silverstripe / silverstripe-hybridsessions

src/Model/HybridSessionDataObject.php

Indentation +12 added lines, -12 removed lines

@@ -6,18 +6,18 @@
 
 class HybridSessionDataObject extends DataObject
 {
-    private static $db = [
-        'SessionID' => 'Varchar(64)',
-        'Expiry' => 'Int',
-        'Data' => 'Text'
-    ];
+	private static $db = [
+		'SessionID' => 'Varchar(64)',
+		'Expiry' => 'Int',
+		'Data' => 'Text'
+	];
 
-    private static $indexes = [
-        'SessionID' => [
-            'type' => 'unique'
-        ],
-        'Expiry' => true
-    ];
+	private static $indexes = [
+		'SessionID' => [
+			'type' => 'unique'
+		],
+		'Expiry' => true
+	];
 
-    private static $table_name = 'HybridSessionDataObject';
+	private static $table_name = 'HybridSessionDataObject';
 }

src/Crypto/CryptoHandler.php

Indentation +20 added lines, -20 removed lines

@@ -5,27 +5,27 @@
 interface CryptoHandler
 {
 
-    /**
-     * @param string $data
-     *
-     * @return string
-     */
-    public function encrypt($data);
+	/**
+	 * @param string $data
+	 *
+	 * @return string
+	 */
+	public function encrypt($data);
 
-    /**
-     * @param string $data
-     *
-     * @return string
-     */
-    public function decrypt($data);
+	/**
+	 * @param string $data
+	 *
+	 * @return string
+	 */
+	public function decrypt($data);
 
-    /**
-     * @return string
-     */
-    public function getKey();
+	/**
+	 * @return string
+	 */
+	public function getKey();
 
-    /**
-     * @return string
-     */
-    public function getSalt();
+	/**
+	 * @return string
+	 */
+	public function getSalt();
 }

src/Crypto/OpenSSLCrypto.php

Indentation +76 added lines, -76 removed lines

@@ -8,90 +8,90 @@
  */
 class OpenSSLCrypto implements CryptoHandler
 {
-    protected $key;
+	protected $key;
 
-    protected $salt;
+	protected $salt;
 
-    protected $saltedKey;
+	protected $saltedKey;
 
-    /**
-     * @return string
-     */
-    public function getKey()
-    {
-        return $this->key;
-    }
+	/**
+	 * @return string
+	 */
+	public function getKey()
+	{
+		return $this->key;
+	}
 
-    /**
-     * @return string
-     */
-    public function getSalt()
-    {
-        return $this->salt;
-    }
+	/**
+	 * @return string
+	 */
+	public function getSalt()
+	{
+		return $this->salt;
+	}
 
-    /**
-     * @param string $key a per-site secret string which is used as the base encryption key.
-     * @param string $salt a per-session random string which is used as a salt to generate a per-session key
-     *
-     * The base encryption key needs to stay secret. If an attacker ever gets it, they can read their session,
-     * and even modify & re-sign it.
-     *
-     * The salt is a random per-session string that is used with the base encryption key to create a per-session key.
-     * This (amongst other things) makes sure an attacker can't use a known-plaintext attack to guess the key.
-     *
-     * Normally we could create a salt on encryption, send it to the client as part of the session (it doesn't
-     * need to remain secret), then use the returned salt to decrypt. But we already have the Session ID which makes
-     * a great salt, so no need to generate & handle another one.
-     */
-    public function __construct($key, $salt)
-    {
-        $this->key = $key;
-        $this->salt = $salt;
-        $this->saltedKey = hash_pbkdf2('sha256', $this->key, $this->salt, 1000, 0, true);
-    }
+	/**
+	 * @param string $key a per-site secret string which is used as the base encryption key.
+	 * @param string $salt a per-session random string which is used as a salt to generate a per-session key
+	 *
+	 * The base encryption key needs to stay secret. If an attacker ever gets it, they can read their session,
+	 * and even modify & re-sign it.
+	 *
+	 * The salt is a random per-session string that is used with the base encryption key to create a per-session key.
+	 * This (amongst other things) makes sure an attacker can't use a known-plaintext attack to guess the key.
+	 *
+	 * Normally we could create a salt on encryption, send it to the client as part of the session (it doesn't
+	 * need to remain secret), then use the returned salt to decrypt. But we already have the Session ID which makes
+	 * a great salt, so no need to generate & handle another one.
+	 */
+	public function __construct($key, $salt)
+	{
+		$this->key = $key;
+		$this->salt = $salt;
+		$this->saltedKey = hash_pbkdf2('sha256', $this->key, $this->salt, 1000, 0, true);
+	}
 
