Waca\Security\CredentialProviders\PasswordCredentialProvider

Complexity

Total Complexity

8

Size/Duplication

Total Lines	49
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	3

Importance

Changes

0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	4	1
A	authenticate()	0	24	5
A	setCredential()	0	14	2

<?php
/******************************************************************************
 * Wikipedia Account Creation Assistance tool                                 *
 *                                                                            *
 * All code in this file is released into the public domain by the ACC        *
 * Development Team. Please see team.json for a list of contributors.         *
 ******************************************************************************/

namespace Waca\Security\CredentialProviders;

use Waca\DataObjects\User;
use Waca\PdoDatabase;
use Waca\SiteConfiguration;

class PasswordCredentialProvider extends CredentialProviderBase
{
    const PASSWORD_COST = 10;

    public function __construct(PdoDatabase $database, SiteConfiguration $configuration)
    {
        parent::__construct($database, $configuration, 'password');
    }

    public function authenticate(User $user, $data)
    {
        $storedData = $this->getCredentialData($user->getId());
        if($storedData === null)
        {
            // No available credential matching these parameters
            return false;
        }

        if($storedData->getVersion() !== 2) {
            // Non-2 versions are not supported.
            return false;
        }

        if(password_verify($data, $storedData->getData())) {
            if(password_needs_rehash($storedData->getData(), PASSWORD_BCRYPT, array('cost' => self::PASSWORD_COST))){
                $this->setCredential($user, $storedData->getFactor(), $data);
            }

            return true;
        }

        return false;
    }

    public function setCredential(User $user, $factor, $password)
    {
        $storedData = $this->getCredentialData($user->getId());

        if($storedData === null){
            $storedData = $this->createNewCredential($user);
        }

        $storedData->setData(password_hash($password, PASSWORD_BCRYPT, array('cost' => self::PASSWORD_COST)));
        $storedData->setFactor($factor);
        $storedData->setVersion(2);

        $storedData->save();
    }
}