SURFnet\VPN\Common\Http\BasicAuthenticationHook::executeBefore()

Complexity

Conditions	5
Paths	4

Size

Total Lines	24
Code Lines	15

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php
    public function executeBefore(Request $request, array $hookData)
    {
        $authUser = $request->getHeader('PHP_AUTH_USER', false);
        $authPass = $request->getHeader('PHP_AUTH_PW', false);
        if (is_null($authUser) || is_null($authPass)) {
            throw new HttpException(
                'missing authentication information',
                401,
                ['WWW-Authenticate' => sprintf('Basic realm="%s"', $this->realm)]
            );
        }

        if (array_key_exists($authUser, $this->userPass)) {
            if (0 === \Sodium\compare($authPass, $this->userPass[$authUser])) {
                return $authUser;
            }
        }

        throw new HttpException(
            'invalid authentication information',
            401,
            ['WWW-Authenticate' => sprintf('Basic realm="%s"', $this->realm)]
        );
    }
}