeforeClientException
+ * @category Authentication
+ * @package PhpCAS
+ * @author Joachim Fritschi
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_OutOfSequenceBeforeClientException
+extends CAS_OutOfSequenceException
+implements CAS_Exception
+{
+ /**
+ * Return standard error message
+ *
+ * @return void
+ */
+ public function __construct ()
+ {
+ parent::__construct(
+ 'this method cannot be called before phpCAS::client() or phpCAS::proxy()'
+ );
+ }
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/OutOfSequenceBeforeProxyException.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/OutOfSequenceBeforeProxyException.php
new file mode 100644
index 0000000..7991555
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/OutOfSequenceBeforeProxyException.php
@@ -0,0 +1,59 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This class defines Exceptions that should be thrown when the sequence of
+ * operations is invalid. In this case it should be thrown when the proxy() call
+ * has not yet happened and no proxy object exists.
+ *
+ * @class CAS_OutOfSequenceBeforeProxyException
+ * @category Authentication
+ * @package PhpCAS
+ * @author Joachim Fritschi
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_OutOfSequenceBeforeProxyException
+extends CAS_OutOfSequenceException
+implements CAS_Exception
+{
+
+ /**
+ * Return standard error message
+ *
+ * @return void
+ */
+ public function __construct ()
+ {
+ parent::__construct(
+ 'this method cannot be called before phpCAS::proxy()'
+ );
+ }
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/OutOfSequenceException.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/OutOfSequenceException.php
new file mode 100644
index 0000000..d6f7d88
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/OutOfSequenceException.php
@@ -0,0 +1,49 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This class defines Exceptions that should be thrown when the sequence of
+ * operations is invalid. Examples are:
+ * - Requesting the response before executing a request.
+ * - Changing the URL of a request after executing the request.
+ *
+ * @class CAS_OutOfSequenceException
+ * @category Authentication
+ * @package PhpCAS
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_OutOfSequenceException
+extends BadMethodCallException
+implements CAS_Exception
+{
+
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/PGTStorage/AbstractStorage.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/PGTStorage/AbstractStorage.php
new file mode 100644
index 0000000..a93568d
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/PGTStorage/AbstractStorage.php
@@ -0,0 +1,222 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * Basic class for PGT storage
+ * The CAS_PGTStorage_AbstractStorage class is a generic class for PGT storage.
+ * This class should not be instanciated itself but inherited by specific PGT
+ * storage classes.
+ *
+ * @class CAS_PGTStorage_AbstractStorage
+ * @category Authentication
+ * @package PhpCAS
+ * @author Pascal Aubry
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ *
+ * @ingroup internalPGTStorage
+ */
+
+abstract class CAS_PGTStorage_AbstractStorage
+{
+ /**
+ * @addtogroup internalPGTStorage
+ * @{
+ */
+
+ // ########################################################################
+ // CONSTRUCTOR
+ // ########################################################################
+
+ /**
+ * The constructor of the class, should be called only by inherited classes.
+ *
+ * @param CAS_Client $cas_parent the CAS _client instance that creates the
+ * current object.
+ *
+ * @return void
+ *
+ * @protected
+ */
+ function __construct($cas_parent)
+ {
+ phpCAS::traceBegin();
+ if ( !$cas_parent->isProxy() ) {
+ phpCAS::error(
+ 'defining PGT storage makes no sense when not using a CAS proxy'
+ );
+ }
+ phpCAS::traceEnd();
+ }
+
+ // ########################################################################
+ // DEBUGGING
+ // ########################################################################
+
+ /**
+ * This virtual method returns an informational string giving the type of storage
+ * used by the object (used for debugging purposes).
+ *
+ * @return string
+ *
+ * @public
+ */
+ function getStorageType()
+ {
+ phpCAS::error(__CLASS__.'::'.__FUNCTION__.'() should never be called');
+ }
+
+ /**
+ * This virtual method returns an informational string giving informations on the
+ * parameters of the storage.(used for debugging purposes).
+ *
+ * @return string
+ *
+ * @public
+ */
+ function getStorageInfo()
+ {
+ phpCAS::error(__CLASS__.'::'.__FUNCTION__.'() should never be called');
+ }
+
+ // ########################################################################
+ // ERROR HANDLING
+ // ########################################################################
+
+ /**
+ * string used to store an error message. Written by
+ * PGTStorage::setErrorMessage(), read by PGTStorage::getErrorMessage().
+ *
+ * @hideinitializer
+ * @deprecated not used.
+ */
+ var $_error_message=false;
+
+ /**
+ * This method sets en error message, which can be read later by
+ * PGTStorage::getErrorMessage().
+ *
+ * @param string $error_message an error message
+ *
+ * @return void
+ *
+ * @deprecated not used.
+ */
+ function setErrorMessage($error_message)
+ {
+ $this->_error_message = $error_message;
+ }
+
+ /**
+ * This method returns an error message set by PGTStorage::setErrorMessage().
+ *
+ * @return string an error message when set by PGTStorage::setErrorMessage(), FALSE
+ * otherwise.
+ *
+ * @deprecated not used.
+ */
+ function getErrorMessage()
+ {
+ return $this->_error_message;
+ }
+
+ // ########################################################################
+ // INITIALIZATION
+ // ########################################################################
+
+ /**
+ * a boolean telling if the storage has already been initialized. Written by
+ * PGTStorage::init(), read by PGTStorage::isInitialized().
+ *
+ * @hideinitializer
+ */
+ var $_initialized = false;
+
+ /**
+ * This method tells if the storage has already been intialized.
+ *
+ * @return bool
+ *
+ * @protected
+ */
+ function isInitialized()
+ {
+ return $this->_initialized;
+ }
+
+ /**
+ * This virtual method initializes the object.
+ *
+ * @return void
+ */
+ function init()
+ {
+ $this->_initialized = true;
+ }
+
+ // ########################################################################
+ // PGT I/O
+ // ########################################################################
+
+ /**
+ * This virtual method stores a PGT and its corresponding PGT Iuo.
+ *
+ * @param string $pgt the PGT
+ * @param string $pgt_iou the PGT iou
+ *
+ * @return void
+ *
+ * @note Should never be called.
+ *
+ */
+ function write($pgt,$pgt_iou)
+ {
+ phpCAS::error(__CLASS__.'::'.__FUNCTION__.'() should never be called');
+ }
+
+ /**
+ * This virtual method reads a PGT corresponding to a PGT Iou and deletes
+ * the corresponding storage entry.
+ *
+ * @param string $pgt_iou the PGT iou
+ *
+ * @return string
+ *
+ * @note Should never be called.
+ */
+ function read($pgt_iou)
+ {
+ phpCAS::error(__CLASS__.'::'.__FUNCTION__.'() should never be called');
+ }
+
+ /** @} */
+
+}
+
+?>
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/PGTStorage/Db.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/PGTStorage/Db.php
new file mode 100644
index 0000000..2efe5a3
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/PGTStorage/Db.php
@@ -0,0 +1,440 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+define('CAS_PGT_STORAGE_DB_DEFAULT_TABLE', 'cas_pgts');
+
+/**
+ * Basic class for PGT database storage
+ * The CAS_PGTStorage_Db class is a class for PGT database storage.
+ *
+ * @class CAS_PGTStorage_Db
+ * @category Authentication
+ * @package PhpCAS
+ * @author Daniel Frett
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ *
+ * @ingroup internalPGTStorageDb
+ */
+
+class CAS_PGTStorage_Db extends CAS_PGTStorage_AbstractStorage
+{
+ /**
+ * @addtogroup internalCAS_PGTStorageDb
+ * @{
+ */
+
+ /**
+ * the PDO object to use for database interactions
+ */
+ private $_pdo;
+
+ /**
+ * This method returns the PDO object to use for database interactions.
+ *
+ * @return PDO object
+ */
+ private function _getPdo()
+ {
+ return $this->_pdo;
+ }
+
+ /**
+ * database connection options to use when creating a new PDO object
+ */
+ private $_dsn;
+ private $_username;
+ private $_password;
+ private $_driver_options;
+
+ /**
+ * @var string the table to use for storing/retrieving pgt's
+ */
+ private $_table;
+
+ /**
+ * This method returns the table to use when storing/retrieving PGT's
+ *
+ * @return string the name of the pgt storage table.
+ */
+ private function _getTable()
+ {
+ return $this->_table;
+ }
+
+ // ########################################################################
+ // DEBUGGING
+ // ########################################################################
+
+ /**
+ * This method returns an informational string giving the type of storage
+ * used by the object (used for debugging purposes).
+ *
+ * @return string an informational string.
+ */
+ public function getStorageType()
+ {
+ return "db";
+ }
+
+ /**
+ * This method returns an informational string giving informations on the
+ * parameters of the storage.(used for debugging purposes).
+ *
+ * @return string an informational string.
+ * @public
+ */
+ public function getStorageInfo()
+ {
+ return 'table=`'.$this->_getTable().'\'';
+ }
+
+ // ########################################################################
+ // CONSTRUCTOR
+ // ########################################################################
+
+ /**
+ * The class constructor.
+ *
+ * @param CAS_Client $cas_parent the CAS_Client instance that creates
+ * the object.
+ * @param string $dsn_or_pdo a dsn string to use for creating a PDO
+ * object or a PDO object
+ * @param string $username the username to use when connecting to
+ * the database
+ * @param string $password the password to use when connecting to
+ * the database
+ * @param string $table the table to use for storing and
+ * retrieving PGT's
+ * @param string $driver_options any driver options to use when
+ * connecting to the database
+ */
+ public function __construct(
+ $cas_parent, $dsn_or_pdo, $username='', $password='', $table='',
+ $driver_options=null
+ ) {
+ phpCAS::traceBegin();
+ // call the ancestor's constructor
+ parent::__construct($cas_parent);
+
+ // set default values
+ if ( empty($table) ) {
+ $table = CAS_PGT_STORAGE_DB_DEFAULT_TABLE;
+ }
+ if ( !is_array($driver_options) ) {
+ $driver_options = array(PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION);
+ }
+
+ // store the specified parameters
+ if ($dsn_or_pdo instanceof PDO) {
+ $this->_pdo = $dsn_or_pdo;
+ } else {
+ $this->_dsn = $dsn_or_pdo;
+ $this->_username = $username;
+ $this->_password = $password;
+ $this->_driver_options = $driver_options;
+ }
+
+ // store the table name
+ $this->_table = $table;
+
+ phpCAS::traceEnd();
+ }
+
+ // ########################################################################
+ // INITIALIZATION
+ // ########################################################################
+
+ /**
+ * This method is used to initialize the storage. Halts on error.
+ *
+ * @return void
+ */
+ public function init()
+ {
+ phpCAS::traceBegin();
+ // if the storage has already been initialized, return immediatly
+ if ($this->isInitialized()) {
+ return;
+ }
+
+ // initialize the base object
+ parent::init();
+
+ // create the PDO object if it doesn't exist already
+ if (!($this->_pdo instanceof PDO)) {
+ try {
+ $this->_pdo = new PDO(
+ $this->_dsn, $this->_username, $this->_password,
+ $this->_driver_options
+ );
+ }
+ catch(PDOException $e) {
+ phpCAS::error('Database connection error: ' . $e->getMessage());
+ }
+ }
+
+ phpCAS::traceEnd();
+ }
+
+ // ########################################################################
+ // PDO database interaction
+ // ########################################################################
+
+ /**
+ * attribute that stores the previous error mode for the PDO handle while
+ * processing a transaction
+ */
+ private $_errMode;
+
+ /**
+ * This method will enable the Exception error mode on the PDO object
+ *
+ * @return void
+ */
+ private function _setErrorMode()
+ {
+ // get PDO object and enable exception error mode
+ $pdo = $this->_getPdo();
+ $this->_errMode = $pdo->getAttribute(PDO::ATTR_ERRMODE);
+ $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
+ }
+
+ /**
+ * this method will reset the error mode on the PDO object
+ *
+ * @return void
+ */
+ private function _resetErrorMode()
+ {
+ // get PDO object and reset the error mode to what it was originally
+ $pdo = $this->_getPdo();
+ $pdo->setAttribute(PDO::ATTR_ERRMODE, $this->_errMode);
+ }
+
+ // ########################################################################
+ // database queries
+ // ########################################################################
+ // these queries are potentially unsafe because the person using this library
+ // can set the table to use, but there is no reliable way to escape SQL
+ // fieldnames in PDO yet
+
+ /**
+ * This method returns the query used to create a pgt storage table
+ *
+ * @return string the create table SQL, no bind params in query
+ */
+ protected function createTableSql()
+ {
+ return 'CREATE TABLE ' . $this->_getTable()
+ . ' (pgt_iou VARCHAR(255) NOT NULL PRIMARY KEY, pgt VARCHAR(255) NOT NULL)';
+ }
+
+ /**
+ * This method returns the query used to store a pgt
+ *
+ * @return string the store PGT SQL, :pgt and :pgt_iou are the bind params contained
+ * in the query
+ */
+ protected function storePgtSql()
+ {
+ return 'INSERT INTO ' . $this->_getTable()
+ . ' (pgt_iou, pgt) VALUES (:pgt_iou, :pgt)';
+ }
+
+ /**
+ * This method returns the query used to retrieve a pgt. the first column
+ * of the first row should contain the pgt
+ *
+ * @return string the retrieve PGT SQL, :pgt_iou is the only bind param contained
+ * in the query
+ */
+ protected function retrievePgtSql()
+ {
+ return 'SELECT pgt FROM ' . $this->_getTable() . ' WHERE pgt_iou = :pgt_iou';
+ }
+
+ /**
+ * This method returns the query used to delete a pgt.
+ *
+ * @return string the delete PGT SQL, :pgt_iou is the only bind param contained in
+ * the query
+ */
+ protected function deletePgtSql()
+ {
+ return 'DELETE FROM ' . $this->_getTable() . ' WHERE pgt_iou = :pgt_iou';
+ }
+
+ // ########################################################################
+ // PGT I/O
+ // ########################################################################
+
+ /**
+ * This method creates the database table used to store pgt's and pgtiou's
+ *
+ * @return void
+ */
+ public function createTable()
+ {
+ phpCAS::traceBegin();
+
+ // initialize this PGTStorage object if it hasn't been initialized yet
+ if ( !$this->isInitialized() ) {
+ $this->init();
+ }
+
+ // initialize the PDO object for this method
+ $pdo = $this->_getPdo();
+ $this->_setErrorMode();
+
+ try {
+ $pdo->beginTransaction();
+
+ $query = $pdo->query($this->createTableSQL());
+ $query->closeCursor();
+
+ $pdo->commit();
+ }
+ catch(PDOException $e) {
+ // attempt rolling back the transaction before throwing a phpCAS error
+ try {
+ $pdo->rollBack();
+ }
+ catch(PDOException $e) {
+ }
+ phpCAS::error('error creating PGT storage table: ' . $e->getMessage());
+ }
+
+ // reset the PDO object
+ $this->_resetErrorMode();
+
+ phpCAS::traceEnd();
+ }
+
+ /**
+ * This method stores a PGT and its corresponding PGT Iou in the database.
+ * Echoes a warning on error.
+ *
+ * @param string $pgt the PGT
+ * @param string $pgt_iou the PGT iou
+ *
+ * @return void
+ */
+ public function write($pgt, $pgt_iou)
+ {
+ phpCAS::traceBegin();
+
+ // initialize the PDO object for this method
+ $pdo = $this->_getPdo();
+ $this->_setErrorMode();
+
+ try {
+ $pdo->beginTransaction();
+
+ $query = $pdo->prepare($this->storePgtSql());
+ $query->bindValue(':pgt', $pgt, PDO::PARAM_STR);
+ $query->bindValue(':pgt_iou', $pgt_iou, PDO::PARAM_STR);
+ $query->execute();
+ $query->closeCursor();
+
+ $pdo->commit();
+ }
+ catch(PDOException $e) {
+ // attempt rolling back the transaction before throwing a phpCAS error
+ try {
+ $pdo->rollBack();
+ }
+ catch(PDOException $e) {
+ }
+ phpCAS::error('error writing PGT to database: ' . $e->getMessage());
+ }
+
+ // reset the PDO object
+ $this->_resetErrorMode();
+
+ phpCAS::traceEnd();
+ }
+
+ /**
+ * This method reads a PGT corresponding to a PGT Iou and deletes the
+ * corresponding db entry.
+ *
+ * @param string $pgt_iou the PGT iou
+ *
+ * @return string|false the corresponding PGT, or FALSE on error
+ */
+ public function read($pgt_iou)
+ {
+ phpCAS::traceBegin();
+ $pgt = false;
+
+ // initialize the PDO object for this method
+ $pdo = $this->_getPdo();
+ $this->_setErrorMode();
+
+ try {
+ $pdo->beginTransaction();
+
+ // fetch the pgt for the specified pgt_iou
+ $query = $pdo->prepare($this->retrievePgtSql());
+ $query->bindValue(':pgt_iou', $pgt_iou, PDO::PARAM_STR);
+ $query->execute();
+ $pgt = $query->fetchColumn(0);
+ $query->closeCursor();
+
+ // delete the specified pgt_iou from the database
+ $query = $pdo->prepare($this->deletePgtSql());
+ $query->bindValue(':pgt_iou', $pgt_iou, PDO::PARAM_STR);
+ $query->execute();
+ $query->closeCursor();
+
+ $pdo->commit();
+ }
+ catch(PDOException $e) {
+ // attempt rolling back the transaction before throwing a phpCAS error
+ try {
+ $pdo->rollBack();
+ }
+ catch(PDOException $e) {
+ }
+ phpCAS::trace('error reading PGT from database: ' . $e->getMessage());
+ }
+
+ // reset the PDO object
+ $this->_resetErrorMode();
+
+ phpCAS::traceEnd();
+ return $pgt;
+ }
+
+ /** @} */
+
+}
+
+?>
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/PGTStorage/File.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/PGTStorage/File.php
new file mode 100644
index 0000000..fbacd3b
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/PGTStorage/File.php
@@ -0,0 +1,261 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * The CAS_PGTStorage_File class is a class for PGT file storage. An instance of
+ * this class is returned by CAS_Client::SetPGTStorageFile().
+ *
+ * @class CAS_PGTStorage_File
+ * @category Authentication
+ * @package PhpCAS
+ * @author Pascal Aubry
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ *
+ *
+ * @ingroup internalPGTStorageFile
+ */
+
+class CAS_PGTStorage_File extends CAS_PGTStorage_AbstractStorage
+{
+ /**
+ * @addtogroup internalPGTStorageFile
+ * @{
+ */
+
+ /**
+ * a string telling where PGT's should be stored on the filesystem. Written by
+ * PGTStorageFile::PGTStorageFile(), read by getPath().
+ *
+ * @private
+ */
+ var $_path;
+
+ /**
+ * This method returns the name of the directory where PGT's should be stored
+ * on the filesystem.
+ *
+ * @return string the name of a directory (with leading and trailing '/')
+ *
+ * @private
+ */
+ function getPath()
+ {
+ return $this->_path;
+ }
+
+ // ########################################################################
+ // DEBUGGING
+ // ########################################################################
+
+ /**
+ * This method returns an informational string giving the type of storage
+ * used by the object (used for debugging purposes).
+ *
+ * @return string an informational string.
+ * @public
+ */
+ function getStorageType()
+ {
+ return "file";
+ }
+
+ /**
+ * This method returns an informational string giving informations on the
+ * parameters of the storage.(used for debugging purposes).
+ *
+ * @return string an informational string.
