Inheritance diagram for Auth_HTTP:

Collaboration diagram for Auth_HTTP:

Public Member Functions
	Auth_HTTP ($storageDriver, $options='')
	Constructor. More...

	assignData ()
	Assign values from $PHP_AUTH_USER and $PHP_AUTH_PW or 'Authorization' header to internal variables and sets the session id based on them. More...

	login ()
	Login function. More...

	drawLogin ($username="")
	Launch the login box. More...

	setRealm ($realm, $digestRealm='')
	Set name of the current realm. More...

	setCancelText ($text)
	Set the text to send if user hits the cancel button. More...

	validateDigest ($response, $a1)
	judge if the client response is valid. More...

	_judgeStale ($nonce)
	judge if nonce from client is stale. More...

	_decodeNonce ($nonce, &$time, &$hash)
	decode nonce string More...

	_getNonce ()
	return nonce to detect timeout More...

	authenticationInfo ($contentMD5='')
	output HTTP Authentication-Info header More...

	setOption ($name, $value=null)
	set authentication option More...

	getOption ($name)
	get authentication option More...

	selfURI ()
	get self URI More...

Public Member Functions inherited from Auth
	Auth ($storageDriver, $options='', $loginFunction='', $showLogin=true)
	Constructor. More...

&	applyAuthOptions (&$options)
	Set the Auth options. More...

	_loadStorage ()
	Load Storage Driver if not already loaded. More...

	assignData ()
	Assign data from login form to internal values. More...

	start ()
	Start new auth session. More...

	login ()
	Login function. More...

	setExpire ($time, $add=false)
	Set the maximum expire time. More...

	setIdle ($time, $add=false)
	Set the maximum idle time. More...

	setSessionName ($name='session')
	Set name of the session to a customized value. More...

	setShowLogin ($showLogin=true)
	Should the login form be displayed if neccessary? More...

	setAllowLogin ($allowLogin=true)
	Should the login form be displayed if neccessary? More...

	setCheckAuthCallback ($checkAuthCallback)
	Register a callback function to be called whenever the validity of the login is checked The function will receive two parameters, the username and a reference to the auth object. More...

	setLoginCallback ($loginCallback)
	Register a callback function to be called on user login. More...

	setFailedLoginCallback ($loginFailedCallback)
	Register a callback function to be called on failed user login. More...

	setLogoutCallback ($logoutCallback)
	Register a callback function to be called on user logout. More...

	setAuthData ($name, $value, $overwrite=true)
	Register additional information that is to be stored in the session. More...

	getAuthData ($name=null)
	Get additional information that is stored in the session. More...

	setAuth ($username)
	Register variable in a session telling that the user has logged in successfully. More...

	setAdvancedSecurity ($flag=true)
	Enables advanced security checks. More...

	checkAuth ()
	Checks if there is a session with valid auth information. More...

	getAuth ()
	Has the user been authenticated? More...

	logout ()
	Logout function. More...

	updateIdle ()
	Update the idletime. More...

	getUsername ()
	Get the username. More...

	getStatus ()
	Get the current status. More...

	getPostUsernameField ()
	Gets the post varible used for the username. More...

	getPostPasswordField ()
	Gets the post varible used for the username. More...

	sessionValidThru ()
	Returns the time up to the session is valid. More...

	listUsers ()
	List all users that are currently available in the storage container. More...

	addUser ($username, $password, $additional='')
	Add user to the storage container. More...

	removeUser ($username)
	Remove user from the storage container. More...

	changePassword ($username, $password)
	Change password for user in the storage container. More...

	log ($message, $level=AUTH_LOG_DEBUG)
	Log a message from the Auth system. More...

	_loadLogger ()
	Load Log object if not already loaded. More...

	attachLogObserver (&$observer)
	Attach an Observer to the Auth Log Source. More...

	_isAdvancedSecurityEnabled ($feature=null)
	Is advanced security enabled? More...

Public Member Functions inherited from ilAuthBase
	getSubStatus ()
	Get sub status. More...

	setSubStatus ($a_sub_status)
	Set sub status. More...

	supportsRedirects ()
	Returns true, if the current auth mode allows redirects to e.g the login screen, public section ... More...

	getContainer ()
	Get container object. More...

	getExceededUserName ()

Data Fields
	$authType = 'basic'

	$realm = "protected area"

	$CancelText = "Error 401 - Access denied"

	$options = array()

	$stale = false

	$opaque = 'dummy'

	$uri = ''

	$auth = array()

	$nextNonce = ''

	$nonce = ''

	$server

	$post

	$cookie

Data Fields inherited from Auth
	$expire = 0

	$expired = false

	$idle = 0

	$idled = false

	$storage = ''

	$loginFunction = ''

	$showLogin = true

	$allowLogin = true

	$status = ''

	$username = ''

	$password = ''

	$checkAuthCallback = ''

	$loginCallback = ''

	$loginFailedCallback = ''

	$logoutCallback = ''

	$_sessionName = '_authsession'

	$version = "@version@"

	$advancedsecurity = false

	$_postUsername = 'username'

	$_postPassword = 'password'

	$session

	$server

	$post

	$cookie

	$authdata

	$authChecks = 0

	$logger = null

	$enableLogging = false

	$regenerateSessionId = false

Additional Inherited Members
Static Public Member Functions inherited from Auth
&	_factory ($driver, $options='')
	Return a storage driver based on $driver and $options. More...

	staticCheckAuth ($options=null)
	Statically checks if there is a session with valid auth information. More...

