Yuri Kuznetsov
110 lines
3.0 KiB
PHP
110 lines
3.0 KiB
PHP
<?php
|
|
/************************************************************************
|
|
* This file is part of EspoCRM.
|
|
*
|
|
* EspoCRM - Open Source CRM application.
|
|
* Copyright (C) 2014 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
|
|
* Website: http://www.espocrm.com
|
|
*
|
|
* EspoCRM is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* EspoCRM is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with EspoCRM. If not, see http://www.gnu.org/licenses/.
|
|
************************************************************************/
|
|
|
|
namespace Espo\Core\Utils;
|
|
|
|
use \Espo\Core\Exceptions\Error;
|
|
|
|
class Auth
|
|
{
|
|
protected $container;
|
|
|
|
public function __construct(\Espo\Core\Container $container)
|
|
{
|
|
$this->container = $container;
|
|
}
|
|
|
|
public function useNoAuth($isAdmin = false)
|
|
{
|
|
$entityManager = $this->container->get('entityManager');
|
|
|
|
$user = $entityManager->getRepository('User')->get('system');
|
|
$user->set('isAdmin', $isAdmin);
|
|
if (!$user) {
|
|
throw new Error('System user is not found');
|
|
}
|
|
|
|
$entityManager->setUser($user);
|
|
$this->container->setUser($user);
|
|
}
|
|
|
|
public function login($username, $password)
|
|
{
|
|
$GLOBALS['log']->debug('AUTH: Try to authenticate');
|
|
|
|
$hash = md5($password);
|
|
|
|
$entityManager = $this->container->get('entityManager');
|
|
|
|
$authToken = $entityManager->getRepository('AuthToken')->where(array('token' => $password))->findOne();
|
|
if ($authToken) {
|
|
$hash = $authToken->get('hash');
|
|
}
|
|
|
|
$user = $entityManager->getRepository('User')->findOne(array(
|
|
'whereClause' => array(
|
|
'userName' => $username,
|
|
'password' => $hash
|
|
),
|
|
));
|
|
|
|
if ($user) {
|
|
$entityManager->setUser($user);
|
|
$this->container->setUser($user);
|
|
$GLOBALS['log']->debug('AUTH: Result of authenticate is [true]');
|
|
|
|
if (!$authToken) {
|
|
$authToken = $entityManager->getEntity('AuthToken');
|
|
$token = $this->createToken($user);
|
|
$authToken->set('token', $token);
|
|
$authToken->set('hash', $user->get('password'));
|
|
$authToken->set('ipAddress', $_SERVER['REMOTE_ADDR']);
|
|
$authToken->set('userId', $user->id);
|
|
}
|
|
|
|
$authToken->set('lastAccess', date('Y-m-d H:i:s'));
|
|
|
|
$entityManager->saveEntity($authToken);
|
|
$user->set('token', $authToken->get('token'));
|
|
|
|
return true;
|
|
}
|
|
}
|
|
|
|
protected function createToken($user)
|
|
{
|
|
return md5(uniqid($user->get('password')));
|
|
}
|
|
|
|
public function destroyAuthToken($token)
|
|
{
|
|
$entityManager = $this->container->get('entityManager');
|
|
|
|
$authToken = $entityManager->getRepository('AuthToken')->where(array('token' => $token))->findOne();
|
|
if ($authToken) {
|
|
$entityManager->removeEntity($authToken);
|
|
return true;
|
|
}
|
|
}
|
|
}
|
|
|