Show an error message to the user when eppn is invalid

Author: bryank-cs

resources/init.php

@@ -13,6 +13,8 @@
 use UnityWebPortal\lib\UnityRedis;
 use UnityWebPortal\lib\UnityWebhook;
 use UnityWebPortal\lib\UnityGithub;
+use UnityWebPortal\lib\UnitySite;
+use UnityWebPortal\lib\exceptions\SSOException;
 
 //
 // Initialize Session
@@ -92,7 +94,14 @@
 // SSO Init
 //
 
-$SSO = UnitySSO::getSSO();
+try {
+    $SSO = UnitySSO::getSSO();
+} catch (SSOException $e) {
+    $errorid = uniqid("sso-");
+    $eppn = $_SERVER["REMOTE_USER"];
+    UnitySite::errorLog("SSO Failure", "{$e} ($errorid)");
+    UnitySite::die("Invalid eppn: '$eppn'. Please contact {$CONFIG["mail"]["support"]} (id: $errorid)", true);
+}
 if (!is_null($SSO)) {
     // SSO is available
     $_SESSION["SSO"] = $SSO;

resources/lib/UnitySSO.php

@@ -3,6 +3,7 @@
 namespace UnityWebPortal\lib;
 
 use Exception;
+use UnityWebPortal\lib\exceptions\SSOException;
 
 class UnitySSO
 {
@@ -17,7 +18,7 @@ private static function eppnToOrg($eppn)
     {
         $parts = explode("@", $eppn);
         if (count($parts) != 2) {
-            throw new Exception("Malformed remote user detected: '$eppn'");
+            throw new SSOException("Malformed remote user detected: '$eppn'");
         }
 
         $org = $parts[1];

resources/lib/exceptions/SSOException.php

@@ -0,0 +1,6 @@
+<?php
+namespace UnityWebPortal\lib\exceptions;
+
+class SSOException extends \Exception
+{
+}