silverstripe / silverstripe-ldap

src/Forms/LDAPChangePasswordForm.php

<?php

namespace SilverStripe\LDAP\Forms;

use Exception;
use SilverStripe\LDAP\Authenticators\LDAPAuthenticator;
use SilverStripe\LDAP\Services\LDAPService;
use SilverStripe\Control\Director;
use SilverStripe\Control\HTTP;
use SilverStripe\Control\HTTPResponse;
use SilverStripe\Control\RequestHandler;
use SilverStripe\Core\Config\Config;
use SilverStripe\Core\Injector\Injector;
use SilverStripe\Forms\FieldList;
use SilverStripe\Forms\TextField;
use SilverStripe\ORM\ValidationResult;
use SilverStripe\Security\Member;
use SilverStripe\Security\MemberAuthenticator\ChangePasswordForm;
use SilverStripe\Security\Security;

class LDAPChangePasswordForm extends ChangePasswordForm
{
    /**
     * The sole purpose for overriding the constructor is surfacing the username to the user.
     * @param RequestHandler $controller
     * @param string $name
     * @param FieldList $fields
     * @param FieldList $actions
     */
    public function __construct($controller, $name, $fields = null, $actions = null)
    {
        parent::__construct($controller, $name, $fields, $actions);

        // Obtain the Member object. If the user got this far, they must have already been synced.
        $member = Security::getCurrentUser();
        if (!$member) {

$member is of type SilverStripe\Security\Member, thus it always evaluated to true.

            if ($this->getSession()->get('AutoLoginHash')) {
                $member = Member::member_from_autologinhash($this->getSession()->get('AutoLoginHash'));
            }

            // The user is not logged in and no valid auto login hash is available
            if (!$member) {
                $this->getSession()->clear('AutoLoginHash');
                return $this->controller->redirect($this->controller->Link('login'));
            }
        }

        $data = Injector::inst()
            ->get(LDAPService::class)
            ->getUserByGUID($member->GUID, ['samaccountname']);

        $emailField = null;
        $usernameField = null;
        if (Config::inst()->get(
            LDAPAuthenticator::class,
            'allow_email_login'
        ) === 'yes'
            && !empty($member->Email)
        ) {
            $emailField = TextField::create(
                'Email',
                _t(__CLASS__ . '.USERNAMEOREMAIL', 'Email'),
                $member->Email,
                null,
                $this
            );
        }
        if (!empty($data['samaccountname'])) {
            $usernameField = TextField::create(
                'Username',
                _t(__CLASS__ . '.USERNAME', 'Username'),
                $data['samaccountname'],
                null,
                $this
            );
        }

        if ($emailField) {

$emailField is of type null, thus it always evaluated to false.

            $emailFieldReadonly = $emailField->performDisabledTransformation();
            $this->Fields()->unshift($emailFieldReadonly);
        }
        if ($usernameField) {

$usernameField is of type null, thus it always evaluated to false.

            $usernameFieldReadonly = $usernameField->performDisabledTransformation();
            $this->Fields()->unshift($usernameFieldReadonly);
        }
    }
}