Gecko [ paroquia-rio-de-mouro.pt ]

Name	Size	Permission	Date
Sync	[ DIR ]	drwxr-xr-x	2018-04-19 18:15
Account.php	2.76 KB	-rw-r--r--	2018-04-19 18:15
AccountMapper.php	8.03 KB	-rw-r--r--	2018-04-19 18:15
AccountTerm.php	1.17 KB	-rw-r--r--	2018-04-19 18:15
AccountTermMapper.php	2.22 KB	-rw-r--r--	2018-04-19 18:15
Backend.php	4.07 KB	-rw-r--r--	2018-04-19 18:15
BasicAuthModule.php	4 KB	-rw-r--r--	2018-04-19 18:15
Database.php	9.91 KB	-rw-r--r--	2018-04-19 18:15
LoginException.php	862 B	-rw-r--r--	2018-04-19 18:15
Manager.php	13.18 KB	-rw-r--r--	2018-04-19 18:15
NoUserException.php	818 B	-rw-r--r--	2018-04-19 18:15
RemoteUser.php	3.29 KB	-rw-r--r--	2018-04-19 18:15
Session.php	30.16 KB	-rw-r--r--	2018-04-19 18:15
SyncService.php	12.19 KB	-rw-r--r--	2018-04-19 18:15
TokenAuthModule.php	3.53 KB	-rw-r--r--	2018-04-19 18:15
User.php	12.83 KB	-rw-r--r--	2018-04-19 18:15

Rename

<?php
/**
 * @author Jörn Friedrich Dreyer <jfd@butonic.de>
 * @author Thomas Müller <thomas.mueller@tmit.eu>
 *
 * @copyright Copyright (c) 2018, ownCloud GmbH
 * @license AGPL-3.0
 *
 * This code is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License, version 3,
 * as published by the Free Software Foundation.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License, version 3,
 * along with this program.  If not, see <http://www.gnu.org/licenses/>
 *
 */

namespace OC\User;

use OCP\AppFramework\Utility\ITimeFactory;
use OCP\Authentication\IAuthModule;
use OCP\IConfig;
use OCP\ILogger;
use OCP\IRequest;
use OCP\ISession;
use OCP\IUser;
use OCP\IUserManager;

class BasicAuthModule implements IAuthModule {

/** @var IConfig */
	private $config;
	/** @var ILogger */
	private $logger;
	/** @var IUserManager */
	private $manager;
	/** @var ISession */
	private $session;
	/** @var ITimeFactory */
	private $timeFactory;

public function __construct(IConfig $config, ILogger $logger, IUserManager $manager, ISession $session, ITimeFactory $timeFactory) {
		$this->config = $config;
		$this->logger = $logger;
		$this->manager = $manager;
		$this->session = $session;
		$this->timeFactory = $timeFactory;
	}

/**
	 * @inheritdoc
	 */
	public function auth(IRequest $request) {
		if (!isset($request->server['PHP_AUTH_USER'], $request->server['PHP_AUTH_PW'])) {
			return null;
		}
		if ($this->session->exists('app_password')) {
			return null;
		}
		$authUser = $request->server['PHP_AUTH_USER'];
		$authPass = $request->server['PHP_AUTH_PW'];
		if ($authUser === '' || $authPass === '') {
			return null;
		}

// only check password periodically, otherwise we will be hammering
		// external systems like ldap.
		// FIXME ignore session for dav endpoint / only create session on web login

if ($this->session->exists('last_check_timeout')) {
			$lastCheck = $this->session->get('last_check_timeout');
		} else {
			$lastCheck = 0;
		}
		$now = $this->timeFactory->getTime();
		$last_check_timeout = (int)$this->config->getAppValue('core', 'last_check_timeout', 5);

if ($lastCheck > ($now - 60 * $last_check_timeout)) {
			// Checked performed recently, nothing to do now
			$userId = $this->session->get('user_id');
			if ($userId === null || $userId === '') {
				throw new \UnexpectedValueException('Empty user_id in session!');
			}
			$user = $this->manager->get($userId);
		} else {
			// check uid and password
			$user = $this->manager->checkPassword($authUser, $authPass);
			if ($user instanceof IUser) {
				// only update timeout on success
				$this->session->set('last_check_timeout', $now);
				return $user;
			}
			$this->logger->debug("Invalid password for username $authUser, trying as email.", ['app' => __METHOD__]);
			// check email and password
			$users = $this->manager->getByEmail($authUser);
			$count = count($users);
			if ($count === 1) {
				$user = $this->manager->checkPassword($users[0]->getUID(), $authPass);
				if ($user instanceof IUser) {
					// only update timeout on success
					$this->session->set('last_check_timeout', $now);
				}
			} else if ($count > 1) {
				$this->logger->debug(
					'Multiple users {users} for email {authUser}, not logging in', [
						'app' => __METHOD__,
						'authUser' => $authUser,
						'users' => array_map(
							function(IUser $user) {
								return $user->getUID();
							}, $users)
					]);
			}
		}

if ($user instanceof IUser) {
			return $user;
		}
		throw new \Exception('Invalid credentials');
	}

/**
	 * @inheritdoc
	 */
	public function getUserPassword(IRequest $request) {
		if (empty($request->server['PHP_AUTH_USER']) || empty($request->server['PHP_AUTH_PW'])) {
			return '';
		}

return $request->server['PHP_AUTH_PW'];
	}
}