From c781a551ae84127ef05eaa36909dca44e49e1200 Mon Sep 17 00:00:00 2001
From: Simon Rettberg
Date: Wed, 19 Apr 2017 23:43:24 +0200
Subject: [locationinfo] Better backend-specific property handling, get rid of
 URL

- The backend URL still had special treatment for legacy reasons, when it
  would be perfectly fine to make it just another generic property the
  backend has to define.
- Allow for the backend to declare a default value for properties.
- Base class will now check and sanitize the setCredentials() input.
---
 .../coursebackend/coursebackend_hisinone.inc.php   | 75 +++++++++++++---------
 1 file changed, 45 insertions(+), 30 deletions(-)

(limited to 'modules-available/locationinfo/inc/coursebackend/coursebackend_hisinone.inc.php')

diff --git a/modules-available/locationinfo/inc/coursebackend/coursebackend_hisinone.inc.php b/modules-available/locationinfo/inc/coursebackend/coursebackend_hisinone.inc.php
index 9e7c9db0..b01146a8 100644
--- a/modules-available/locationinfo/inc/coursebackend/coursebackend_hisinone.inc.php
+++ b/modules-available/locationinfo/inc/coursebackend/coursebackend_hisinone.inc.php
@@ -2,36 +2,59 @@
 
 class CourseBackend_HisInOne extends CourseBackend
 {
-	private $username;
-	private $password;
-	private $open;
+	private $username = '';
+	private $password = '';
+	private $open = true;
+	private $location;
+	private $verifyHostname = true;
+	private $verifyCert = true;
 
 
-	public function setCredentials($data, $url, $serverId)
+	public function setCredentialsInternal($data)
 	{
-		if (array_key_exists('password', $data) && array_key_exists('username', $data) && array_key_exists('role', $data) && isset($data['open'])) {
-			$this->error = false;
-			$this->password = $data['password'];
-			$this->username = $data['username'] . "\t" . $data['role'];
-			$this->open = $data['open'];
-			if ($url == "") {
-				$this->error = "No url is given";
-				return false;
-			}
-			if ($this->open) {
-				$this->location = $url . "/qisserver/services2/OpenCourseService";
-			} else {
-				$this->location = $url . "/qisserver/services2/CourseService";
+		if (!$data['open']) {
+			// If not using OpenCourseService, require credentials
+			foreach (['username', 'password'] as $field) {
+				if (empty($data[$field])) {
+					$this->error = 'setCredentials: Missing field ' . $field;
+					return false;
+				}
 			}
-			$this->serverId = $serverId;
-		} else {
-			$this->error = "wrong credentials";
+		}
+		if (empty($data['baseUrl'])) {
+			$this->error = "No url is given";
 			return false;
 		}
 
+		$this->error = false;
+		$this->username = $data['username'] . "\t" . $data['role'];
+		$this->password = $data['password'];
+		$this->open = $data['open'];
+		$url = preg_replace('#(/+qisserver(/+services\d+(/+OpenCourseService)?)?)?\W*$#i', '', $data['baseUrl']);
+		if ($this->open) {
+			$this->location = $url . "/qisserver/services2/OpenCourseService";
+		} else {
+			$this->location = $url . "/qisserver/services2/CourseService";
+		}
+		$this->verifyHostname = $data['verifyHostname'];
+		$this->verifyCert = $data['verifyCert'];
+
 		return true;
 	}
 
+	public function getCredentials()
+	{
+		return [
+			new BackendProperty('baseUrl', 'string'),
+			new BackendProperty('username', 'string'),
+			new BackendProperty('role', 'string'),
+			new BackendProperty('password', 'password'),
+			new BackendProperty('open', 'bool', true),
+			new BackendProperty('verifyCert', 'bool', true),
+			new BackendProperty('verifyHostname', 'bool', true)
+		];
+	}
+
 	public function checkConnection()
 	{
 		if (empty($this->location)) {
@@ -159,8 +182,8 @@ class CourseBackend_HisInOne extends CourseBackend
 		$options = array(
 			CURLOPT_RETURNTRANSFER => true,
 			CURLOPT_FOLLOWLOCATION => true,
-			CURLOPT_SSL_VERIFYHOST => false,
-			CURLOPT_SSL_VERIFYPEER => false,
+			CURLOPT_SSL_VERIFYHOST => $this->verifyHostname,
+			CURLOPT_SSL_VERIFYPEER => $this->verifyCert,
 			CURLOPT_URL => $this->location,
 			CURLOPT_POSTFIELDS => $request,
 			CURLOPT_HTTPHEADER => $header,
@@ -197,14 +220,6 @@ class CourseBackend_HisInOne extends CourseBackend
 		return "HisInOne";
 	}
 
-
-	public function getCredentials()
-	{
-		$credentials = ["username" => "string", "role" => "string", "password" => "password", "open" => "bool"];
-		return $credentials;
-	}
-
-
 	public function fetchSchedulesInternal($requestedRoomIds)
 	{
 		if (empty($requestedRoomIds)) {
-- 
cgit v1.2.3-55-g7522