summaryrefslogtreecommitdiff
path: root/modules/gallery/controllers/admin_identity.php
blob: d06132ffba3ce04c8682a7f84be71a21c8f8e425 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
<?php defined("SYSPATH") or die("No direct script access.");
/**
 * Gallery - a web based photo album viewer and editor
 * Copyright (C) 2000-2009 Bharat Mediratta
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or (at
 * your option) any later version.
 *
 * This program is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin Street - Fifth Floor, Boston, MA  02110-1301, USA.
 */
class Admin_Identity_Controller extends Admin_Controller {
  public function index() {
    $view = new Admin_View("admin.html");
    $view->content = new View("admin_identity.html");
    $view->content->available = identity::providers();
    $view->content->active = module::get_var("gallery", "identity_provider", "user");
    print $view;
  }

  public function confirm() {
    access::verify_csrf();

    $v = new View("admin_identity_confirm.html");
    $v->new_provider = $this->input->post("provider");

    print $v;
  }

  public function change() {
    access::verify_csrf();

    $active_provider = module::get_var("gallery", "identity_provider", "user");
    $providers = identity::providers();

    $new_provider = $this->input->post("provider");

    if ($new_provider != $active_provider) {

      module::event("pre_identity_change", $active_provider, $new_provider);

      identity::deactivate();

      // Switch authentication
      module::set_var("gallery", "identity_provider", $new_provider);
      identity::reset();

      identity::activate();

      // @todo this type of collation is questionable from an i18n perspective
      message::success(t("Changed to %description",
                         array("description" => $providers->$new_provider)));

      try {
        Session::instance()->destroy();
      } catch (Exception $e) {
        // We don't care if there was a problem destroying the session.
      }
      url::redirect(item::root()->abs_url());
    }

    message::info(t("The selected provider \"%description\" is already active.",
                    array("description" => $providers->$new_provider)));
    url::redirect("admin/identity");
  }
}