auth.php

Ir a la documentación de este archivo.

<?php
require_once CORE_PATH . 'libs/auth/auth_interface.php';
class Auth
{
    private $adapter;
    private $adapter_object = null;
    private $active_session = false;
    private $expire_time = 3600;
    private $extra_args = array();
    private $sleep_time = 0;
    private static $is_valid = null;
    private static $active_identity = array();
    public function __construct ()
    {
        $extra_args = Util::getParams(func_get_args());
        if (isset($extra_args[0])) {
            $adapter = $extra_args[0];
            unset($extra_args[0]);
        } else {
            $adapter = 'model';
        }
        $this->set_adapter($adapter, $this, $extra_args);
    }
    public function set_adapter ($adapter, $auth = null, $extra_args = array())
    {
        if (! in_array($adapter, array('digest' , 'http' , 'model' , 'kerberos5' , 'radius'))) {
            throw new kumbiaException("Adaptador de autenticaci&oacute;n '$adapter' no soportado");
        }
        $this->adapter = Util::camelcase($adapter);
        require_once CORE_PATH . "libs/auth/adapters/{$adapter}_auth.php";
        $adapter_class = $this->adapter . 'Auth';
        $this->extra_args = $extra_args;
        $this->adapter_object = new $adapter_class($auth, $extra_args);
    }
    public function get_adapter_name ($adapter)
    {
        return $this->adapter;
    }
    public function authenticate ()
    {
        $result = $this->adapter_object->authenticate();
        if ($result && $this->active_session) {
            $user_hash = md5(serialize($this->extra_args));
            $filename = APP_PATH . 'temp/cache/' . base64_encode('auth');
            if (file_exists($filename)) {
                $fp = fopen($filename, 'r');
                while (! feof($fp)) {
                    $line = fgets($fp);
                    $user = explode(':', $line);
                    if ($user_hash == $user[0]) {
                        if ($user[1] + $user[2] > time()) {
                            if ($this->sleep_time) {
                                sleep($this->sleep_time);
                            }
                            self::$active_identity = array();
                            self::$is_valid = false;
                            return false;
                        } else {
                            fclose($fp);
                            $this->destroy_active_session();
                            file_put_contents($filename, $user_hash . ':' . time() . ':' . $this->expire_time . "\n");
                        }
                    }
                }
                fclose($fp);
                $fp = fopen($filename, 'a');
                fputs($fp, $user_hash . ':' . time() . ':' . $this->expire_time . "\n");
                fclose($fp);
            } else {
                file_put_contents($filename, $user_hash . ':' . time() . ':' . $this->expire_time . "\n");
            }
        }
        if (! $result) {
            if ($this->sleep_time) {
                sleep($this->sleep_time);
            }
        }
        $_SESSION['KUMBIA_AUTH_IDENTITY'] = $this->adapter_object->get_identity();
        self::$active_identity = $this->adapter_object->get_identity();
        $_SESSION['KUMBIA_AUTH_VALID'] = $result;
        self::$is_valid = $result;
        return $result;
    }
    public function authenticate_with_http ()
    {
        if (! $_SERVER['PHP_AUTH_USER']) {
            header('WWW-Authenticate: Basic realm="basic"');
            header('HTTP/1.0 401 Unauthorized');
            return false;
        } else {
            $options = array("username" => $_SERVER['PHP_AUTH_USER'] , "password" => $_SERVER['PHP_AUTH_PW']);
            $this->adapter_object->set_params($options);
            return $this->authenticate();
        }
    }
    public function get_identity ()
    {
        return $this->adapter_object->get_identity();
    }
    public function set_active_session ($value, $time = 3600)
    {
        $this->active_session = $value;
        $this->expire_time = $time;
    }
    public function destroy_active_session ()
    {
        $user_hash = md5(serialize($this->extra_args));
        $filename = APP_PATH . 'temp/cache/' . base64_encode('auth');
        $lines = file($filename);
        $lines_out = array();
        foreach ($lines as $line) {
            if (substr($line, 0, 32) != $user_hash) {
                $lines_out[] = $line;
            }
        }
        file_put_contents($filename, join("\n", $lines_out));
    }
    public function get_adapter_instance ()
    {
        return $this->adapter_object;
    }
    public function sleep_on_fail ($value, $time = 2)
    {
        $time = (int) $time;
        if ($time < 0) {
            $time = 0;
        }
        if ($value) {
            $this->sleep_time = $time;
        } else {
            $this->sleep_time = 0;
        }
    }
    static public function is_valid ()
    {
        if (! is_null(self::$is_valid)) {
            return self::$is_valid;
        } else {
            self::$is_valid = isset($_SESSION['KUMBIA_AUTH_VALID']) ? $_SESSION['KUMBIA_AUTH_VALID'] : null;
            return self::$is_valid;
        }
    }
    static public function get_active_identity ()
    {
        if (count(self::$active_identity)) {
            return self::$active_identity;
        } else {
            self::$active_identity = $_SESSION['KUMBIA_AUTH_IDENTITY'];
            return self::$active_identity;
        }
    }
    public static function get($var = null)
    {
        if($var){
            return $_SESSION['KUMBIA_AUTH_IDENTITY'][$var];
        }
    }
    static public function destroy_identity ()
    {
        self::$is_valid = null;
        unset($_SESSION['KUMBIA_AUTH_VALID']);
        self::$active_identity = null;
        unset($_SESSION['KUMBIA_AUTH_IDENTITY']);
    }
}