webLanding.prg

<?php
/**
 *  File: ssoLanding.prg
 *  Purpose: Provide a script the apps can call if necessary to create a
 *    cookie before launching a browser external to the app.
 *
 */

  // ** SET HOMECU FLAGS - no menu, limited branding
  $serviceShowInfo = false;
  $serviceLoadMenu = false;
  $serviceShowMenu = false;
  $serviceSkipSecurity = true;
  $serviceSkipCredentials = true;   // we don't have the Ticket set up yet
  $serviceAllowReadonly = true;

require_once(dirname(__FILE__) . '/../library/hcuService.i');

  try {

    // decrypt it
    $inputPayload = filter_input( INPUT_GET, "payload", FILTER_SANITIZE_STRING );
    if ( strlen( $inputPayload ) == 0 ) {
      throw new Exception("Invalid parameters.");
    }

    // quick test to make sure the nonce is part of the payload (should have a "|")
    $parts = explode( "|", $inputPayload );
    if ( count( $parts ) != 2 ) {
      throw new Exception("Badly formed parameters.");
    }

    $payload = DecryptPayloadData( $inputPayload, GetPayloadEncryptionKey(32) );
    if ( strlen( $payload ) == 0 ) {
      throw new Exception("Invalid payload.");
    }

    $parts = json_decode( $payload, true );
    if ( !is_array( $parts ) ) {
      throw new Exception("Invalid decoded payload parts.");
    }

    $url = trim( $parts["url"] );
    $parameters = trim( urldecode( $parts["parameters"] ) );
    $cookies = $parts["cookies"];

    // set any cookies
    // NOTE: the Ticket cookie string is encoded, so need to decode it first
    if ( count( $cookies ) > 0 ) {
      $cookieNames = array_keys( $cookies );

      for ( $i = 0; $i < count( $cookieNames ); $i++ ) {
        $lEnvSet = HCU_array_key_value('SYSENV', $HB_ENV);
        HCU_setcookie_env($lEnvSet, trim( $cookieNames[$i] ), urldecode( $cookies[$cookieNames[$i]] ), 0);
      }
    }

    $fullURL = $url;
    if ( strlen( $parameters ) > 0 ) {
      $fullURL .= "?" . $parameters;
    }

    header( "Location: $fullURL" );
    exit;

  } catch( Exception $e ) {
    $message = $e->getMessage();
    print "Unable to resolve targets. $message";
  }