FM / Authenticator

/var/www/vhosts/ihelp.ro/httpdocs/vendor/cakedc/auth/src/Authenticator/

/var/www/vhosts/ihelp.ro/httpdocs/vendor/cakedc/auth/src/Authenticator

Name	Size	Mode	Actions
CookieAuthenticator.php	1977	0644	edit dl rm
FormAuthenticator.php	4766	0644	edit dl rm
SocialAuthenticator.php	4214	0644	edit dl rm
TwoFactorAuthenticator.php	3157	0644	edit dl rm

Edit: /var/www/vhosts/ihelp.ro/httpdocs/vendor/cakedc/auth/src/Authenticator/TwoFactorAuthenticator.php (3157B)

<?php
declare(strict_types=1);

/**
 * Copyright 2010 - 2019, Cake Development Corporation (https://www.cakedc.com)
 *
 * Licensed under The MIT License
 * Redistributions of files must retain the above copyright notice.
 *
 * @copyright Copyright 2010 - 2019, Cake Development Corporation (https://www.cakedc.com)
 * @license MIT License (http://www.opensource.org/licenses/mit-license.php)
 */

namespace CakeDC\Auth\Authenticator;

use Authentication\Authenticator\AbstractAuthenticator;
use Authentication\Authenticator\Result;
use Authentication\Authenticator\ResultInterface;
use Authentication\UrlChecker\UrlCheckerTrait;
use Psr\Http\Message\ServerRequestInterface;

/**
 * Two factor authenticator
 *
 * Authenticates an identity based on the POST data of the request.
 */
class TwoFactorAuthenticator extends AbstractAuthenticator
{
    use UrlCheckerTrait;

public const USER_SESSION_KEY = 'TwoFactorAuthenticator.User';

/**
     * Default config for this object.
     * - `fields` The fields to use to identify a user by.
     * - `loginUrl` Login URL or an array of URLs.
     * - `urlChecker` Url checker config.
     *
     * @var array
     */
    protected $_defaultConfig = [
        'loginUrl' => null,
        'urlChecker' => 'Authentication.Default',
    ];

/**
     * Prepares the error object for a login URL error
     *
     * @param \Psr\Http\Message\ServerRequestInterface $request The request that contains login information.
     * @return \Authentication\Authenticator\ResultInterface
     */
    protected function _buildLoginUrlErrorResult($request)
    {
        $errors = [
            sprintf(
                'Login URL `%s` did not match `%s`.',
                (string)$request->getUri(),
                implode('` or `', (array)$this->getConfig('loginUrl'))
            ),
        ];

return new Result(null, Result::FAILURE_OTHER, $errors);
    }

/**
     * Authenticates the identity contained in a request. Will use the `config.userModel`, and `config.fields`
     * to find POST data that is used to find a matching record in the `config.userModel`. Will return false if
     * there is no post data, either username or password is missing, or if the scope conditions have not been met.
     *
     * @param \Psr\Http\Message\ServerRequestInterface $request The request that contains login information.
     * @return \Authentication\Authenticator\ResultInterface
     */
    public function authenticate(ServerRequestInterface $request): ResultInterface
    {
        if (!$this->_checkUrl($request)) {
            return $this->_buildLoginUrlErrorResult($request);
        }
        /**
         * @var \Cake\Http\Session $session
         */
        $session = $request->getAttribute('session');

/** @var array|\ArrayAccess $data */
        $data = $session->read(self::USER_SESSION_KEY);

if (!empty($data)) {
            $session->delete(self::USER_SESSION_KEY);

return new Result($data, Result::SUCCESS);
        }

return new Result(null, Result::FAILURE_CREDENTIALS_MISSING, [
            'Login credentials not found',
        ]);
    }
}

null, 'urlChecker' => 'Authentication.Default', ]; /** * Prepares the error object for a login URL error * * @param \Psr\Http\Message\ServerRequestInterface $request The request that contains login information. * @return \Authentication\Authenticator\ResultInterface */ protected function _buildLoginUrlErrorResult($request) { $errors = [ sprintf( 'Login URL `%s` did not match `%s`.', (string)$request->getUri(), implode('` or `', (array)$this->getConfig('loginUrl')) ), ]; return new Result(null, Result::FAILURE_OTHER, $errors); } /** * Authenticates the identity contained in a request. Will use the `config.userModel`, and `config.fields` * to find POST data that is used to find a matching record in the `config.userModel`. Will return false if * there is no post data, either username or password is missing, or if the scope conditions have not been met. * * @param \Psr\Http\Message\ServerRequestInterface $request The request that contains login information. * @return \Authentication\Authenticator\ResultInterface */ public function authenticate(ServerRequestInterface $request): ResultInterface { if (!$this->_checkUrl($request)) { return $this->_buildLoginUrlErrorResult($request); } /** * @var \Cake\Http\Session $session */ $session = $request->getAttribute('session'); /** @var array|\ArrayAccess $data */ $data = $session->read(self::USER_SESSION_KEY); if (!empty($data)) { $session->delete(self::USER_SESSION_KEY); return new Result($data, Result::SUCCESS); } return new Result(null, Result::FAILURE_CREDENTIALS_MISSING, [ 'Login credentials not found', ]); } }