+ * @public
+ */
+ function getStorageInfo()
+ {
+ return 'path=`'.$this->getPath().'\'';
+ }
+
+ // ########################################################################
+ // CONSTRUCTOR
+ // ########################################################################
+
+ /**
+ * The class constructor, called by CAS_Client::SetPGTStorageFile().
+ *
+ * @param CAS_Client $cas_parent the CAS_Client instance that creates the object.
+ * @param string $path the path where the PGT's should be stored
+ *
+ * @return void
+ *
+ * @public
+ */
+ function __construct($cas_parent,$path)
+ {
+ phpCAS::traceBegin();
+ // call the ancestor's constructor
+ parent::__construct($cas_parent);
+
+ if (empty($path)) {
+ $path = CAS_PGT_STORAGE_FILE_DEFAULT_PATH;
+ }
+ // check that the path is an absolute path
+ if (getenv("OS")=="Windows_NT" || strtoupper(substr(PHP_OS,0,3)) == 'WIN') {
+
+ if (!preg_match('`^[a-zA-Z]:`', $path)) {
+ phpCAS::error('an absolute path is needed for PGT storage to file');
+ }
+
+ } else {
+
+ if ( $path[0] != '/' ) {
+ phpCAS::error('an absolute path is needed for PGT storage to file');
+ }
+
+ // store the path (with a leading and trailing '/')
+ $path = preg_replace('|[/]*$|', '/', $path);
+ $path = preg_replace('|^[/]*|', '/', $path);
+ }
+
+ $this->_path = $path;
+ phpCAS::traceEnd();
+ }
+
+ // ########################################################################
+ // INITIALIZATION
+ // ########################################################################
+
+ /**
+ * This method is used to initialize the storage. Halts on error.
+ *
+ * @return void
+ * @public
+ */
+ function init()
+ {
+ phpCAS::traceBegin();
+ // if the storage has already been initialized, return immediatly
+ if ($this->isInitialized()) {
+ return;
+ }
+ // call the ancestor's method (mark as initialized)
+ parent::init();
+ phpCAS::traceEnd();
+ }
+
+ // ########################################################################
+ // PGT I/O
+ // ########################################################################
+
+ /**
+ * This method returns the filename corresponding to a PGT Iou.
+ *
+ * @param string $pgt_iou the PGT iou.
+ *
+ * @return string a filename
+ * @private
+ */
+ function getPGTIouFilename($pgt_iou)
+ {
+ phpCAS::traceBegin();
+ $filename = $this->getPath()."phpcas-".hash("sha256", $pgt_iou);
+// $filename = $this->getPath().$pgt_iou.'.plain';
+ phpCAS::trace("Sha256 filename:" . $filename);
+ phpCAS::traceEnd();
+ return $filename;
+ }
+
+ /**
+ * This method stores a PGT and its corresponding PGT Iou into a file. Echoes a
+ * warning on error.
+ *
+ * @param string $pgt the PGT
+ * @param string $pgt_iou the PGT iou
+ *
+ * @return void
+ *
+ * @public
+ */
+ function write($pgt,$pgt_iou)
+ {
+ phpCAS::traceBegin();
+ $fname = $this->getPGTIouFilename($pgt_iou);
+ if (!file_exists($fname)) {
+ touch($fname);
+ // Chmod will fail on windows
+ @chmod($fname, 0600);
+ if ($f=fopen($fname, "w")) {
+ if (fputs($f, $pgt) === false) {
+ phpCAS::error('could not write PGT to `'.$fname.'\'');
+ }
+ phpCAS::trace('Successful write of PGT to `'.$fname.'\'');
+ fclose($f);
+ } else {
+ phpCAS::error('could not open `'.$fname.'\'');
+ }
+ } else {
+ phpCAS::error('File exists: `'.$fname.'\'');
+ }
+ phpCAS::traceEnd();
+ }
+
+ /**
+ * This method reads a PGT corresponding to a PGT Iou and deletes the
+ * corresponding file.
+ *
+ * @param string $pgt_iou the PGT iou
+ *
+ * @return string|false the corresponding PGT, or FALSE on error
+ *
+ * @public
+ */
+ function read($pgt_iou)
+ {
+ phpCAS::traceBegin();
+ $pgt = false;
+ $fname = $this->getPGTIouFilename($pgt_iou);
+ if (file_exists($fname)) {
+ if (!($f=fopen($fname, "r"))) {
+ phpCAS::error('could not open `'.$fname.'\'');
+ } else {
+ if (($pgt=fgets($f)) === false) {
+ phpCAS::error('could not read PGT from `'.$fname.'\'');
+ }
+ phpCAS::trace('Successful read of PGT to `'.$fname.'\'');
+ fclose($f);
+ }
+ // delete the PGT file
+ @unlink($fname);
+ } else {
+ phpCAS::error('No such file `'.$fname.'\'');
+ }
+ phpCAS::traceEnd($pgt);
+ return $pgt;
+ }
+
+ /** @} */
+
+}
+?>
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxiedService.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxiedService.php
new file mode 100644
index 0000000..2673ee9
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxiedService.php
@@ -0,0 +1,72 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This interface defines methods that allow proxy-authenticated service handlers
+ * to interact with phpCAS.
+ *
+ * Proxy service handlers must implement this interface as well as call
+ * phpCAS::initializeProxiedService($this) at some point in their implementation.
+ *
+ * While not required, proxy-authenticated service handlers are encouraged to
+ * implement the CAS_ProxiedService_Testable interface to facilitate unit testing.
+ *
+ * @class CAS_ProxiedService
+ * @category Authentication
+ * @package PhpCAS
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+interface CAS_ProxiedService
+{
+
+ /**
+ * Answer a service identifier (URL) for whom we should fetch a proxy ticket.
+ *
+ * @return string
+ * @throws Exception If no service url is available.
+ */
+ public function getServiceUrl ();
+
+ /**
+ * Register a proxy ticket with the ProxiedService that it can use when
+ * making requests.
+ *
+ * @param string $proxyTicket Proxy ticket string
+ *
+ * @return void
+ * @throws InvalidArgumentException If the $proxyTicket is invalid.
+ * @throws CAS_OutOfSequenceException If called after a proxy ticket has
+ * already been initialized/set.
+ */
+ public function setProxyTicket ($proxyTicket);
+
+}
+?>
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxiedService/Abstract.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxiedService/Abstract.php
new file mode 100644
index 0000000..0801c72
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxiedService/Abstract.php
@@ -0,0 +1,149 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This class implements common methods for ProxiedService implementations included
+ * with phpCAS.
+ *
+ * @class CAS_ProxiedService_Abstract
+ * @category Authentication
+ * @package PhpCAS
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+abstract class CAS_ProxiedService_Abstract
+implements CAS_ProxiedService, CAS_ProxiedService_Testable
+{
+
+ /**
+ * The proxy ticket that can be used when making service requests.
+ * @var string $_proxyTicket;
+ */
+ private $_proxyTicket;
+
+ /**
+ * Register a proxy ticket with the Proxy that it can use when making requests.
+ *
+ * @param string $proxyTicket proxy ticket
+ *
+ * @return void
+ * @throws InvalidArgumentException If the $proxyTicket is invalid.
+ * @throws CAS_OutOfSequenceException If called after a proxy ticket has
+ * already been initialized/set.
+ */
+ public function setProxyTicket ($proxyTicket)
+ {
+ if (empty($proxyTicket)) {
+ throw new CAS_InvalidArgumentException(
+ 'Trying to initialize with an empty proxy ticket.'
+ );
+ }
+ if (!empty($this->_proxyTicket)) {
+ throw new CAS_OutOfSequenceException(
+ 'Already initialized, cannot change the proxy ticket.'
+ );
+ }
+ $this->_proxyTicket = $proxyTicket;
+ }
+
+ /**
+ * Answer the proxy ticket to be used when making requests.
+ *
+ * @return string
+ * @throws CAS_OutOfSequenceException If called before a proxy ticket has
+ * already been initialized/set.
+ */
+ protected function getProxyTicket ()
+ {
+ if (empty($this->_proxyTicket)) {
+ throw new CAS_OutOfSequenceException(
+ 'No proxy ticket yet. Call $this->initializeProxyTicket() to aquire the proxy ticket.'
+ );
+ }
+
+ return $this->_proxyTicket;
+ }
+
+ /**
+ * @var CAS_Client $_casClient;
+ */
+ private $_casClient;
+
+ /**
+ * Use a particular CAS_Client->initializeProxiedService() rather than the
+ * static phpCAS::initializeProxiedService().
+ *
+ * This method should not be called in standard operation, but is needed for unit
+ * testing.
+ *
+ * @param CAS_Client $casClient cas client
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after a proxy ticket has
+ * already been initialized/set.
+ */
+ public function setCasClient (CAS_Client $casClient)
+ {
+ if (!empty($this->_proxyTicket)) {
+ throw new CAS_OutOfSequenceException(
+ 'Already initialized, cannot change the CAS_Client.'
+ );
+ }
+
+ $this->_casClient = $casClient;
+ }
+
+ /**
+ * Fetch our proxy ticket.
+ *
+ * Descendent classes should call this method once their service URL is available
+ * to initialize their proxy ticket.
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after a proxy ticket has
+ * already been initialized.
+ */
+ protected function initializeProxyTicket()
+ {
+ if (!empty($this->_proxyTicket)) {
+ throw new CAS_OutOfSequenceException(
+ 'Already initialized, cannot initialize again.'
+ );
+ }
+ // Allow usage of a particular CAS_Client for unit testing.
+ if (empty($this->_casClient)) {
+ phpCAS::initializeProxiedService($this);
+ } else {
+ $this->_casClient->initializeProxiedService($this);
+ }
+ }
+
+}
+?>
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxiedService/Exception.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxiedService/Exception.php
new file mode 100644
index 0000000..0f87413
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxiedService/Exception.php
@@ -0,0 +1,46 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * An Exception for problems communicating with a proxied service.
+ *
+ * @class CAS_ProxiedService_Exception
+ * @category Authentication
+ * @package PhpCAS
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_ProxiedService_Exception
+extends Exception
+implements CAS_Exception
+{
+
+}
+?>
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxiedService/Http.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxiedService/Http.php
new file mode 100644
index 0000000..4240b06
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxiedService/Http.php
@@ -0,0 +1,91 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This interface defines methods that clients should use for configuring, sending,
+ * and receiving proxied HTTP requests.
+ *
+ * @class CAS_ProxiedService_Http
+ * @category Authentication
+ * @package PhpCAS
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+interface CAS_ProxiedService_Http
+{
+
+ /*********************************************************
+ * Configure the Request
+ *********************************************************/
+
+ /**
+ * Set the URL of the Request
+ *
+ * @param string $url Url to set
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+ */
+ public function setUrl ($url);
+
+ /*********************************************************
+ * 2. Send the Request
+ *********************************************************/
+
+ /**
+ * Perform the request.
+ *
+ * @return bool TRUE on success, FALSE on failure.
+ * @throws CAS_OutOfSequenceException If called multiple times.
+ */
+ public function send ();
+
+ /*********************************************************
+ * 3. Access the response
+ *********************************************************/
+
+ /**
+ * Answer the headers of the response.
+ *
+ * @return array An array of header strings.
+ * @throws CAS_OutOfSequenceException If called before the Request has been sent.
+ */
+ public function getResponseHeaders ();
+
+ /**
+ * Answer the body of response.
+ *
+ * @return string
+ * @throws CAS_OutOfSequenceException If called before the Request has been sent.
+ */
+ public function getResponseBody ();
+
+}
+?>
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxiedService/Http/Abstract.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxiedService/Http/Abstract.php
new file mode 100644
index 0000000..8d55edd
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxiedService/Http/Abstract.php
@@ -0,0 +1,360 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This class implements common methods for ProxiedService implementations included
+ * with phpCAS.
+ *
+ * @class CAS_ProxiedService_Http_Abstract
+ * @category Authentication
+ * @package PhpCAS
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+abstract class CAS_ProxiedService_Http_Abstract extends
+CAS_ProxiedService_Abstract implements CAS_ProxiedService_Http
+{
+ /**
+ * The HTTP request mechanism talking to the target service.
+ *
+ * @var CAS_Request_RequestInterface $requestHandler
+ */
+ protected $requestHandler;
+
+ /**
+ * The storage mechanism for cookies set by the target service.
+ *
+ * @var CAS_CookieJar $_cookieJar
+ */
+ private $_cookieJar;
+
+ /**
+ * Constructor.
+ *
+ * @param CAS_Request_RequestInterface $requestHandler request handler object
+ * @param CAS_CookieJar $cookieJar cookieJar object
+ *
+ * @return void
+ */
+ public function __construct(CAS_Request_RequestInterface $requestHandler,
+ CAS_CookieJar $cookieJar
+ ) {
+ $this->requestHandler = $requestHandler;
+ $this->_cookieJar = $cookieJar;
+ }
+
+ /**
+ * The target service url.
+ * @var string $_url;
+ */
+ private $_url;
+
+ /**
+ * Answer a service identifier (URL) for whom we should fetch a proxy ticket.
+ *
+ * @return string
+ * @throws Exception If no service url is available.
+ */
+ public function getServiceUrl()
+ {
+ if (empty($this->_url)) {
+ throw new CAS_ProxiedService_Exception(
+ 'No URL set via ' . get_class($this) . '->setUrl($url).'
+ );
+ }
+
+ return $this->_url;
+ }
+
+ /*********************************************************
+ * Configure the Request
+ *********************************************************/
+
+ /**
+ * Set the URL of the Request
+ *
+ * @param string $url url to set
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+ */
+ public function setUrl($url)
+ {
+ if ($this->hasBeenSent()) {
+ throw new CAS_OutOfSequenceException(
+ 'Cannot set the URL, request already sent.'
+ );
+ }
+ if (!is_string($url)) {
+ throw new CAS_InvalidArgumentException('$url must be a string.');
+ }
+
+ $this->_url = $url;
+ }
+
+ /*********************************************************
+ * 2. Send the Request
+ *********************************************************/
+
+ /**
+ * Perform the request.
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called multiple times.
+ * @throws CAS_ProxyTicketException If there is a proxy-ticket failure.
+ * The code of the Exception will be one of:
+ * PHPCAS_SERVICE_PT_NO_SERVER_RESPONSE
+ * PHPCAS_SERVICE_PT_BAD_SERVER_RESPONSE
+ * PHPCAS_SERVICE_PT_FAILURE
+ * @throws CAS_ProxiedService_Exception If there is a failure sending the
+ * request to the target service.
+ */
+ public function send()
+ {
+ if ($this->hasBeenSent()) {
+ throw new CAS_OutOfSequenceException(
+ 'Cannot send, request already sent.'
+ );
+ }
+
+ phpCAS::traceBegin();
+
+ // Get our proxy ticket and append it to our URL.
+ $this->initializeProxyTicket();
+ $url = $this->getServiceUrl();
+ if (strstr($url, '?') === false) {
+ $url = $url . '?ticket=' . $this->getProxyTicket();
+ } else {
+ $url = $url . '&ticket=' . $this->getProxyTicket();
+ }
+
+ try {
+ $this->makeRequest($url);
+ } catch (Exception $e) {
+ phpCAS::traceEnd();
+ throw $e;
+ }
+ }
+
+ /**
+ * Indicator of the number of requests (including redirects performed.
+ *
+ * @var int $_numRequests;
+ */
+ private $_numRequests = 0;
+
+ /**
+ * The response headers.
+ *
+ * @var array $_responseHeaders;
+ */
+ private $_responseHeaders = array();
+
+ /**
+ * The response status code.
+ *
+ * @var int $_responseStatusCode;
+ */
+ private $_responseStatusCode = '';
+
+ /**
+ * The response headers.
+ *
+ * @var string $_responseBody;
+ */
+ private $_responseBody = '';
+
+ /**
+ * Build and perform a request, following redirects
+ *
+ * @param string $url url for the request
+ *
+ * @return void
+ * @throws CAS_ProxyTicketException If there is a proxy-ticket failure.
+ * The code of the Exception will be one of:
+ * PHPCAS_SERVICE_PT_NO_SERVER_RESPONSE
+ * PHPCAS_SERVICE_PT_BAD_SERVER_RESPONSE
+ * PHPCAS_SERVICE_PT_FAILURE
+ * @throws CAS_ProxiedService_Exception If there is a failure sending the
+ * request to the target service.
+ */
+ protected function makeRequest($url)
+ {
+ // Verify that we are not in a redirect loop
+ $this->_numRequests++;
+ if ($this->_numRequests > 4) {
+ $message = 'Exceeded the maximum number of redirects (3) in proxied service request.';
+ phpCAS::trace($message);
+ throw new CAS_ProxiedService_Exception($message);
+ }
+
+ // Create a new request.
+ $request = clone $this->requestHandler;
+ $request->setUrl($url);
+
+ // Add any cookies to the request.
+ $request->addCookies($this->_cookieJar->getCookies($url));
+
+ // Add any other parts of the request needed by concrete classes
+ $this->populateRequest($request);
+
+ // Perform the request.
+ phpCAS::trace('Performing proxied service request to \'' . $url . '\'');
+ if (!$request->send()) {
+ $message = 'Could not perform proxied service request to URL`'
+ . $url . '\'. ' . $request->getErrorMessage();
+ phpCAS::trace($message);
+ throw new CAS_ProxiedService_Exception($message);
+ }
+
+ // Store any cookies from the response;
+ $this->_cookieJar->storeCookies($url, $request->getResponseHeaders());
+
+ // Follow any redirects
+ if ($redirectUrl = $this->getRedirectUrl($request->getResponseHeaders())
+ ) {
+ phpCAS::trace('Found redirect:' . $redirectUrl);
+ $this->makeRequest($redirectUrl);
+ } else {
+
+ $this->_responseHeaders = $request->getResponseHeaders();
+ $this->_responseBody = $request->getResponseBody();
+ $this->_responseStatusCode = $request->getResponseStatusCode();
+ }
+ }
+
+ /**
+ * Add any other parts of the request needed by concrete classes
+ *
+ * @param CAS_Request_RequestInterface $request request interface object
+ *
+ * @return void
+ */
+ abstract protected function populateRequest(
+ CAS_Request_RequestInterface $request
+ );
+
+ /**
+ * Answer a redirect URL if a redirect header is found, otherwise null.
+ *
+ * @param array $responseHeaders response header to extract a redirect from
+ *
+ * @return string|null
+ */
+ protected function getRedirectUrl(array $responseHeaders)
+ {
+ // Check for the redirect after authentication
+ foreach ($responseHeaders as $header) {
+ if ( preg_match('/^(Location:|URI:)\s*([^\s]+.*)$/', $header, $matches)
+ ) {
+ return trim(array_pop($matches));
+ }
+ }
+ return null;
+ }
+
+ /*********************************************************
+ * 3. Access the response
+ *********************************************************/
+
+ /**
+ * Answer true if our request has been sent yet.
+ *
+ * @return bool
+ */
+ protected function hasBeenSent()
+ {
+ return ($this->_numRequests > 0);
+ }
+
+ /**
+ * Answer the headers of the response.
+ *
+ * @return array An array of header strings.
+ * @throws CAS_OutOfSequenceException If called before the Request has been sent.
+ */
+ public function getResponseHeaders()
+ {
+ if (!$this->hasBeenSent()) {
+ throw new CAS_OutOfSequenceException(
+ 'Cannot access response, request not sent yet.'
+ );
+ }
+
+ return $this->_responseHeaders;
+ }
+
+ /**
+ * Answer HTTP status code of the response
+ *
+ * @return int
+ * @throws CAS_OutOfSequenceException If called before the Request has been sent.
