DatabaseAuth::getName()   A
last analyzed

Complexity

Conditions 1
Paths 1

Size

Total Lines 4
Code Lines 2

Duplication

Lines 0
Ratio 0 %

Importance

Changes 0
Metric Value
cc 1
eloc 2
nc 1
nop 0
dl 0
loc 4
rs 10
c 0
b 0
f 0
1
<?php
2
3
/*
4
 * This file is part of Jitamin.
5
 *
6
 * Copyright (C) Jitamin Team
7
 *
8
 * For the full copyright and license information, please view the LICENSE
9
 * file that was distributed with this source code.
10
 */
11
12
namespace Jitamin\Auth;
13
14
use Jitamin\Foundation\Base;
15
use Jitamin\Foundation\Security\PasswordAuthenticationProviderInterface;
16
use Jitamin\Foundation\Security\SessionCheckProviderInterface;
17
use Jitamin\Model\UserModel;
18
use Jitamin\Services\Identity\DatabaseUserProvider;
19
20
/**
21
 * Database Authentication Provider.
22
 */
23
class DatabaseAuth extends Base implements PasswordAuthenticationProviderInterface, SessionCheckProviderInterface
24
{
25
    /**
26
     * User properties.
27
     *
28
     * @var array
29
     */
30
    protected $userInfo = [];
31
32
    /**
33
     * Username.
34
     *
35
     * @var string
36
     */
37
    protected $username = '';
38
39
    /**
40
     * Password.
41
     *
42
     * @var string
43
     */
44
    protected $password = '';
45
46
    /**
47
     * Get authentication provider name.
48
     *
49
     * @return string
50
     */
51
    public function getName()
52
    {
53
        return 'Database';
54
    }
55
56
    /**
57
     * Authenticate the user.
58
     *
59
     * @return bool
60
     */
61
    public function authenticate()
62
    {
63
        $user = $this->db
0 ignored issues
show
Documentation introduced by
The property db does not exist on object<Jitamin\Auth\DatabaseAuth>. Since you implemented __get, maybe consider adding a @property annotation.

Since your code implements the magic getter _get, this function will be called for any read access on an undefined variable. You can add the @property annotation to your class or interface to document the existence of this variable.

<?php

/**
 * @property int $x
 * @property int $y
 * @property string $text
 */
class MyLabel
{
    private $properties;

    private $allowedProperties = array('x', 'y', 'text');

    public function __get($name)
    {
        if (isset($properties[$name]) && in_array($name, $this->allowedProperties)) {
            return $properties[$name];
        } else {
            return null;
        }
    }

    public function __set($name, $value)
    {
        if (in_array($name, $this->allowedProperties)) {
            $properties[$name] = $value;
        } else {
            throw new \LogicException("Property $name is not defined.");
        }
    }

}

If the property has read access only, you can use the @property-read annotation instead.

Of course, you may also just have mistyped another name, in which case you should fix the error.

See also the PhpDoc documentation for @property.

Loading history...
64
            ->table(UserModel::TABLE)
65
            ->columns('id', 'password')
66
            ->eq(strpos($this->username, '@') === false ? 'username' : 'email', $this->username)
67
            ->eq('disable_login_form', 0)
68
            ->eq('is_ldap_user', 0)
69
            ->eq('is_active', 1)
70
            ->findOne();
71
72
        if (!empty($user) && password_verify($this->password, $user['password'])) {
73
            $this->userInfo = $user;
74
75
            return true;
76
        }
77
78
        return false;
79
    }
80
81
    /**
82
     * Check if the user session is valid.
83
     *
84
     * @return bool
85
     */
86
    public function isValidSession()
87
    {
88
        return $this->userModel->isActive($this->userSession->getId());
0 ignored issues
show
Documentation introduced by
The property userModel does not exist on object<Jitamin\Auth\DatabaseAuth>. Since you implemented __get, maybe consider adding a @property annotation.

Since your code implements the magic getter _get, this function will be called for any read access on an undefined variable. You can add the @property annotation to your class or interface to document the existence of this variable.

