From c9e3d8edee66f1937b08f55ce16e4c838256d5e7 Mon Sep 17 00:00:00 2001
From: ivan <ivan>
Date: Sun, 16 Mar 2008 21:07:04 +0000
Subject: [PATCH 1/1] first try at single sign-on

---
 fs_selfservice/fri/includes/common.php |  1 +
 fs_selfservice/fri/includes/login.php  | 33 ++++++++++++++++++++++++++++++++-
 2 files changed, 33 insertions(+), 1 deletion(-)

diff --git a/fs_selfservice/fri/includes/common.php b/fs_selfservice/fri/includes/common.php
index caa76c1d6..87f202638 100644
--- a/fs_selfservice/fri/includes/common.php
+++ b/fs_selfservice/fri/includes/common.php
@@ -429,5 +429,6 @@ include_once("./includes/database.php");
 include_once("./includes/display.php"); 
 include_once("./includes/ajax.php");
 
+include_once("./includes/freeside.class.php");
 
 ?>
diff --git a/fs_selfservice/fri/includes/login.php b/fs_selfservice/fri/includes/login.php
index 826692c29..d91b711a4 100644
--- a/fs_selfservice/fri/includes/login.php
+++ b/fs_selfservice/fri/includes/login.php
@@ -279,6 +279,37 @@ class Login {
         $_SESSION['ari_error'] = _("Incorrect Username or Password");
       }
 
+      // freeside login
+      $freeside = new FreesideSelfService()
+      $domain = 'svc_phone';
+      $response = $freeside->login( array( 
+        'username' => strtolower($_username),
+        'domain'   => $domain,
+        'password' => strtolower($password),
+      ) );
+      error_log("[login] received response from freeside: $response");
+      $error = $response['error'];
+
+      if ( ! $error ) {
+
+          // sucessful freeside login
+          error_log("[login] logged into freeside with session_id=$session_id");
+      
+          // store session id in your session store, to be used for other calls
+          //$fs_session_id = $response['session_id'];
+          $_SESSION['fs_session'] = $response['session_id'];
+      
+      } else {
+      
+          // unsucessful login
+          error_log("[login] error logging into freeside: $error");
+          $auth = false;
+
+          // display error message to user
+          $_SESSION=['ari_error'] = _("Incorrect Username or Password");
+      
+      }
+
       // if authenticated and user wants to be remembered, set cookie 
       $remember = '';
       if (isset($_POST['remember'])) {
@@ -474,4 +505,4 @@ class Login {
 }
 
 
-?>
\ No newline at end of file
+?>
-- 
2.11.0