emmev-code/orario
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Login Keycloak solo per utenti autorizzati

Browse Source
This commit is contained in:
theitaliandeveloper
2025-11-14 11:44:52 +01:00
parent cf4cb2679b
commit 9c2ea5b8ff
3 changed files with 41 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
docker/php/config.php
View File

@@ -43,5 +43,8 @@ if (AUTH_TYPE === 'keycloak') {
if (!defined('KEYCLOAK_CLIENT_SECRET')) { if (!defined('KEYCLOAK_CLIENT_SECRET')) {
define('KEYCLOAK_CLIENT_SECRET',''); // Client Secret per Keycloak (ad esempio abcdefghijklm) define('KEYCLOAK_CLIENT_SECRET',''); // Client Secret per Keycloak (ad esempio abcdefghijklm)
} }
if (!defined('KEYCLOAK_ALLOWED_USERS')) {
define('KEYCLOAK_ALLOWED_USERS',[]); // Contiene i nomi utente degli utenti autorizzati ad accedere all'amministrazione
}
} }
?> ?>

39
htdocs/admin/login.php
View File

@@ -72,10 +72,41 @@ else if (AUTH_TYPE === 'keycloak') {
$oidc->setRedirectURL('https://' . APP_DOMAIN . '/admin/login.php'); $oidc->setRedirectURL('https://' . APP_DOMAIN . '/admin/login.php');
$oidc->authenticate(); $oidc->authenticate();
$userinfo = $oidc->getVerifiedClaims(); $userinfo = $oidc->getVerifiedClaims();
$_SESSION['admin'] = $userinfo->preferred_username; if (in_array($userinfo->preferred_username, KEYCLOAK_ALLOWED_USERS, true) || empty(KEYCLOAK_ALLOWED_USERS)) {
$_SESSION['auth_type'] = 'keycloak'; $_SESSION['admin'] = $userinfo->preferred_username;
header("Location: index.php"); $_SESSION['auth_type'] = 'keycloak';
exit; header("Location: index.php");
exit;
} else {
http_response_code(403);
echo <<<HTML
<!DOCTYPE html>
<html>
<head>
<title>Login Admin</title>
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<link rel="stylesheet" href="style.css">
</head>
<body>
<div class="navbar">
<div class="logo">Admin Dashboard</div>
<div class="links">
<a href="/">Torna al sito</a>
</div>
</div>
<!-- Container login -->
<div class="login-container">
<h1>Login Admin</h1>
<br><div class='error'>Non sei autorizzato ad accedere a questa parte del sito.</div>
</div>
<p style="text-align: center;">Copyright (C) 2025 EmmeV. - Released under <a href="https://git.vichingo455.freeddns.org/emmev-code/orario/src/branch/stable/LICENSE.txt" target="_blank">GNU AGPL 3.0 License</a>.</p>
</body>
</html>
HTML;
exit;
}
} catch (Exception $e) { } catch (Exception $e) {
http_response_code(500); http_response_code(500);
echo <<<HTML echo <<<HTML

3
htdocs/config/config.php
View File

@@ -43,5 +43,8 @@ if (AUTH_TYPE === 'keycloak') {
if (!defined('KEYCLOAK_CLIENT_SECRET')) { if (!defined('KEYCLOAK_CLIENT_SECRET')) {
define('KEYCLOAK_CLIENT_SECRET',''); // Client Secret per Keycloak (ad esempio abcdefghijklm) define('KEYCLOAK_CLIENT_SECRET',''); // Client Secret per Keycloak (ad esempio abcdefghijklm)
} }
if (!defined('KEYCLOAK_ALLOWED_USERS')) {
define('KEYCLOAK_ALLOWED_USERS',[]); // Contiene i nomi utente degli utenti autorizzati ad accedere all'amministrazione
}
} }
?> ?>