prepare("SELECT * FROM admin WHERE username = ?"); $stmt->bind_param("s", $username); $stmt->execute(); $res = $stmt->get_result(); if ($row = $res->fetch_assoc()) { if (password_verify($password, $row['password'])) { $_SESSION['admin'] = $row['username']; $_SESSION['auth_type'] = 'local'; header("Location: index.php"); exit; } } $error = "Credenziali non valide"; } catch { $error = "Errore durante l'autenticazione. Potrebbe essere un problema con PHP oppure col database."; } } if (AUTH_TYPE == 'local') { echo << Login Admin

Login Admin

HTML; if(isset($error)) echo "

$error

"; echo <<

HTML; } else if (AUTH_TYPE === 'keycloak') { try { // Configura il client Keycloak $oidc = new OpenIDConnectClient( 'https://' + KEYCLOAK_DOMAIN + '/realms/' + KEYCLOAK_REALM + '/', KEYCLOAK_CLIENT_ID, KEYCLOAK_CLIENT_SECRET ); // Redirect post-login $oidc->setRedirectURL('https://' + APP_DOMAIN + '/admin/login.php'); $oidc->authenticate(); $userinfo = $oidc->getVerifiedClaims(); $_SESSION['admin'] = $userinfo->preferred_username; $_SESSION['auth_type'] = 'keycloak'; header("Location: index.php"); exit; } catch { http_response_code(500); echo << Login Admin

Login Admin

HTML; echo "

Errore durante l'autenticazione con Keycloak. Assicurati di avere impostato i vari parametri correttamente.

"; echo <<

HTML; exit; } } else if (AUTH_TYPE === 'google') { try { $oidc = new OpenIDConnectClient( 'https://accounts.google.com', GOOGLE_CLIENT_ID, GOOGLE_CLIENT_SECRET ); $oidc->setRedirectURL(GOOGLE_REDIRECT_URI); $oidc->addScope(['openid', 'email', 'profile']); // Callback da Google if (isset($_GET['code'])) { $oidc->authenticate(); $email = $oidc->requestUserInfo('email'); $domain = substr(strrchr($email, "@"), 1); if (!GOOGLE_ONLY_ALLOWED_DOMAINS || in_array($domain, GOOGLE_ALLOWED_DOMAINS)) { $_SESSION['admin'] = $email; $_SESSION['auth_type'] = 'google'; header("Location: index.php"); exit; } else { http_response_code(403); echo << Login Admin