<?php

/**
*  Example that changes the storage of the pgt tickets to file
*
* PHP Version 5
*
* @file     example_pgt_storage_db.php
* @category Authentication
* @package  PhpCAS
* @author   Joachim Fritschi <jfritschi@freenet.de>
* @author   Adam Franco <afranco@middlebury.edu>
* @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
* @link     https://wiki.jasig.org/display/CASC/phpCAS
*/

// Load the settings from the central config file
require_once 'config.php';
// Load the CAS lib
require_once $phpcas_path . '/CAS.php';

// Enable debugging
phpCAS::setDebug();

// Initialize phpCAS
phpCAS::proxy(CAS_VERSION_2_0, $cas_host, $cas_port, $cas_context);

// For production use set the CA certificate that is the issuer of the cert
// on the CAS server and uncomment the line below
// phpCAS::setCasServerCACert($cas_server_ca_cert_path);

// For quick testing you can disable SSL validation of the CAS server.
// THIS SETTING IS NOT RECOMMENDED FOR PRODUCTION.
// VALIDATING THE CAS SERVER IS CRUCIAL TO THE SECURITY OF THE CAS PROTOCOL!
phpCAS::setNoCasServerValidation();

// set PGT storage to file in plain format in the same directory as session files
phpCAS::setPGTStorageFile(session_save_path());

// force CAS authentication
phpCAS::forceAuthentication();

// at this step, the user has been authenticated by the CAS server
// and the user's login name can be read with phpCAS::getUser().

// moreover, a PGT was retrieved from the CAS server that will
// permit to gain accesses to new services.

?>
<html>
  <head>
    <title>phpCAS proxy example with PGT storage to file</title>
    <link rel="stylesheet" type='text/css' href='example.css'/>
  </head>
  <body>
    <h1>phpCAS proxy example with PGT storage to file</h1>
    <?php require 'script_info.php' ?>
    <p>the user's login is <b><?php echo phpCAS::getUser(); ?></b>.</p>
    <h2>Response from service <?php echo $serviceUrl; ?></h2>
<?php
  flush();
  // call a service and change the color depending on the result
if ( phpCAS::serviceWeb($serviceUrl, $err_code, $output) ) {
    echo '<div class="success">';
} else {
    echo '<div class="error">';
}
  echo $output;
  echo '</div>';
?>
  </body>
</html>