+ */
+ public function getResponseStatusCode()
+ {
+ if (!$this->hasBeenSent()) {
+ throw new CAS_OutOfSequenceException(
+ 'Cannot access response, request not sent yet.'
+ );
+ }
+
+ return $this->_responseStatusCode;
+ }
+
+ /**
+ * Answer the body of response.
+ *
+ * @return string
+ * @throws CAS_OutOfSequenceException If called before the Request has been sent.
+ */
+ public function getResponseBody()
+ {
+ if (!$this->hasBeenSent()) {
+ throw new CAS_OutOfSequenceException(
+ 'Cannot access response, request not sent yet.'
+ );
+ }
+
+ return $this->_responseBody;
+ }
+
+ /**
+ * Answer the cookies from the response. This may include cookies set during
+ * redirect responses.
+ *
+ * @return array An array containing cookies. E.g. array('name' => 'val');
+ */
+ public function getCookies()
+ {
+ return $this->_cookieJar->getCookies($this->getServiceUrl());
+ }
+
+}
+?>
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxiedService/Http/Get.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxiedService/Http/Get.php
new file mode 100644
index 0000000..a459d55
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxiedService/Http/Get.php
@@ -0,0 +1,85 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This class is used to make proxied service requests via the HTTP GET method.
+ *
+ * Usage Example:
+ *
+ * try {
+ * $service = phpCAS::getProxiedService(PHPCAS_PROXIED_SERVICE_HTTP_GET);
+ * $service->setUrl('http://www.example.com/path/');
+ * $service->send();
+ * if ($service->getResponseStatusCode() == 200)
+ * return $service->getResponseBody();
+ * else
+ * // The service responded with an error code 404, 500, etc.
+ * throw new Exception('The service responded with an error.');
+ *
+ * } catch (CAS_ProxyTicketException $e) {
+ * if ($e->getCode() == PHPCAS_SERVICE_PT_FAILURE)
+ * return "Your login has timed out. You need to log in again.";
+ * else
+ * // Other proxy ticket errors are from bad request format
+ * // (shouldn't happen) or CAS server failure (unlikely)
+ * // so lets just stop if we hit those.
+ * throw $e;
+ * } catch (CAS_ProxiedService_Exception $e) {
+ * // Something prevented the service request from being sent or received.
+ * // We didn't even get a valid error response (404, 500, etc), so this
+ * // might be caused by a network error or a DNS resolution failure.
+ * // We could handle it in some way, but for now we will just stop.
+ * throw $e;
+ * }
+ *
+ * @class CAS_ProxiedService_Http_Get
+ * @category Authentication
+ * @package PhpCAS
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_ProxiedService_Http_Get
+extends CAS_ProxiedService_Http_Abstract
+{
+
+ /**
+ * Add any other parts of the request needed by concrete classes
+ *
+ * @param CAS_Request_RequestInterface $request request interface
+ *
+ * @return void
+ */
+ protected function populateRequest (CAS_Request_RequestInterface $request)
+ {
+ // do nothing, since the URL has already been sent and that is our
+ // only data.
+ }
+}
+?>
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxiedService/Http/Post.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxiedService/Http/Post.php
new file mode 100644
index 0000000..344c439
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxiedService/Http/Post.php
@@ -0,0 +1,152 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This class is used to make proxied service requests via the HTTP POST method.
+ *
+ * Usage Example:
+ *
+ * try {
+ * $service = phpCAS::getProxiedService(PHPCAS_PROXIED_SERVICE_HTTP_POST);
+ * $service->setUrl('http://www.example.com/path/');
+ * $service->setContentType('text/xml');
+ * $service->setBody('example.search
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_ProxiedService_Http_Post
+extends CAS_ProxiedService_Http_Abstract
+{
+
+ /**
+ * The content-type of this request
+ *
+ * @var string $_contentType
+ */
+ private $_contentType;
+
+ /**
+ * The body of the this request
+ *
+ * @var string $_body
+ */
+ private $_body;
+
+ /**
+ * Set the content type of this POST request.
+ *
+ * @param string $contentType content type
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+ */
+ public function setContentType ($contentType)
+ {
+ if ($this->hasBeenSent()) {
+ throw new CAS_OutOfSequenceException(
+ 'Cannot set the content type, request already sent.'
+ );
+ }
+
+ $this->_contentType = $contentType;
+ }
+
+ /**
+ * Set the body of this POST request.
+ *
+ * @param string $body body to set
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+ */
+ public function setBody ($body)
+ {
+ if ($this->hasBeenSent()) {
+ throw new CAS_OutOfSequenceException(
+ 'Cannot set the body, request already sent.'
+ );
+ }
+
+ $this->_body = $body;
+ }
+
+ /**
+ * Add any other parts of the request needed by concrete classes
+ *
+ * @param CAS_Request_RequestInterface $request request interface class
+ *
+ * @return void
+ */
+ protected function populateRequest (CAS_Request_RequestInterface $request)
+ {
+ if (empty($this->_contentType) && !empty($this->_body)) {
+ throw new CAS_ProxiedService_Exception(
+ "If you pass a POST body, you must specify a content type via "
+ .get_class($this).'->setContentType($contentType).'
+ );
+ }
+
+ $request->makePost();
+ if (!empty($this->_body)) {
+ $request->addHeader('Content-Type: '.$this->_contentType);
+ $request->addHeader('Content-Length: '.strlen($this->_body));
+ $request->setPostBody($this->_body);
+ }
+ }
+
+
+}
+?>
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxiedService/Imap.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxiedService/Imap.php
new file mode 100644
index 0000000..c4b4740
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxiedService/Imap.php
@@ -0,0 +1,281 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * Provides access to a proxy-authenticated IMAP stream
+ *
+ * @class CAS_ProxiedService_Imap
+ * @category Authentication
+ * @package PhpCAS
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_ProxiedService_Imap
+extends CAS_ProxiedService_Abstract
+{
+
+ /**
+ * The username to send via imap_open.
+ *
+ * @var string $_username;
+ */
+ private $_username;
+
+ /**
+ * Constructor.
+ *
+ * @param string $username Username
+ *
+ * @return void
+ */
+ public function __construct ($username)
+ {
+ if (!is_string($username) || !strlen($username)) {
+ throw new CAS_InvalidArgumentException('Invalid username.');
+ }
+
+ $this->_username = $username;
+ }
+
+ /**
+ * The target service url.
+ * @var string $_url;
+ */
+ private $_url;
+
+ /**
+ * Answer a service identifier (URL) for whom we should fetch a proxy ticket.
+ *
+ * @return string
+ * @throws Exception If no service url is available.
+ */
+ public function getServiceUrl ()
+ {
+ if (empty($this->_url)) {
+ throw new CAS_ProxiedService_Exception(
+ 'No URL set via '.get_class($this).'->getServiceUrl($url).'
+ );
+ }
+
+ return $this->_url;
+ }
+
+ /*********************************************************
+ * Configure the Stream
+ *********************************************************/
+
+ /**
+ * Set the URL of the service to pass to CAS for proxy-ticket retrieval.
+ *
+ * @param string $url Url to set
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after the stream has been opened.
+ */
+ public function setServiceUrl ($url)
+ {
+ if ($this->hasBeenOpened()) {
+ throw new CAS_OutOfSequenceException(
+ 'Cannot set the URL, stream already opened.'
+ );
+ }
+ if (!is_string($url) || !strlen($url)) {
+ throw new CAS_InvalidArgumentException('Invalid url.');
+ }
+
+ $this->_url = $url;
+ }
+
+ /**
+ * The mailbox to open. See the $mailbox parameter of imap_open().
+ *
+ * @var string $_mailbox
+ */
+ private $_mailbox;
+
+ /**
+ * Set the mailbox to open. See the $mailbox parameter of imap_open().
+ *
+ * @param string $mailbox Mailbox to set
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after the stream has been opened.
+ */
+ public function setMailbox ($mailbox)
+ {
+ if ($this->hasBeenOpened()) {
+ throw new CAS_OutOfSequenceException(
+ 'Cannot set the mailbox, stream already opened.'
+ );
+ }
+ if (!is_string($mailbox) || !strlen($mailbox)) {
+ throw new CAS_InvalidArgumentException('Invalid mailbox.');
+ }
+
+ $this->_mailbox = $mailbox;
+ }
+
+ /**
+ * A bit mask of options to pass to imap_open() as the $options parameter.
+ *
+ * @var int $_options
+ */
+ private $_options = null;
+
+ /**
+ * Set the options for opening the stream. See the $options parameter of
+ * imap_open().
+ *
+ * @param int $options Options for the stream
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after the stream has been opened.
+ */
+ public function setOptions ($options)
+ {
+ if ($this->hasBeenOpened()) {
+ throw new CAS_OutOfSequenceException(
+ 'Cannot set options, stream already opened.'
+ );
+ }
+ if (!is_int($options)) {
+ throw new CAS_InvalidArgumentException('Invalid options.');
+ }
+
+ $this->_options = $options;
+ }
+
+ /*********************************************************
+ * 2. Open the stream
+ *********************************************************/
+
+ /**
+ * Open the IMAP stream (similar to imap_open()).
+ *
+ * @return resource Returns an IMAP stream on success
+ * @throws CAS_OutOfSequenceException If called multiple times.
+ * @throws CAS_ProxyTicketException If there is a proxy-ticket failure.
+ * The code of the Exception will be one of:
+ * PHPCAS_SERVICE_PT_NO_SERVER_RESPONSE
+ * PHPCAS_SERVICE_PT_BAD_SERVER_RESPONSE
+ * PHPCAS_SERVICE_PT_FAILURE
+ * @throws CAS_ProxiedService_Exception If there is a failure sending the
+ * request to the target service.
+ */
+ public function open ()
+ {
+ if ($this->hasBeenOpened()) {
+ throw new CAS_OutOfSequenceException('Stream already opened.');
+ }
+ if (empty($this->_mailbox)) {
+ throw new CAS_ProxiedService_Exception(
+ 'You must specify a mailbox via '.get_class($this)
+ .'->setMailbox($mailbox)'
+ );
+ }
+
+ phpCAS::traceBegin();
+
+ // Get our proxy ticket and append it to our URL.
+ $this->initializeProxyTicket();
+ phpCAS::trace('opening IMAP mailbox `'.$this->_mailbox.'\'...');
+ $this->_stream = @imap_open(
+ $this->_mailbox, $this->_username, $this->getProxyTicket(),
+ $this->_options
+ );
+ if ($this->_stream) {
+ phpCAS::trace('ok');
+ } else {
+ phpCAS::trace('could not open mailbox');
+ // @todo add localization integration.
+ $message = 'IMAP Error: '.$this->_url.' '. var_export(imap_errors(), true);
+ phpCAS::trace($message);
+ throw new CAS_ProxiedService_Exception($message);
+ }
+
+ phpCAS::traceEnd();
+ return $this->_stream;
+ }
+
+ /**
+ * Answer true if our request has been sent yet.
+ *
+ * @return bool
+ */
+ protected function hasBeenOpened ()
+ {
+ return !empty($this->_stream);
+ }
+
+ /*********************************************************
+ * 3. Access the result
+ *********************************************************/
+ /**
+ * The IMAP stream
+ *
+ * @var resource $_stream
+ */
+ private $_stream;
+
+ /**
+ * Answer the IMAP stream
+ *
+ * @return resource
+ * @throws CAS_OutOfSequenceException if stream is not opened yet
+ */
+ public function getStream ()
+ {
+ if (!$this->hasBeenOpened()) {
+ throw new CAS_OutOfSequenceException(
+ 'Cannot access stream, not opened yet.'
+ );
+ }
+ return $this->_stream;
+ }
+
+ /**
+ * CAS_Client::serviceMail() needs to return the proxy ticket for some reason,
+ * so this method provides access to it.
+ *
+ * @return string
+ * @throws CAS_OutOfSequenceException If called before the stream has been
+ * opened.
+ */
+ public function getImapProxyTicket ()
+ {
+ if (!$this->hasBeenOpened()) {
+ throw new CAS_OutOfSequenceException(
+ 'Cannot access errors, stream not opened yet.'
+ );
+ }
+ return $this->getProxyTicket();
+ }
+}
+?>
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxiedService/Testable.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxiedService/Testable.php
new file mode 100644
index 0000000..3ce44fd
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxiedService/Testable.php
@@ -0,0 +1,75 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This interface defines methods that allow proxy-authenticated service handlers
+ * to be tested in unit tests.
+ *
+ * Classes implementing this interface SHOULD store the CAS_Client passed and
+ * initialize themselves with that client rather than via the static phpCAS
+ * method. For example:
+ *
+ * / **
+ * * Fetch our proxy ticket.
+ * * /
+ * protected function initializeProxyTicket() {
+ * // Allow usage of a particular CAS_Client for unit testing.
+ * if (is_null($this->casClient))
+ * phpCAS::initializeProxiedService($this);
+ * else
+ * $this->casClient->initializeProxiedService($this);
+ * }
+ *
+ * @class CAS_ProxiedService_Testabel
+ * @category Authentication
+ * @package PhpCAS
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+interface CAS_ProxiedService_Testable
+{
+
+ /**
+ * Use a particular CAS_Client->initializeProxiedService() rather than the
+ * static phpCAS::initializeProxiedService().
+ *
+ * This method should not be called in standard operation, but is needed for unit
+ * testing.
+ *
+ * @param CAS_Client $casClient Cas client object
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after a proxy ticket has
+ * already been initialized/set.
+ */
+ public function setCasClient (CAS_Client $casClient);
+
+}
+?>
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxyChain.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxyChain.php
new file mode 100644
index 0000000..e200724
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxyChain.php
@@ -0,0 +1,127 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * A normal proxy-chain definition that lists each level of the chain as either
+ * a string or regular expression.
+ *
+ * @class CAS_ProxyChain
+ * @category Authentication
+ * @package PhpCAS
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+class CAS_ProxyChain
+implements CAS_ProxyChain_Interface
+{
+
+ protected $chain = array();
+
+ /**
+ * A chain is an array of strings or regexp strings that will be matched
+ * against. Regexp will be matched with preg_match and strings will be
+ * matched from the beginning. A string must fully match the beginning of
+ * an proxy url. So you can define a full domain as acceptable or go further
+ * down.
+ * Proxies have to be defined in reverse from the service to the user. If a
+ * user hits service A get proxied via B to service C the list of acceptable
+ * proxies on C would be array(B,A);
+ *
+ * @param array $chain A chain of proxies
+ */
+ public function __construct(array $chain)
+ {
+ // Ensure that we have an indexed array
+ $this->chain = array_values($chain);
+ }
+
+ /**
+ * Match a list of proxies.
+ *
+ * @param array $list The list of proxies in front of this service.
+ *
+ * @return bool
+ */
+ public function matches(array $list)
+ {
+ $list = array_values($list); // Ensure that we have an indexed array
+ if ($this->isSizeValid($list)) {
+ $mismatch = false;
+ foreach ($this->chain as $i => $search) {
+ $proxy_url = $list[$i];
+ if (preg_match('/^\/.*\/[ixASUXu]*$/s', $search)) {
+ if (preg_match($search, $proxy_url)) {
+ phpCAS::trace(
+ "Found regexp " . $search . " matching " . $proxy_url
+ );
+ } else {
+ phpCAS::trace(
+ "No regexp match " . $search . " != " . $proxy_url
+ );
+ $mismatch = true;
+ break;
+ }
+ } else {
+ if (strncasecmp($search, $proxy_url, strlen($search)) == 0) {
+ phpCAS::trace(
+ "Found string " . $search . " matching " . $proxy_url
+ );
+ } else {
+ phpCAS::trace(
+ "No match " . $search . " != " . $proxy_url
+ );
+ $mismatch = true;
+ break;
+ }
+ }
+ }
+ if (!$mismatch) {
+ phpCAS::trace("Proxy chain matches");
+ return true;
+ }
+ } else {
+ phpCAS::trace("Proxy chain skipped: size mismatch");
+ }
+ return false;
+ }
+
+ /**
+ * Validate the size of the the list as compared to our chain.
+ *
+ * @param array $list List of proxies
+ *
+ * @return bool
+ */
+ protected function isSizeValid (array $list)
+ {
+ return (sizeof($this->chain) == sizeof($list));
+ }
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxyChain/AllowedList.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxyChain/AllowedList.php
new file mode 100644
index 0000000..988ddbb
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxyChain/AllowedList.php
@@ -0,0 +1,119 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+
+/**
+ * ProxyChain is a container for storing chains of valid proxies that can
+ * be used to validate proxied requests to a service
+ *
+ * @class CAS_ProxyChain_AllowedList
+ * @category Authentication
+ * @package PhpCAS
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+class CAS_ProxyChain_AllowedList
+{
+
+ private $_chains = array();
+
+ /**
+ * Check whether proxies are allowed by configuration
+ *
+ * @return bool
+ */
+ public function isProxyingAllowed()
+ {
+ return (count($this->_chains) > 0);
+ }
+
+ /**
+ * Add a chain of proxies to the list of possible chains
+ *
+ * @param CAS_ProxyChain_Interface $chain A chain of proxies
+ *
+ * @return void
+ */
+ public function allowProxyChain(CAS_ProxyChain_Interface $chain)
+ {
+ $this->_chains[] = $chain;
+ }
+
+ /**
+ * Check if the proxies found in the response match the allowed proxies
+ *
+ * @param array $proxies list of proxies to check
+ *
+ * @return bool whether the proxies match the allowed proxies
+ */
+ public function isProxyListAllowed(array $proxies)
+ {
+ phpCAS::traceBegin();
+ if (empty($proxies)) {
+ phpCAS::trace("No proxies were found in the response");
+ phpCAS::traceEnd(true);
+ return true;
+ } elseif (!$this->isProxyingAllowed()) {
+ phpCAS::trace("Proxies are not allowed");
+ phpCAS::traceEnd(false);
+ return false;
+ } else {
+ $res = $this->contains($proxies);
+ phpCAS::traceEnd($res);
+ return $res;
+ }
+ }
+
+ /**
+ * Validate the proxies from the proxy ticket validation against the
+ * chains that were definded.
+ *
+ * @param array $list List of proxies from the proxy ticket validation.
+ *
+ * @return bool if any chain fully matches the supplied list
+ */
+ public function contains(array $list)
+ {
+ phpCAS::traceBegin();
+ $count = 0;
+ foreach ($this->_chains as $chain) {
+ phpCAS::trace("Checking chain ". $count++);
+ if ($chain->matches($list)) {
+ phpCAS::traceEnd(true);
+ return true;
+ }
+ }
+ phpCAS::trace("No proxy chain matches.");
+ phpCAS::traceEnd(false);
+ return false;
+ }
+}
+?>
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxyChain/Any.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxyChain/Any.php
new file mode 100644
index 0000000..fe18c5f
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxyChain/Any.php
@@ -0,0 +1,64 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * A proxy-chain definition that will match any list of proxies.
+ *
+ * Use this class for quick testing or in certain production screnarios you
+ * might want to allow allow any other valid service to proxy your service.
+ *
+ * THIS CLASS IS HOWEVER NOT RECOMMENDED FOR PRODUCTION AND HAS SECURITY
+ * IMPLICATIONS: YOU ARE ALLOWING ANY SERVICE TO ACT ON BEHALF OF A USER
+ * ON THIS SERVICE.
+ *
+ * @class CAS_ProxyChain_Any
+ * @category Authentication
+ * @package PhpCAS
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_ProxyChain_Any
+implements CAS_ProxyChain_Interface
+{
+
+ /**
+ * Match a list of proxies.
+ *
+ * @param array $list The list of proxies in front of this service.
