Zabbix

<?php declare(strict_types = 1);

/*

** Zabbix

** Copyright (C) 2001-2022 Zabbix SIA

**

** This program is free software; you can redistribute it and/or modify

** it under the terms of the GNU General Public License as published by

** the Free Software Foundation; either version 2 of the License, or

** (at your option) any later version.

**

** This program is distributed in the hope that it will be useful,

** but WITHOUT ANY WARRANTY; without even the implied warranty of

** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

** GNU General Public License for more details.

**

** You should have received a copy of the GNU General Public License

** along with this program; if not, write to the Free Software

** Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.

**/

​

​

/**

 * Class containing methods for operations with authentication parameters.

 */

class CAuthentication extends CApiService {

​

    public const ACCESS_RULES = [

        'get' => ['min_user_type' => USER_TYPE_SUPER_ADMIN],

        'update' => ['min_user_type' => USER_TYPE_SUPER_ADMIN]

    ];

​

    protected $tableName = 'config';

    protected $tableAlias = 'c';

​

    /**

     * @var array

     */

    private $output_fields = ['authentication_type', 'http_auth_enabled', 'http_login_form', 'http_strip_domains',

        'http_case_sensitive', 'ldap_configured', 'ldap_case_sensitive', 'ldap_userdirectoryid', 'saml_auth_enabled',

        'saml_idp_entityid', 'saml_sso_url', 'saml_slo_url', 'saml_username_attribute', 'saml_sp_entityid',

        'saml_nameid_format', 'saml_sign_messages', 'saml_sign_assertions', 'saml_sign_authn_requests',

        'saml_sign_logout_requests', 'saml_sign_logout_responses', 'saml_encrypt_nameid', 'saml_encrypt_assertions',

        'saml_case_sensitive', 'passwd_min_length', 'passwd_check_rules'

    ];

​

    /**

     * @param array $options

     *

     * @throws APIException if the input is invalid.

     *

     * @return array

     */

    public function get(array $options): array {

        $api_input_rules = ['type' => API_OBJECT, 'fields' => [

            'output' => ['type' => API_OUTPUT, 'in' => implode(',', $this->output_fields), 'default' => API_OUTPUT_EXTEND]

        ]];

​

        if (!CApiInputValidator::validate($api_input_rules, $options, '/', $error)) {

            self::exception(ZBX_API_ERROR_PARAMETERS, $error);

        }

​

        if ($options['output'] === API_OUTPUT_EXTEND) {

            $options['output'] = $this->output_fields;

        }

​

        $db_auth = [];

​

        $result = DBselect($this->createSelectQuery($this->tableName(), $options));

        while ($row = DBfetch($result)) {

            $db_auth[] = $row;

        }

        $db_auth = $this->unsetExtraFields($db_auth, ['configid'], []);

​

        return $db_auth[0];

    }

​

    /**

     * @param array $auth

     *

     * @throws APIException if the input is invalid.

     *

     * @return array

     */

    public function update(array $auth): array {

        if (self::$userData['type'] != USER_TYPE_SUPER_ADMIN) {

            self::exception(ZBX_API_ERROR_PERMISSIONS,

                _s('No permissions to call "%1$s.%2$s".', 'authentication', __FUNCTION__)

            );

        }

​

        $db_auth = $this->validateUpdate($auth);