Waca\AuthUtility

Complexity

Total Complexity

10

Size/Duplication

Total Lines	95
Duplicated Lines	0 %

Coupling/Cohesion

Components	0
Dependencies	0

Test Coverage

Coverage

0%

Importance

Changes

0

6 Methods

Rating	Name	Duplication	Size	Complexity
B	testCredentials()	0	30	5
A	isCredentialVersionLatest()	0	4	1
A	encryptPassword()	0	4	1
A	encryptVersion1()	0	4	1
A	encryptVersion2()	0	4	1
A	verifyVersion2()	0	4	1

<?php
/******************************************************************************
 * Wikipedia Account Creation Assistance tool                                 *
 *                                                                            *
 * All code in this file is released into the public domain by the ACC        *
 * Development Team. Please see team.json for a list of contributors.         *
 ******************************************************************************/

namespace Waca;

class AuthUtility
{
    /**
     * Test the specified data against the specified credentials
     *
     * @param string $password
     * @param string $credentials
     *
     * @return bool
     */
    public static function testCredentials($password, $credentials)
    {
        global $minimumPasswordVersion;

        if (substr($credentials, 0, 1) != ":") {
            return false;
        }

        // determine password version
        $data = explode(':', substr($credentials, 1));

        // call the encryptVersion function for the version that this password actually is.
        // syntax: :1:SALT:HASH
        // syntax: :2:x:HASH

        // check the version is one of the allowed ones:
        if ($minimumPasswordVersion > $data[0]) {
            return false;
        }

        if ($data[0] == 1) {
            return $credentials == self::encryptVersion1($password, $data[1]);
        }

        if ($data[0] == 2) {
            return self::verifyVersion2($password, $data[2]);
        }

        return false;
    }

    /**
     * @param string $credentials
     *
     * @return bool
     */
    public static function isCredentialVersionLatest($credentials)
    {
        return substr($credentials, 0, 3) === ":2:";
    }

    /**
     * Encrypts a user's password with the latest version of the hash algorithm
     *
     * @param string $password
     *
     * @return string
     */
    public static function encryptPassword($password)
    {
        return self::encryptVersion2($password);
    }

    /**
     * @param string $password
     * @param string $salt
     *
     * @return string
     */
    private static function encryptVersion1($password, $salt)
    {
        return ':1:' . $salt . ':' . md5($salt . '-' . md5($password));
    }

    /**
     * @param string $password
     *
     * @return string
     */
    private static function encryptVersion2($password)
    {
        return ':2:x:' . password_hash($password, PASSWORD_BCRYPT);
    }

    /**
     * @param string $password
     * @param string $hash
     *
     * @return bool
     */
    private static function verifyVersion2($password, $hash)
    {
        return password_verify($password, $hash);
    }
}