@@ -172,9 +172,9 @@ |
||
172 | 172 | $totalFailures = 0; |
173 | 173 | foreach ($decoded_response['messages'] as $message) { |
174 | 174 | if ($message['status'] == 0) { |
175 | - $loggerInstance->debug(2, $message['message-id']. ": Success"); |
|
175 | + $loggerInstance->debug(2, $message['message-id'] . ": Success"); |
|
176 | 176 | } else { |
177 | - $loggerInstance->debug(2, $message['message-id']. ": Failed (failure code = ".$message['status'].")"); |
|
177 | + $loggerInstance->debug(2, $message['message-id'] . ": Failed (failure code = " . $message['status'] . ")"); |
|
178 | 178 | $totalFailures++; |
179 | 179 | } |
180 | 180 | } |
@@ -71,7 +71,7 @@ discard block |
||
71 | 71 | <key>PayloadIdentifier</key> |
72 | 72 | <string>" . self::$iPhonePayloadPrefix . ".$this->massagedConsortium.$this->massagedCountry.$this->massagedInst.$this->massagedProfile.$this->lang</string> |
73 | 73 | <key>PayloadOrganization</key> |
74 | - <string>" . htmlspecialchars(iconv("UTF-8", "UTF-8//IGNORE", $this->attributes['general:instname'][0]), ENT_XML1, 'UTF-8') . ( $this->attributes['internal:profile_count'][0] > 1 ? " (" . htmlspecialchars(iconv("UTF-8", "UTF-8//IGNORE", $this->attributes['profile:name'][0]), ENT_XML1, 'UTF-8') . ")" : "") . "</string> |
|
74 | + <string>" . htmlspecialchars(iconv("UTF-8", "UTF-8//IGNORE", $this->attributes['general:instname'][0]), ENT_XML1, 'UTF-8') . ($this->attributes['internal:profile_count'][0] > 1 ? " (" . htmlspecialchars(iconv("UTF-8", "UTF-8//IGNORE", $this->attributes['profile:name'][0]), ENT_XML1, 'UTF-8') . ")" : "") . "</string> |
|
75 | 75 | <key>PayloadType</key> |
76 | 76 | <string>Configuration</string> |
77 | 77 | <key>PayloadUUID</key> |
@@ -479,7 +479,7 @@ discard block |
||
479 | 479 | <key>PayloadVersion</key> |
480 | 480 | <integer>1</integer> |
481 | 481 | </dict>", |
482 | - "UUID" => $payloadUUID,]; |
|
482 | + "UUID" => $payloadUUID, ]; |
|
483 | 483 | } |
484 | 484 | |
485 | 485 | private function expiryBlock() { |
@@ -40,7 +40,7 @@ discard block |
||
40 | 40 | ?> |
41 | 41 | </h1> |
42 | 42 | <div class='infobox'> |
43 | - <h2><?php echo sprintf(_("%s Properties"),$uiElements->nomenclature_fed); ?></h2> |
|
43 | + <h2><?php echo sprintf(_("%s Properties"), $uiElements->nomenclature_fed); ?></h2> |
|
44 | 44 | <table> |
45 | 45 | <tr> |
46 | 46 | <td><?php echo _("Country:"); ?></td> |
@@ -57,7 +57,7 @@ discard block |
||
57 | 57 | <input type='hidden' name='MAX_FILE_SIZE' value='" . CONFIG['MAX_UPLOAD_SIZE'] . "'>"; |
58 | 58 | ?> |
59 | 59 | <fieldset class="option_container"> |
60 | - <legend><strong><?php echo sprintf(_("%s Properties"),$uiElements->nomenclature_fed); ?></strong></legend> |
|
60 | + <legend><strong><?php echo sprintf(_("%s Properties"), $uiElements->nomenclature_fed); ?></strong></legend> |
|
61 | 61 | <?php |
62 | 62 | $optionDisplay = new \web\lib\admin\OptionDisplay($fed_options, "FED"); |
63 | 63 | echo $optionDisplay->prefilledOptionTable("fed"); |
@@ -37,7 +37,7 @@ |
||
37 | 37 | */ |
38 | 38 | public function insertInHead($inst_country, $inst_name) { |
39 | 39 | $cat = new \core\CAT(); |
40 | - return "<script type='text/javascript' src='https://maps.googleapis.com/maps/api/js?key=".CONFIG['APPEARANCE']['google_maps_api_key']."'></script> |
|
40 | + return "<script type='text/javascript' src='https://maps.googleapis.com/maps/api/js?key=" . CONFIG['APPEARANCE']['google_maps_api_key'] . "'></script> |
|
41 | 41 | <script type='text/javascript'> |
