phpffcms / ffcms

Apps/Model/Front/User/FormLogin.php

<?php

namespace Apps\Model\Front\User;

use Apps\ActiveRecord\User;
use Apps\ActiveRecord\UserLog;
use Ffcms\Core\App;
use Ffcms\Core\Arch\Model;
use Ffcms\Core\Helper\Crypt;
use Ffcms\Core\Interfaces\iUser;

/**
 * Class FormLogin. User login business logic model
 * @package Apps\Model\Front\User
 */
class FormLogin extends Model
{
    public $email;
    public $password;
    public $captcha;

    private $_captcha = false;

    /**
     * Construct FormLogin. Pass is captcha used inside
     * @param bool $captcha
     */
    public function __construct($captcha = false)
    {
        $this->_captcha = $captcha;
        // tell that we shall use csrf protection
        parent::__construct(true);
    }

    /**
     * Login validation rules
     * @return array
     */
    public function rules(): array
    {
        $rules = [
            [['email', 'password'], 'required'],
            ['email', 'length_min', '2'],
            ['password', 'length_min', '3'],
            ['email', 'email'],
            ['captcha', 'used']
        ];
        if ($this->_captcha) {
            $rules[] = ['captcha', 'App::$Captcha::validate'];
        }
        return $rules;
    }

    /**
     * Form labels
     * @return array
     */
    public function labels(): array
    {
        return [
            'email' => __('Email'),
            'password' => __('Password'),
            'captcha' => __('Captcha')
        ];
    }

    /**
     * Try user auth after form validate
     * @return bool
     */
    public function tryAuth(): bool
    {
        /** @var User $user */
        $user = User::where('email', $this->email)
            ->first();

        // row found, check if approved and compare password
        if ($user && !$user->approve_token) {
            // check if legacy password hash used (ffcms 3.0 or early)
            if (Crypt::isOldPasswordHash($user->password) && App::$Security->password_hash($this->password) === $user->password) {

The function Ffcms\Core\Helper\Security::password_hash() has been deprecated.

                // update password to new blowfish crypt hash
                $user->password = Crypt::passwordHash($this->password);
                $user->save();
                return $this->openSession($user);
            }

            // validate new password hash
            if (Crypt::passwordVerify($this->password, $user->password)) {
                return $this->openSession($user);
            }
        }
        // auth failed
        return false;
    }

    /**
     * Open session and store data token to db
     * @param iUser $userObject
     * @return bool
     */
    public function openSession(iUser $userObject): bool
    {
        if (!$userObject || $userObject->id < 1) {
            return false;
        }

        // write session data
        App::$Session->set('ff_user_id', $userObject->id);

        // write user log
        $log = new UserLog();
        $log->user_id = $userObject->id;
        $log->type = 'AUTH';
        $log->message = __('Successful authorization from ip: %ip%', ['ip' => App::$Request->getClientIp()]);
        $log->save();

        return true;
    }
}