+ *
+ * @return bool
+ */
+ public function matches(array $list)
+ {
+ phpCAS::trace("Using CAS_ProxyChain_Any. No proxy validation is performed.");
+ return true;
+ }
+
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxyChain/Interface.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxyChain/Interface.php
new file mode 100644
index 0000000..b1d6881
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxyChain/Interface.php
@@ -0,0 +1,53 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * An interface for classes that define a list of allowed proxies in front of
+ * the current application.
+ *
+ * @class CAS_ProxyChain_Interface
+ * @category Authentication
+ * @package PhpCAS
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+interface CAS_ProxyChain_Interface
+{
+
+ /**
+ * Match a list of proxies.
+ *
+ * @param array $list The list of proxies in front of this service.
+ *
+ * @return bool
+ */
+ public function matches(array $list);
+
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxyChain/Trusted.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxyChain/Trusted.php
new file mode 100644
index 0000000..e67d708
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxyChain/Trusted.php
@@ -0,0 +1,59 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * A proxy-chain definition that defines a chain up to a trusted proxy and
+ * delegates the resposibility of validating the rest of the chain to that
+ * trusted proxy.
+ *
+ * @class CAS_ProxyChain_Trusted
+ * @category Authentication
+ * @package PhpCAS
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_ProxyChain_Trusted
+extends CAS_ProxyChain
+implements CAS_ProxyChain_Interface
+{
+
+ /**
+ * Validate the size of the the list as compared to our chain.
+ *
+ * @param array $list list of proxies
+ *
+ * @return bool
+ */
+ protected function isSizeValid (array $list)
+ {
+ return (sizeof($this->chain) <= sizeof($list));
+ }
+
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxyTicketException.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxyTicketException.php
new file mode 100644
index 0000000..2f825b4
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ProxyTicketException.php
@@ -0,0 +1,71 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ *
+ */
+
+/**
+ * An Exception for errors related to fetching or validating proxy tickets.
+ *
+ * @class CAS_ProxyTicketException
+ * @category Authentication
+ * @package PhpCAS
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_ProxyTicketException
+extends BadMethodCallException
+implements CAS_Exception
+{
+
+ /**
+ * Constructor
+ *
+ * @param string $message Message text
+ * @param int $code Error code
+ *
+ * @return void
+ */
+ public function __construct ($message, $code = PHPCAS_SERVICE_PT_FAILURE)
+ {
+ // Warn if the code is not in our allowed list
+ $ptCodes = array(
+ PHPCAS_SERVICE_PT_FAILURE,
+ PHPCAS_SERVICE_PT_NO_SERVER_RESPONSE,
+ PHPCAS_SERVICE_PT_BAD_SERVER_RESPONSE,
+ );
+ if (!in_array($code, $ptCodes)) {
+ trigger_error(
+ 'Invalid code '.$code
+ .' passed. Must be one of PHPCAS_SERVICE_PT_FAILURE, PHPCAS_SERVICE_PT_NO_SERVER_RESPONSE, or PHPCAS_SERVICE_PT_BAD_SERVER_RESPONSE.'
+ );
+ }
+
+ parent::__construct($message, $code);
+ }
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Request/AbstractRequest.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Request/AbstractRequest.php
new file mode 100644
index 0000000..4f9013e
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Request/AbstractRequest.php
@@ -0,0 +1,380 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * Provides support for performing web-requests via curl
+ *
+ * @class CAS_Request_AbstractRequest
+ * @category Authentication
+ * @package PhpCAS
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+abstract class CAS_Request_AbstractRequest
+implements CAS_Request_RequestInterface
+{
+
+ protected $url = null;
+ protected $cookies = array();
+ protected $headers = array();
+ protected $isPost = false;
+ protected $postBody = null;
+ protected $caCertPath = null;
+ protected $validateCN = true;
+ private $_sent = false;
+ private $_responseHeaders = array();
+ private $_responseBody = null;
+ private $_errorMessage = '';
+
+ /*********************************************************
+ * Configure the Request
+ *********************************************************/
+
+ /**
+ * Set the URL of the Request
+ *
+ * @param string $url Url to set
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+ */
+ public function setUrl ($url)
+ {
+ if ($this->_sent) {
+ throw new CAS_OutOfSequenceException(
+ 'Request has already been sent cannot '.__METHOD__
+ );
+ }
+
+ $this->url = $url;
+ }
+
+ /**
+ * Add a cookie to the request.
+ *
+ * @param string $name Name of entry
+ * @param string $value value of entry
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+ */
+ public function addCookie ($name, $value)
+ {
+ if ($this->_sent) {
+ throw new CAS_OutOfSequenceException(
+ 'Request has already been sent cannot '.__METHOD__
+ );
+ }
+
+ $this->cookies[$name] = $value;
+ }
+
+ /**
+ * Add an array of cookies to the request.
+ * The cookie array is of the form
+ * array('cookie_name' => 'cookie_value', 'cookie_name2' => cookie_value2')
+ *
+ * @param array $cookies cookies to add
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+ */
+ public function addCookies (array $cookies)
+ {
+ if ($this->_sent) {
+ throw new CAS_OutOfSequenceException(
+ 'Request has already been sent cannot '.__METHOD__
+ );
+ }
+
+ $this->cookies = array_merge($this->cookies, $cookies);
+ }
+
+ /**
+ * Add a header string to the request.
+ *
+ * @param string $header Header to add
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+ */
+ public function addHeader ($header)
+ {
+ if ($this->_sent) {
+ throw new CAS_OutOfSequenceException(
+ 'Request has already been sent cannot '.__METHOD__
+ );
+ }
+
+ $this->headers[] = $header;
+ }
+
+ /**
+ * Add an array of header strings to the request.
+ *
+ * @param array $headers headers to add
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+ */
+ public function addHeaders (array $headers)
+ {
+ if ($this->_sent) {
+ throw new CAS_OutOfSequenceException(
+ 'Request has already been sent cannot '.__METHOD__
+ );
+ }
+
+ $this->headers = array_merge($this->headers, $headers);
+ }
+
+ /**
+ * Make the request a POST request rather than the default GET request.
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+ */
+ public function makePost ()
+ {
+ if ($this->_sent) {
+ throw new CAS_OutOfSequenceException(
+ 'Request has already been sent cannot '.__METHOD__
+ );
+ }
+
+ $this->isPost = true;
+ }
+
+ /**
+ * Add a POST body to the request
+ *
+ * @param string $body body to add
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+ */
+ public function setPostBody ($body)
+ {
+ if ($this->_sent) {
+ throw new CAS_OutOfSequenceException(
+ 'Request has already been sent cannot '.__METHOD__
+ );
+ }
+ if (!$this->isPost) {
+ throw new CAS_OutOfSequenceException(
+ 'Cannot add a POST body to a GET request, use makePost() first.'
+ );
+ }
+
+ $this->postBody = $body;
+ }
+
+ /**
+ * Specify the path to an SSL CA certificate to validate the server with.
+ *
+ * @param string $caCertPath path to cert
+ * @param bool $validate_cn valdiate CN of certificate
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+ */
+ public function setSslCaCert ($caCertPath,$validate_cn=true)
+ {
+ if ($this->_sent) {
+ throw new CAS_OutOfSequenceException(
+ 'Request has already been sent cannot '.__METHOD__
+ );
+ }
+ $this->caCertPath = $caCertPath;
+ $this->validateCN = $validate_cn;
+ }
+
+ /*********************************************************
+ * 2. Send the Request
+ *********************************************************/
+
+ /**
+ * Perform the request.
+ *
+ * @return bool TRUE on success, FALSE on failure.
+ * @throws CAS_OutOfSequenceException If called multiple times.
+ */
+ public function send ()
+ {
+ if ($this->_sent) {
+ throw new CAS_OutOfSequenceException(
+ 'Request has already been sent cannot send again.'
+ );
+ }
+ if (is_null($this->url) || !$this->url) {
+ throw new CAS_OutOfSequenceException(
+ 'A url must be specified via setUrl() before the request can be sent.'
+ );
+ }
+ $this->_sent = true;
+ return $this->sendRequest();
+ }
+
+ /**
+ * Send the request and store the results.
+ *
+ * @return bool TRUE on success, FALSE on failure.
+ */
+ abstract protected function sendRequest ();
+
+ /**
+ * Store the response headers.
+ *
+ * @param array $headers headers to store
+ *
+ * @return void
+ */
+ protected function storeResponseHeaders (array $headers)
+ {
+ $this->_responseHeaders = array_merge($this->_responseHeaders, $headers);
+ }
+
+ /**
+ * Store a single response header to our array.
+ *
+ * @param string $header header to store
+ *
+ * @return void
+ */
+ protected function storeResponseHeader ($header)
+ {
+ $this->_responseHeaders[] = $header;
+ }
+
+ /**
+ * Store the response body.
+ *
+ * @param string $body body to store
+ *
+ * @return void
+ */
+ protected function storeResponseBody ($body)
+ {
+ $this->_responseBody = $body;
+ }
+
+ /**
+ * Add a string to our error message.
+ *
+ * @param string $message message to add
+ *
+ * @return void
+ */
+ protected function storeErrorMessage ($message)
+ {
+ $this->_errorMessage .= $message;
+ }
+
+ /*********************************************************
+ * 3. Access the response
+ *********************************************************/
+
+ /**
+ * Answer the headers of the response.
+ *
+ * @return array An array of header strings.
+ * @throws CAS_OutOfSequenceException If called before the Request has been sent.
+ */
+ public function getResponseHeaders ()
+ {
+ if (!$this->_sent) {
+ throw new CAS_OutOfSequenceException(
+ 'Request has not been sent yet. Cannot '.__METHOD__
+ );
+ }
+ return $this->_responseHeaders;
+ }
+
+ /**
+ * Answer HTTP status code of the response
+ *
+ * @return int
+ * @throws CAS_OutOfSequenceException If called before the Request has been sent.
+ * @throws CAS_Request_Exception if the response did not contain a status code
+ */
+ public function getResponseStatusCode ()
+ {
+ if (!$this->_sent) {
+ throw new CAS_OutOfSequenceException(
+ 'Request has not been sent yet. Cannot '.__METHOD__
+ );
+ }
+
+ if (!preg_match(
+ '/HTTP\/[0-9.]+\s+([0-9]+)\s*(.*)/',
+ $this->_responseHeaders[0], $matches
+ )
+ ) {
+ throw new CAS_Request_Exception(
+ 'Bad response, no status code was found in the first line.'
+ );
+ }
+
+ return intval($matches[1]);
+ }
+
+ /**
+ * Answer the body of response.
+ *
+ * @return string
+ * @throws CAS_OutOfSequenceException If called before the Request has been sent.
+ */
+ public function getResponseBody ()
+ {
+ if (!$this->_sent) {
+ throw new CAS_OutOfSequenceException(
+ 'Request has not been sent yet. Cannot '.__METHOD__
+ );
+ }
+
+ return $this->_responseBody;
+ }
+
+ /**
+ * Answer a message describing any errors if the request failed.
+ *
+ * @return string
+ * @throws CAS_OutOfSequenceException If called before the Request has been sent.
+ */
+ public function getErrorMessage ()
+ {
+ if (!$this->_sent) {
+ throw new CAS_OutOfSequenceException(
+ 'Request has not been sent yet. Cannot '.__METHOD__
+ );
+ }
+ return $this->_errorMessage;
+ }
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Request/CurlMultiRequest.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Request/CurlMultiRequest.php
new file mode 100644
index 0000000..850f6f0
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Request/CurlMultiRequest.php
@@ -0,0 +1,147 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This interface defines a class library for performing multiple web requests
+ * in batches. Implementations of this interface may perform requests serially
+ * or in parallel.
+ *
+ * @class CAS_Request_CurlMultiRequest
+ * @category Authentication
+ * @package PhpCAS
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_Request_CurlMultiRequest
+implements CAS_Request_MultiRequestInterface
+{
+ private $_requests = array();
+ private $_sent = false;
+
+ /*********************************************************
+ * Add Requests
+ *********************************************************/
+
+ /**
+ * Add a new Request to this batch.
+ * Note, implementations will likely restrict requests to their own concrete
+ * class hierarchy.
+ *
+ * @param CAS_Request_RequestInterface $request reqest to add
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+ * @throws CAS_InvalidArgumentException If passed a Request of the wrong
+ * implmentation.
+ */
+ public function addRequest (CAS_Request_RequestInterface $request)
+ {
+ if ($this->_sent) {
+ throw new CAS_OutOfSequenceException(
+ 'Request has already been sent cannot '.__METHOD__
+ );
+ }
+ if (!$request instanceof CAS_Request_CurlRequest) {
+ throw new CAS_InvalidArgumentException(
+ 'As a CAS_Request_CurlMultiRequest, I can only work with CAS_Request_CurlRequest objects.'
+ );
+ }
+
+ $this->_requests[] = $request;
+ }
+
+ /**
+ * Retrieve the number of requests added to this batch.
+ *
+ * @return int number of request elements
+ * @throws CAS_OutOfSequenceException if the request has already been sent
+ */
+ public function getNumRequests()
+ {
+ if ($this->_sent) {
+ throw new CAS_OutOfSequenceException(
+ 'Request has already been sent cannot '.__METHOD__
+ );
+ }
+ return count($this->_requests);
+ }
+
+ /*********************************************************
+ * 2. Send the Request
+ *********************************************************/
+
+ /**
+ * Perform the request. After sending, all requests will have their
+ * responses poulated.
+ *
+ * @return bool TRUE on success, FALSE on failure.
+ * @throws CAS_OutOfSequenceException If called multiple times.
+ */
+ public function send ()
+ {
+ if ($this->_sent) {
+ throw new CAS_OutOfSequenceException(
+ 'Request has already been sent cannot send again.'
+ );
+ }
+ if (!count($this->_requests)) {
+ throw new CAS_OutOfSequenceException(
+ 'At least one request must be added via addRequest() before the multi-request can be sent.'
+ );
+ }
+
+ $this->_sent = true;
+
+ // Initialize our handles and configure all requests.
+ $handles = array();
+ $multiHandle = curl_multi_init();
+ foreach ($this->_requests as $i => $request) {
+ $handle = $request->initAndConfigure();
+ curl_setopt($handle, CURLOPT_RETURNTRANSFER, true);
+ $handles[$i] = $handle;
+ curl_multi_add_handle($multiHandle, $handle);
+ }
+
+ // Execute the requests in parallel.
+ do {
+ curl_multi_exec($multiHandle, $running);
+ } while ($running > 0);
+
+ // Populate all of the responses or errors back into the request objects.
+ foreach ($this->_requests as $i => $request) {
+ $buf = curl_multi_getcontent($handles[$i]);
+ $request->_storeResponseBody($buf);
+ curl_multi_remove_handle($multiHandle, $handles[$i]);
+ curl_close($handles[$i]);
+ }
+
+ curl_multi_close($multiHandle);
+ }
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Request/CurlRequest.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Request/CurlRequest.php
new file mode 100644
index 0000000..e30dd0d
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Request/CurlRequest.php
@@ -0,0 +1,198 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * Provides support for performing web-requests via curl
+ *
+ * @class CAS_Request_CurlRequest
+ * @category Authentication
+ * @package PhpCAS
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_Request_CurlRequest
+extends CAS_Request_AbstractRequest
+implements CAS_Request_RequestInterface
+{
+
+ /**
+ * Set additional curl options
+ *
+ * @param array $options option to set
+ *
+ * @return void
+ */
+ public function setCurlOptions (array $options)
+ {
+ $this->_curlOptions = $options;
+ }
+ private $_curlOptions = array();
+
+ /**
+ * Send the request and store the results.
+ *
+ * @return bool true on success, false on failure.
+ */
+ protected function sendRequest ()
+ {
+ phpCAS::traceBegin();
+
+ /*********************************************************
+ * initialize the CURL session
+ *********************************************************/
+ $ch = $this->initAndConfigure();
+
+ /*********************************************************
+ * Perform the query
+ *********************************************************/
+ $buf = curl_exec($ch);
+ if ( $buf === false ) {
+ phpCAS::trace('curl_exec() failed');
+ $this->storeErrorMessage(
+ 'CURL error #'.curl_errno($ch).': '.curl_error($ch)
+ );
+ $res = false;
+ } else {
+ $this->storeResponseBody($buf);
+ phpCAS::trace("Response Body: \n".$buf."\n");
+ $res = true;
+
+ }
+ // close the CURL session
+ curl_close($ch);
+
+ phpCAS::traceEnd($res);
+ return $res;
+ }
+
+ /**
+ * Internal method to initialize our cURL handle and configure the request.
+ * This method should NOT be used outside of the CurlRequest or the
+ * CurlMultiRequest.
+ *
+ * @return resource|false The cURL handle on success, false on failure
+ */
+ public function initAndConfigure()
+ {
+ /*********************************************************
+ * initialize the CURL session
+ *********************************************************/
+ $ch = curl_init($this->url);
+
+ curl_setopt_array($ch, $this->_curlOptions);
+
+ /*********************************************************
+ * Set SSL configuration
+ *********************************************************/
+ if ($this->caCertPath) {
+ if ($this->validateCN) {
+ curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
+ } else {
+ curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
+ }
+ curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 1);
+ curl_setopt($ch, CURLOPT_CAINFO, $this->caCertPath);
+ phpCAS::trace('CURL: Set CURLOPT_CAINFO ' . $this->caCertPath);
+ } else {
+ curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
+ curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
+ }
+
+ /*********************************************************
+ * Configure curl to capture our output.
+ *********************************************************/
+ // return the CURL output into a variable
+ curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
+
+ // get the HTTP header with a callback
+ curl_setopt($ch, CURLOPT_HEADERFUNCTION, array($this, '_curlReadHeaders'));
+
+ /*********************************************************
+ * Add cookie headers to our request.
+ *********************************************************/
+ if (count($this->cookies)) {
+ $cookieStrings = array();
+ foreach ($this->cookies as $name => $val) {
+ $cookieStrings[] = $name.'='.$val;
+ }
+ curl_setopt($ch, CURLOPT_COOKIE, implode(';', $cookieStrings));
+ }
+
+ /*********************************************************
+ * Add any additional headers
+ *********************************************************/
+ if (count($this->headers)) {
+ curl_setopt($ch, CURLOPT_HTTPHEADER, $this->headers);
+ }
+
+ /*********************************************************
+ * Flag and Body for POST requests
+ *********************************************************/
+ if ($this->isPost) {
+ curl_setopt($ch, CURLOPT_POST, 1);
+ curl_setopt($ch, CURLOPT_POSTFIELDS, $this->postBody);
+ }
+
+ /*********************************************************
+ * Set User Agent
+ *********************************************************/
+ curl_setopt($ch, CURLOPT_USERAGENT, 'phpCAS/' . phpCAS::getVersion());
+
+ return $ch;
+ }
+
+ /**
+ * Store the response body.
+ * This method should NOT be used outside of the CurlRequest or the
+ * CurlMultiRequest.
+ *
+ * @param string $body body to stor
+ *
+ * @return void
+ */
+ public function _storeResponseBody ($body)
+ {
+ $this->storeResponseBody($body);
+ }
+
+ /**
+ * Internal method for capturing the headers from a curl request.