42 | 42 | // some global variables; |
43 | 43 | var center_lat=49.6114885608729; |
@@ -90,7 +90,7 @@ |
||
90 | 90 | |
91 | 91 | if (isset(CONFIG_CONFASSISTANT['CONSORTIUM']['ssid']) && count(CONFIG_CONFASSISTANT['CONSORTIUM']['ssid']) > 0) { |
92 | 92 | foreach (CONFIG_CONFASSISTANT['CONSORTIUM']['ssid'] as $ssidname) { |
93 | - $ssids[] = $ssidname . " " . (isset(CONFIG_CONFASSISTANT['CONSORTIUM']['tkipsupport']) && CONFIG_CONFASSISTANT['CONSORTIUM']['tkipsupport'] === TRUE ? _("(WPA2/AES and WPA/TKIP)") : _("(WPA2/AES)") ); |
|
93 | + $ssids[] = $ssidname . " " . (isset(CONFIG_CONFASSISTANT['CONSORTIUM']['tkipsupport']) && CONFIG_CONFASSISTANT['CONSORTIUM']['tkipsupport'] === TRUE ? _("(WPA2/AES and WPA/TKIP)") : _("(WPA2/AES)")); |
|
94 | 94 | } |
95 | 95 | } |
96 | 96 |
@@ -11,7 +11,7 @@ discard block |
||
11 | 11 | /* |
12 | 12 | */ |
13 | 13 | |
14 | - $Tou = [ |
|
14 | + $Tou = [ |
|
15 | 15 | 'title' => _("Terms of Use"), |
16 | 16 | 'short' => "<p>The purpose of this service is to make eduroam configuration easier for end users and eduroam |
17 | 17 | Identity Providers by making available customised and securely configured eduroam installers.</p> |
@@ -49,7 +49,7 @@ discard block |
||
49 | 49 | they are from the same user group. You are not allowed to share them to an unlimited |
50 | 50 | audience (e.g. on a publicly accessible web server).</li> |
51 | 51 | <li>If You are an eduroam Identity Provider administrator, you are allowed to download and pass on the Installers to |
52 | -your own ".CONFIG_CONFASSISTANT['CONSORTIUM']['nomenclature_institution']." end users, e.g. on the support web pages of your ".CONFIG_CONFASSISTANT['CONSORTIUM']['nomenclature_institution'].", on Welcome Package CDs or USB sticks, etc.</li> |
|
52 | +your own ".CONFIG_CONFASSISTANT['CONSORTIUM']['nomenclature_institution'] . " end users, e.g. on the support web pages of your " . CONFIG_CONFASSISTANT['CONSORTIUM']['nomenclature_institution'] . ", on Welcome Package CDs or USB sticks, etc.</li> |
|
53 | 53 | <li>If You are a third-party not affiliated with eduroam, you are only allowed to download and pass on |
54 | 54 | the Metadata and/or the Installers after having received written permission by the eduroam Operations team.</li> |
55 | 55 | </ul> |
@@ -52,7 +52,7 @@ |
||
52 | 52 | they are from the same user group. You are not allowed to share them to an unlimited |
53 | 53 | audience (e.g. on a publicly accessible web server).</li> |
54 | 54 | <li>If You are an eduroam Identity Provider administrator, you are allowed to download and pass on the Installers to |
55 | -your own <?php echo CONFIG_CONFASSISTANT['CONSORTIUM']['nomenclature_institution'];?> end users, e.g. on the support web pages of your <?php echo CONFIG_CONFASSISTANT['CONSORTIUM']['nomenclature_institution'];?>, on Welcome Package CDs or USB sticks, etc.</li> |
|
55 | +your own <?php echo CONFIG_CONFASSISTANT['CONSORTIUM']['nomenclature_institution']; ?> end users, e.g. on the support web pages of your <?php echo CONFIG_CONFASSISTANT['CONSORTIUM']['nomenclature_institution']; ?>, on Welcome Package CDs or USB sticks, etc.</li> |
|
56 | 56 | <li>If You are a third-party not affiliated with eduroam, you are only allowed to download and pass on |
57 | 57 | the Metadata and/or the Installers after having received written permission by the eduroam Operations team.</li> |
58 | 58 | </ul> |
@@ -44,7 +44,7 @@ discard block |
||
