admin/Facilitor
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

FSN#36857 _facilitor zonder OTP in productie inloggen

Browse Source 
svn path=/Website/trunk/; revision=29938
This commit is contained in:
Erik Groener
2016-07-04 11:33:51 +00:00
parent 59ccf44f74
commit 2e67e5836f
5 changed files with 17 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
APPL/PRS/pchange_save.asp
View File

@@ -75,6 +75,7 @@ if (clearpassword) // Eventuele OTP ook wissen
+ " , prs_perslid_otpcounter = NULL"
+ " WHERE prs_perslid_key = " + user_key;
Oracle.Execute(sql);
shared.trackaction("PRSLOG", theUser_key, L("lcl_otp_cleared"));
}
deleteSessionCookie("fcltid"); // Die is nu toch ongeldig

2
APPL/PRS/prs_perslid_clear_sessions.asp
View File

@@ -41,6 +41,8 @@ Oracle.Execute(sql);
// if (theUser_key == user_key)
// doLogin(user_key); is dit logisch? Neen, je ASPFIX verandert dan en Logoff werkt niet meer
shared.trackaction("PRSLOG", theUser_key, L("lcl_qrc_auth_cleared"));
var result = { success: true, message: L("lcl_qrc_auth_cleared") };
Response.Write(JSON.stringify(result));

4
APPL/PRS/prs_perslid_otp_clear.asp
View File

@@ -14,7 +14,7 @@ var JSON_Result = true;
<!--#include file="../Shared/common.inc"-->
<!--#include file="../Shared/login.inc"-->
<!-- #include file="../Shared/json2.js" -->
<!--#include file="../Shared/json2.js" -->
<%
protectRequest.validateToken();
@@ -24,6 +24,8 @@ var sql = "UPDATE prs_perslid"
+ " WHERE prs_perslid_key = " + user_key;
Oracle.Execute(sql);
shared.trackaction("PRSLOG", user_key, L("lcl_otp_cleared"));
var result = { success: user_key > 0, message: L("lcl_otp_cleared") };
Response.Write(JSON.stringify(result));

4
APPL/PRS/prs_perslid_otp_new_save.asp
View File

@@ -14,7 +14,7 @@ var JSON_Result = true;
<!--#include file="../Shared/common.inc"-->
<!--#include file="../Shared/login.inc"-->
<!-- #include file="../Shared/json2.js" -->
<!--#include file="../Shared/json2.js" -->
<%
protectRequest.validateToken();
@@ -31,6 +31,8 @@ var sql = "UPDATE prs_perslid"
+ " WHERE prs_perslid_key = " + user_key;
Oracle.Execute(sql);
shared.trackaction("PRSLOG", user_key, L("lcl_otp_set"));
var result = { success: user_key > 0, message: L("lcl_otp_saved") };
Response.Write(JSON.stringify(result));

12
APPL/Shared/Login.inc
View File

@@ -455,6 +455,10 @@ function verify_otp (otprequest, otpsecret, otpcounter)
{
otp_oke = true;
otpcounter = code.counter; // TODO: We zouden moeten bijwerken
var sql = "UPDATE prs_perslid"
+ " SET prs_perslid_otpcounter = " + otpcounter
+ " WHERE prs_perslid_key = " + user_key;
Oracle.Execute(sql);
}
}
}
@@ -595,7 +599,7 @@ function SecureSSO(ssoProps)
if (strAction == "requestid")
{
//* action = requestid *******************************************
// * action = requestid *******************************************
%>
<BODY LANGUAGE="javascript" onload="return fnSubmit()">
<%
@@ -665,7 +669,7 @@ function SecureSSO(ssoProps)
// Convert from ASC chars
strUserName = ConvertFromAsc(strUserName)
strControlID = ConvertFromAsc(strControlID)
//* decrypt ******************************************************
// * decrypt ******************************************************
//First decoding phase
var strKey = (ssoProps.strSharedKey + strGUID).substr(0,strUserName.length);
strDecryptedCode = DeCrypt(strUserName)
@@ -731,7 +735,7 @@ function SecureSSO(ssoProps)
Response.Write("Foute aanroep");
Response.End;
}
//* Functions ********************************************************
// * Functions ********************************************************
function ConvertFromAsc(strAsc)
{
var iCount
@@ -776,7 +780,7 @@ function SecureSSO(ssoProps)
}
return strDecrypted;
}
//*********************************************************************
// *********************************************************************
%>
</form>
</BODY>