<?php

/**
 * @property int $x
 * @property int $y
 * @property string $text
 */
class MyLabel
{
    private $properties;

    private $allowedProperties = array('x', 'y', 'text');

    public function __get($name)
    {
        if (isset($properties[$name]) && in_array($name, $this->allowedProperties)) {
            return $properties[$name];
        } else {
            return null;
        }
    }

    public function __set($name, $value)
    {
        if (in_array($name, $this->allowedProperties)) {
            $properties[$name] = $value;
        } else {
            throw new \LogicException("Property $name is not defined.");
        }
    }

}

If the property has read access only, you can use the @property-read annotation instead.

Of course, you may also just have mistyped another name, in which case you should fix the error.

See also the PhpDoc documentation for @property.

Loading history...
Documentation introduced by
The property userSession does not exist on object<Jitamin\Auth\DatabaseAuth>. Since you implemented __get, maybe consider adding a @property annotation.

Since your code implements the magic getter _get, this function will be called for any read access on an undefined variable. You can add the @property annotation to your class or interface to document the existence of this variable.

<?php

/**
 * @property int $x
 * @property int $y
 * @property string $text
 */
class MyLabel
{
    private $properties;

    private $allowedProperties = array('x', 'y', 'text');

    public function __get($name)
    {
        if (isset($properties[$name]) && in_array($name, $this->allowedProperties)) {
            return $properties[$name];
        } else {
            return null;
        }
    }

    public function __set($name, $value)
    {
        if (in_array($name, $this->allowedProperties)) {
            $properties[$name] = $value;
        } else {
            throw new \LogicException("Property $name is not defined.");
        }
    }

}

If the property has read access only, you can use the @property-read annotation instead.

Of course, you may also just have mistyped another name, in which case you should fix the error.

See also the PhpDoc documentation for @property.

Loading history...
89
    }
90
91
    /**
92
     * Get user object.
93
     *
94
     * @return \Jitamin\Services\User\DatabaseUserProvider
95
     */
96
    public function getUser()
97
    {
98
        if (empty($this->userInfo)) {
99
            return;
100
        }
101
102
        return new DatabaseUserProvider($this->userInfo);
0 ignored issues
show
Bug Best Practice introduced by
The return type of return new \Jitamin\Serv...vider($this->userInfo); (Jitamin\Services\Identity\DatabaseUserProvider) is incompatible with the return type declared by the interface Jitamin\Foundation\Secur...viderInterface::getUser of type Jitamin\Foundation\User\UserProviderInterface.

If you return a value from a function or method, it should be a sub-type of the type that is given by the parent type f.e. an interface, or abstract method. This is more formally defined by the Lizkov substitution principle, and guarantees that classes that depend on the parent type can use any instance of a child type interchangably. This principle also belongs to the SOLID principles for object oriented design.

Let’s take a look at an example:

class Author {
    private $name;

    public function __construct($name) {
        $this->name = $name;
    }

    public function getName() {
        return $this->name;
    }
}

abstract class Post {
    public function getAuthor() {
        return 'Johannes';
    }
}

class BlogPost extends Post {
    public function getAuthor() {
        return new Author('Johannes');
    }
}

class ForumPost extends Post { /* ... */ }

function my_function(Post $post) {
    echo strtoupper($post->getAuthor());
}

Our function my_function expects a Post object, and outputs the author of the post. The base class Post returns a simple string and outputting a simple string will work just fine. However, the child class BlogPost which is a sub-type of Post instead decided to return an object, and is therefore violating the SOLID principles. If a BlogPost were passed to my_function, PHP would not complain, but ultimately fail when executing the strtoupper call in its body.

Loading history...
103
    }
104
105
    /**
106
     * Set username.
107
     *
108
     * @param string $username
109
     */
110
    public function setUsername($username)
111
    {
112
        $this->username = $username;
113
    }
114
115
    /**
116
     * Set password.
117
     *
118
     * @param string $password
119
     */
120
    public function setPassword($password)
121
    {
122
        $this->password = $password;
123
    }
124
}
125