44 | 44 | $admins = $this_fed->listFederationAdmins(); |
45 | 45 | $mailtext = "Hello, |
46 | 46 | |
47 | -invitation tokens for the following new ". CONFIG_CONFASSISTANT['CONSORTIUM']['nomenclature_institution'] ." have recently expired: |
|
47 | +invitation tokens for the following new ". CONFIG_CONFASSISTANT['CONSORTIUM']['nomenclature_institution'] . " have recently expired: |
|
48 | 48 | |
49 | 49 | "; |
50 | 50 | foreach ($listofinstnames as $instname) { |
@@ -54,7 +54,7 @@ discard block |
||
54 | 54 | if ($numberofexistingidps > 0) { |
55 | 55 | $mailtext .= " |
56 | 56 | |
57 | -Additionally, $numberofexistingidps invitations for an existing ". CONFIG_CONFASSISTANT['CONSORTIUM']['nomenclature_institution']." have expired. |
|
57 | +Additionally, $numberofexistingidps invitations for an existing " . CONFIG_CONFASSISTANT['CONSORTIUM']['nomenclature_institution'] . " have expired. |
|
58 | 58 | "; |
59 | 59 | } |
60 | 60 | $mailtext .= " |
@@ -169,8 +169,7 @@ |
||
169 | 169 | _("and enter the invitation token") . " |
170 | 170 | $newtoken |
171 | 171 | " . ( /* $new_idp_authorized_fedadmin */ FALSE ? |
172 | - wordwrap(sprintf(_("manually. If you reply to this mail, you will reach your %s administrators."), $uiElements->nomenclature_fed), 72) : |
|
173 | - wordwrap(_("manually. Please do not reply to this mail; this is a send-only address.")) ) . " |
|
172 | + wordwrap(sprintf(_("manually. If you reply to this mail, you will reach your %s administrators."), $uiElements->nomenclature_fed), 72) : wordwrap(_("manually. Please do not reply to this mail; this is a send-only address.")) ) . " |
|
174 | 173 | |
175 | 174 | " . wordwrap(_("Do NOT forward the mail before the token has expired - or the recipients may be able to consume the token on your behalf!"), 72) . " |
176 | 175 |
@@ -77,84 +77,84 @@ |
||
77 | 77 | } |
78 | 78 | |
79 | 79 | switch ($operationMode) { |
80 | - case OPERATION_MODE_EDIT: |
|
81 | - $idp = $validator->IdP($_GET['inst_id']); |
|
82 | - // editing IdPs is done from within the popup. When we're done, send the |
|
83 | - // user back to the popup (append the result of the operation later) |
|
84 | - $redirect_destination = "manageAdmins.inc.php?inst_id=" . $idp->identifier . "&"; |
|
85 | - $mailaddress = abortOnBogusMail($newmailaddress, $redirect_destination); |
|
86 | - // is the user primary admin of this IdP? |
|
87 | - $is_owner = $idp->isPrimaryOwner($_SESSION['user']); |
|
88 | - // check if he is (also) federation admin for the federation this IdP is in. His invitations have more blessing then. |
|
89 | - $fedadmin = $userObject->isFederationAdmin($idp->federation); |
|
90 | - // check if he is either one, if not, complain |
|
91 | - if (!$is_owner && !$fedadmin) { |
|
92 | - echo "<p>" . sprintf(_("Something's wrong... you are a %s admin, but not for the %s the requested %s belongs to!"), $uiElements->nomenclature_fed, $uiElements->nomenclature_fed, $uiElements->nomenclature_inst) . "</p>"; |
|
93 | - exit(1); |
|
94 | - } |
|
80 | + case OPERATION_MODE_EDIT: |
|
81 | + $idp = $validator->IdP($_GET['inst_id']); |
|
82 | + // editing IdPs is done from within the popup. When we're done, send the |
|
83 | + // user back to the popup (append the result of the operation later) |
|
84 | + $redirect_destination = "manageAdmins.inc.php?inst_id=" . $idp->identifier . "&"; |
|
85 | + $mailaddress = abortOnBogusMail($newmailaddress, $redirect_destination); |
|
86 | + // is the user primary admin of this IdP? |
