1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
|
<?php
/**
* Piwik - Open source web analytics
*
* @link http://piwik.org
* @license http://www.gnu.org/licenses/gpl-3.0.html GPL v3 or later
*
* @category Piwik_Plugins
* @package Piwik_Login
*/
use Piwik\Config;
use Piwik\Common;
use Piwik\Auth;
use Piwik\AuthResult;
use Piwik\Db;
/**
*
* @package Piwik_Login
*/
class Piwik_Login_Auth implements Auth
{
protected $login = null;
protected $token_auth = null;
/**
* Authentication module's name, e.g., "Login"
*
* @return string
*/
public function getName()
{
return 'Login';
}
/**
* Authenticates user
*
* @return AuthResult
*/
public function authenticate()
{
$rootLogin = Config::getInstance()->superuser['login'];
$rootPassword = Config::getInstance()->superuser['password'];
$rootToken = Piwik_UsersManager_API::getInstance()->getTokenAuth($rootLogin, $rootPassword);
if (is_null($this->login)) {
if ($this->token_auth === $rootToken) {
return new AuthResult(AuthResult::SUCCESS_SUPERUSER_AUTH_CODE, $rootLogin, $this->token_auth);
}
$login = Db::fetchOne(
'SELECT login
FROM ' . Common::prefixTable('user') . '
WHERE token_auth = ?',
array($this->token_auth)
);
if (!empty($login)) {
return new AuthResult(AuthResult::SUCCESS, $login, $this->token_auth);
}
} else if (!empty($this->login)) {
if ($this->login === $rootLogin
&& ($this->getHashTokenAuth($rootLogin, $rootToken) === $this->token_auth)
|| $rootToken === $this->token_auth
) {
$this->setTokenAuth($rootToken);
return new AuthResult(AuthResult::SUCCESS_SUPERUSER_AUTH_CODE, $rootLogin, $this->token_auth);
}
$login = $this->login;
$userToken = Db::fetchOne(
'SELECT token_auth
FROM ' . Common::prefixTable('user') . '
WHERE login = ?',
array($login)
);
if (!empty($userToken)
&& (($this->getHashTokenAuth($login, $userToken) === $this->token_auth)
|| $userToken === $this->token_auth)
) {
$this->setTokenAuth($userToken);
return new AuthResult(AuthResult::SUCCESS, $login, $userToken);
}
}
return new AuthResult(AuthResult::FAILURE, $this->login, $this->token_auth);
}
/**
* Accessor to set login name
*
* @param string $login user login
*/
public function setLogin($login)
{
$this->login = $login;
}
/**
* Accessor to set authentication token
*
* @param string $token_auth authentication token
*/
public function setTokenAuth($token_auth)
{
$this->token_auth = $token_auth;
}
/**
* Accessor to compute the hashed authentication token
*
* @param string $login user login
* @param string $token_auth authentication token
* @return string hashed authentication token
*/
public function getHashTokenAuth($login, $token_auth)
{
return md5($login . $token_auth);
}
}
|
