auth.php

Ir a la documentación de este archivo.

<?php
require_once CORE_PATH . 'libs/auth/auth_interface.php';

class Auth
{

    private $adapter;
    private $adapter_object = null;
    private $active_session = false;
    private $expire_time = 3600;
    private $extra_args = array();
    private $sleep_time = 0;
    private static $is_valid = null;
    private static $active_identity = array();

    public function __construct()
    {
        $extra_args = Util::getParams(func_get_args());
        if (isset($extra_args[0])) {
            $adapter = $extra_args[0];
            unset($extra_args[0]);
        } else {
            $adapter = 'model';
        }
        $this->set_adapter($adapter, $this, $extra_args);
    }

    public function set_adapter($adapter, $auth = null, $extra_args = array())
    {
        if (!in_array($adapter, array('digest', 'http', 'model', 'kerberos5', 'radius'))) {
            throw new kumbiaException("Adaptador de autenticaci&oacute;n '$adapter' no soportado");
        }
        $this->adapter = Util::camelcase($adapter);
        require_once CORE_PATH . "libs/auth/adapters/{$adapter}_auth.php";
        $adapter_class = $this->adapter . 'Auth';
        $this->extra_args = $extra_args;
        $this->adapter_object = new $adapter_class($auth, $extra_args);
    }

    public function get_adapter_name()
    {
        return $this->adapter;
    }

    public function authenticate()
    {
        $result = $this->adapter_object->authenticate();
        if ($result && $this->active_session) {
            $user_hash = md5(serialize($this->extra_args));
            $filename = APP_PATH . 'temp/cache/' . base64_encode('auth');
            if (file_exists($filename)) {
                $fp = fopen($filename, 'r');
                while (!feof($fp)) {
                    $line = fgets($fp);
                    $user = explode(':', $line);
                    if ($user_hash == $user[0]) {
                        if ($user[1] + $user[2] > time()) {
                            if ($this->sleep_time) {
                                sleep($this->sleep_time);
                            }
                            self::$active_identity = array();
                            self::$is_valid = false;
                            return false;
                        } else {
                            fclose($fp);
                            $this->destroy_active_session();
                            file_put_contents($filename, $user_hash . ':' . time() . ':' . $this->expire_time . "\n");
                        }
                    }
                }
                fclose($fp);
                $fp = fopen($filename, 'a');
                fputs($fp, $user_hash . ':' . time() . ':' . $this->expire_time . "\n");
                fclose($fp);
            } else {
                file_put_contents($filename, $user_hash . ':' . time() . ':' . $this->expire_time . "\n");
            }
        }
        if (!$result) {
            if ($this->sleep_time) {
                sleep($this->sleep_time);
            }
        }
        $_SESSION['KUMBIA_AUTH_IDENTITY'][Config::get('config.application.namespace_auth')] = $this->adapter_object->get_identity();
        self::$active_identity = $this->adapter_object->get_identity();
        $_SESSION['KUMBIA_AUTH_VALID'][Config::get('config.application.namespace_auth')] = $result;
        self::$is_valid = $result;
        return $result;
    }

    public function authenticate_with_http()
    {
        if (!$_SERVER['PHP_AUTH_USER']) {
            header('WWW-Authenticate: Basic realm="basic"');
            header('HTTP/1.0 401 Unauthorized');
            return false;
        } else {
            $options = array("username" => $_SERVER['PHP_AUTH_USER'], "password" => $_SERVER['PHP_AUTH_PW']);
            $this->adapter_object->set_params($options);
            return $this->authenticate();
        }
    }

    public function get_identity()
    {
        return $this->adapter_object->get_identity();
    }

    public function set_active_session($value, $time = 3600)
    {
        $this->active_session = $value;
        $this->expire_time = $time;
    }

    public function destroy_active_session()
    {
        $user_hash = md5(serialize($this->extra_args));
        $filename = APP_PATH . 'temp/cache/' . base64_encode('auth');
        $lines = file($filename);
        $lines_out = array();
        foreach ($lines as $line) {
            if (substr($line, 0, 32) != $user_hash) {
                $lines_out[] = $line;
            }
        }
        file_put_contents($filename, join("\n", $lines_out));
    }

    public function get_adapter_instance()
    {
        return $this->adapter_object;
    }

    public function sleep_on_fail($value, $time = 2)
    {
        $time = (int) $time;
        if ($time < 0) {
            $time = 0;
        }
        if ($value) {
            $this->sleep_time = $time;
        } else {
            $this->sleep_time = 0;
        }
    }

    static public function is_valid()
    {
        if (!is_null(self::$is_valid)) {
            return self::$is_valid;
        } else {
            self::$is_valid = isset($_SESSION['KUMBIA_AUTH_VALID'][Config::get('config.application.namespace_auth')]) ? $_SESSION['KUMBIA_AUTH_VALID'][Config::get('config.application.namespace_auth')] : null;
            return self::$is_valid;
        }
    }

    static public function get_active_identity()
    {
        if (count(self::$active_identity)) {
            return self::$active_identity;
        } else {
            self::$active_identity = $_SESSION['KUMBIA_AUTH_IDENTITY'][Config::get('config.application.namespace_auth')];
            return self::$active_identity;
        }
    }

    public static function get($var = null)
    {
        if ($var) {
            return $_SESSION['KUMBIA_AUTH_IDENTITY'][Config::get('config.application.namespace_auth')][$var];
        }
    }

    static public function destroy_identity()
    {
        self::$is_valid = null;
        unset($_SESSION['KUMBIA_AUTH_VALID'][Config::get('config.application.namespace_auth')]);
        self::$active_identity = null;
        unset($_SESSION['KUMBIA_AUTH_IDENTITY'][Config::get('config.application.namespace_auth')]);
    }

}