+ *
+ * @param resource $ch handle of curl
+ * @param string $header header
+ *
+ * @return int
+ */
+ public function _curlReadHeaders ($ch, $header)
+ {
+ $this->storeResponseHeader($header);
+ return strlen($header);
+ }
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Request/Exception.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Request/Exception.php
new file mode 100644
index 0000000..dd5a2a5
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Request/Exception.php
@@ -0,0 +1,45 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * An Exception for problems performing requests
+ *
+ * @class CAS_Request_Exception
+ * @category Authentication
+ * @package PhpCAS
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_Request_Exception
+extends Exception
+implements CAS_Exception
+{
+
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Request/MultiRequestInterface.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Request/MultiRequestInterface.php
new file mode 100644
index 0000000..41002c7
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Request/MultiRequestInterface.php
@@ -0,0 +1,83 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This interface defines a class library for performing multiple web requests
+ * in batches. Implementations of this interface may perform requests serially
+ * or in parallel.
+ *
+ * @class CAS_Request_MultiRequestInterface
+ * @category Authentication
+ * @package PhpCAS
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+interface CAS_Request_MultiRequestInterface
+{
+
+ /*********************************************************
+ * Add Requests
+ *********************************************************/
+
+ /**
+ * Add a new Request to this batch.
+ * Note, implementations will likely restrict requests to their own concrete
+ * class hierarchy.
+ *
+ * @param CAS_Request_RequestInterface $request request interface
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after the Request has been
+ * sent.
+ * @throws CAS_InvalidArgumentException If passed a Request of the wrong
+ * implmentation.
+ */
+ public function addRequest (CAS_Request_RequestInterface $request);
+
+ /**
+ * Retrieve the number of requests added to this batch.
+ *
+ * @return int number of request elements
+ */
+ public function getNumRequests ();
+
+ /*********************************************************
+ * 2. Send the Request
+ *********************************************************/
+
+ /**
+ * Perform the request. After sending, all requests will have their
+ * responses poulated.
+ *
+ * @return bool TRUE on success, FALSE on failure.
+ * @throws CAS_OutOfSequenceException If called multiple times.
+ */
+ public function send ();
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Request/RequestInterface.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Request/RequestInterface.php
new file mode 100644
index 0000000..b8e8772
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Request/RequestInterface.php
@@ -0,0 +1,179 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This interface defines a class library for performing web requests.
+ *
+ * @class CAS_Request_RequestInterface
+ * @category Authentication
+ * @package PhpCAS
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+interface CAS_Request_RequestInterface
+{
+
+ /*********************************************************
+ * Configure the Request
+ *********************************************************/
+
+ /**
+ * Set the URL of the Request
+ *
+ * @param string $url url to set
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+ */
+ public function setUrl ($url);
+
+ /**
+ * Add a cookie to the request.
+ *
+ * @param string $name name of cookie
+ * @param string $value value of cookie
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+ */
+ public function addCookie ($name, $value);
+
+ /**
+ * Add an array of cookies to the request.
+ * The cookie array is of the form
+ * array('cookie_name' => 'cookie_value', 'cookie_name2' => cookie_value2')
+ *
+ * @param array $cookies cookies to add
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+ */
+ public function addCookies (array $cookies);
+
+ /**
+ * Add a header string to the request.
+ *
+ * @param string $header header to add
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+ */
+ public function addHeader ($header);
+
+ /**
+ * Add an array of header strings to the request.
+ *
+ * @param array $headers headers to add
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+ */
+ public function addHeaders (array $headers);
+
+ /**
+ * Make the request a POST request rather than the default GET request.
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+ */
+ public function makePost ();
+
+ /**
+ * Add a POST body to the request
+ *
+ * @param string $body body to add
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+ */
+ public function setPostBody ($body);
+
+
+ /**
+ * Specify the path to an SSL CA certificate to validate the server with.
+ *
+ * @param string $caCertPath path to cert file
+ * @param boolean $validate_cn validate CN of SSL certificate
+ *
+ * @return void
+ * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+ */
+ public function setSslCaCert ($caCertPath, $validate_cn = true);
+
+
+
+ /*********************************************************
+ * 2. Send the Request
+ *********************************************************/
+
+ /**
+ * Perform the request.
+ *
+ * @return bool TRUE on success, FALSE on failure.
+ * @throws CAS_OutOfSequenceException If called multiple times.
+ */
+ public function send ();
+
+ /*********************************************************
+ * 3. Access the response
+ *********************************************************/
+
+ /**
+ * Answer the headers of the response.
+ *
+ * @return array An array of header strings.
+ * @throws CAS_OutOfSequenceException If called before the Request has been sent.
+ */
+ public function getResponseHeaders ();
+
+ /**
+ * Answer HTTP status code of the response
+ *
+ * @return int
+ * @throws CAS_OutOfSequenceException If called before the Request has been sent.
+ */
+ public function getResponseStatusCode ();
+
+ /**
+ * Answer the body of response.
+ *
+ * @return string
+ * @throws CAS_OutOfSequenceException If called before the Request has been sent.
+ */
+ public function getResponseBody ();
+
+ /**
+ * Answer a message describing any errors if the request failed.
+ *
+ * @return string
+ * @throws CAS_OutOfSequenceException If called before the Request has been sent.
+ */
+ public function getErrorMessage ();
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ServiceBaseUrl/AllowedListDiscovery.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ServiceBaseUrl/AllowedListDiscovery.php
new file mode 100644
index 0000000..39d269c
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ServiceBaseUrl/AllowedListDiscovery.php
@@ -0,0 +1,152 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+
+/**
+ * Class that gets the service base URL of the PHP server by HTTP header
+ * discovery and allowlist check. This is used to generate service URL
+ * and PGT callback URL.
+ *
+ * @class CAS_ServiceBaseUrl_AllowedListDiscovery
+ * @category Authentication
+ * @package PhpCAS
+ * @author Henry Pan
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+class CAS_ServiceBaseUrl_AllowedListDiscovery
+extends CAS_ServiceBaseUrl_Base
+{
+ private $_list = array();
+
+ public function __construct($list) {
+ if (is_array($list)) {
+ if (count($list) === 0) {
+ throw new CAS_InvalidArgumentException('$list should not be empty');
+ }
+ foreach ($list as $value) {
+ $this->allow($value);
+ }
+ } else {
+ throw new CAS_TypeMismatchException($list, '$list', 'array');
+ }
+ }
+
+ /**
+ * Add a base URL to the allowed list.
+ *
+ * @param $url protocol, host name and port to add to the allowed list
+ *
+ * @return void
+ */
+ public function allow($url)
+ {
+ $this->_list[] = $this->removeStandardPort($url);
+ }
+
+ /**
+ * Check if the server name is allowed by configuration.
+ *
+ * @param $name server name to check
+ *
+ * @return bool whether the allowed list contains the server name
+ */
+ protected function isAllowed($name)
+ {
+ return in_array($name, $this->_list);
+ }
+
+ /**
+ * Discover the server name through HTTP headers.
+ *
+ * We read:
+ * - HTTP header X-Forwarded-Host
+ * - HTTP header X-Forwarded-Server and X-Forwarded-Port
+ * - HTTP header Host and SERVER_PORT
+ * - PHP SERVER_NAME (which can change based on the HTTP server used)
+ *
+ * The standard port will be omitted (80 for HTTP, 443 for HTTPS).
+ *
+ * @return string the discovered, unsanitized server protocol, hostname and port
+ */
+ protected function discover()
+ {
+ $isHttps = $this->isHttps();
+ $protocol = $isHttps ? 'https' : 'http';
+ $protocol .= '://';
+ if (!empty($_SERVER['HTTP_X_FORWARDED_HOST'])) {
+ // explode the host list separated by comma and use the first host
+ $hosts = explode(',', $_SERVER['HTTP_X_FORWARDED_HOST']);
+ // see rfc7239#5.3 and rfc7230#2.7.1: port is in HTTP_X_FORWARDED_HOST if non default
+ return $protocol . $hosts[0];
+ } else if (!empty($_SERVER['HTTP_X_FORWARDED_SERVER'])) {
+ $server_url = $_SERVER['HTTP_X_FORWARDED_SERVER'];
+ } else {
+ if (empty($_SERVER['SERVER_NAME'])) {
+ $server_url = $_SERVER['HTTP_HOST'];
+ } else {
+ $server_url = $_SERVER['SERVER_NAME'];
+ }
+ }
+ if (!strpos($server_url, ':')) {
+ if (empty($_SERVER['HTTP_X_FORWARDED_PORT'])) {
+ $server_port = $_SERVER['SERVER_PORT'];
+ } else {
+ $ports = explode(',', $_SERVER['HTTP_X_FORWARDED_PORT']);
+ $server_port = $ports[0];
+ }
+
+ $server_url .= ':';
+ $server_url .= $server_port;
+ }
+ return $protocol . $server_url;
+ }
+
+ /**
+ * Get PHP server base URL.
+ *
+ * @return string the server protocol, hostname and port
+ */
+ public function get()
+ {
+ phpCAS::traceBegin();
+ $result = $this->removeStandardPort($this->discover());
+ phpCAS::trace("Discovered server base URL: " . $result);
+ if ($this->isAllowed($result)) {
+ phpCAS::trace("Server base URL is allowed");
+ phpCAS::traceEnd(true);
+ } else {
+ $result = $this->_list[0];
+ phpCAS::trace("Server base URL is not allowed, using default: " . $result);
+ phpCAS::traceEnd(false);
+ }
+ return $result;
+ }
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ServiceBaseUrl/Base.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ServiceBaseUrl/Base.php
new file mode 100644
index 0000000..6b4d3f3
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ServiceBaseUrl/Base.php
@@ -0,0 +1,98 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * Base class of CAS/ServiceBaseUrl that implements isHTTPS method.
+ *
+ * @class CAS_ServiceBaseUrl_Base
+ * @category Authentication
+ * @package PhpCAS
+ * @author Henry Pan
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+abstract class CAS_ServiceBaseUrl_Base
+implements CAS_ServiceBaseUrl_Interface
+{
+
+ /**
+ * Get PHP server name.
+ *
+ * @return string the server hostname and port of the server
+ */
+ abstract public function get();
+
+ /**
+ * Check whether HTTPS is used.
+ *
+ * This is used to construct the protocol in the URL.
+ *
+ * @return bool true if HTTPS is used
+ */
+ public function isHttps() {
+ if (!empty($_SERVER['HTTP_X_FORWARDED_PROTO'])) {
+ return ($_SERVER['HTTP_X_FORWARDED_PROTO'] === 'https');
+ } elseif (!empty($_SERVER['HTTP_X_FORWARDED_PROTOCOL'])) {
+ return ($_SERVER['HTTP_X_FORWARDED_PROTOCOL'] === 'https');
+ } elseif ( isset($_SERVER['HTTPS'])
+ && !empty($_SERVER['HTTPS'])
+ && strcasecmp($_SERVER['HTTPS'], 'off') !== 0
+ ) {
+ return true;
+ }
+ return false;
+ }
+
+ /**
+ * Remove standard HTTP and HTTPS port for discovery and allowlist input.
+ *
+ * @param $url URL as https://domain:port without trailing slash
+ * @return standardized URL, or the original URL
+ * @throws CAS_InvalidArgumentException if the URL does not include the protocol
+ */
+ protected function removeStandardPort($url) {
+ if (strpos($url, "://") === false) {
+ throw new CAS_InvalidArgumentException(
+ "Configured base URL should include the protocol string: " . $url);
+ }
+
+ $url = rtrim($url, '/');
+
+ if (strpos($url, "https://") === 0 && substr_compare($url, ':443', -4) === 0) {
+ return substr($url, 0, -4);
+ }
+
+ if (strpos($url, "http://") === 0 && substr_compare($url, ':80', -3) === 0) {
+ return substr($url, 0, -3);
+ }
+
+ return $url;
+ }
+
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ServiceBaseUrl/Interface.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ServiceBaseUrl/Interface.php
new file mode 100644
index 0000000..77cb2bd
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ServiceBaseUrl/Interface.php
@@ -0,0 +1,61 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * An interface for classes that gets the server name of the PHP server.
+ * This is used to generate service URL and PGT callback URL.
+ *
+ * @class CAS_ServiceBaseUrl_Interface
+ * @category Authentication
+ * @package PhpCAS
+ * @author Henry Pan
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+interface CAS_ServiceBaseUrl_Interface
+{
+
+ /**
+ * Get PHP HTTP protocol and server name.
+ *
+ * @return string protocol, server hostname, and optionally port,
+ * without trailing slash (https://localhost:8443)
+ */
+ public function get();
+
+ /**
+ * Check whether HTTPS is used.
+ *
+ * This is used to construct the protocol in the URL.
+ *
+ * @return bool true if HTTPS is used
+ */
+ public function isHttps();
+
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ServiceBaseUrl/Static.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ServiceBaseUrl/Static.php
new file mode 100644
index 0000000..577ecb9
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/ServiceBaseUrl/Static.php
@@ -0,0 +1,69 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+
+/**
+ * Class that gets the server name of the PHP server by statically set
+ * hostname and port. This is used to generate service URL and PGT
+ * callback URL.
+ *
+ * @class CAS_ServiceBaseUrl_Static
+ * @category Authentication
+ * @package PhpCAS
+ * @author Henry Pan
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+class CAS_ServiceBaseUrl_Static
+extends CAS_ServiceBaseUrl_Base
+{
+ private $_name = null;
+
+ public function __construct($name) {
+ if (is_string($name)) {
+ $this->_name = $this->removeStandardPort($name);
+ } else {
+ throw new CAS_TypeMismatchException($name, '$name', 'string');
+ }
+ }
+
+ /**
+ * Get the server name through static config.
+ *
+ * @return string the server hostname and port of the server configured
+ */
+ public function get()
+ {
+ phpCAS::traceBegin();
+ phpCAS::trace("Returning static server name: " . $this->_name);
+ phpCAS::traceEnd(true);
+ return $this->_name;
+ }
+}
\ No newline at end of file
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Session/PhpSession.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Session/PhpSession.php
new file mode 100644
index 0000000..031cbbc
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/Session/PhpSession.php
@@ -0,0 +1,45 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * Empty class used as a default implementation for phpCAS.
+ *
+ * Implements the standard PHP session handler without no alterations.
+ *
+ * @class CAS_Session_PhpSession
+ * @category Authentication
+ * @package PhpCAS
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_Session_PhpSession extends SessionHandler implements SessionHandlerInterface
+{
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/TypeMismatchException.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/TypeMismatchException.php
new file mode 100644
index 0000000..72bdc87
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/jasig/phpcas/source/CAS/TypeMismatchException.php
@@ -0,0 +1,70 @@
+
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * Exception that denotes invalid arguments were passed.
+ *
+ * @class CAS_InvalidArgumentException
+ * @category Authentication
+ * @package PhpCAS
+ * @author Adam Franco
+ * @license http://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
+ * @link https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_TypeMismatchException
+extends CAS_InvalidArgumentException
+{
+ /**
+ * Constructor, provides a nice message.
+ *
+ * @param mixed $argument Argument
+ * @param string $argumentName Argument Name
+ * @param string $type Type
+ * @param string $message Error Message
+ * @param integer $code Code
+ *
+ * @return void
+ */
+ public function __construct (
+ $argument, $argumentName, $type, $message = '', $code = 0
+ ) {
+ if (is_object($argument)) {
+ $foundType = get_class($argument).' object';
+ } else {
+ $foundType = gettype($argument);
+ }
+
+ parent::__construct(
+ 'type mismatched for parameter '
+ . $argumentName . ' (should be \'' . $type .' \'), '
+ . $foundType . ' given. ' . $message, $code
+ );
+ }
+}
+?>
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/psr/log/LICENSE b/docker/volume/nextcloud/envole/app/user_cas/vendor/psr/log/LICENSE
new file mode 100644
index 0000000..474c952
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/psr/log/LICENSE
@@ -0,0 +1,19 @@
+Copyright (c) 2012 PHP Framework Interoperability Group
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/psr/log/README.md b/docker/volume/nextcloud/envole/app/user_cas/vendor/psr/log/README.md
new file mode 100644
index 0000000..a9f20c4
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/psr/log/README.md
@@ -0,0 +1,58 @@
+PSR Log
+=======
+
+This repository holds all interfaces/classes/traits related to
+[PSR-3](https://github.com/php-fig/fig-standards/blob/master/accepted/PSR-3-logger-interface.md).
+
+Note that this is not a logger of its own. It is merely an interface that
+describes a logger. See the specification for more details.
+
+Installation
+------------
+
+```bash
+composer require psr/log
+```
+
+Usage
+-----
+
+If you need a logger, you can use the interface like this:
+
+```php
+logger = $logger;
+ }
+
+ public function doSomething()
+ {
+ if ($this->logger) {
+ $this->logger->info('Doing work');
+ }
+
+ try {
+ $this->doSomethingElse();
+ } catch (Exception $exception) {
+ $this->logger->error('Oh no!', array('exception' => $exception));
+ }
+
+ // do something useful
+ }
+}
+```
+
+You can then pick one of the implementations of the interface to get a logger.
+
+If you want to implement the interface, you can require this package and
+implement `Psr\Log\LoggerInterface` in your code. Please read the
+[specification text](https://github.com/php-fig/fig-standards/blob/master/accepted/PSR-3-logger-interface.md)
+for details.
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/psr/log/composer.json b/docker/volume/nextcloud/envole/app/user_cas/vendor/psr/log/composer.json
new file mode 100644
index 0000000..879fc6f
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/psr/log/composer.json
@@ -0,0 +1,26 @@
+{
+ "name": "psr/log",
+ "description": "Common interface for logging libraries",
+ "keywords": ["psr", "psr-3", "log"],
+ "homepage": "https://github.com/php-fig/log",
+ "license": "MIT",
+ "authors": [
+ {
+ "name": "PHP-FIG",
+ "homepage": "https://www.php-fig.org/"
+ }
+ ],
+ "require": {
+ "php": ">=8.0.0"
+ },
+ "autoload": {
+ "psr-4": {
+ "Psr\\Log\\": "src"
+ }
+ },
+ "extra": {
+ "branch-alias": {
+ "dev-master": "3.x-dev"
+ }
+ }
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/psr/log/src/AbstractLogger.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/psr/log/src/AbstractLogger.php
new file mode 100644
index 0000000..d60a091
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/psr/log/src/AbstractLogger.php
@@ -0,0 +1,15 @@
+logger = $logger;
+ }
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/psr/log/src/LoggerInterface.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/psr/log/src/LoggerInterface.php
new file mode 100644
index 0000000..b3a24b5
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/psr/log/src/LoggerInterface.php
@@ -0,0 +1,125 @@
+log(LogLevel::EMERGENCY, $message, $context);
+ }
+
+ /**
+ * Action must be taken immediately.
+ *
+ * Example: Entire website down, database unavailable, etc. This should
+ * trigger the SMS alerts and wake you up.
+ *
+ * @param string|\Stringable $message
+ * @param array $context
+ *
+ * @return void
+ */
+ public function alert(string|\Stringable $message, array $context = []): void
+ {
+ $this->log(LogLevel::ALERT, $message, $context);
+ }
+
+ /**
+ * Critical conditions.
+ *
+ * Example: Application component unavailable, unexpected exception.
+ *
+ * @param string|\Stringable $message
+ * @param array $context
+ *
+ * @return void
+ */
+ public function critical(string|\Stringable $message, array $context = []): void
+ {
+ $this->log(LogLevel::CRITICAL, $message, $context);
+ }
+
+ /**
+ * Runtime errors that do not require immediate action but should typically
+ * be logged and monitored.
+ *
+ * @param string|\Stringable $message
+ * @param array $context
+ *
+ * @return void
+ */
+ public function error(string|\Stringable $message, array $context = []): void
+ {
+ $this->log(LogLevel::ERROR, $message, $context);
+ }
+
+ /**
+ * Exceptional occurrences that are not errors.