|
87 | + $is_owner = $idp->isPrimaryOwner($_SESSION['user']); |
|
88 | + // check if he is (also) federation admin for the federation this IdP is in. His invitations have more blessing then. |
|
89 | + $fedadmin = $userObject->isFederationAdmin($idp->federation); |
|
90 | + // check if he is either one, if not, complain |
|
91 | + if (!$is_owner && !$fedadmin) { |
|
92 | + echo "<p>" . sprintf(_("Something's wrong... you are a %s admin, but not for the %s the requested %s belongs to!"), $uiElements->nomenclature_fed, $uiElements->nomenclature_fed, $uiElements->nomenclature_inst) . "</p>"; |
|
93 | + exit(1); |
|
94 | + } |
|
95 | 95 | |
96 | - $prettyprintname = $idp->name; |
|
97 | - $newtoken = $mgmt->createToken($fedadmin, $mailaddress, $idp); |
|
98 | - $loggerInstance->writeAudit($_SESSION['user'], "NEW", "IdP " . $idp->identifier . " - Token created for " . $mailaddress); |
|
99 | - $introtext = sprintf(_("a %s of the %s %s \"%s\" has invited you to manage the %s together with him."), $uiElements->nomenclature_fed, CONFIG_CONFASSISTANT['CONSORTIUM']['display_name'], $uiElements->nomenclature_inst, $prettyprintname, $uiElements->nomenclature_inst) . " " . sprintf(_("This invitation is valid for 24 hours from now, i.e. until %s."), strftime("%x %X", time() + 86400)); |
|
100 | - break; |
|
101 | - case OPERATION_MODE_NEWUNLINKED: |
|
102 | - $redirect_destination = "../overview_federation.php?"; |
|
103 | - $mailaddress = abortOnBogusMail($newmailaddress, $redirect_destination); |
|
104 | - // run an input check and conversion of the raw inputs... just in case |
|
105 | - $newinstname = $validator->string($_POST['name']); |
|
106 | - $newcountry = $validator->string($_POST['country']); |
|
107 | - $new_idp_authorized_fedadmin = $userObject->isFederationAdmin($newcountry); |
|
108 | - if ($new_idp_authorized_fedadmin !== TRUE) { |
|
109 | - throw new Exception("Something's wrong... you want to create a new " . $uiElements->nomenclature_inst . ", but are not a " . $uiElements->nomenclature_fed . " admin for the " . $uiElements->nomenclature_fed . " it should be in!"); |
|
110 | - } |
|
111 | - $federation = $validator->Federation($newcountry); |
|
112 | - $prettyprintname = $newinstname; |
|
113 | - $introtext = sprintf(_("a %s %s has invited you to manage the future %s \"%s\" (%s)."), CONFIG_CONFASSISTANT['CONSORTIUM']['display_name'], $uiElements->nomenclature_fed, $uiElements->nomenclature_inst, $prettyprintname, $newcountry) . " " . sprintf(_("This invitation is valid for 24 hours from now, i.e. until %s."), strftime("%x %X", time() + 86400)); |
|
114 | - // send the user back to his federation overview page, append the result of the operation later |
|
115 | - // do the token creation magic |
|
116 | - $newtoken = $mgmt->createToken(TRUE, $mailaddress, $newinstname, 0, $newcountry); |
|
117 | - $loggerInstance->writeAudit($_SESSION['user'], "NEW", "IdP FUTURE - Token created for " . $mailaddress); |
|
118 | - break; |
|
119 | - case OPERATION_MODE_NEWFROMDB: |
|
120 | - $redirect_destination = "../overview_federation.php?"; |
|
121 | - $mailaddress = abortOnBogusMail($newmailaddress, $redirect_destination); |
|
122 | - // a real external DB entry was submitted and all the required parameters are there |
|
123 | - $newexternalid = $validator->string($_POST['externals']); |
|
124 | - $extinfo = $catInstance->getExternalDBEntityDetails($newexternalid); |
|
