From d9167fb5318d5370ba5445e94c0e0f9b64341df4 Mon Sep 17 00:00:00 2001 From: George Halkiadakis Date: Mon, 13 Mar 2023 02:22:07 +0200 Subject: authentication skeleton --- core/classes/authenticator/info.md | 114 ------------------------------------- 1 file changed, 114 deletions(-) delete mode 100644 core/classes/authenticator/info.md (limited to 'core/classes/authenticator/info.md') diff --git a/core/classes/authenticator/info.md b/core/classes/authenticator/info.md deleted file mode 100644 index e6d1372..0000000 --- a/core/classes/authenticator/info.md +++ /dev/null @@ -1,114 +0,0 @@ -# Authentication System - -read/ref: https://dev.to/fadymr/php-create-your-own-php-authentication-4e20 - -also for session: https://dev.to/fadymr/php-create-a-simple-session-wrapper-class-dpk - - - -## How to use ? - - -### Registration - - - // use DevCoder\Authentication\Core\UserManager; - // use DevCoder\Authentication\User; - - // register - $userManager = new UserManager(); - $req = Registry::get('REQUEST); - - $password = $userManager->cryptPassword($req->POST['password']); - - $user = (new User()) - ->setUserName($req->POST['username']) - ->setPassword($password) - ->setRoles(['ROLE_USER']); - - $userManager->createUserToken($user); - - // check Token in Session - var_dump($userManager->getUserToken()); - // object(DevCoder\Authentication\Token\UserToken)[4] - // private 'user' => - // object(DevCoder\Authentication\User)[5] - // private 'userName' => string 'username' (length=8) - // private 'password' => string '$2y$10$iWdcmebmikUFlgKMqW7/rOmUp1DjFAuWKqdUHBhL08FZ7LL6bwRey' (length=60) - // private 'roles' => - // array (size=1) - // 0 => string 'ROLE_USER' (length=9) - // private 'enabled' => boolean true - - -## Connected or not - - hasUserToken()) { - // connected - - $token = $userManager->getUserToken(); - $user = $token->getUser(); - var_dump($user); - // object(DevCoder\Authentication\User)[5] - // private 'userName' => string 'username' (length=8) - // private 'password' => string '$2y$10$OBobeLhdvdiftuedlv1a6e4.qF6sCG/usq5WEV4E3uB.UiS1egv/m' (length=60) - // private 'roles' => - // array (size=1) - // 0 => string 'ROLE_USER' (length=9) - // private 'enabled' => boolean true - - } else { - // not connected - } - - -## Access management - - $userManager = new UserManager(); - if ($userManager->isGranted(['ROLE_ADMIN'])) { - //is admin - // return Response 200 - }else { - //is not admin - // return Response 403 - } - - Logout - - $userManager = new UserManager(); - $userManager->logout(); - - -## Login - - prepare("SELECT * FROM users WHERE username=?"); - $stmt->execute([$_POST['username']]); - $userFromDataBase = $stmt->fetch(); - /** - * Hydration - */ - $user = (new \Test\DevCoder\Authentication\User()) - ->setUserName($userFromDataBase['username']) - ->setPassword($userFromDataBase['password']) - ->setRoles(json_decode($userFromDataBase['roles'])) - ->setEnabled($userFromDataBase['active']); - - $userManager = new UserManager(); - if ($userManager->isPasswordValid($user, $_POST['password'])) { - - // login OK, set Token in session - $userManager->createUserToken($user); - - } else { - // login failed , return error - } -- cgit v1.2.3