+++ /dev/null
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="fr" lang="fr">
- <head>
- <title>ImmaeEu Account</title>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
- <meta name="viewport" content="width=device-width, initial-scale=1" />
- <link rel="stylesheet" href="https://assets.immae.eu/skeleton/2.0.4/skeleton.min.css" integrity="sha256-2YQRJMXD7pIAPHiXr0s+vlRWA7GYJEK0ARns7k2sbHY=" crossorigin="anonymous" />
- <style type="text/css">
- body {
- font-family: Verdana,Arial,Courier New;
- margin: auto;
- }
- table#ssh_keys_list textarea {
- width: 100%;
- height: 100%;
- }
- table#ssh_keys_list tbody tr.sshkeyrow {
- height: 130px;
- }
- table#ssh_keys_list tbody tr.headrow th {
- border-bottom: 0px !important;
- padding-bottom: 0px !important;
- }
- table#ssh_keys_list tbody tr.mainrow td:not(.delete-button) {
- border-bottom: 0px !important;
- padding-bottom: 0px !important;
- }
- table#ssh_keys_list td.sshkey {
- min-width: 600px;
- height: 100%;
- padding-top: 0px !important;
- }
-
- table#ssh_keys_list td.comment {
- min-width: 160px;
- }
-
- </style>
- </head>
- <body>
- <div class="container">
- <h1>Gestion des clés SSH</h1>
-<?php
-
-$connection = NULL;
-
-session_start();
-
-// Liste des applications gérées
-const apps = [
- 'git',
- 'pub',
- 'ftp',
- 'ssh',
- 'forward',
-];
-
-function checkSshKey($sshKey)
-{
- $exploded = explode(' ', $sshKey);
- if (count($exploded) != 2) {
- return false;
- }
- if (!in_array($exploded[0], array('ssh-rsa', 'ssh-ed25519'))) {
- return false;
- }
- $decoded = base64_decode($exploded[1], true);
- if ($decoded === FALSE) {
- return false;
- }
- $decoded = preg_replace("/[^\w\-]/","", (string) $decoded);
- if (substr($decoded, 0, strlen($exploded[0])) !== $exploded[0]) {
- return false;
- }
-
- return true;
-}
-
-function isUserLogged()
-{
- return (isset($_SESSION["login"]) && doConnect() !== NULL);
-}
-
-function doConnect()
-{
- global $connection;
- $server = "ldaps://ldap.immae.eu";
-
- if ($connection === NULL) {
- $connection = ldap_connect($server);
- ldap_set_option($connection, LDAP_OPT_PROTOCOL_VERSION, 3);
- if (isset($_SESSION["user_dn"]) && isset($_SESSION["password"])) {
- if (ldap_bind($connection, $_SESSION["user_dn"], $_SESSION["password"]) === false) {
- $connection = NULL;
- unset($_SESSION["user_dn"]);
- unset($_SESSION["password"]);
- unset($_SESSION["login"]);
- }
- }
- }
-
- return $connection;
-}
-
-function checkLogin($user, $password)
-{
- $con = doConnect();
-
- $user_dn = "uid=$user,ou=users,dc=immae,dc=eu";
-
- if (ldap_bind($con, $user_dn, $password) === false) {
- return false;
- }
- $_SESSION["user_dn"] = $user_dn;
- $_SESSION["password"] = $password;
-
- $user_search = ldap_search($con,"dc=immae,dc=eu","(uid=$user)");
- $auth_entry = ldap_first_entry($con, $user_search);
-
- return true;
-}
-
-function getLdapInfo()
-{
- $con = doConnect();
- if (!isset($_SESSION["user_dn"])) {
- $sortieLdap = [];
- } else {
- $user_read = ldap_read($con, $_SESSION["user_dn"], "(objectclass=*)", array("uid","immaeSshKey"));
- $user_entry = ldap_first_entry($con, $user_read);
- $sortieLdap = ldap_get_values($con, $user_entry, "immaeSshKey");
- unset($sortieLdap["count"]);
- }
-
- $keys = [];
- foreach ($sortieLdap as $line) {
- $exploded = explode(' ', $line);
-
- $apps = explode('|', $exploded[0]);
- $publicKey = $exploded[1] . ' ' . $exploded[2];
-
- unset($exploded[0]);
- unset($exploded[1]);
- unset($exploded[2]);
-
- $comment = implode(' ', $exploded);
-
- $keys[] = [
- 'apps' => $apps,
- 'public_key' => $publicKey,
- 'comment' => $comment,
- ];
- }
-
- return $keys;
-}
-
-function pushLdapInfos($keys)
-{
- $con = doConnect();
- if (!isset($_SESSION["user_dn"]))
- return false;
-
- return ldap_mod_replace($con, $_SESSION["user_dn"], array("immaeSshKey" => $keys));
-}
-
-
-// Script
-if (isset($_POST['deconnexion'])) {
- $_SESSION = [];
-}
-
-if (isset($_POST['sauvegarder'])) {
- $editedKeys = [];
- $errors = false;
- $keysToSave = [];
- foreach($_POST['keys'] as $id => $key) {
- $editedKeys[$id] = $key;
- if (!checkSshKey($key['public_key'])) {
- $editedKeys[$id]['error'] = true;
- $errors = true;
- }
-
- if (!isset($key['apps'])) {
- $editedKeys[$id]['apps'] = $key['apps'] = [];
