CAS authentication is operational.

Author: pitchum

app/Http/Controllers/PasteController.php

@@ -12,16 +12,27 @@
 use Cookie;
 use DB;
 use \Carbon;
+use Cas;
 
 class PasteController extends Controller
 {
-	public function index(){
-		if (!Auth::check()) { return redirect('/login'); }
-		return view('paste/index');
-	}
+  public function index(){
+    if (!cas()->isAuthenticated()) {
+        cas()->authenticate();
+    }
+    $username = cas()->getCurrentUser();
+    $user = User::where('name', $username)->first();
+    return view('paste/index', [
+      'user' => $user,
+    ]);
+  }
 
 	public function submit(Requests\StorePaste $request){
-		if (!Auth::check()) { return redirect('/login'); }
+		if (!cas()->isAuthenticated()) {
+			cas()->authenticate();
+		}
+		$username = cas()->getCurrentUser();
+		$user = User::create_if_absent($username);
 		$title = (empty(trim(Input::get('pasteTitle')))) ? 'Untitled' : Input::get('pasteTitle');
 
 		$expiration = Input::get('expire');
@@ -72,7 +83,7 @@ public function submit(Requests\StorePaste $request){
 
 		Paste::create([
 			'link' => $generatedLink,
-			'userId' => (Auth::check()) ? Auth::id() : 0,
+			'userId' => ($user != null) ? $user->id : 0,
 			'views' => '0',
 			'title' => $title,
 			'content' => Input::get('pasteContent'),
@@ -91,7 +102,13 @@ public function view($link, Request $request){
     $paste = Paste::where('link', $link)->firstOrFail();
 
     // Est-ce que l'utilisateur connecté est celui qui a écrit la paste ?
-    $isSameUser = ((Auth::user() == $paste->user && $paste->userId != 0)) ? true : false;
+    if (cas()->isAuthenticated()) {
+      $username = cas()->getCurrentUser();
+      $user = User::where('name', $username)->first();
+      $isSameUser = (($user->id == $paste->userId && $paste->userId != 0)) ? true : false;
+    } else {
+      $isSameUser = false;
+    }
 
     // Expiration de la paste
     if($paste->expiration != 0){
@@ -229,7 +246,7 @@ public function raw($link){
         $paste->save();
       }
       // On regarde si le créateur est connecté, si oui il peut voir sa paste expirée, sinon 404
-          if(Auth::check()) {
+          if(cas()->isAuthenticated()) {
             if ($paste->userId != Auth::user()->id) {
               return view('errors/404');
             }

app/Http/Kernel.php

@@ -49,6 +49,8 @@ class Kernel extends HttpKernel
     protected $routeMiddleware = [
         'auth' => \Illuminate\Auth\Middleware\Authenticate::class,
         'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class,
+        'cas.auth'  => \Subfission\Cas\Middleware\CASAuth::class,
+        'cas.guest' => \Subfission\Cas\Middleware\RedirectCASAuthenticated::class,
         'bindings' => \Illuminate\Routing\Middleware\SubstituteBindings::class,
         'can' => \Illuminate\Auth\Middleware\Authorize::class,
         'guest' => \App\Http\Middleware\RedirectIfAuthenticated::class,

app/User.php

@@ -4,6 +4,7 @@
 
 use Illuminate\Notifications\Notifiable;
 use Illuminate\Foundation\Auth\User as Authenticatable;
+use Illuminate\Support\Facades\Log;
 
 class User extends Authenticatable
 {
@@ -31,4 +32,18 @@ public function pastes()
     {
         return $this->hasMany('App\Paste', 'userId');
     }
+
+    public static function create_if_absent($username) {
+        $user = User::where('name', $username)->first();
+        if ($user == null) {
+            Log::debug('Inserting new user.', ['username' => $username]);
+            $user = User::create([
+                'name' => $username,
+                'email' => $username .'@example.local',
+                'password' => '',
+            ]);
+            Log::info('User created.', ['user' => $user]);
+        }
+        return $user;
+    }
 }

config/app.php

@@ -162,7 +162,7 @@
         Illuminate\Translation\TranslationServiceProvider::class,
         Illuminate\Validation\ValidationServiceProvider::class,
         Illuminate\View\ViewServiceProvider::class,
-        'Subfission\Cas\CasServiceProvider',
+        Subfission\Cas\CasServiceProvider::class,
 
         /*
          * Package Service Providers...