blob: e6d13721dbcaf2b5426b0681719e7f26efd342a1 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
|
# Authentication System
read/ref: https://dev.to/fadymr/php-create-your-own-php-authentication-4e20
also for session: https://dev.to/fadymr/php-create-a-simple-session-wrapper-class-dpk
## How to use ?
### Registration
// use DevCoder\Authentication\Core\UserManager;
// use DevCoder\Authentication\User;
// register
$userManager = new UserManager();
$req = Registry::get('REQUEST);
$password = $userManager->cryptPassword($req->POST['password']);
$user = (new User())
->setUserName($req->POST['username'])
->setPassword($password)
->setRoles(['ROLE_USER']);
$userManager->createUserToken($user);
// check Token in Session
var_dump($userManager->getUserToken());
// object(DevCoder\Authentication\Token\UserToken)[4]
// private 'user' =>
// object(DevCoder\Authentication\User)[5]
// private 'userName' => string 'username' (length=8)
// private 'password' => string '$2y$10$iWdcmebmikUFlgKMqW7/rOmUp1DjFAuWKqdUHBhL08FZ7LL6bwRey' (length=60)
// private 'roles' =>
// array (size=1)
// 0 => string 'ROLE_USER' (length=9)
// private 'enabled' => boolean true
## Connected or not
<?php
// use DevCoder\Authentication\Core\UserManager;
// use DevCoder\Authentication\User;
$userManager = new UserManager();
if ($userManager->hasUserToken()) {
// connected
$token = $userManager->getUserToken();
$user = $token->getUser();
var_dump($user);
// object(DevCoder\Authentication\User)[5]
// private 'userName' => string 'username' (length=8)
// private 'password' => string '$2y$10$OBobeLhdvdiftuedlv1a6e4.qF6sCG/usq5WEV4E3uB.UiS1egv/m' (length=60)
// private 'roles' =>
// array (size=1)
// 0 => string 'ROLE_USER' (length=9)
// private 'enabled' => boolean true
} else {
// not connected
}
## Access management
$userManager = new UserManager();
if ($userManager->isGranted(['ROLE_ADMIN'])) {
//is admin
// return Response 200
}else {
//is not admin
// return Response 403
}
Logout
$userManager = new UserManager();
$userManager->logout();
## Login
<?php
use DevCoder\Authentication\Core\UserManager;
$stmt = $pdo->prepare("SELECT * FROM users WHERE username=?");
$stmt->execute([$_POST['username']]);
$userFromDataBase = $stmt->fetch();
/**
* Hydration
*/
$user = (new \Test\DevCoder\Authentication\User())
->setUserName($userFromDataBase['username'])
->setPassword($userFromDataBase['password'])
->setRoles(json_decode($userFromDataBase['roles']))
->setEnabled($userFromDataBase['active']);
$userManager = new UserManager();
if ($userManager->isPasswordValid($user, $_POST['password'])) {
// login OK, set Token in session
$userManager->createUserToken($user);
} else {
// login failed , return error
}
|