125 | - $new_idp_authorized_fedadmin = $userObject->isFederationAdmin($extinfo['country']); |
|
126 | - if ($new_idp_authorized_fedadmin !== TRUE) { |
|
127 | - throw new Exception("Something's wrong... you want to create a new " . $uiElements->nomenclature_inst . ", but are not a " . $uiElements->nomenclature_fed . " admin for the " . $uiElements->nomenclature_fed . " it should be in!"); |
|
128 | - } |
|
129 | - $federation = $validator->Federation($extinfo['country']); |
|
130 | - $newcountry = $extinfo['country']; |
|
131 | - // see if the inst name is defined in the currently set language; if not, pick its English name; if N/A, pick the last in the list |
|
132 | - $prettyprintname = ""; |
|
133 | - foreach ($extinfo['names'] as $lang => $name) { |
|
134 | - if ($lang == $languageInstance->getLang()) { |
|
135 | - $prettyprintname = $name; |
|
96 | + $prettyprintname = $idp->name; |
|
97 | + $newtoken = $mgmt->createToken($fedadmin, $mailaddress, $idp); |
|
98 | + $loggerInstance->writeAudit($_SESSION['user'], "NEW", "IdP " . $idp->identifier . " - Token created for " . $mailaddress); |
|
99 | + $introtext = sprintf(_("a %s of the %s %s \"%s\" has invited you to manage the %s together with him."), $uiElements->nomenclature_fed, CONFIG_CONFASSISTANT['CONSORTIUM']['display_name'], $uiElements->nomenclature_inst, $prettyprintname, $uiElements->nomenclature_inst) . " " . sprintf(_("This invitation is valid for 24 hours from now, i.e. until %s."), strftime("%x %X", time() + 86400)); |
|
100 | + break; |
|
101 | + case OPERATION_MODE_NEWUNLINKED: |
|
102 | + $redirect_destination = "../overview_federation.php?"; |
|
103 | + $mailaddress = abortOnBogusMail($newmailaddress, $redirect_destination); |
|
104 | + // run an input check and conversion of the raw inputs... just in case |
|
105 | + $newinstname = $validator->string($_POST['name']); |
|
106 | + $newcountry = $validator->string($_POST['country']); |
|
107 | + $new_idp_authorized_fedadmin = $userObject->isFederationAdmin($newcountry); |
|
108 | + if ($new_idp_authorized_fedadmin !== TRUE) { |
|
109 | + throw new Exception("Something's wrong... you want to create a new " . $uiElements->nomenclature_inst . ", but are not a " . $uiElements->nomenclature_fed . " admin for the " . $uiElements->nomenclature_fed . " it should be in!"); |
|
136 | 110 | } |
137 | - } |
|
138 | - if ($prettyprintname == "" && isset($extinfo['names']['en'])) { |
|
139 | - $prettyprintname = $extinfo['names']['en']; |
|
140 | - } |
|
141 | - if ($prettyprintname == "") { |
|
142 | - foreach ($extinfo['names'] as $name) { |
|
143 | - $prettyprintname = $name; |
|
111 | + $federation = $validator->Federation($newcountry); |
|
112 | + $prettyprintname = $newinstname; |
|
113 | + $introtext = sprintf(_("a %s %s has invited you to manage the future %s \"%s\" (%s)."), CONFIG_CONFASSISTANT['CONSORTIUM']['display_name'], $uiElements->nomenclature_fed, $uiElements->nomenclature_inst, $prettyprintname, $newcountry) . " " . sprintf(_("This invitation is valid for 24 hours from now, i.e. until %s."), strftime("%x %X", time() + 86400)); |
|
114 | + // send the user back to his federation overview page, append the result of the operation later |
|
115 | + // do the token creation magic |
|
116 | + $newtoken = $mgmt->createToken(TRUE, $mailaddress, $newinstname, 0, $newcountry); |
|
117 | + $loggerInstance->writeAudit($_SESSION['user'], "NEW", "IdP FUTURE - Token created for " . $mailaddress); |
|
118 | + break; |
|
