class_UserAuthFilter.php

Go to the documentation of this file.

<?php
class UserAuthFilter extends BaseFilter implements Filterable {
        // Exception constants
        const EXCEPTION_AUTH_DATA_INVALID = 0x1b0;

        private $authMethod = "";

        protected function __construct () {
                // Call parent constructor
                parent::__construct(__CLASS__);
        }

        public final static function createUserAuthFilter () {
                // Get a new instance
                $filterInstance = new UserAuthFilter();

                // Set default auth method
                $filterInstance->setDefaultAuthMethod();

                // Return the instance
                return $filterInstance;
        }

        protected function setDefaultAuthMethod () {
                $this->authMethod = $this->getConfigInstance()->readConfig('auth_method_class');
        }

        public function execute (Requestable $requestInstance, Responseable $responseInstance) {
                // Then get an auth instance for checking and updating the auth cookies
                $authInstance = ObjectFactory::createObjectByName($this->authMethod, array($responseInstance));

                // Set request instance
                $authInstance->setRequestInstance($requestInstance);

                // Now, get the auth data for comparison
                $authLogin = $authInstance->getUserAuth();
                $authHash  = $authInstance->getPasswordAuth();

                // If one is empty stop here
                if ((empty($authLogin)) || (empty($authHash))) {
                        // Destroy the auth data
                        $authInstance->destroyAuthData();

                        // Mark the request as invalid
                        $requestInstance->requestIsValid(false);

                        // Add fatal message
                        $responseInstance->addFatalMessage('auth_data_incomplete');

                        // Stop here
                        throw new UserAuthorizationException($this, self::EXCEPTION_AUTH_DATA_INVALID);
                } // END - if

                // Regular user account
                $className = $this->getConfigInstance()->readConfig('user_class');
                $methodName = 'createMemberByUserName';

                // Now, try to get a user or guest instance
                if ($authLogin == $this->getConfigInstance()->readConfig('guest_login_user')) {
                        // Set class
                        $className = $this->getConfigInstance()->readConfig('guest_class');
                        $methodName = 'createGuestByUserName';
                } // END - if

                // Does the guest class exist?
                if (!class_exists($className)) {
                        // Then abort here
                        throw new ClassNotFoundException (array($this, $className), self::EXCEPTION_CLASS_NOT_FOUND);
                } // END - if

                // Now try the dynamic login
                $userInstance = call_user_func_array(array($className, $methodName), array($authLogin));

                // Is the password correct?
                if ($userInstance->getPasswordHash() !== $authHash) {
                        // Mismatching password
                        throw new UserPasswordMismatchException(array($this, $userInstance), BaseUser::EXCEPTION_USER_PASS_MISMATCH);
                } // END - if

                // Remember auth and user instances in registry
                Registry::getRegistry()->addInstance('auth', $authInstance);
                Registry::getRegistry()->addInstance('user', $userInstance);
        }
}

// [EOF]
?>