summaryrefslogtreecommitdiff
path: root/plugins/http_authentication
diff options
context:
space:
mode:
authorGiovanni Bajo <rasky@develer.com>2013-10-20 13:37:17 +0200
committerGiovanni Bajo <rasky@develer.com>2013-10-20 13:37:17 +0200
commit35533c362218f556c7f7a1bea3a62702ca1359c6 (patch)
treed2a0dd7e37a20f3af0381322fa14bfc0069294e9 /plugins/http_authentication
parentd29f7810808bc364afc665471f7d1a5d7b6bb01c (diff)
Allow HTTP authentication without password.
This makes it the plugin useful for any form of webserver-based authentication (CAS, SAML, etc.); of course, other plugins will have to be installed to handle connections to the IMAP/SMTP servers, but at least they don't need to duplicate the basic HTTP authentication functionality.
Diffstat (limited to 'plugins/http_authentication')
-rw-r--r--plugins/http_authentication/http_authentication.php10
1 files changed, 6 insertions, 4 deletions
diff --git a/plugins/http_authentication/http_authentication.php b/plugins/http_authentication/http_authentication.php
index d86e1791c..83f29c84f 100644
--- a/plugins/http_authentication/http_authentication.php
+++ b/plugins/http_authentication/http_authentication.php
@@ -29,7 +29,7 @@ class http_authentication extends rcube_plugin
function startup($args)
{
- if (!empty($_SERVER['PHP_AUTH_USER']) && !empty($_SERVER['PHP_AUTH_PW'])) {
+ if (!empty($_SERVER['PHP_AUTH_USER'])) {
$rcmail = rcmail::get_instance();
$rcmail->add_shutdown_function(array('http_authentication', 'shutdown'));
@@ -38,7 +38,8 @@ class http_authentication extends rcube_plugin
$args['action'] = 'login';
}
// Set user password in session (see shutdown() method for more info)
- else if (!empty($_SESSION['user_id']) && empty($_SESSION['password'])) {
+ else if (!empty($_SESSION['user_id']) && empty($_SESSION['password'])
+ && !empty($_SERVER['PHP_AUTH_PW'])) {
$_SESSION['password'] = $rcmail->encrypt($_SERVER['PHP_AUTH_PW']);
}
}
@@ -61,9 +62,10 @@ class http_authentication extends rcube_plugin
return $args;
}
- if (!empty($_SERVER['PHP_AUTH_USER']) && !empty($_SERVER['PHP_AUTH_PW'])) {
+ if (!empty($_SERVER['PHP_AUTH_USER'])) {
$args['user'] = $_SERVER['PHP_AUTH_USER'];
- $args['pass'] = $_SERVER['PHP_AUTH_PW'];
+ if (!empty($_SERVER['PHP_AUTH_PW']))
+ $args['pass'] = $_SERVER['PHP_AUTH_PW'];
}
$args['cookiecheck'] = false;