diff --git a/modules/admin/lib/Controller/Federation.php b/modules/admin/lib/Controller/Federation.php index d278b71a7f342733bddc5f189434d83f6d1b5540..9d913d9bafdab45f56b2fe92ff4929f27e6e679f 100644 --- a/modules/admin/lib/Controller/Federation.php +++ b/modules/admin/lib/Controller/Federation.php @@ -466,11 +466,11 @@ class Federation { $this->authUtils->requireAdmin(); - $set = $request->get('set'); - $prefix = $request->get('prefix', ''); + $set = $request->query->get('set'); + $prefix = $request->query->get('prefix', ''); if ($set === 'saml20-sp-hosted') { - $sourceID = $request->get('source'); + $sourceID = $request->query->get('source'); /** * The second argument ensures non-nullable return-value * @var \SimpleSAML\Module\saml\Auth\Source\SP $source @@ -478,7 +478,7 @@ class Federation $source = $this->authSource::getById($sourceID, Module\saml\Auth\Source\SP::class); $mdconfig = $source->getMetadata(); } else { - $entityID = $request->get('entity'); + $entityID = $request->query->get('entity'); $mdconfig = $this->mdHandler->getMetaDataConfig($entityID, $set); } @@ -509,8 +509,8 @@ class Federation { $this->authUtils->requireAdmin(); - $entityId = $request->get('entityid'); - $set = $request->get('set'); + $entityId = $request->query->get('entityid'); + $set = $request->query->get('set'); $metadata = $this->mdHandler->getMetaData($entityId, $set); diff --git a/modules/core/lib/Controller/Exception.php b/modules/core/lib/Controller/Exception.php index 2b0e5e95b31dd1e00a2bb79bc3b02a4ae94658bd..b5a758c39dceb23473d721a8d5cd41ba0ac9b162 100644 --- a/modules/core/lib/Controller/Exception.php +++ b/modules/core/lib/Controller/Exception.php @@ -60,7 +60,7 @@ class Exception */ public function cardinality(Request $request): Response { - $stateId = $request->get('StateId', false); + $stateId = $request->query->get('StateId', false); if ($stateId === false) { throw new Error\BadRequest('Missing required StateId query parameter.'); } @@ -95,7 +95,7 @@ class Exception */ public function nocookie(Request $request): Response { - $retryURL = $request->get('retryURL', null); + $retryURL = $request->query->get('retryURL', null); if ($retryURL !== null) { $httpUtils = new Utils\HTTP(); $retryURL = $httpUtils->checkURLAllowed(strval($retryURL)); @@ -121,7 +121,7 @@ class Exception */ public function shortSsoInterval(Request $request): Response { - $stateId = $request->get('StateId', false); + $stateId = $request->query->get('StateId', false); if ($stateId === false) { throw new Error\BadRequest('Missing required StateId query parameter.'); } @@ -129,7 +129,7 @@ class Exception /** @var array $state */ $state = Auth\State::loadState($stateId, 'core:short_sso_interval'); - $continue = $request->get('continue', false); + $continue = $request->query->get('continue', false); if ($continue !== false) { // The user has pressed the continue/retry-button Auth\ProcessingChain::resumeProcessing($state); diff --git a/modules/core/lib/Controller/Login.php b/modules/core/lib/Controller/Login.php index db4f724b7c72eac62cbc208454a03554f9fc6d82..84adca0d2a0f53c1cf9156e1710883a13d1adb9d 100644 --- a/modules/core/lib/Controller/Login.php +++ b/modules/core/lib/Controller/Login.php @@ -168,7 +168,7 @@ class Login $auth = $this->factory->create($as); $as = urlencode($as); - if ($request->get(Auth\State::EXCEPTION_PARAM, false) !== false) { + if ($request->request->get(Auth\State::EXCEPTION_PARAM, false) !== false) { // This is just a simple example of an error /** @var array $state */ @@ -236,7 +236,7 @@ class Login } // Find where we should go now. - $returnTo = $request->get('ReturnTo', false); + $returnTo = $request->request->get('ReturnTo', false); if ($returnTo !== false) { $returnTo = $httpUtils->checkURLAllowed($returnTo); } else { diff --git a/modules/core/lib/Controller/Redirection.php b/modules/core/lib/Controller/Redirection.php index d0947029bf94c30a7ec47452456649508211cc0c..70d9b0c32c08cac28cbc96da1a7416656fef9362 100644 --- a/modules/core/lib/Controller/Redirection.php +++ b/modules/core/lib/Controller/Redirection.php @@ -65,8 +65,8 @@ class Redirection */ public function postredirect(Request $request): Response { - $redirId = $request->get('RedirId', false); - $redirInfo = $request->get('RedirInfo', false); + $redirId = $request->request->get('RedirId', false); + $redirInfo = $request->request->get('RedirInfo', false); if ($redirId !