+ *
+ * Example: Use of deprecated APIs, poor use of an API, undesirable things
+ * that are not necessarily wrong.
+ *
+ * @param string|\Stringable $message
+ * @param array $context
+ *
+ * @return void
+ */
+ public function warning(string|\Stringable $message, array $context = []): void
+ {
+ $this->log(LogLevel::WARNING, $message, $context);
+ }
+
+ /**
+ * Normal but significant events.
+ *
+ * @param string|\Stringable $message
+ * @param array $context
+ *
+ * @return void
+ */
+ public function notice(string|\Stringable $message, array $context = []): void
+ {
+ $this->log(LogLevel::NOTICE, $message, $context);
+ }
+
+ /**
+ * Interesting events.
+ *
+ * Example: User logs in, SQL logs.
+ *
+ * @param string|\Stringable $message
+ * @param array $context
+ *
+ * @return void
+ */
+ public function info(string|\Stringable $message, array $context = []): void
+ {
+ $this->log(LogLevel::INFO, $message, $context);
+ }
+
+ /**
+ * Detailed debug information.
+ *
+ * @param string|\Stringable $message
+ * @param array $context
+ *
+ * @return void
+ */
+ public function debug(string|\Stringable $message, array $context = []): void
+ {
+ $this->log(LogLevel::DEBUG, $message, $context);
+ }
+
+ /**
+ * Logs with an arbitrary level.
+ *
+ * @param mixed $level
+ * @param string|\Stringable $message
+ * @param array $context
+ *
+ * @return void
+ *
+ * @throws \Psr\Log\InvalidArgumentException
+ */
+ abstract public function log($level, string|\Stringable $message, array $context = []): void;
+}
diff --git a/docker/volume/nextcloud/envole/app/user_cas/vendor/psr/log/src/NullLogger.php b/docker/volume/nextcloud/envole/app/user_cas/vendor/psr/log/src/NullLogger.php
new file mode 100644
index 0000000..c1cc3c0
--- /dev/null
+++ b/docker/volume/nextcloud/envole/app/user_cas/vendor/psr/log/src/NullLogger.php
@@ -0,0 +1,30 @@
+logger) { }`
+ * blocks.
+ */
+class NullLogger extends AbstractLogger
+{
+ /**
+ * Logs with an arbitrary level.
+ *
+ * @param mixed $level
+ * @param string|\Stringable $message
+ * @param array $context
+ *
+ * @return void
+ *
+ * @throws \Psr\Log\InvalidArgumentException
+ */
+ public function log($level, string|\Stringable $message, array $context = []): void
+ {
+ // noop
+ }
+}
diff --git a/src/envole-1.0/volume/nextcloud/prestart/prestart.sh b/docker/volume/nextcloud/prestart/prestart.sh
similarity index 100%
rename from src/envole-1.0/volume/nextcloud/prestart/prestart.sh
rename to docker/volume/nextcloud/prestart/prestart.sh
diff --git a/src/envole-1.0/volume/ninegate/data/public/avatar/admin.jpg b/docker/volume/ninegate/data/public/avatar/admin.jpg
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/avatar/admin.jpg
rename to docker/volume/ninegate/data/public/avatar/admin.jpg
diff --git a/src/envole-1.0/volume/ninegate/data/public/avatar/noavatar.png b/docker/volume/ninegate/data/public/avatar/noavatar.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/avatar/noavatar.png
rename to docker/volume/ninegate/data/public/avatar/noavatar.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/avatar/system.jpg b/docker/volume/ninegate/data/public/avatar/system.jpg
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/avatar/system.jpg
rename to docker/volume/ninegate/data/public/avatar/system.jpg
diff --git a/src/envole-1.0/volume/ninegate/data/public/header/header.png b/docker/volume/ninegate/data/public/header/header.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/header/header.png
rename to docker/volume/ninegate/data/public/header/header.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_add.png b/docker/volume/ninegate/data/public/icon/icon_add.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_add.png
rename to docker/volume/ninegate/data/public/icon/icon_add.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_adminer.png b/docker/volume/ninegate/data/public/icon/icon_adminer.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_adminer.png
rename to docker/volume/ninegate/data/public/icon/icon_adminer.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_anchor.png b/docker/volume/ninegate/data/public/icon/icon_anchor.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_anchor.png
rename to docker/volume/ninegate/data/public/icon/icon_anchor.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_aperture.png b/docker/volume/ninegate/data/public/icon/icon_aperture.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_aperture.png
rename to docker/volume/ninegate/data/public/icon/icon_aperture.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_arrow-down.png b/docker/volume/ninegate/data/public/icon/icon_arrow-down.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_arrow-down.png
rename to docker/volume/ninegate/data/public/icon/icon_arrow-down.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_arrow-up.png b/docker/volume/ninegate/data/public/icon/icon_arrow-up.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_arrow-up.png
rename to docker/volume/ninegate/data/public/icon/icon_arrow-up.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_art.png b/docker/volume/ninegate/data/public/icon/icon_art.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_art.png
rename to docker/volume/ninegate/data/public/icon/icon_art.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_balado.png b/docker/volume/ninegate/data/public/icon/icon_balado.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_balado.png
rename to docker/volume/ninegate/data/public/icon/icon_balado.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_bar-chart.png b/docker/volume/ninegate/data/public/icon/icon_bar-chart.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_bar-chart.png
rename to docker/volume/ninegate/data/public/icon/icon_bar-chart.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_batteryfull.png b/docker/volume/ninegate/data/public/icon/icon_batteryfull.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_batteryfull.png
rename to docker/volume/ninegate/data/public/icon/icon_batteryfull.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_batterylow.png b/docker/volume/ninegate/data/public/icon/icon_batterylow.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_batterylow.png
rename to docker/volume/ninegate/data/public/icon/icon_batterylow.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_bdd.png b/docker/volume/ninegate/data/public/icon/icon_bdd.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_bdd.png
rename to docker/volume/ninegate/data/public/icon/icon_bdd.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_bike.png b/docker/volume/ninegate/data/public/icon/icon_bike.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_bike.png
rename to docker/volume/ninegate/data/public/icon/icon_bike.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_biker.png b/docker/volume/ninegate/data/public/icon/icon_biker.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_biker.png
rename to docker/volume/ninegate/data/public/icon/icon_biker.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_bikewheel.png b/docker/volume/ninegate/data/public/icon/icon_bikewheel.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_bikewheel.png
rename to docker/volume/ninegate/data/public/icon/icon_bikewheel.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_blimp.png b/docker/volume/ninegate/data/public/icon/icon_blimp.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_blimp.png
rename to docker/volume/ninegate/data/public/icon/icon_blimp.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_bolt.png b/docker/volume/ninegate/data/public/icon/icon_bolt.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_bolt.png
rename to docker/volume/ninegate/data/public/icon/icon_bolt.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_bomb.png b/docker/volume/ninegate/data/public/icon/icon_bomb.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_bomb.png
rename to docker/volume/ninegate/data/public/icon/icon_bomb.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_booklet.png b/docker/volume/ninegate/data/public/icon/icon_booklet.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_booklet.png
rename to docker/volume/ninegate/data/public/icon/icon_booklet.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_bookshelf.png b/docker/volume/ninegate/data/public/icon/icon_bookshelf.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_bookshelf.png
rename to docker/volume/ninegate/data/public/icon/icon_bookshelf.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_briefcase.png b/docker/volume/ninegate/data/public/icon/icon_briefcase.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_briefcase.png
rename to docker/volume/ninegate/data/public/icon/icon_briefcase.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_brightness.png b/docker/volume/ninegate/data/public/icon/icon_brightness.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_brightness.png
rename to docker/volume/ninegate/data/public/icon/icon_brightness.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_browser.png b/docker/volume/ninegate/data/public/icon/icon_browser.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_browser.png
rename to docker/volume/ninegate/data/public/icon/icon_browser.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_brush-pencil.png b/docker/volume/ninegate/data/public/icon/icon_brush-pencil.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_brush-pencil.png
rename to docker/volume/ninegate/data/public/icon/icon_brush-pencil.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_cadoles.png b/docker/volume/ninegate/data/public/icon/icon_cadoles.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_cadoles.png
rename to docker/volume/ninegate/data/public/icon/icon_cadoles.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_calculator.png b/docker/volume/ninegate/data/public/icon/icon_calculator.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_calculator.png
rename to docker/volume/ninegate/data/public/icon/icon_calculator.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_calendar.png b/docker/volume/ninegate/data/public/icon/icon_calendar.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_calendar.png
rename to docker/volume/ninegate/data/public/icon/icon_calendar.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_camera.png b/docker/volume/ninegate/data/public/icon/icon_camera.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_camera.png
rename to docker/volume/ninegate/data/public/icon/icon_camera.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_car.png b/docker/volume/ninegate/data/public/icon/icon_car.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_car.png
rename to docker/volume/ninegate/data/public/icon/icon_car.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_cart.png b/docker/volume/ninegate/data/public/icon/icon_cart.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_cart.png
rename to docker/volume/ninegate/data/public/icon/icon_cart.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_carwheel.png b/docker/volume/ninegate/data/public/icon/icon_carwheel.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_carwheel.png
rename to docker/volume/ninegate/data/public/icon/icon_carwheel.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_caution.png b/docker/volume/ninegate/data/public/icon/icon_caution.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_caution.png
rename to docker/volume/ninegate/data/public/icon/icon_caution.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_cdt.png b/docker/volume/ninegate/data/public/icon/icon_cdt.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_cdt.png
rename to docker/volume/ninegate/data/public/icon/icon_cdt.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_chart.png b/docker/volume/ninegate/data/public/icon/icon_chart.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_chart.png
rename to docker/volume/ninegate/data/public/icon/icon_chart.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_chartpie.png b/docker/volume/ninegate/data/public/icon/icon_chartpie.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_chartpie.png
rename to docker/volume/ninegate/data/public/icon/icon_chartpie.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_chat.png b/docker/volume/ninegate/data/public/icon/icon_chat.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_chat.png
rename to docker/volume/ninegate/data/public/icon/icon_chat.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_check.png b/docker/volume/ninegate/data/public/icon/icon_check.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_check.png
rename to docker/volume/ninegate/data/public/icon/icon_check.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_circlecompass.png b/docker/volume/ninegate/data/public/icon/icon_circlecompass.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_circlecompass.png
rename to docker/volume/ninegate/data/public/icon/icon_circlecompass.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_clapboard.png b/docker/volume/ninegate/data/public/icon/icon_clapboard.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_clapboard.png
rename to docker/volume/ninegate/data/public/icon/icon_clapboard.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_clipboard.png b/docker/volume/ninegate/data/public/icon/icon_clipboard.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_clipboard.png
rename to docker/volume/ninegate/data/public/icon/icon_clipboard.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_clock.png b/docker/volume/ninegate/data/public/icon/icon_clock.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_clock.png
rename to docker/volume/ninegate/data/public/icon/icon_clock.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_cloud.png b/docker/volume/ninegate/data/public/icon/icon_cloud.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_cloud.png
rename to docker/volume/ninegate/data/public/icon/icon_cloud.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_cmyk.png b/docker/volume/ninegate/data/public/icon/icon_cmyk.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_cmyk.png
rename to docker/volume/ninegate/data/public/icon/icon_cmyk.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_colorwheel.png b/docker/volume/ninegate/data/public/icon/icon_colorwheel.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_colorwheel.png
rename to docker/volume/ninegate/data/public/icon/icon_colorwheel.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_compass.png b/docker/volume/ninegate/data/public/icon/icon_compass.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_compass.png
rename to docker/volume/ninegate/data/public/icon/icon_compass.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_compose.png b/docker/volume/ninegate/data/public/icon/icon_compose.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_compose.png
rename to docker/volume/ninegate/data/public/icon/icon_compose.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_computer.png b/docker/volume/ninegate/data/public/icon/icon_computer.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_computer.png
rename to docker/volume/ninegate/data/public/icon/icon_computer.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_cone.png b/docker/volume/ninegate/data/public/icon/icon_cone.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_cone.png
rename to docker/volume/ninegate/data/public/icon/icon_cone.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_contacts.png b/docker/volume/ninegate/data/public/icon/icon_contacts.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_contacts.png
rename to docker/volume/ninegate/data/public/icon/icon_contacts.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_contrast.png b/docker/volume/ninegate/data/public/icon/icon_contrast.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_contrast.png
rename to docker/volume/ninegate/data/public/icon/icon_contrast.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_countdown.png b/docker/volume/ninegate/data/public/icon/icon_countdown.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_countdown.png
rename to docker/volume/ninegate/data/public/icon/icon_countdown.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_creditcard.png b/docker/volume/ninegate/data/public/icon/icon_creditcard.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_creditcard.png
rename to docker/volume/ninegate/data/public/icon/icon_creditcard.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_crop.png b/docker/volume/ninegate/data/public/icon/icon_crop.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_crop.png
rename to docker/volume/ninegate/data/public/icon/icon_crop.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_crossroads.png b/docker/volume/ninegate/data/public/icon/icon_crossroads.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_crossroads.png
rename to docker/volume/ninegate/data/public/icon/icon_crossroads.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_crous.png b/docker/volume/ninegate/data/public/icon/icon_crous.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_crous.png
rename to docker/volume/ninegate/data/public/icon/icon_crous.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_cruise.png b/docker/volume/ninegate/data/public/icon/icon_cruise.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_cruise.png
rename to docker/volume/ninegate/data/public/icon/icon_cruise.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_cursor.png b/docker/volume/ninegate/data/public/icon/icon_cursor.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_cursor.png
rename to docker/volume/ninegate/data/public/icon/icon_cursor.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_denied.png b/docker/volume/ninegate/data/public/icon/icon_denied.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_denied.png
rename to docker/volume/ninegate/data/public/icon/icon_denied.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_dev.png b/docker/volume/ninegate/data/public/icon/icon_dev.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_dev.png
rename to docker/volume/ninegate/data/public/icon/icon_dev.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_die.png b/docker/volume/ninegate/data/public/icon/icon_die.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_die.png
rename to docker/volume/ninegate/data/public/icon/icon_die.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_document.png b/docker/volume/ninegate/data/public/icon/icon_document.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_document.png
rename to docker/volume/ninegate/data/public/icon/icon_document.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_dokuwiki.png b/docker/volume/ninegate/data/public/icon/icon_dokuwiki.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_dokuwiki.png
rename to docker/volume/ninegate/data/public/icon/icon_dokuwiki.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_dolly.png b/docker/volume/ninegate/data/public/icon/icon_dolly.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_dolly.png
rename to docker/volume/ninegate/data/public/icon/icon_dolly.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_door.png b/docker/volume/ninegate/data/public/icon/icon_door.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_door.png
rename to docker/volume/ninegate/data/public/icon/icon_door.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_download.png b/docker/volume/ninegate/data/public/icon/icon_download.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_download.png
rename to docker/volume/ninegate/data/public/icon/icon_download.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_ead.png b/docker/volume/ninegate/data/public/icon/icon_ead.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_ead.png
rename to docker/volume/ninegate/data/public/icon/icon_ead.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_easel.png b/docker/volume/ninegate/data/public/icon/icon_easel.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_easel.png
rename to docker/volume/ninegate/data/public/icon/icon_easel.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_econnect.png b/docker/volume/ninegate/data/public/icon/icon_econnect.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_econnect.png
rename to docker/volume/ninegate/data/public/icon/icon_econnect.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_email.png b/docker/volume/ninegate/data/public/icon/icon_email.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_email.png
rename to docker/volume/ninegate/data/public/icon/icon_email.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_eoe.png b/docker/volume/ninegate/data/public/icon/icon_eoe.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_eoe.png
rename to docker/volume/ninegate/data/public/icon/icon_eoe.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_eop.png b/docker/volume/ninegate/data/public/icon/icon_eop.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_eop.png
rename to docker/volume/ninegate/data/public/icon/icon_eop.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_etherhome.png b/docker/volume/ninegate/data/public/icon/icon_etherhome.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_etherhome.png
rename to docker/volume/ninegate/data/public/icon/icon_etherhome.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_euro.png b/docker/volume/ninegate/data/public/icon/icon_euro.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_euro.png
rename to docker/volume/ninegate/data/public/icon/icon_euro.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_eye.png b/docker/volume/ninegate/data/public/icon/icon_eye.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_eye.png
rename to docker/volume/ninegate/data/public/icon/icon_eye.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_eyedropper.png b/docker/volume/ninegate/data/public/icon/icon_eyedropper.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_eyedropper.png
rename to docker/volume/ninegate/data/public/icon/icon_eyedropper.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_fashion.png b/docker/volume/ninegate/data/public/icon/icon_fashion.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_fashion.png
rename to docker/volume/ninegate/data/public/icon/icon_fashion.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_filmreel.png b/docker/volume/ninegate/data/public/icon/icon_filmreel.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_filmreel.png
rename to docker/volume/ninegate/data/public/icon/icon_filmreel.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_filmroll.png b/docker/volume/ninegate/data/public/icon/icon_filmroll.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_filmroll.png
rename to docker/volume/ninegate/data/public/icon/icon_filmroll.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_flag.png b/docker/volume/ninegate/data/public/icon/icon_flag.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_flag.png
rename to docker/volume/ninegate/data/public/icon/icon_flag.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_flame.png b/docker/volume/ninegate/data/public/icon/icon_flame.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_flame.png
rename to docker/volume/ninegate/data/public/icon/icon_flame.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_flash.png b/docker/volume/ninegate/data/public/icon/icon_flash.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_flash.png
rename to docker/volume/ninegate/data/public/icon/icon_flash.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_flower.png b/docker/volume/ninegate/data/public/icon/icon_flower.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_flower.png
rename to docker/volume/ninegate/data/public/icon/icon_flower.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_fluxbb.png b/docker/volume/ninegate/data/public/icon/icon_fluxbb.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_fluxbb.png
rename to docker/volume/ninegate/data/public/icon/icon_fluxbb.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_focus.png b/docker/volume/ninegate/data/public/icon/icon_focus.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_focus.png