-    /**
-     * Encrypt and then sign some cleartext
-     *
-     * @param string $cleartext - The cleartext to encrypt and sign
-     * @return string - The encrypted-and-signed message as base64 ASCII.
-     */
-    public function encrypt($cleartext)
-    {
-        $cipher = "AES-256-CBC";
-        $ivlen = openssl_cipher_iv_length($cipher);
-        $iv = openssl_random_pseudo_bytes($ivlen);
-        $ciphertext_raw = openssl_encrypt($cleartext, $cipher, $this->saltedKey, $options = OPENSSL_RAW_DATA, $iv);
-        $hmac = hash_hmac('sha256', $ciphertext_raw, $this->saltedKey, $as_binary = true);
-        $ciphertext = base64_encode($iv.$hmac.$ciphertext_raw);
+	/**
+	 * Encrypt and then sign some cleartext
+	 *
+	 * @param string $cleartext - The cleartext to encrypt and sign
+	 * @return string - The encrypted-and-signed message as base64 ASCII.
+	 */
+	public function encrypt($cleartext)
+	{
+		$cipher = "AES-256-CBC";
+		$ivlen = openssl_cipher_iv_length($cipher);
+		$iv = openssl_random_pseudo_bytes($ivlen);
+		$ciphertext_raw = openssl_encrypt($cleartext, $cipher, $this->saltedKey, $options = OPENSSL_RAW_DATA, $iv);
+		$hmac = hash_hmac('sha256', $ciphertext_raw, $this->saltedKey, $as_binary = true);
+		$ciphertext = base64_encode($iv.$hmac.$ciphertext_raw);
 
-        return base64_encode($iv.$hmac.$ciphertext_raw);
-    }
+		return base64_encode($iv.$hmac.$ciphertext_raw);
+	}
 
-    /**
-     * Check the signature on an encrypted-and-signed message, and if valid
-     * decrypt the content
-     *
-     * @param string $data - The encrypted-and-signed message as base64 ASCII
-     *
-     * @return bool|string - The decrypted cleartext or false if signature failed
-     */
-    public function decrypt($data)
-    {
-        $c = base64_decode($data);
-        $cipher = "AES-256-CBC";
-        $ivlen = openssl_cipher_iv_length($cipher);
-        $iv = substr($c, 0, $ivlen);
-        $hmac = substr($c, $ivlen, $sha2len = 32);
-        $ciphertext_raw = substr($c, $ivlen+$sha2len);
-        $cleartext = openssl_decrypt($ciphertext_raw, $cipher, $this->saltedKey, $options = OPENSSL_RAW_DATA, $iv);
-        $calcmac = hash_hmac('sha256', $ciphertext_raw, $this->saltedKey, $as_binary = true);
+	/**
+	 * Check the signature on an encrypted-and-signed message, and if valid
+	 * decrypt the content
+	 *
+	 * @param string $data - The encrypted-and-signed message as base64 ASCII
+	 *
+	 * @return bool|string - The decrypted cleartext or false if signature failed
+	 */
+	public function decrypt($data)
+	{
+		$c = base64_decode($data);
+		$cipher = "AES-256-CBC";
+		$ivlen = openssl_cipher_iv_length($cipher);
+		$iv = substr($c, 0, $ivlen);
+		$hmac = substr($c, $ivlen, $sha2len = 32);
+		$ciphertext_raw = substr($c, $ivlen+$sha2len);
+		$cleartext = openssl_decrypt($ciphertext_raw, $cipher, $this->saltedKey, $options = OPENSSL_RAW_DATA, $iv);
+		$calcmac = hash_hmac('sha256', $ciphertext_raw, $this->saltedKey, $as_binary = true);
 
-        if (hash_equals($hmac, $calcmac)) {
-            return $cleartext;
-        }
+		if (hash_equals($hmac, $calcmac)) {
+			return $cleartext;
+		}
 
-        return false;
-    }
+		return false;
+	}
 }

src/Control/HybridSessionMiddleware.php

Indentation +18 added lines, -18 removed lines

@@ -8,25 +8,25 @@
 
 class HybridSessionMiddleware implements HTTPMiddleware
 {
-    public function process(HTTPRequest $request, callable $delegate)
-    {
-        try {
-            // Start session and execute
-            $request->getSession()->init($request);
+	public function process(HTTPRequest $request, callable $delegate)
+	{
+		try {
+			// Start session and execute
+			$request->getSession()->init($request);
 
-            // Generate output
-            $response = $delegate($request);
-        } finally {
-            // Save session data, even if there was an exception
-            // Note that save() will start/resume the session if required.
-            $request->getSession()->save($request);
+			// Generate output
+			$response = $delegate($request);
+		} finally {
+			// Save session data, even if there was an exception
+			// Note that save() will start/resume the session if required.
+			$request->getSession()->save($request);
 
-            if (HybridSession::is_enabled()) {
-                // Close the session
-                session_write_close();
-            }
-        }
+			if (HybridSession::is_enabled()) {
+				// Close the session
+				session_write_close();
+			}
+		}
 
-        return $response;
-    }
+		return $response;
+	}
 }

tests/ConfigurationTest.php

Indentation +8 added lines, -8 removed lines

@@ -9,12 +9,12 @@
 
 class ConfigurationTest extends SapphireTest
 {
-    public function testHybridSessionsSessionMiddlewareReplacesCore()
-    {
-        $this->assertInstanceOf(
-            HybridSessionMiddleware::class,
-            Injector::inst()->get(SessionMiddleware::class),
-            'HybridSession\'s middleware should replace the default SessionMiddleware'
-        );
-    }
+	public function testHybridSessionsSessionMiddlewareReplacesCore()
+	{
+		$this->assertInstanceOf(
+			HybridSessionMiddleware::class,
+			Injector::inst()->get(SessionMiddleware::class),
+			'HybridSession\'s middleware should replace the default SessionMiddleware'
+		);
+	}
 }