== false) { $postId = $redirId; } elseif ($redirInfo !== false) { diff --git a/modules/exampleauth/lib/Auth/Source/External.php b/modules/exampleauth/lib/Auth/Source/External.php index d369fc71348def32ee15b3d788ca20115add94a0..6e7d5166f7b526b5b6378b9908a9a89732aa4b16 100644 --- a/modules/exampleauth/lib/Auth/Source/External.php +++ b/modules/exampleauth/lib/Auth/Source/External.php @@ -204,7 +204,7 @@ class External extends Auth\Source * match the string we used in the saveState-call above. */ /** @var array $state */ - $state = Auth\State::loadState($request->get('State'), 'exampleauth:External'); + $state = Auth\State::loadState($request->query->get('State'), 'exampleauth:External'); /* * Now we have the $state-array, and can use it to locate the authentication diff --git a/modules/exampleauth/lib/Controller/ExampleAuth.php b/modules/exampleauth/lib/Controller/ExampleAuth.php index 0072a1a66268dc64fe6d53089fd6af862ae926dc..aed747526005e500030e2ba106c2fd9e56cf5e80 100644 --- a/modules/exampleauth/lib/Controller/ExampleAuth.php +++ b/modules/exampleauth/lib/Controller/ExampleAuth.php @@ -88,7 +88,7 @@ class ExampleAuth * Note that we don't actually validate the user in this example. This page * just serves to make the example work out of the box. */ - $returnTo = $request->get('ReturnTo'); + $returnTo = $request->request->get('ReturnTo'); if ($returnTo === null) { throw new Error\Exception('Missing ReturnTo parameter.'); } @@ -137,8 +137,8 @@ class ExampleAuth // time to handle login responses; since this is a dummy example, we accept any data $badUserPass = false; if ($request->getMethod() === 'POST') { - $username = $request->get('username'); - $password = $request->get('password'); + $username = $request->request->get('username'); + $password = $request->request->get('password'); if (!isset($users[$username]) || $users[$username]['password'] !== $password) { $badUserPass = true; @@ -180,7 +180,7 @@ class ExampleAuth /** * Request handler for redirect filter test. */ - $stateId = $request->get('StateId'); + $stateId = $request->query->get('StateId'); if ($stateId === null) { throw new Error\BadRequest('Missing required StateId query parameter.'); } diff --git a/modules/multiauth/lib/Controller/DiscoController.php b/modules/multiauth/lib/Controller/DiscoController.php index a79ce2ff93871eb905f9bb6375a4f3e943db814e..6f0694ae041887d1ad84d710d1d733e34253b770 100644 --- a/modules/multiauth/lib/Controller/DiscoController.php +++ b/modules/multiauth/lib/Controller/DiscoController.php @@ -98,7 +98,7 @@ class DiscoController public function discovery(Request $request) { // Retrieve the authentication state - $authStateId = $request->get('AuthState', null); + $authStateId = $request->query->get('AuthState', null); if (is_null($authStateId)) { throw new Error\BadRequest('Missing AuthState parameter.'); } @@ -114,7 +114,7 @@ class DiscoController $as = Auth\Source::getById($authId); } - $source = $request->get('source', null); + $source = $request->query->get('source', null); if ($source !== null) { if ($as !== null) { diff --git a/tests/modules/exampleauth/lib/Controller/ExampleAuthTest.php b/tests/modules/exampleauth/lib/Controller/ExampleAuthTest.php index 53fd690fe027d591faa61ec50eb31358965a2686..ad1ba0b89de268c69a79e3db0bc7bc2cbad0624b 100644 --- a/tests/modules/exampleauth/lib/Controller/ExampleAuthTest.php +++ b/tests/modules/exampleauth/lib/Controller/ExampleAuthTest.php @@ -58,7 +58,7 @@ class ExampleAuthTest extends TestCase { $request = Request::create( '/authpage', - 'GET', + 'POST', ['NoReturnTo' => 'Limbo'], ); @@ -80,7 +80,7 @@ class ExampleAuthTest extends TestCase { $request = Request::create( '/authpage', - 'GET', + 'POST', ['ReturnTo' => 'SomeBogusValue'], ); @@ -102,7 +102,7 @@ class ExampleAuthTest extends TestCase { $request = Request::create( '/authpage', - 'GET', + 'POST', ['ReturnTo' => 'State=/'], );