login

src/Auth/Business/LuticateBusiness.php

@@ -0,0 +1,77 @@
+<?php
+/**
+ * Created by PhpStorm.
+ * User: robin
+ * Date: 9/30/15
+ * Time: 7:04 PM
+ */
+
+namespace Luticate\Auth\Business;
+
+use Illuminate\Http\Request;
+use Luticate\Auth\DBO\LuticateUsersDbo;
+use Luticate\Utils\LuRoute;
+
+class LuticateBusiness
+{
+    const TOKEN_HEADER = "X-Authentication";
+
+    /**
+     * @var LuticateUsersDbo
+     */
+    private static $_currentUser;
+
+    public static function getCurrentUser()
+    {
+        return self::$_currentUser;
+    }
+
+    /**
+     * @param $permissions string[]
+     * @param $request Request
+     * @return bool
+     */
+    public static function authFilter($permissions, $request)
+    {
+        $token = $request->header(self::TOKEN_HEADER);
+        if ($token != null && $token != "") {
+            $data = JwtHelper::decode($token);
+            if ($data != null) {
+                $user_id = $data[JwtHelper::USER_KEY];
+                self::$_currentUser = LuticateUsersBusiness::getById($user_id);
+            }
+        }
+
+        if (self::$_currentUser == null && count($permissions) != 0) {
+            return false;
+        }
+
+        foreach ($permissions as $permission) {
+            $value = LuticatePermissionsBusiness::getUserPermission(self::$_currentUser->getId(), $permission);
+            if (!$value->getVal()) {
+                return false;
+            }
+        }
+        return true;
+    }
+
+    /**
+     * @param $route LuRoute
+     */
+    public static function setupAuth($route)
+    {
+        $route->setMiddleware(function($permissions, $request)
+        {
+            return self::authFilter($permissions, $request);
+        });
+    }
+
+    /**
+     * @param $route LuRoute
+     */
+    public static function setupRoutes($route)
+    {
+        $prefix = "/luticate";
+        $route->post("$prefix/login", "LuticateUsers", "login");
+    }
+}

src/Auth/Business/LuticateUsersBusiness.php

@@ -2,55 +2,39 @@
 
 namespace Luticate\Auth\Business;
 
-use Illuminate\Http\Request;
 use Luticate\Utils\LuBusiness;
 use Luticate\Auth\DataAccess\LuticateUsersDataAccess;
 use Luticate\Auth\DBO\LuticateUsersDbo;
 
 class LuticateUsersBusiness extends LuBusiness {
-    /**
-     * @var LuticateUsersDbo
-     */
-    private static $_currentUser;
-
-    const TOKEN_HEADER = "X-Authentication";
 
     protected static function getDataAccess()
     {
         return new LuticateUsersDataAccess();
     }
 
-    public static function getCurrentUser()
+    protected static function badPassword()
+    {
+        abort(401, "Bad username/password");
+    }
+
+    public static function hashPassword($password)
+    {
+        return password_hash($password, PASSWORD_BCRYPT);
+    }
+
+    public static function verifyPassword($password, $hash)
     {
-        return self::$_currentUser;
+        return password_verify($password, $hash);
     }
 
-    /**
-     * @param $permissions string[]
-     * @param $request Request
-     * @return bool
-     */
-    public static function authFilter($permissions, $request)
+    public static function login($username, $password)
     {
-        $token = $request->header(self::TOKEN_HEADER);
-        if ($token != null && $token != "") {
-            $data = JwtHelper::decode($token);
-            if ($data != null) {
-                $user_id = $data[JwtHelper::USER_KEY];
-                self::$_currentUser = self::getById($user_id);
-            }
-        }
-
-        if (self::$_currentUser == null && count($permissions) != 0) {
-            return false;
-        }
-
-        foreach ($permissions as $permission) {
-            $value = LuticatePermissionsBusiness::getUserPermission(self::$_currentUser->getId(), $permission);
-            if (!$value->getVal()) {
-                return false;
-            }
-        }
-        return true;
+        $user = LuticateUsersDataAccess::getByUsername($username);
+        if (is_null($user))
+            self::badPassword();
+        if (!self::verifyPassword($password, $user->getPassword()))
+            self::badPassword();
+        return $user;
     }
 }

src/Auth/DataAccess/LuticateUsersDataAccess.php

@@ -11,4 +11,16 @@ class LuticateUsersDataAccess extends LuDataAccess {
     {
         return new LuticateUsers();
     }
+
+    /**
+     * @param $username string
+     * @return LuticateUsersDbo|null
+     */
+    public static function getByUsername($username)
+    {
+        $user = LuticateUsers::where("username", "=", $username);
+        if (is_null($user))
+            return null;
+        return $user->toDbo();
+    }
 }