rename to docker/volume/ninegate/data/public/icon/icon_focus.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_folder.png b/docker/volume/ninegate/data/public/icon/icon_folder.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_folder.png
rename to docker/volume/ninegate/data/public/icon/icon_folder.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_frames.png b/docker/volume/ninegate/data/public/icon/icon_frames.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_frames.png
rename to docker/volume/ninegate/data/public/icon/icon_frames.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_gamecontroller.png b/docker/volume/ninegate/data/public/icon/icon_gamecontroller.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_gamecontroller.png
rename to docker/volume/ninegate/data/public/icon/icon_gamecontroller.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_gas.png b/docker/volume/ninegate/data/public/icon/icon_gas.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_gas.png
rename to docker/volume/ninegate/data/public/icon/icon_gas.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_gear.png b/docker/volume/ninegate/data/public/icon/icon_gear.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_gear.png
rename to docker/volume/ninegate/data/public/icon/icon_gear.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_genconfig.png b/docker/volume/ninegate/data/public/icon/icon_genconfig.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_genconfig.png
rename to docker/volume/ninegate/data/public/icon/icon_genconfig.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_genius.png b/docker/volume/ninegate/data/public/icon/icon_genius.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_genius.png
rename to docker/volume/ninegate/data/public/icon/icon_genius.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_gepi.png b/docker/volume/ninegate/data/public/icon/icon_gepi.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_gepi.png
rename to docker/volume/ninegate/data/public/icon/icon_gepi.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_global.png b/docker/volume/ninegate/data/public/icon/icon_global.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_global.png
rename to docker/volume/ninegate/data/public/icon/icon_global.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_globe.png b/docker/volume/ninegate/data/public/icon/icon_globe.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_globe.png
rename to docker/volume/ninegate/data/public/icon/icon_globe.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_glpi.png b/docker/volume/ninegate/data/public/icon/icon_glpi.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_glpi.png
rename to docker/volume/ninegate/data/public/icon/icon_glpi.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_gps.png b/docker/volume/ninegate/data/public/icon/icon_gps.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_gps.png
rename to docker/volume/ninegate/data/public/icon/icon_gps.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_grr.png b/docker/volume/ninegate/data/public/icon/icon_grr.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_grr.png
rename to docker/volume/ninegate/data/public/icon/icon_grr.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_hazard.png b/docker/volume/ninegate/data/public/icon/icon_hazard.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_hazard.png
rename to docker/volume/ninegate/data/public/icon/icon_hazard.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_heart.png b/docker/volume/ninegate/data/public/icon/icon_heart.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_heart.png
rename to docker/volume/ninegate/data/public/icon/icon_heart.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_helicopter.png b/docker/volume/ninegate/data/public/icon/icon_helicopter.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_helicopter.png
rename to docker/volume/ninegate/data/public/icon/icon_helicopter.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_hotair.png b/docker/volume/ninegate/data/public/icon/icon_hotair.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_hotair.png
rename to docker/volume/ninegate/data/public/icon/icon_hotair.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_hourglass.png b/docker/volume/ninegate/data/public/icon/icon_hourglass.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_hourglass.png
rename to docker/volume/ninegate/data/public/icon/icon_hourglass.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_image.png b/docker/volume/ninegate/data/public/icon/icon_image.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_image.png
rename to docker/volume/ninegate/data/public/icon/icon_image.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_info.png b/docker/volume/ninegate/data/public/icon/icon_info.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_info.png
rename to docker/volume/ninegate/data/public/icon/icon_info.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_interstate.png b/docker/volume/ninegate/data/public/icon/icon_interstate.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_interstate.png
rename to docker/volume/ninegate/data/public/icon/icon_interstate.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_kanboard.png b/docker/volume/ninegate/data/public/icon/icon_kanboard.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_kanboard.png
rename to docker/volume/ninegate/data/public/icon/icon_kanboard.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_key.png b/docker/volume/ninegate/data/public/icon/icon_key.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_key.png
rename to docker/volume/ninegate/data/public/icon/icon_key.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_keyboard.png b/docker/volume/ninegate/data/public/icon/icon_keyboard.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_keyboard.png
rename to docker/volume/ninegate/data/public/icon/icon_keyboard.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_lens.png b/docker/volume/ninegate/data/public/icon/icon_lens.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_lens.png
rename to docker/volume/ninegate/data/public/icon/icon_lens.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_lightbulb.png b/docker/volume/ninegate/data/public/icon/icon_lightbulb.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_lightbulb.png
rename to docker/volume/ninegate/data/public/icon/icon_lightbulb.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_limesurvey.png b/docker/volume/ninegate/data/public/icon/icon_limesurvey.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_limesurvey.png
rename to docker/volume/ninegate/data/public/icon/icon_limesurvey.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_loading.png b/docker/volume/ninegate/data/public/icon/icon_loading.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_loading.png
rename to docker/volume/ninegate/data/public/icon/icon_loading.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_location.png b/docker/volume/ninegate/data/public/icon/icon_location.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_location.png
rename to docker/volume/ninegate/data/public/icon/icon_location.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_locked.png b/docker/volume/ninegate/data/public/icon/icon_locked.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_locked.png
rename to docker/volume/ninegate/data/public/icon/icon_locked.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_loomio.png b/docker/volume/ninegate/data/public/icon/icon_loomio.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_loomio.png
rename to docker/volume/ninegate/data/public/icon/icon_loomio.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_magicwand.png b/docker/volume/ninegate/data/public/icon/icon_magicwand.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_magicwand.png
rename to docker/volume/ninegate/data/public/icon/icon_magicwand.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_magnifyingglass.png b/docker/volume/ninegate/data/public/icon/icon_magnifyingglass.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_magnifyingglass.png
rename to docker/volume/ninegate/data/public/icon/icon_magnifyingglass.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_mail.png b/docker/volume/ninegate/data/public/icon/icon_mail.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_mail.png
rename to docker/volume/ninegate/data/public/icon/icon_mail.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_map.png b/docker/volume/ninegate/data/public/icon/icon_map.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_map.png
rename to docker/volume/ninegate/data/public/icon/icon_map.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_mariane.png b/docker/volume/ninegate/data/public/icon/icon_mariane.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_mariane.png
rename to docker/volume/ninegate/data/public/icon/icon_mariane.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_megaphone.png b/docker/volume/ninegate/data/public/icon/icon_megaphone.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_megaphone.png
rename to docker/volume/ninegate/data/public/icon/icon_megaphone.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_megaphone2.png b/docker/volume/ninegate/data/public/icon/icon_megaphone2.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_megaphone2.png
rename to docker/volume/ninegate/data/public/icon/icon_megaphone2.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_memorycard.png b/docker/volume/ninegate/data/public/icon/icon_memorycard.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_memorycard.png
rename to docker/volume/ninegate/data/public/icon/icon_memorycard.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_merge.png b/docker/volume/ninegate/data/public/icon/icon_merge.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_merge.png
rename to docker/volume/ninegate/data/public/icon/icon_merge.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_mic.png b/docker/volume/ninegate/data/public/icon/icon_mic.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_mic.png
rename to docker/volume/ninegate/data/public/icon/icon_mic.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_microphone.png b/docker/volume/ninegate/data/public/icon/icon_microphone.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_microphone.png
rename to docker/volume/ninegate/data/public/icon/icon_microphone.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_mindmaps.png b/docker/volume/ninegate/data/public/icon/icon_mindmaps.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_mindmaps.png
rename to docker/volume/ninegate/data/public/icon/icon_mindmaps.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_money.png b/docker/volume/ninegate/data/public/icon/icon_money.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_money.png
rename to docker/volume/ninegate/data/public/icon/icon_money.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_moodle.png b/docker/volume/ninegate/data/public/icon/icon_moodle.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_moodle.png
rename to docker/volume/ninegate/data/public/icon/icon_moodle.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_motorcycle.png b/docker/volume/ninegate/data/public/icon/icon_motorcycle.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_motorcycle.png
rename to docker/volume/ninegate/data/public/icon/icon_motorcycle.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_music.png b/docker/volume/ninegate/data/public/icon/icon_music.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_music.png
rename to docker/volume/ninegate/data/public/icon/icon_music.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_news.png b/docker/volume/ninegate/data/public/icon/icon_news.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_news.png
rename to docker/volume/ninegate/data/public/icon/icon_news.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_nextcloud.png b/docker/volume/ninegate/data/public/icon/icon_nextcloud.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_nextcloud.png
rename to docker/volume/ninegate/data/public/icon/icon_nextcloud.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_nineboard.png b/docker/volume/ninegate/data/public/icon/icon_nineboard.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_nineboard.png
rename to docker/volume/ninegate/data/public/icon/icon_nineboard.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_nineschool.png b/docker/volume/ninegate/data/public/icon/icon_nineschool.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_nineschool.png
rename to docker/volume/ninegate/data/public/icon/icon_nineschool.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_ninesurvey.png b/docker/volume/ninegate/data/public/icon/icon_ninesurvey.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_ninesurvey.png
rename to docker/volume/ninegate/data/public/icon/icon_ninesurvey.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_onlyoffice.png b/docker/volume/ninegate/data/public/icon/icon_onlyoffice.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_onlyoffice.png
rename to docker/volume/ninegate/data/public/icon/icon_onlyoffice.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_opensondage.png b/docker/volume/ninegate/data/public/icon/icon_opensondage.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_opensondage.png
rename to docker/volume/ninegate/data/public/icon/icon_opensondage.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_paintbrush.png b/docker/volume/ninegate/data/public/icon/icon_paintbrush.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_paintbrush.png
rename to docker/volume/ninegate/data/public/icon/icon_paintbrush.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_paintbrush2.png b/docker/volume/ninegate/data/public/icon/icon_paintbrush2.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_paintbrush2.png
rename to docker/volume/ninegate/data/public/icon/icon_paintbrush2.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_paintcan.png b/docker/volume/ninegate/data/public/icon/icon_paintcan.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_paintcan.png
rename to docker/volume/ninegate/data/public/icon/icon_paintcan.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_paintroller.png b/docker/volume/ninegate/data/public/icon/icon_paintroller.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_paintroller.png
rename to docker/volume/ninegate/data/public/icon/icon_paintroller.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_parachute.png b/docker/volume/ninegate/data/public/icon/icon_parachute.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_parachute.png
rename to docker/volume/ninegate/data/public/icon/icon_parachute.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_pencil.png b/docker/volume/ninegate/data/public/icon/icon_pencil.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_pencil.png
rename to docker/volume/ninegate/data/public/icon/icon_pencil.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_phone.png b/docker/volume/ninegate/data/public/icon/icon_phone.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_phone.png
rename to docker/volume/ninegate/data/public/icon/icon_phone.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_phpldapadmin.png b/docker/volume/ninegate/data/public/icon/icon_phpldapadmin.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_phpldapadmin.png
rename to docker/volume/ninegate/data/public/icon/icon_phpldapadmin.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_piechart.png b/docker/volume/ninegate/data/public/icon/icon_piechart.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_piechart.png
rename to docker/volume/ninegate/data/public/icon/icon_piechart.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_pin.png b/docker/volume/ninegate/data/public/icon/icon_pin.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_pin.png
rename to docker/volume/ninegate/data/public/icon/icon_pin.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_pin2.png b/docker/volume/ninegate/data/public/icon/icon_pin2.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_pin2.png
rename to docker/volume/ninegate/data/public/icon/icon_pin2.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_piwigo.png b/docker/volume/ninegate/data/public/icon/icon_piwigo.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_piwigo.png
rename to docker/volume/ninegate/data/public/icon/icon_piwigo.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_piwik.png b/docker/volume/ninegate/data/public/icon/icon_piwik.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_piwik.png
rename to docker/volume/ninegate/data/public/icon/icon_piwik.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_plane.png b/docker/volume/ninegate/data/public/icon/icon_plane.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_plane.png
rename to docker/volume/ninegate/data/public/icon/icon_plane.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_play.png b/docker/volume/ninegate/data/public/icon/icon_play.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_play.png
rename to docker/volume/ninegate/data/public/icon/icon_play.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_plugin.png b/docker/volume/ninegate/data/public/icon/icon_plugin.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_plugin.png
rename to docker/volume/ninegate/data/public/icon/icon_plugin.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_polaroid.png b/docker/volume/ninegate/data/public/icon/icon_polaroid.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_polaroid.png
rename to docker/volume/ninegate/data/public/icon/icon_polaroid.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_polaroidcamera.png b/docker/volume/ninegate/data/public/icon/icon_polaroidcamera.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_polaroidcamera.png
rename to docker/volume/ninegate/data/public/icon/icon_polaroidcamera.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_polaroids.png b/docker/volume/ninegate/data/public/icon/icon_polaroids.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_polaroids.png
rename to docker/volume/ninegate/data/public/icon/icon_polaroids.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_power.png b/docker/volume/ninegate/data/public/icon/icon_power.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_power.png
rename to docker/volume/ninegate/data/public/icon/icon_power.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_present.png b/docker/volume/ninegate/data/public/icon/icon_present.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_present.png
rename to docker/volume/ninegate/data/public/icon/icon_present.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_profle.png b/docker/volume/ninegate/data/public/icon/icon_profle.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_profle.png
rename to docker/volume/ninegate/data/public/icon/icon_profle.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_quote.png b/docker/volume/ninegate/data/public/icon/icon_quote.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_quote.png
rename to docker/volume/ninegate/data/public/icon/icon_quote.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_racingflags.png b/docker/volume/ninegate/data/public/icon/icon_racingflags.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_racingflags.png
rename to docker/volume/ninegate/data/public/icon/icon_racingflags.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_radio.png b/docker/volume/ninegate/data/public/icon/icon_radio.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_radio.png
rename to docker/volume/ninegate/data/public/icon/icon_radio.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_radiotower.png b/docker/volume/ninegate/data/public/icon/icon_radiotower.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_radiotower.png
rename to docker/volume/ninegate/data/public/icon/icon_radiotower.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_rainbow.png b/docker/volume/ninegate/data/public/icon/icon_rainbow.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_rainbow.png
rename to docker/volume/ninegate/data/public/icon/icon_rainbow.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_recycle.png b/docker/volume/ninegate/data/public/icon/icon_recycle.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_recycle.png
rename to docker/volume/ninegate/data/public/icon/icon_recycle.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_rgb.png b/docker/volume/ninegate/data/public/icon/icon_rgb.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_rgb.png
rename to docker/volume/ninegate/data/public/icon/icon_rgb.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_ribbon.png b/docker/volume/ninegate/data/public/icon/icon_ribbon.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_ribbon.png
rename to docker/volume/ninegate/data/public/icon/icon_ribbon.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_roadblock.png b/docker/volume/ninegate/data/public/icon/icon_roadblock.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_roadblock.png
rename to docker/volume/ninegate/data/public/icon/icon_roadblock.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_rocket.png b/docker/volume/ninegate/data/public/icon/icon_rocket.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_rocket.png
rename to docker/volume/ninegate/data/public/icon/icon_rocket.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_roundcube.png b/docker/volume/ninegate/data/public/icon/icon_roundcube.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_roundcube.png
rename to docker/volume/ninegate/data/public/icon/icon_roundcube.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_rss.png b/docker/volume/ninegate/data/public/icon/icon_rss.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_rss.png
rename to docker/volume/ninegate/data/public/icon/icon_rss.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_rulertriangle.png b/docker/volume/ninegate/data/public/icon/icon_rulertriangle.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_rulertriangle.png
rename to docker/volume/ninegate/data/public/icon/icon_rulertriangle.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_rundeck.png b/docker/volume/ninegate/data/public/icon/icon_rundeck.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_rundeck.png
rename to docker/volume/ninegate/data/public/icon/icon_rundeck.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_running.png b/docker/volume/ninegate/data/public/icon/icon_running.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_running.png
rename to docker/volume/ninegate/data/public/icon/icon_running.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_sacoche.png b/docker/volume/ninegate/data/public/icon/icon_sacoche.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_sacoche.png
rename to docker/volume/ninegate/data/public/icon/icon_sacoche.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_sailboat.png b/docker/volume/ninegate/data/public/icon/icon_sailboat.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_sailboat.png
rename to docker/volume/ninegate/data/public/icon/icon_sailboat.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_schooolbus.png b/docker/volume/ninegate/data/public/icon/icon_schooolbus.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_schooolbus.png
rename to docker/volume/ninegate/data/public/icon/icon_schooolbus.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_scissors.png b/docker/volume/ninegate/data/public/icon/icon_scissors.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_scissors.png
rename to docker/volume/ninegate/data/public/icon/icon_scissors.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_scooter.png b/docker/volume/ninegate/data/public/icon/icon_scooter.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_scooter.png
rename to docker/volume/ninegate/data/public/icon/icon_scooter.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_security.png b/docker/volume/ninegate/data/public/icon/icon_security.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_security.png
