/usr/share/perl5/Lemonldap/NG/Portal/UserDBOpenIDConnect.pm is in liblemonldap-ng-portal-perl 1.9.16-2.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 | ## @file
# OpenIDConnect userDB mechanism
## @class
# OpenIDConnect userDB mechanism class
package Lemonldap::NG::Portal::UserDBOpenIDConnect;
use strict;
use Lemonldap::NG::Portal::Simple;
our @ISA = (qw(Lemonldap::NG::Portal::_OpenIDConnect));
our $VERSION = '1.9.1';
## @apmethod int userDBInit()
# Do nothing
# @return Lemonldap::NG::Portal constant
sub userDBInit {
PE_OK;
}
## @apmethod int getUser()
# Do nothing
# @return Lemonldap::NG::Portal constant
sub getUser {
my $self = shift;
my $op = $self->{_oidcOPCurrent};
my $access_token = $self->{tmp}->{access_token};
my $userinfo_content = $self->getUserInfo( $op, $access_token );
unless ($userinfo_content) {
$self->lmLog( "No User Info content", 'warn' );
return PE_OK;
}
$self->lmLog( "UserInfo received: $userinfo_content", 'debug' );
$self->{tmp}->{OpenIDConnect_user_info} =
$self->decodeJSON($userinfo_content);
# Check that received sub is the same than current user
unless ( $self->{tmp}->{OpenIDConnect_user_info}->{sub} eq $self->{user} ) {
$self->lmLog( "Received sub do not match current user", 'error' );
return PE_BADCREDENTIALS;
}
PE_OK;
}
## @apmethod int setSessionInfo()
# Do nothing
# @return Lemonldap::NG::Portal constant
sub setSessionInfo {
my $self = shift;
my $op = $self->{_oidcOPCurrent};
my %vars = (
%{ $self->{exportedVars} },
%{ $self->{oidcOPMetaDataExportedVars}->{$op} }
);
while ( my ( $k, $v ) = each %vars ) {
$self->{sessionInfo}->{$k} =
$self->{tmp}->{OpenIDConnect_user_info}->{$v}
|| "";
}
PE_OK;
}
## @apmethod int setGroups()
# Do nothing
# @return Lemonldap::NG::Portal constant
sub setGroups {
PE_OK;
}
1;
|