Ready for 7.10.29 development.

lib/WebGUI/Operation/SSO.pm

@@ -0,0 +1,56 @@
+package WebGUI::Operation::SSO;
+
+#-------------------------------------------------------------------
+# WebGUI is Copyright 2001-2009 Plain Black Corporation.
+#-------------------------------------------------------------------
+# Please read the legal notices (docs/legal.txt) and the license
+# (docs/license.txt) that came with this distribution before using
+# this software.
+#-------------------------------------------------------------------
+# http://www.plainblack.com                     info@plainblack.com
+#-------------------------------------------------------------------
+
+use strict;
+
+=head1 NAME
+
+WebGUI::Operation::SSO
+
+=head1 DESCRIPTION
+
+TODO
+
+=cut
+
+#-------------------------------------------------------------------
+
+=head2 www_ssoViaSessionId
+
+Allows a user to login as another user, by referencing that user's sessionId.  Requires that
+sessionId is passed as a form or URL parameter.  It does NOT duplicate the original user's session,
+it just switches you to that user.
+
+=cut
+
+sub www_ssoViaSessionId {
+	my $session = shift;
+    return undef unless $session->config->get('enableSimpleSSO');
+	my $sessionId = $session->form->get("sessionId");
+	if (defined $sessionId && $sessionId ne "") {
+		if ($sessionId eq $session->getId) {
+			# we're already the correct session
+		}
+		else {
+			my ($userId) = $session->db->quickArray("select userId from userSession where sessionId=?",[$sessionId]);
+			if (defined $userId && $userId ne "") {
+				$session->var->end;
+				$session->var->start($userId);
+			}
+		}
+	}
+	return undef;
+}
+
+
+
+1;