yuri
96 lines
3.9 KiB
PHP
96 lines
3.9 KiB
PHP
<?php
|
|
/************************************************************************
|
|
* This file is part of EspoCRM.
|
|
*
|
|
* EspoCRM - Open Source CRM application.
|
|
* Copyright (C) 2014-2015 Yuri Kuznetsov, Taras Machyshyn, Oleksiy Avramenko
|
|
* Website: http://www.espocrm.com
|
|
*
|
|
* EspoCRM is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* EspoCRM is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with EspoCRM. If not, see http://www.gnu.org/licenses/.
|
|
*
|
|
* The interactive user interfaces in modified source and object code versions
|
|
* of this program must display Appropriate Legal Notices, as required under
|
|
* Section 5 of the GNU General Public License version 3.
|
|
*
|
|
* In accordance with Section 7(b) of the GNU General Public License version 3,
|
|
* these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
|
|
************************************************************************/
|
|
|
|
namespace Espo\Core\Utils;
|
|
|
|
use \Espo\Core\Exceptions\Error;
|
|
use \Espo\Core\Exceptions\Forbidden;
|
|
|
|
class AuthPortal extends Auth
|
|
{
|
|
protected function getPortal()
|
|
{
|
|
return $this->getContainer()->get('portal');
|
|
}
|
|
|
|
public function login($username, $password)
|
|
{
|
|
$authToken = $this->getEntityManager()->getRepository('AuthToken')->where(array('token' => $password))->findOne();
|
|
|
|
if ($authToken) {
|
|
if ($authToken->get('portalId') !== $this->getPortal()->id) {
|
|
$GLOBALS['log']->debug("AUTH: Trying to login to portal with a token not related to portal.");
|
|
return false;
|
|
}
|
|
}
|
|
|
|
$user = $this->authentication->login($username, $password, $authToken);
|
|
|
|
if ($user) {
|
|
if (!$user->isActive()) {
|
|
$GLOBALS['log']->debug("AUTH: Trying to login to portal as user '".$user->get('userName')."' which is not active.");
|
|
return false;
|
|
}
|
|
if (!$user->isAdmin() && !$this->getEntityManager()->getRepository('Portal')->isRelated($this->getPortal(), 'users', $user)) {
|
|
$GLOBALS['log']->debug("AUTH: Trying to login to portal as user '".$user->get('userName')."' which is not related to portal.");
|
|
return false;
|
|
}
|
|
|
|
if (!$user->isAdmin() && !$user->get('isPortalUser')) {
|
|
$GLOBALS['log']->debug("AUTH: Trying to login to portal as user '".$user->get('userName')."' which is not portal user.");
|
|
return false;
|
|
}
|
|
|
|
$user->set('portalId', $this->getPortal()->id);
|
|
$this->getEntityManager()->setUser($user);
|
|
$this->getContainer()->setUser($user);
|
|
|
|
if ($this->request->headers->get('HTTP_ESPO_AUTHORIZATION')) {
|
|
if (!$authToken) {
|
|
$authToken = $this->getEntityManager()->getEntity('AuthToken');
|
|
$token = $this->createToken($user);
|
|
$authToken->set('token', $token);
|
|
$authToken->set('hash', $user->get('password'));
|
|
$authToken->set('ipAddress', $_SERVER['REMOTE_ADDR']);
|
|
$authToken->set('userId', $user->id);
|
|
$authToken->set('portalId', $this->getPortal()->id);
|
|
}
|
|
$authToken->set('lastAccess', date('Y-m-d H:i:s'));
|
|
|
|
$this->getEntityManager()->saveEntity($authToken);
|
|
$user->set('token', $authToken->get('token'));
|
|
}
|
|
|
|
return true;
|
|
}
|
|
}
|
|
|
|
}
|
|
|