106 lines
3.2 KiB
PHP
Executable File
106 lines
3.2 KiB
PHP
Executable File
<?php
|
|
|
|
/**
|
|
* HTTP Digest authentication backend class
|
|
*
|
|
* This class can be used by authentication objects wishing to use HTTP Digest
|
|
* Most of the digest logic is handled, implementors just need to worry about
|
|
* the getUserInfo method
|
|
*
|
|
* @package Sabre
|
|
* @subpackage DAV
|
|
* @copyright Copyright (C) 2007-2010 Rooftop Solutions. All rights reserved.
|
|
* @author Evert Pot (http://www.rooftopsolutions.nl/)
|
|
* @license http://code.google.com/p/sabredav/wiki/License Modified BSD License
|
|
*/
|
|
abstract class Sabre_DAV_Auth_Backend_AbstractDigest extends Sabre_DAV_Auth_Backend_Abstract {
|
|
|
|
/**
|
|
* This variable holds information about the currently
|
|
* logged in user.
|
|
*
|
|
* @var array|null
|
|
*/
|
|
protected $currentUser;
|
|
|
|
/**
|
|
* Returns a users information based on its username
|
|
*
|
|
* The returned struct must contain at least a uri
|
|
* element (which can be identical to username) as well as a digestHash
|
|
* element.
|
|
*
|
|
* If the user was not known, false must be returned.
|
|
*
|
|
* @param string $realm
|
|
* @param string $username
|
|
* @return array
|
|
*/
|
|
abstract public function getUserInfo($realm, $username);
|
|
|
|
/**
|
|
* Authenticates the user based on the current request.
|
|
*
|
|
* If authentication is succesful, true must be returned.
|
|
* If authentication fails, an exception must be thrown.
|
|
*
|
|
* @throws Sabre_DAV_Exception_NotAuthenticated
|
|
* @return bool
|
|
*/
|
|
public function authenticate(Sabre_DAV_Server $server,$realm) {
|
|
|
|
$digest = new Sabre_HTTP_DigestAuth();
|
|
|
|
// Hooking up request and response objects
|
|
$digest->setHTTPRequest($server->httpRequest);
|
|
$digest->setHTTPResponse($server->httpResponse);
|
|
|
|
$digest->setRealm($realm);
|
|
$digest->init();
|
|
|
|
$username = $digest->getUsername();
|
|
|
|
// No username was given
|
|
if (!$username) {
|
|
$digest->requireLogin();
|
|
throw new Sabre_DAV_Exception_NotAuthenticated('No digest authentication headers were found');
|
|
}
|
|
|
|
$userData = $this->getUserInfo($realm, $username);
|
|
// If this was false, the user account didn't exist
|
|
if ($userData===false) {
|
|
$digest->requireLogin();
|
|
throw new Sabre_DAV_Exception_NotAuthenticated('The supplied username was not on file');
|
|
}
|
|
if (!is_array($userData)) {
|
|
throw new Sabre_DAV_Exception('The returntype for getUserInfo must be either false or an array');
|
|
}
|
|
|
|
if (!isset($userData['uri']) || !isset($userData['digestHash'])) {
|
|
throw new Sabre_DAV_Exception('The returned array from getUserInfo must contain at least a uri and digestHash element');
|
|
}
|
|
|
|
// If this was false, the password or part of the hash was incorrect.
|
|
if (!$digest->validateA1($userData['digestHash'])) {
|
|
$digest->requireLogin();
|
|
throw new Sabre_DAV_Exception_NotAuthenticated('Incorrect username');
|
|
}
|
|
|
|
$this->currentUser = $userData;
|
|
return true;
|
|
|
|
}
|
|
|
|
/**
|
|
* Returns information about the currently logged in user.
|
|
*
|
|
* @return array|null
|
|
*/
|
|
public function getCurrentUser() {
|
|
|
|
return $this->currentUser;
|
|
|
|
}
|
|
|
|
}
|