-
- }
- foreach ($key['apps'] as $app) {
- if (!in_array($app, apps)) {
- die("integrity");
- }
- }
-
- if (!isset($editedKeys[$id]['error']) || $editedKeys[$id]['error'] !== true) {
- $keysToSave[] = implode('|', $key['apps']) . ' ' . $key['public_key'] . ' ' . $key['comment'];
- }
- }
-
- if (!$errors) {
- $successSave = pushLdapInfos($keysToSave);
- }
-}
-
-$loginErrors = "";
-if (isset($_POST['login'])) {
- if (empty($_POST['username']) || empty($_POST['password'])) {
- $loginErrors = "Le nom d'utilisateur et le mot de passe sont requis.";
- } elseif (!checkLogin($_POST['username'], $_POST['password'])) {
- $loginErrors = "Identifiants incorrects.";
- } else {
- $_SESSION['login'] = $_POST['username'];
- }
-}
-
-if (isUserLogged()) :
- $keys = isset($editedKeys) ? $editedKeys : getLdapInfo();
-?>
- <p>Connecté en tant que <b><?= $_SESSION['login']; ?></b></p>
-
- <form method="post">
- <input type="submit" name="deconnexion" value="Déconnexion">
- </form>
-
- <?php if (isset($successSave) && $successSave === true) : ?>
- <p style="color: green;">Clés enregistrées avec succès.</p>
- <?php endif; ?>
-
- <form method="post">
- <table id="ssh_keys_list">
- <tbody>
- <?php
- foreach ($keys as $id => $sshKey) :
- ?>
- <tr class="headrow">
- <th>Description</th>
- <?php foreach (apps as $app) : ?>
- <th><?= $app ?></th>
- <?php endforeach; ?>
- <th></th>
- </tr>
- <tr class="mainrow">
- <td class="comment"><textarea name="keys[<?= $id ?>][comment]"><?= $sshKey['comment'] ?></textarea></td>
- <?php
- foreach (apps as $app) :
- $checked = in_array($app, $sshKey['apps']);
- ?>
- <td><input type="checkbox" name="keys[<?= $id ?>][apps][]" value="<?= $app ?>"<?= $checked ? ' checked' : '' ?>></td>
- <?php endforeach; ?>
- <td class="delete-button" rowspan="2"><button class="delete">Suppr.</button></td>
- </tr>
- <tr class="sshkeyrow">
- <td colspan="<?php echo 1+count(apps); ?>" class="sshkey"><textarea name="keys[<?= $id ?>][public_key]" <?php if (isset($sshKey['error']) && $sshKey['error'] === true) :?>style="color: red"<?php endif; ?>><?= $sshKey['public_key'] ?></textarea></td>
- </tr>
- <?php
- endforeach;
- ?>
- </tbody>
- </table>
-
- <button id="add">Ajouter</button>
-
- <hr>
-
- <input type="submit" value="Sauvegarder" name="sauvegarder">
- </form>
- <script>
- function deleteLine(element) {
- element.addEventListener('click', function(e) {
- e.preventDefault();
- e.target.closest('tr').remove();
- }, false);
- }
-
- var suppr = document.getElementsByClassName('delete');
- var add = document.getElementById('add');
- var list = document.querySelector('#ssh_keys_list > tbody');
-
- for (var i = 0; i < suppr.length; i++) {
- deleteLine(suppr[i]);
- }
-
- add.addEventListener('click', function (e) {
- e.preventDefault();
- i++;
-
- var newLine = `
- <tr class="headrow">
- <th>Description</th>
- <?php foreach (apps as $app) : ?>
- <th><?= $app ?></th>
- <?php endforeach; ?>
- <th></th>
- </tr>
- <tr class="mainrow">
- <td class="comment"><textarea name="keys[${i}][comment]"></textarea></td>
- `;
-
-
- <?php
- foreach (apps as $app) :
- ?>
- newLine += `<td><input type="checkbox" name="keys[${i}][apps][]" value="<?= $app ?>"></td>`;
- <?php endforeach; ?>
-
- newLine += `<td class="delete-button" rowspan="2"><button class="delete" id="delete-${i}">Suppr.</button></td>
- </tr>`;
-
- newLine += `<tr class="sshkeyrow">
- <td colspan="<?php echo 1+count(apps); ?>" class="sshkey"><textarea name="keys[$[i}][public_key]"></textarea></td>
- </tr>`;
-
-
- list.insertAdjacentHTML('beforeend', newLine);
-
- deleteLine(document.getElementById("delete-" + i));
-
- }, false)
- </script>
-<?php
-else:
-?>
- <form action="" method="post">
- <h2>Login</h2>
-
- <?php
- if (!empty($loginErrors)):
- ?>
- <p style="color: red;"><?= $loginErrors; ?></p>
- <?php
- endif;
- ?>
-
- <label for="username">Utilisateur :</label>
- <input type="text" id="username" name="username"/>
-
- <label for="password">Mot de passe :</label>
- <input type="password" id="password" name="password"/>
-
- <input type="submit" value="OK" name="login" />
- </form>
-<?php
-endif;
-?>
- </div>
- </body>
-</html>
-
-
projects / perso / Immae / Config / Nix.git / blobdiff