From df6afaf0909506a334ef2b8c6f69770cd9890e0d Mon Sep 17 00:00:00 2001
From: Denis Sacchet <denis@sacchet.fr>
Date: Sun, 20 Oct 2013 16:53:54 +0200
Subject: Added support for http_auth

---
 index.php | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'index.php')

diff --git a/index.php b/index.php
index fdcfc328..d79f3f95 100644
--- a/index.php
+++ b/index.php
@@ -81,6 +81,8 @@ if (Session::isLogged()) {
     $poche->action($action, $url, $id);
     $tpl_file = Tools::getTplFile($view);
     $tpl_vars = array_merge($tpl_vars, $poche->displayView($view, $id));
+} elseif(isset($_SERVER['PHP_AUTH_USER'])) {
+    $poche->login($referer);
 } else {
     $tpl_file = Tools::getTplFile('login');
 }
@@ -90,4 +92,4 @@ $messages = $poche->messages->display('all', FALSE);
 $tpl_vars = array_merge($tpl_vars, array('messages' => $messages));
 
 # display poche
-echo $poche->tpl->render($tpl_file, $tpl_vars);
\ No newline at end of file
+echo $poche->tpl->render($tpl_file, $tpl_vars);
-- 
cgit v1.2.3


From 027b4e156853b4d5e358e19e83506ec4446de7ab Mon Sep 17 00:00:00 2001
From: Denis Sacchet <denis@sacchet.fr>
Date: Sun, 20 Oct 2013 23:28:45 +0200
Subject: Adding support for http_auth

---
 index.php | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

(limited to 'index.php')

diff --git a/index.php b/index.php
index d79f3f95..d400354d 100644
--- a/index.php
+++ b/index.php
@@ -82,9 +82,17 @@ if (Session::isLogged()) {
     $tpl_file = Tools::getTplFile($view);
     $tpl_vars = array_merge($tpl_vars, $poche->displayView($view, $id));
 } elseif(isset($_SERVER['PHP_AUTH_USER'])) {
-    $poche->login($referer);
+    if($poche->store->userExists($_SERVER['PHP_AUTH_USER'])) {
+        $poche->login($referer);
+    } else {
+        $poche->messages->add('e', _('login failed: user doesn\'t exist'));
+        Tools::logm('user doesn\'t exist');
+        $tpl_file = Tools::getTplFile('login');
+        $tpl_vars['http_auth'] = 1;
+    }
 } else {
     $tpl_file = Tools::getTplFile('login');
+    $tpl_vars['http_auth'] = 0;
 }
 
 # because messages can be added in $poche->action(), we have to add this entry now (we can add it before)
-- 
cgit v1.2.3