rename to docker/volume/ninegate/data/public/icon/icon_security.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_selftimer.png b/docker/volume/ninegate/data/public/icon/icon_selftimer.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_selftimer.png
rename to docker/volume/ninegate/data/public/icon/icon_selftimer.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_settings.png b/docker/volume/ninegate/data/public/icon/icon_settings.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_settings.png
rename to docker/volume/ninegate/data/public/icon/icon_settings.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_shipwheel.png b/docker/volume/ninegate/data/public/icon/icon_shipwheel.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_shipwheel.png
rename to docker/volume/ninegate/data/public/icon/icon_shipwheel.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_shoeprints.png b/docker/volume/ninegate/data/public/icon/icon_shoeprints.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_shoeprints.png
rename to docker/volume/ninegate/data/public/icon/icon_shoeprints.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_shop.png b/docker/volume/ninegate/data/public/icon/icon_shop.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_shop.png
rename to docker/volume/ninegate/data/public/icon/icon_shop.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_skateboard.png b/docker/volume/ninegate/data/public/icon/icon_skateboard.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_skateboard.png
rename to docker/volume/ninegate/data/public/icon/icon_skateboard.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_slr.png b/docker/volume/ninegate/data/public/icon/icon_slr.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_slr.png
rename to docker/volume/ninegate/data/public/icon/icon_slr.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_smartphone.png b/docker/volume/ninegate/data/public/icon/icon_smartphone.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_smartphone.png
rename to docker/volume/ninegate/data/public/icon/icon_smartphone.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_spaceshuttle.png b/docker/volume/ninegate/data/public/icon/icon_spaceshuttle.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_spaceshuttle.png
rename to docker/volume/ninegate/data/public/icon/icon_spaceshuttle.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_speaker.png b/docker/volume/ninegate/data/public/icon/icon_speaker.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_speaker.png
rename to docker/volume/ninegate/data/public/icon/icon_speaker.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_speedometer.png b/docker/volume/ninegate/data/public/icon/icon_speedometer.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_speedometer.png
rename to docker/volume/ninegate/data/public/icon/icon_speedometer.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_spraypaint.png b/docker/volume/ninegate/data/public/icon/icon_spraypaint.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_spraypaint.png
rename to docker/volume/ninegate/data/public/icon/icon_spraypaint.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_stack.png b/docker/volume/ninegate/data/public/icon/icon_stack.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_stack.png
rename to docker/volume/ninegate/data/public/icon/icon_stack.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_star.png b/docker/volume/ninegate/data/public/icon/icon_star.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_star.png
rename to docker/volume/ninegate/data/public/icon/icon_star.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_steeringwheel.png b/docker/volume/ninegate/data/public/icon/icon_steeringwheel.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_steeringwheel.png
rename to docker/volume/ninegate/data/public/icon/icon_steeringwheel.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_stop.png b/docker/volume/ninegate/data/public/icon/icon_stop.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_stop.png
rename to docker/volume/ninegate/data/public/icon/icon_stop.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_sub.png b/docker/volume/ninegate/data/public/icon/icon_sub.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_sub.png
rename to docker/volume/ninegate/data/public/icon/icon_sub.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_submarine.png b/docker/volume/ninegate/data/public/icon/icon_submarine.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_submarine.png
rename to docker/volume/ninegate/data/public/icon/icon_submarine.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_support.png b/docker/volume/ninegate/data/public/icon/icon_support.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_support.png
rename to docker/volume/ninegate/data/public/icon/icon_support.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_swatches.png b/docker/volume/ninegate/data/public/icon/icon_swatches.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_swatches.png
rename to docker/volume/ninegate/data/public/icon/icon_swatches.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_tablet.png b/docker/volume/ninegate/data/public/icon/icon_tablet.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_tablet.png
rename to docker/volume/ninegate/data/public/icon/icon_tablet.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_takeoff.png b/docker/volume/ninegate/data/public/icon/icon_takeoff.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_takeoff.png
rename to docker/volume/ninegate/data/public/icon/icon_takeoff.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_target.png b/docker/volume/ninegate/data/public/icon/icon_target.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_target.png
rename to docker/volume/ninegate/data/public/icon/icon_target.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_taxi.png b/docker/volume/ninegate/data/public/icon/icon_taxi.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_taxi.png
rename to docker/volume/ninegate/data/public/icon/icon_taxi.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_tchap.png b/docker/volume/ninegate/data/public/icon/icon_tchap.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_tchap.png
rename to docker/volume/ninegate/data/public/icon/icon_tchap.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_toolbox.png b/docker/volume/ninegate/data/public/icon/icon_toolbox.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_toolbox.png
rename to docker/volume/ninegate/data/public/icon/icon_toolbox.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_tools.png b/docker/volume/ninegate/data/public/icon/icon_tools.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_tools.png
rename to docker/volume/ninegate/data/public/icon/icon_tools.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_tractor.png b/docker/volume/ninegate/data/public/icon/icon_tractor.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_tractor.png
rename to docker/volume/ninegate/data/public/icon/icon_tractor.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_traffic.png b/docker/volume/ninegate/data/public/icon/icon_traffic.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_traffic.png
rename to docker/volume/ninegate/data/public/icon/icon_traffic.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_train.png b/docker/volume/ninegate/data/public/icon/icon_train.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_train.png
rename to docker/volume/ninegate/data/public/icon/icon_train.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_travelerbag.png b/docker/volume/ninegate/data/public/icon/icon_travelerbag.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_travelerbag.png
rename to docker/volume/ninegate/data/public/icon/icon_travelerbag.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_trends.png b/docker/volume/ninegate/data/public/icon/icon_trends.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_trends.png
rename to docker/volume/ninegate/data/public/icon/icon_trends.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_tripod.png b/docker/volume/ninegate/data/public/icon/icon_tripod.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_tripod.png
rename to docker/volume/ninegate/data/public/icon/icon_tripod.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_trophy.png b/docker/volume/ninegate/data/public/icon/icon_trophy.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_trophy.png
rename to docker/volume/ninegate/data/public/icon/icon_trophy.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_truck.png b/docker/volume/ninegate/data/public/icon/icon_truck.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_truck.png
rename to docker/volume/ninegate/data/public/icon/icon_truck.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_tv.png b/docker/volume/ninegate/data/public/icon/icon_tv.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_tv.png
rename to docker/volume/ninegate/data/public/icon/icon_tv.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_typography.png b/docker/volume/ninegate/data/public/icon/icon_typography.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_typography.png
rename to docker/volume/ninegate/data/public/icon/icon_typography.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_ufo.png b/docker/volume/ninegate/data/public/icon/icon_ufo.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_ufo.png
rename to docker/volume/ninegate/data/public/icon/icon_ufo.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_umbrella.png b/docker/volume/ninegate/data/public/icon/icon_umbrella.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_umbrella.png
rename to docker/volume/ninegate/data/public/icon/icon_umbrella.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_unicycle.png b/docker/volume/ninegate/data/public/icon/icon_unicycle.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_unicycle.png
rename to docker/volume/ninegate/data/public/icon/icon_unicycle.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_unlocked.png b/docker/volume/ninegate/data/public/icon/icon_unlocked.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_unlocked.png
rename to docker/volume/ninegate/data/public/icon/icon_unlocked.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_upload.png b/docker/volume/ninegate/data/public/icon/icon_upload.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_upload.png
rename to docker/volume/ninegate/data/public/icon/icon_upload.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_users.png b/docker/volume/ninegate/data/public/icon/icon_users.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_users.png
rename to docker/volume/ninegate/data/public/icon/icon_users.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_video.png b/docker/volume/ninegate/data/public/icon/icon_video.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_video.png
rename to docker/volume/ninegate/data/public/icon/icon_video.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_videocameraclassic.png b/docker/volume/ninegate/data/public/icon/icon_videocameraclassic.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_videocameraclassic.png
rename to docker/volume/ninegate/data/public/icon/icon_videocameraclassic.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_videocameracompact.png b/docker/volume/ninegate/data/public/icon/icon_videocameracompact.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_videocameracompact.png
rename to docker/volume/ninegate/data/public/icon/icon_videocameracompact.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_volume.png b/docker/volume/ninegate/data/public/icon/icon_volume.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_volume.png
rename to docker/volume/ninegate/data/public/icon/icon_volume.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_water.png b/docker/volume/ninegate/data/public/icon/icon_water.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_water.png
rename to docker/volume/ninegate/data/public/icon/icon_water.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_windsock.png b/docker/volume/ninegate/data/public/icon/icon_windsock.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_windsock.png
rename to docker/volume/ninegate/data/public/icon/icon_windsock.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_windy.png b/docker/volume/ninegate/data/public/icon/icon_windy.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_windy.png
rename to docker/volume/ninegate/data/public/icon/icon_windy.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_wordpress.png b/docker/volume/ninegate/data/public/icon/icon_wordpress.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_wordpress.png
rename to docker/volume/ninegate/data/public/icon/icon_wordpress.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_zoomin.png b/docker/volume/ninegate/data/public/icon/icon_zoomin.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_zoomin.png
rename to docker/volume/ninegate/data/public/icon/icon_zoomin.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/icon/icon_zoomout.png b/docker/volume/ninegate/data/public/icon/icon_zoomout.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/icon/icon_zoomout.png
rename to docker/volume/ninegate/data/public/icon/icon_zoomout.png
diff --git a/src/envole-1.0/volume/ninegate/data/public/logo/logo.png b/docker/volume/ninegate/data/public/logo/logo.png
similarity index 100%
rename from src/envole-1.0/volume/ninegate/data/public/logo/logo.png
rename to docker/volume/ninegate/data/public/logo/logo.png
diff --git a/src/envole-1.0/volume/openldap/envole/changepasswod.sh b/docker/volume/openldap/envole/changepasswod.sh
similarity index 100%
rename from src/envole-1.0/volume/openldap/envole/changepasswod.sh
rename to docker/volume/openldap/envole/changepasswod.sh
diff --git a/src/envole-1.0/volume/openldap/envole/check.sh b/docker/volume/openldap/envole/check.sh
similarity index 100%
rename from src/envole-1.0/volume/openldap/envole/check.sh
rename to docker/volume/openldap/envole/check.sh
diff --git a/src/envole-1.0/volume/openldap/envole/debug/debug.sh b/docker/volume/openldap/envole/debug/debug.sh
similarity index 100%
rename from src/envole-1.0/volume/openldap/envole/debug/debug.sh
rename to docker/volume/openldap/envole/debug/debug.sh
diff --git a/src/envole-1.0/volume/openldap/envole/debug/libopenldap.sh b/docker/volume/openldap/envole/debug/libopenldap.sh
similarity index 100%
rename from src/envole-1.0/volume/openldap/envole/debug/libopenldap.sh
rename to docker/volume/openldap/envole/debug/libopenldap.sh
diff --git a/src/envole-1.0/volume/openldap/envole/init.sh b/docker/volume/openldap/envole/init.sh
similarity index 100%
rename from src/envole-1.0/volume/openldap/envole/init.sh
rename to docker/volume/openldap/envole/init.sh
diff --git a/src/envole-1.0/volume/openldap/envole/ldif/cadoles.ldif b/docker/volume/openldap/envole/ldif/cadoles.ldif
similarity index 100%
rename from src/envole-1.0/volume/openldap/envole/ldif/cadoles.ldif
rename to docker/volume/openldap/envole/ldif/cadoles.ldif
diff --git a/src/envole-1.0/volume/openldap/envole/schema/cadoles.ldif b/docker/volume/openldap/envole/schema/cadoles.ldif
similarity index 100%
rename from src/envole-1.0/volume/openldap/envole/schema/cadoles.ldif
rename to docker/volume/openldap/envole/schema/cadoles.ldif
diff --git a/envole.mk b/envole.mk
new file mode 100644
index 0000000..41f2b1f
--- /dev/null
+++ b/envole.mk
@@ -0,0 +1,6 @@
+#
+# Wordpress specific variables
+#
+
+# Override plugin destination
+docker_REC_DIR = $(DESTDIR)/usr/share/envole/docker
diff --git a/eole.mk b/eole.mk
new file mode 100644
index 0000000..9730365
--- /dev/null
+++ b/eole.mk
@@ -0,0 +1,231 @@
+#
+# NE PAS EDITER CE FICHIER
+#
+# Utiliser .mk à inclure à la fin de Makefile
+
+#################
+# Sanity checks #
+#################
+
+ifeq (, $(DESTDIR))
+$(warning $$(DESTDIR) is empty, installation will be done in /)
+endif
+
+ifeq (, $(filter-out XXX-XXX, $(strip $(SOURCE))))
+$(error $$(SOURCE) variable has incorrect value '$(SOURCE)')
+endif
+
+ifeq (, $(filter-out 2.X, $(strip $(EOLE_VERSION))))
+$(error $$(EOLE_VERSION) variable has incorrect value '$(EOLE_VERSION)')
+endif
+
+ifeq (, $(filter-out 2.X.Y, $(strip $(EOLE_RELEASE))))
+$(error $$(EOLE_RELEASE) variable has incorrect value '$(EOLE_RELEASE)')
+endif
+
+#########################
+# Variables definitions #
+#########################
+
+INSTALL := install
+INSTALL_DATA := install -m 644
+INSTALL_PROGRAM := install -m 755
+INSTALL_DIRECTORY := install -m 755 -d
+INSTALL_RECURSIVE := cp -dr --no-preserve=ownership
+
+# Standard path
+bin_PROG_DIR := $(DESTDIR)/usr/bin
+sbin_PROG_DIR := $(DESTDIR)/usr/sbin
+man8_DATA_DIR := $(DESTDIR)/usr/share/man/fr.UTF-8/man8
+
+# Base
+eole_DIR := $(DESTDIR)/usr/share/eole
+
+ifeq ($(strip $(EOLE_VERSION)), 2.3)
+diagnose_PROG_DIR := $(eole_DIR)/diagnose/module
+else
+diagnose_PROG_DIR := $(eole_DIR)/diagnose/
+endif
+
+# Creole
+creole_DIR := $(eole_DIR)/creole
+dicos_DATA_DIR := $(creole_DIR)/dicos
+tmpl_DATA_DIR := $(creole_DIR)/distrib
+preservice_PROG_DIR := $(eole_DIR)/preservice
+pretemplate_PROG_DIR := $(eole_DIR)/pretemplate
+posttemplate_PROG_DIR := $(eole_DIR)/posttemplate
+postservice_PROG_DIR := $(eole_DIR)/postservice
+ifeq ($(strip $(EOLE_VERSION)), 2.3)
+firewall_DATA_DIR := $(eole_DIR)/firewall
+endif
+bacula_restore_DATA_DIR := $(eole_DIR)/bacula/restore
+bareos_restore_DATA_DIR := $(eole_DIR)/bareos/restore
+bacula_fichier_DATA_DIR := $(DESTDIR)/etc/bacula/baculafichiers.d
+bareos_fichier_DATA_DIR := $(DESTDIR)/etc/bareos/bareosfichiers.d
+ifeq ($(strip $(EOLE_VERSION)), 2.3)
+schedule_pre_PROG_DIR := $(eole_DIR)/schedule/pre
+schedule_post_PROG_DIR := $(eole_DIR)/schedule/post
+else
+schedule_scripts_PROG_DIR := $(eole_DIR)/schedule/scripts
+endif
+extra_REC_DIR := $(creole_DIR)/extra
+
+# Zéphir
+zephir_DATA_DIR := $(DESTDIR)/usr/share/zephir
+zephir_configs_DATA_DIR := $(zephir_DATA_DIR)/monitor/configs
+zephir_srv_DATA_DIR := $(zephir_configs_DATA_DIR)/services
+zephir_scripts_PROG_DIR := $(zephir_DATA_DIR)/scripts
+
+# SSO
+sso_DATA_DIR := $(DESTDIR)/usr/share/sso
+sso_filtres_DATA_DIR := $(sso_DATA_DIR)/app_filters
+sso_user-info_DATA_DIR := $(sso_DATA_DIR)/user_infos
+
+# EAD
+ead_DATA_DIR := $(DESTDIR)/usr/share/ead2/backend/config
+ead_actions_DATA_DIR := $(ead_DATA_DIR)/actions
+ead_perms_DATA_DIR := $(ead_DATA_DIR)/perms
+ead_roles_DATA_DIR := $(ead_DATA_DIR)/roles
+
+# Program libraries goes under /usr/lib//
+lib_$(SOURCE)_DATA_DIR := $(DESTDIR)/usr/lib/$(SOURCE)
+
+# Scripts Eole
+scripts_PROG_DIR := $(eole_DIR)/sbin
+lib_eole_DATA_DIR := $(DESTDIR)/usr/lib/eole
+
+# LDAP
+ldap_passwords_DATA_DIR := $(eole_DIR)/annuaire/password_files
+
+# LXC
+lxc_DATA_DIR := $(eole_DIR)/lxc
+lxc_fstab_DATA_DIR := $(lxc_DATA_DIR)/fstab
+lxc_hosts_DATA_DIR := $(lxc_DATA_DIR)/hosts
+
+# SQL
+sql_DATA_DIR := $(eole_DIR)/mysql/$(SOURCE)
+sql_gen_DATA_DIR := $(sql_DATA_DIR)/gen
+sql_updates_DATA_DIR := $(sql_DATA_DIR)/updates
+
+sql_conf_gen_DATA_DIR := $(eole_DIR)/applications/gen
+sql_conf_passwords_DATA_DIR := $(eole_DIR)/applications/passwords
+sql_conf_updates_DATA_DIR := $(eole_DIR)/applications/updates/$(SOURCE)
+
+# EoleDB sql directory
+db_DIR := $(eole_DIR)/db
+db_gen_DATA_DIR := $(eole_DIR)/db/$(SOURCE)/gen
+db_updates_DATA_DIR := $(eole_DIR)/db/$(SOURCE)/updates
+
+# Certifs
+certs_DATA_DIR := $(eole_DIR)/certs
+
+# Logrotate
+logrotate_DATA_DIR := $(DESTDIR)/etc/logrotate.d
+
+# Cron
+cron_PROG_DIR := $(DESTDIR)/etc/cron.daily
+
+# Python modules
+ifneq ($(DESTDIR),)
+PYTHON_OPTS := --root $(DESTDIR)
+endif
+
+# Translation
+TRANSLATION_SRC := translation
+TRANSLATION_DEST := $(DESTDIR)/usr/share/locale
+PO_FILES = $(wildcard $(TRANSLATION_SRC)/*/*.po)
+MO_FOLDERS = $(addprefix $(TRANSLATION_DEST), $(addsuffix LC_MESSAGES,$(subst $(TRANSLATION_SRC),,$(dir $(PO_FILES)))))
+
+#############################################
+# Common directories and files installation #
+#############################################
+
+all:
+
+$(MO_FOLDERS):
+ $(INSTALL_DIRECTORY) $@
+
+$(PO_FILES): $(MO_FOLDERS)
+ msgfmt -o $(TRANSLATION_DEST)$(subst $(TRANSLATION_SRC),,$(addsuffix LC_MESSAGES,$(dir $@)))/$(notdir $(@:.po=.mo)) $@
+
+install-lang: $(PO_FILES)
+
+install:: install-dirs install-files install-lang
+
+# $1 = command to run
+# $2 = source directory
+# $3 = destination directory
+define fc_install_file
+ if [ -d $2 ]; then \
+ for file in `ls -1 $2/`; do \
+ $1 $2/$$file $3 || true; \
+ done; \
+ fi
+endef
+
+##
+## Directory creation
+##
+
+# use % to catch local name in $*
+# data, program and recursive directory require a corresponding
+# directory in local sources
+%_DATA_DIR %_PROG_DIR %REC_DIR:
+ test ! -d $(subst _,/,$*) || $(INSTALL_DIRECTORY) $($@)
+
+# Create the directory referenced by the variable without a local one.
+%_DIR:
+ @: # do nothing
+
+##
+## Install files present directly under data, program and recursive directories
+##
+
+# $* : name of variable
+# $($*): value of variable
+%-instdata:
+ $(call fc_install_file, $(INSTALL_DATA), $(subst _,/,$(subst _DATA_DIR,,$*)), $($*))
+
+%-instprog:
+ $(call fc_install_file, $(INSTALL_PROGRAM), $(subst _,/,$(subst _PROG_DIR,,$*)), $($*))
+
+%-instrec:
+ $(call fc_install_file, $(INSTALL_RECURSIVE), $(subst _,/,$(subst _REC_DIR,,$*)), $($*))
+
+
+# Use second expansion as variables may be created in included
+# Makefiles
+.SECONDEXPANSION:
+
+# List of all directories
+installdirs_LIST = $(foreach V, $(filter %_DIR, $(.VARIABLES)), \
+ $(if $(filter file, $(origin $(V))), \
+ $(V)))
+# List of data directories
+installdata_LIST = $(filter %_DATA_DIR, $(installdirs_LIST))
+# List of program directories
+installprog_LIST = $(filter %_PROG_DIR, $(installdirs_LIST))
+# List of recursive directories
+installrec_LIST = $(filter %_REC_DIR, $(installdirs_LIST))
+
+# Expand directories to create as dependency
+# Use double-colon to permit user to define additionnal install-dirs
+install-dirs:: $$(installdirs_LIST)
+
+# Expand files to install as dependency
+# Use double-colon to permit user to define additionnal install-files
+install-files:: install-data-files install-prog-files install-rec-dirs
+
+install-data-files: $$(patsubst %,%-instdata,$$(installdata_LIST))
+
+install-prog-files: $$(patsubst %,%-instprog,$$(installprog_LIST))
+
+install-rec-dirs: $$(patsubst %,%-instrec,$$(installrec_LIST))
+
+# Installation of python modules
+ifeq ($(shell test -f setup.py && echo 0), 0)
+install-files::
+ python setup.py install --no-compile --install-layout=deb $(PYTHON_OPTS)
+endif
+
+.PHONY: install install-dirs install-files install-data-files install-prog-files install-rec-dirs
diff --git a/src/envole-1.0/misc/nextcloud/containers/nextcloud/Dockerfile b/src/envole-1.0/misc/nextcloud/containers/nextcloud/Dockerfile
deleted file mode 100755
index 5241502..0000000
--- a/src/envole-1.0/misc/nextcloud/containers/nextcloud/Dockerfile
+++ /dev/null
@@ -1,4 +0,0 @@
-FROM docker.io/library/nextcloud
-
-COPY apache.conf /etc/apache2/sites-available/nextcloud.conf
-RUN a2ensite nextcloud
\ No newline at end of file
diff --git a/src/envole-1.0/misc/nextcloud/containers/nextcloud/apache.conf b/src/envole-1.0/misc/nextcloud/containers/nextcloud/apache.conf
deleted file mode 100755
index f4ac813..0000000
--- a/src/envole-1.0/misc/nextcloud/containers/nextcloud/apache.conf
+++ /dev/null
@@ -1,3 +0,0 @@
-Alias /nextcloud /var/www/html
-RewriteEngine on
-RewriteRule ^/nextcloud.*$ /nextcloud/index.php [QSA,L]
diff --git a/src/envole-1.0/misc/nextcloud/docker-compose.yml b/src/envole-1.0/misc/nextcloud/docker-compose.yml
deleted file mode 100755
index 3e19464..0000000
--- a/src/envole-1.0/misc/nextcloud/docker-compose.yml
+++ /dev/null
@@ -1,8 +0,0 @@
-version: '3'
-
-services:
- nextcloud:
- build:
- context: ./containers/nextcloud
- image: reg.cadoles.com/envole/nextcloud
- container_name: nextcloud
\ No newline at end of file
diff --git a/src/envole-1.0/volume/nextcloud/envole/app/user_cas b/src/envole-1.0/volume/nextcloud/envole/app/user_cas
deleted file mode 160000
index 827586b..0000000
--- a/src/envole-1.0/volume/nextcloud/envole/app/user_cas
+++ /dev/null
@@ -1 +0,0 @@
-Subproject commit 827586bed4424e225ac1efb77e343313f5a113df