AuthUtility

Complexity

Total Complexity

10

Size/Duplication

Total Lines	87
Duplicated Lines	0 %

Coupling/Cohesion

Components	0
Dependencies	0

Test Coverage

Coverage

72.21%

Importance

Changes

0

6 Methods

Rating	Name	Duplication	Size	Complexity
A	encryptVersion2()	0	3	1
A	encryptVersion1()	0	3	1
A	verifyVersion2()	0	3	1
A	testCredentials()	0	29	5
A	isCredentialVersionLatest()	0	3	1
A	encryptPassword()	0	3	1

<?php

class AuthUtility
{
	/**
	 * Test the specified data against the specified credentials
	 * @param string $password
	 * @param string $credentials
	 * @return bool
	 */
	public static function testCredentials($password, $credentials)
	{
		global $minimumPasswordVersion;

		if (substr($credentials, 0, 1) != ":") {
			return false;
		}

		// determine password version
		$data = explode(':', substr($credentials, 1));

		// call the encryptVersion function for the version that this password actually is.
		// syntax: :1:SALT:HASH
		// syntax: :2:x:HASH

		// check the version is one of the allowed ones:
		if ($minimumPasswordVersion > $data[0]) {
			return false;
		}

		if ($data[0] == 1) {
			return $credentials == self::encryptVersion1($password, $data[1]);
		}

		if ($data[0] == 2) {
			return self::verifyVersion2($password, $data[2]);
		}

		return false;
	}

	/**
	 * @param string $credentials
	 * @return bool
	 */
	public static function isCredentialVersionLatest($credentials)
	{
		return substr($credentials, 0, 3) === ":2:";
	}

	/**
	 * Encrypts a user's password with the latest version of the hash algorithm
	 * @param string $password
	 * @return string
	 */
	public static function encryptPassword($password)
	{
		return self::encryptVersion2($password);
	}

	/**
	 * @param string $password
	 * @param string $salt
	 * @return string
	 */
	private static function encryptVersion1($password, $salt)
	{
		return ':1:' . $salt . ':' . md5($salt . '-' . md5($password));
	}

	/**
	 * @param string $password
	 * @return string
	 */
	private static function encryptVersion2($password)
	{
		return ':2:x:' . password_hash($password, PASSWORD_BCRYPT);
	}

	/**
	 * @param string $password
	 * @param string $hash
	 * @return bool
	 */
	private static function verifyVersion2($password, $hash)
	{
		return password_verify($password, $hash);
	}
}