119 | + case OPERATION_MODE_NEWFROMDB: |
|
120 | + $redirect_destination = "../overview_federation.php?"; |
|
121 | + $mailaddress = abortOnBogusMail($newmailaddress, $redirect_destination); |
|
122 | + // a real external DB entry was submitted and all the required parameters are there |
|
123 | + $newexternalid = $validator->string($_POST['externals']); |
|
124 | + $extinfo = $catInstance->getExternalDBEntityDetails($newexternalid); |
|
125 | + $new_idp_authorized_fedadmin = $userObject->isFederationAdmin($extinfo['country']); |
|
126 | + if ($new_idp_authorized_fedadmin !== TRUE) { |
|
127 | + throw new Exception("Something's wrong... you want to create a new " . $uiElements->nomenclature_inst . ", but are not a " . $uiElements->nomenclature_fed . " admin for the " . $uiElements->nomenclature_fed . " it should be in!"); |
|
144 | 128 | } |
145 | - } |
|
146 | - // fill the rest of the text |
|
147 | - $introtext = sprintf(_("a %s %s has invited you to manage the %s \"%s\"."), CONFIG_CONFASSISTANT['CONSORTIUM']['display_name'], $uiElements->nomenclature_fed, $uiElements->nomenclature_inst, $prettyprintname) . " " . sprintf(_("This invitation is valid for 24 hours from now, i.e. until %s."), strftime("%x %X", time() + 86400)); |
|
148 | - // do the token creation magic |
|
149 | - $newtoken = $mgmt->createToken(TRUE, $mailaddress, $prettyprintname, $newexternalid); |
|
150 | - $loggerInstance->writeAudit($_SESSION['user'], "NEW", "IdP FUTURE - Token created for " . $mailaddress); |
|
151 | - break; |
|
152 | - default: // includes OPERATION_MODE_INVALID |
|
153 | - $wrongcontent = print_r($_POST, TRUE); |
|
154 | - echo "<pre>Wrong parameters in POST: |
|
129 | + $federation = $validator->Federation($extinfo['country']); |
|
130 | + $newcountry = $extinfo['country']; |
|
131 | + // see if the inst name is defined in the currently set language; if not, pick its English name; if N/A, pick the last in the list |
|
132 | + $prettyprintname = ""; |
|
133 | + foreach ($extinfo['names'] as $lang => $name) { |
|
134 | + if ($lang == $languageInstance->getLang()) { |
|
135 | + $prettyprintname = $name; |
|
136 | + } |
|
137 | + } |
|
138 | + if ($prettyprintname == "" && isset($extinfo['names']['en'])) { |
|
139 | + $prettyprintname = $extinfo['names']['en']; |
|
140 | + } |
|
141 | + if ($prettyprintname == "") { |
|
142 | + foreach ($extinfo['names'] as $name) { |
|
143 | + $prettyprintname = $name; |
|
144 | + } |
|
145 | + } |
|
146 | + // fill the rest of the text |
|
147 | + $introtext = sprintf(_("a %s %s has invited you to manage the %s \"%s\"."), CONFIG_CONFASSISTANT['CONSORTIUM']['display_name'], $uiElements->nomenclature_fed, $uiElements->nomenclature_inst, $prettyprintname) . " " . sprintf(_("This invitation is valid for 24 hours from now, i.e. until %s."), strftime("%x %X", time() + 86400)); |
|
148 | + // do the token creation magic |
|
149 | + $newtoken = $mgmt->createToken(TRUE, $mailaddress, $prettyprintname, $newexternalid); |
|
150 | + $loggerInstance->writeAudit($_SESSION['user'], "NEW", "IdP FUTURE - Token created for " . $mailaddress); |
|
151 | + break; |
|
152 | + default: // includes OPERATION_MODE_INVALID |
|
153 | + $wrongcontent = print_r($_POST, TRUE); |
|
154 | + echo "<pre>Wrong parameters in POST: |
|
155 | 155 | " . htmlspecialchars($wrongcontent) . " |
156 | 156 | </pre>"; |
157 | - exit(1); |
|
157 | + exit(1); |
|
158 | 158 | } |
159 | 159 | // are we on https? |
160 | 160 | $proto = "http://"; |