Merge branch 'master' of ssh://172.20.0.1/var/git/espo/backend

2013-11-27 12:44:46 +02:00
parent eb00602c6d a388092e49
commit 1bb2ef6f36
1 changed files with 87 additions and 0 deletions
@@ -0,0 +1,87 @@
+<?php
+
+require_once('bootstrap.php');
+
+$app = new \Espo\Core\Application();
+
+use \Slim\Slim;
+class Auth extends \Slim\Middleware
+{
+	private $entityManager;
+
+	private $container;
+
+	public function __construct(\Doctrine\ORM\EntityManager $entityManager, \Espo\Core\Container $container)
+	{
+		$this->entityManager = $entityManager;
+		$this->container = $container;
+	}
+
+	function call()
+	{
+		$req = $this->app->request();
+        $res = $this->app->response();
+
+		$uri = $req->getResourceUri();
+		$httpMethod = $req->getMethod();
+
+		/**
+		* Check if user credentials are required for current route
+		*/
+		$routes = $this->app->router()->getMatchedRoutes($httpMethod, $uri);
+
+		if (!empty($routes[0])) {
+			$routeConditions = $routes[0]->getConditions();
+        	if (isset($routeConditions['auth']) && $routeConditions['auth'] === false) {
+        		$this->container->setUser(new \Espo\Entities\User());
+	        	$this->next->call();
+				return;
+			}
+		}
+
+		$authKey = $req->headers('PHP_AUTH_USER');
+        $authSec = $req->headers('PHP_AUTH_PW');
+
+        if ($authKey && $authSec) {
+
+			$isAuthenticated = false;
+
+			$username = $authKey;
+			$password = $authSec;
+
+		    $user = $this->entityManager->getRepository('\Espo\Entities\User')->findOneBy(array('username' => $username));
+			if ($user) {
+				if ($password == $user->getPassword()) {
+					$this->container->setUser($user);
+					$isAuthenticated = true;
+				}
+			}
+
+            if ($isAuthenticated) {
+                $this->next->call();
+            } else {
+            	$res->header('WWW-Authenticate', sprintf('Basic realm="%s"', ''));
+            	$res->status(401);
+            }
+        } else {
+            $res->header('WWW-Authenticate', sprintf('Basic realm="%s"', ''));
+            $res->status(401);
+        }
+	}
+}
+
+
+$auth = new Auth($app->getContainer()->get('entityManager'), $app->getContainer());
+$app->getSlim()->add($auth);
+
+
+$app->getSlim()->get('/', function() {
+	echo <<<EOT
+		<h1>EspoCRM REST API!!!</h1>
+EOT;
+});       
+
+$app->getSlim()->run();
+
+
+?>