class.ilAuthBase.php

Go to the documentation of this file.

<?php
/*
        +-----------------------------------------------------------------------------+
        | ILIAS open source                                                           |
        +-----------------------------------------------------------------------------+
        | Copyright (c) 1998-2001 ILIAS open source, University of Cologne            |
        |                                                                             |
        | This program is free software; you can redistribute it and/or               |
        | modify it under the terms of the GNU General Public License                 |
        | as published by the Free Software Foundation; either version 2              |
        | of the License, or (at your option) any later version.                      |
        |                                                                             |
        | This program is distributed in the hope that it will be useful,             |
        | but WITHOUT ANY WARRANTY; without even the implied warranty of              |
        | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               |
        | GNU General Public License for more details.                                |
        |                                                                             |
        | You should have received a copy of the GNU General Public License           |
        | along with this program; if not, write to the Free Software                 |
        | Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA. |
        +-----------------------------------------------------------------------------+
*/

abstract class ilAuthBase
{
        // Used for SOAP Auth
        // TODO: Find another solution
        protected $sub_status = null;
        
        public function supportRedirects()
        {
                return true;
        }
        
        public final function getContainer()
        {
                return $this->storage;
        }
        
        protected final function initAuth()
        {
                ilSessionControl::initSession();

                //$this->enableLogging = true;
                $this->enableLogging = false;

                if ($this->enableLogging)
                {
                        $GLOBALS['ilLog']->write(__METHOD__.': Init callbacks');
                }
                $this->setLoginCallback(array($this,'loginObserver'));
                $this->setFailedLoginCallback(array($this,'failedLoginObserver'));
                $this->setCheckAuthCallback(array($this,'checkAuthObserver'));
                $this->setLogoutCallback(array($this,'logoutObserver'));
                
                include_once('Services/Authentication/classes/class.ilAuthLogObserver.php');
                $this->attachLogObserver(new ilAuthLogObserver(AUTH_LOG_DEBUG));
                
        }
        
        protected function loginObserver($a_username,$a_auth)
        {
                ilSessionControl::handleLoginEvent($a_username, $a_auth);

                global $ilLog, $ilAppEventHandler;
                
                if($this->getContainer()->loginObserver($a_username,$a_auth))
                {
                        $ilAppEventHandler->raise("Services/Authentication", "afterLogin",
                                array("username" => $a_auth->getUsername()));
                        
                        // check if profile is complete
                        include_once "Services/User/classes/class.ilObjUser.php";                       
                        $user_id = ilObjUser::_loginExists($a_auth->getUsername());
                        if($user_id != ANONYMOUS_USER_ID)
                        {
                                $user = new ilObjUser($user_id);                        
                                include_once "Services/User/classes/class.ilUserProfile.php";
                                if(ilUserProfile::isProfileIncomplete($user))
                                {
                                        $user->setProfileIncomplete(true);
                                        $user->update();
                                }
                        }
                        
                        $ilLog->write(__METHOD__.': logged in as '.$a_auth->getUsername().
                                ', remote:'.$_SERVER['REMOTE_ADDR'].':'.$_SERVER['REMOTE_PORT'].
                                ', server:'.$_SERVER['SERVER_ADDR'].':'.$_SERVER['SERVER_PORT']
                                );
                }
                
        }
        
        
        protected function failedLoginObserver($a_username,$a_auth)
        {
                global $ilLog;

                $ilLog->write(__METHOD__.': login failed for user '.$a_username.
                        ', remote:'.$_SERVER['REMOTE_ADDR'].':'.$_SERVER['REMOTE_PORT'].
                        ', server:'.$_SERVER['SERVER_ADDR'].':'.$_SERVER['SERVER_PORT']
                );

                require_once 'Services/PrivacySecurity/classes/class.ilSecuritySettings.php';
                $security = ilSecuritySettings::_getInstance();
                if($a_username &&
                        $security->getAccountSecurityMode() == ilSecuritySettings::ACCOUNT_SECURITY_MODE_CUSTOMIZED
                )
                {
                        $usr_id = ilObjUser::_lookupId($a_username);
                        if(!in_array($usr_id, array(ANONYMOUS_USER_ID, SYSTEM_USER_ID)))
                        {
                                ilObjUser::_incrementLoginAttempts($usr_id);

                                $login_attempts = ilObjUser::_getLoginAttempts($usr_id);
                                $max_attempts   = $security->getLoginMaxAttempts();
                                if((int)$max_attempts && $login_attempts >= $max_attempts)
                                {
                                        ilObjUser::_setUserInactive($usr_id);
                                }
                        }
                }

                return $this->getContainer()->failedLoginObserver($a_username,$a_auth);
        }

        protected function checkAuthObserver($a_username,$a_auth)
        {
                #$GLOBALS['ilLog']->write(__METHOD__.': Check auth observer called');
                return $this->getContainer()->checkAuthObserver($a_username,$a_auth);
        }
        
        protected function logoutObserver($a_username,$a_auth)
        {
                ilSessionControl::handleLogoutEvent();

                $GLOBALS['ilLog']->write(__METHOD__.': Logout observer called');
                $this->getContainer()->logoutObserver($a_username,$a_auth);
        }
        
}
?>