Veles\Auth\Strategies\LoginFormStrategy

Complexity

Total Complexity

11

Size/Duplication

Total Lines	98
Duplicated Lines	0 %

Test Coverage

Coverage

100%

Importance

Changes	1
Bugs	0	Features	0

7 Methods

Rating	Name	Duplication	Size	Complexity
A	errorHandle()	0	4	3
A	__construct()	0	4	1
A	identify()	0	23	3
A	getLogin()	0	3	1
A	setLogin()	0	5	1
A	getPassword()	0	3	1
A	setPassword()	0	5	1

<?php
/**
 * User form authentication strategy
 *
 * @file      LoginFormStrategy.php
 *
 * PHP version 8.0+
 *
 * @author    Alexander Yancharuk <alex at itvault dot info>
 * @copyright © 2012-2021 Alexander Yancharuk
 * @date      Вск Янв 27 17:40:18 2013
 * @license   The BSD 3-Clause License
 *            <https://tldrlegal.com/license/bsd-3-clause-license-(revised)>.
 */

namespace Veles\Auth\Strategies;

use Exception;
use Veles\Auth\UsrGroup;
use Veles\DataBase\DbFilter;
use Veles\Model\User;

/**
 * Class LoginFormStrategy
 *
 * @author  Alexander Yancharuk <alex at itvault dot info>
 */
class LoginFormStrategy extends AbstractAuthStrategy
{
	protected $login;
	protected $password;

	/**
	 * @param string $login User login
	 * @param string $password
	 * @param User   $user
	 */
	public function __construct($login, $password, User $user)
	{
		parent::__construct($user);
		$this->setLogin($login)->setPassword($password);
	}

	/**
	 * User authentication by login form
	 *
	 * @return bool
	 * @throws Exception
	 */
	public function identify(): bool
	{
		$filter = new DbFilter;

		$where = 'email = \'' . $this->getLogin() . '\'
			AND "group" & ' . UsrGroup::DELETED . ' = 0 ';
		$filter->setWhere($where);

		if (!$this->findUser($filter)) {
			return false;
		}

		$this->delCookie();

		if (!password_verify($this->password, $this->user->getHash())) {

It seems like $this->user->getHash() can also be of type null; however, parameter $hash of password_verify() does only seem to accept string, maybe add an additional type check?

			$this->errors |= self::ERR_WRONG_PASSWORD;

			return false;
		}

		$this->setCookie(['expired' => strtotime('+365 days')]);

		return true;
	}

	/**
	 * @return string
	 */
	public function getLogin()
	{
		return $this->login;
	}

	/**
	 * @param string $login
	 *
	 * @return LoginFormStrategy
	 */
	public function setLogin($login)
	{
		$this->login = $login;

		return $this;
	}

	/**
	 * @return string
	 */
	public function getPassword()
	{
		return $this->password;
	}

	/**
	 * @param string $password
	 *
	 * @return LoginFormStrategy
	 */
	public function setPassword($password)
	{
		$this->password = $password;

		return $this;
	}

	/**
	 * Error handling for current auth strategy
	 *
	 * @param array $input
	 *
	 * @return void
	 */
	public function errorHandle(array $input)
	{
		$input['ln'] || $this->setError(static::ERR_NOT_VALID_LOGIN);
		$input['pw'] || $this->setError(static::ERR_NOT_VALID_PASSWORD);
	}
}