Skip to content
Snippets Groups Projects
AuthenticationController.php 2.01 KiB
Newer Older
  • Learn to ignore specific revisions
  • Florian Azizian's avatar
    Florian Azizian committed
    <?php
    
    /**
     * Copyright Maarch since 2008 under licence GPLv3.
     * See LICENCE.txt file at the root folder for more details.
     * This file is part of Maarch software.
     */
    
    /**
     * @brief Authentication Controller
     *
     * @author dev@maarch.org
     */
    
    namespace SrcCore\controllers;
    
    
    Damien's avatar
    Damien committed
    use Respect\Validation\Validator;
    use Slim\Http\Request;
    use Slim\Http\Response;
    
    Florian Azizian's avatar
    Florian Azizian committed
    use SrcCore\models\AuthenticationModel;
    
    use User\models\UserModel;
    
    Florian Azizian's avatar
    Florian Azizian committed
    
    class AuthenticationController
    {
        public static function authentication()
        {
    
    Damien's avatar
    Damien committed
            $login = null;
    
    Florian Azizian's avatar
    Florian Azizian committed
            if (!empty($_SERVER['PHP_AUTH_USER']) && !empty($_SERVER['PHP_AUTH_PW'])) {
    
                if (AuthenticationModel::authentication(['login' => $_SERVER['PHP_AUTH_USER'], 'password' => $_SERVER['PHP_AUTH_PW']])) {
    
    Damien's avatar
    Damien committed
                    $login = $_SERVER['PHP_AUTH_USER'];
    
    Florian Azizian's avatar
    Florian Azizian committed
                }
            } else {
                $cookie = AuthenticationModel::getCookieAuth();
                if (!empty($cookie) && AuthenticationModel::cookieAuthentication($cookie)) {
    
    Damien's avatar
    Damien committed
                    AuthenticationModel::setCookieAuth(['login' => $cookie['login']]);
                    $login = $cookie['login'];
    
    Damien's avatar
    Damien committed
            return $login;
    
    Florian Azizian's avatar
    Florian Azizian committed
        }
    
    Damien's avatar
    Damien committed
    
        public static function log(Request $request, Response $response)
        {
            $data = $request->getParams();
    
            $check = Validator::stringType()->notEmpty()->validate($data['login']);
            $check = $check && Validator::stringType()->notEmpty()->validate($data['password']);
            if (!$check) {
                return $response->withStatus(400)->withJson(['errors' => 'Bad Request']);
            }
    
            if (!AuthenticationModel::authentication(['login' => $data['login'], 'password' => $data['password']])) {
                return $response->withStatus(401)->withJson(['errors' => 'Authentication Failed']);
            }
    
            AuthenticationModel::setCookieAuth(['login' => $data['login']]);
    
    
            $userInfo = UserModel::getByLogin(['login' => $data['login'], 'select' => ['id', 'firstname', 'lastname', 'mail']]);
    
            return $response->withJson(['user' => $userInfo]);
    
    Damien's avatar
    Damien committed
        }
    
    Florian Azizian's avatar
    Florian Azizian committed
    }