Description:
add authentication by CU-CAS from p' krerk
Commit status:
[Not Reviewed]
References:
Diff options:
Comments:
0 Commit comments
0 Inline Comments
Unresolved TODOs:
There are no unresolved TODOs
Author
-
r396:4b88edeab117 - - 1 file changed: 28 inserted, 3 deleted
| @@ -1,5 +1,6 | |||||
|
|
1 | require 'digest/sha1' |
|
1 | require 'digest/sha1' |
|
|
2 | require 'net/pop' |
|
2 | require 'net/pop' |
|
|
|
3 | + require 'json' | ||
|
|
3 |
|
4 | ||
|
|
4 | class User < ActiveRecord::Base |
|
5 | class User < ActiveRecord::Base |
|
|
5 |
|
6 | ||
| @@ -62,13 +63,15 | |||||
|
|
62 |
|
63 | ||
|
|
63 | def self.authenticate(login, password) |
|
64 | def self.authenticate(login, password) |
|
|
64 | user = find_by_login(login) |
|
65 | user = find_by_login(login) |
|
|
65 | - return user if user && user.authenticated?(password) |
|
66 | + if user |
|
|
66 |
- if user |
|
67 | + return user if user.authenticated?(password) |
|
|
|
68 | + if user.authenticated_by_cucas?(password) or user.authenticated_by_pop3?(password) | ||
|
|
67 | user.password = password |
|
69 | user.password = password |
|
|
68 | user.save |
|
70 | user.save |
|
|
69 | return user |
|
71 | return user |
|
|
70 | end |
|
72 | end |
|
|
71 | end |
|
73 | end |
|
|
|
74 | + end | ||
|
|
72 |
|
75 | ||
|
|
73 | def authenticated?(password) |
|
76 | def authenticated?(password) |
|
|
74 | if self.activated |
|
77 | if self.activated |
| @@ -83,7 +86,7 | |||||
|
|
83 | pop = Net::POP3.new('pops.it.chula.ac.th') |
|
86 | pop = Net::POP3.new('pops.it.chula.ac.th') |
|
|
84 | authen = true |
|
87 | authen = true |
|
|
85 | begin |
|
88 | begin |
|
|
86 |
- pop.start(login, password) |
|
89 | + pop.start(login, password) |
|
|
87 | pop.finish |
|
90 | pop.finish |
|
|
88 | return true |
|
91 | return true |
|
|
89 | rescue |
|
92 | rescue |
| @@ -91,6 +94,28 | |||||
|
|
91 | end |
|
94 | end |
|
|
92 | end |
|
95 | end |
|
|
93 |
|
96 | ||
|
|
|
97 | + def authenticated_by_cucas?(password) | ||
|
|
|
98 | + url = URI.parse('https://www.cas.chula.ac.th/cas/api/?q=studentAuthenticate') | ||
|
|
|
99 | + appid = '41508763e340d5858c00f8c1a0f5a2bb' | ||
|
|
|
100 | + appsecret ='d9cbb5863091dbe186fded85722a1e31' | ||
|
|
|
101 | + post_args = { | ||
|
|
|
102 | + 'appid' => appid, | ||
|
|
|
103 | + 'appsecret' => appsecret, | ||
|
|
|
104 | + 'username' => login, | ||
|
|
|
105 | + 'password' => password | ||
|
|
|
106 | + } | ||
|
|
|
107 | + | ||
|
|
|
108 | + #simple call | ||
|
|
|
109 | + begin | ||
|
|
|
110 | + resp = Net::HTTP.post_form(url, post_args) | ||
|
|
|
111 | + result = JSON.parse resp.body | ||
|
|
|
112 | + return true if result["type"] == "beanStudent" | ||
|
|
|
113 | + rescue | ||
|
|
|
114 | + return false | ||
|
|
|
115 | + end | ||
|
|
|
116 | + return false | ||
|
|
|
117 | + end | ||
|
|
|
118 | + | ||
|
|
94 | def admin? |
|
119 | def admin? |
|
|
95 | self.roles.detect {|r| r.name == 'admin' } |
|
120 | self.roles.detect {|r| r.name == 'admin' } |
|
|
96 | end |
|
121 | end |
You need to be logged in to leave comments.
Login now