Protected Member Functions inherited from ilAuthBase
	initAuth ()
	Init auth object Enable logging, set callbacks... More...

	loginObserver ($a_username, $a_auth)
	Called after successful login. More...

	checkExceededLoginAttempts (\ilObjUser $user)

	failedLoginObserver ($a_username, $a_auth)
	Called after failed login. More...

	checkAuthObserver ($a_username, $a_auth)
	Called after each check auth request. More...

	logoutObserver ($a_username, $a_auth)
	Called after logout. More...

Protected Attributes inherited from ilAuthBase
	$sub_status = null

	$exceeded_user_name

Detailed Description

Definition at line 54 of file HTTP.php.

Member Function Documentation

◆ _decodeNonce()

Auth_HTTP::_decodeNonce	(		$nonce,
		&	$time,
		&	$hash
	)

decode nonce string

@access private

Parameters

string	$nonce	nonce value from client
string	$time	decoded time
string	$hash	decoded hash

Returns: bool false if nonce is invalid

Definition at line 628 of file HTTP.php.

    {
        if (method_exists($this, '_importGlobalVariable')) {
            $this->server = &$this->_importGlobalVariable('server');
        }
 
        if (strlen($nonce) != AUTH_HTTP_NONCE_TIME_LEN + AUTH_HTTP_NONCE_HASH_LEN) {
            return false;
        }
 
        $time =  base64_decode(substr($nonce, 0, AUTH_HTTP_NONCE_TIME_LEN));
        $hash_cli = substr($nonce, AUTH_HTTP_NONCE_TIME_LEN, AUTH_HTTP_NONCE_HASH_LEN);
 
        $hash = md5($time . $this->server['HTTP_USER_AGENT'] . $this->options['noncekey']);
 
        if ($hash_cli != $hash) {
            return false;
        }
        
        return true;
    }

References $nonce, AUTH_HTTP_NONCE_HASH_LEN, and AUTH_HTTP_NONCE_TIME_LEN.

Referenced by _judgeStale().

Here is the caller graph for this function:

◆ _getNonce()

Auth_HTTP::_getNonce ( )

return nonce to detect timeout

@access private

Returns: string nonce value

Definition at line 659 of file HTTP.php.

    {
        if (method_exists($this, '_importGlobalVariable')) {
            $this->server = &$this->_importGlobalVariable('server');
        }
 
        $time = time();
        $hash = md5($time . $this->server['HTTP_USER_AGENT'] . $this->options['noncekey']);
 
        return base64_encode($time) . $hash;  
    }

Referenced by _judgeStale(), and drawLogin().

Here is the caller graph for this function:

◆ _judgeStale()

Auth_HTTP::_judgeStale ( $nonce )

judge if nonce from client is stale.

@access private

Parameters

string $nonce nonce value from client

Returns: bool stale

Definition at line 596 of file HTTP.php.

    {
        $stale = false;
        
        if(!$this->_decodeNonce($nonce, $time, $hash_cli)) {
         $this->nextNonce = false;
         $stale = true;
            return $stale;
        }
 
        if ($time < time() - $this->options['nonceLife']) {
         $this->nextNonce = $this->_getNonce();
            $stale = true;
        } else {
         $this->nextNonce = $nonce;
      }
 
        return $stale;
    }

References $nonce, $stale, _decodeNonce(), and _getNonce().

Referenced by assignData().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ assignData()

Auth_HTTP::assignData ( )

Assign values from $PHP_AUTH_USER and $PHP_AUTH_PW or 'Authorization' header to internal variables and sets the session id based on them.

@access public

Returns: void

Try to get authentication information from IIS

set sessionName for AUTH, so that the sessionName is different for distinct realms

Reimplemented from Auth.

Reimplemented in ilAuthHTTP.

Definition at line 217 of file HTTP.php.

    {
        if (method_exists($this, '_importGlobalVariable')) {
            $this->server = &$this->_importGlobalVariable('server');
        }
        
        
        if ($this->authType == 'basic') {
            if (!empty($this->server['PHP_AUTH_USER'])) {
                $this->username = $this->server['PHP_AUTH_USER'];
            }
            
            if (!empty($this->server['PHP_AUTH_PW'])) {
                $this->password = $this->server['PHP_AUTH_PW'];
            }
            
            if  (empty($this->username) && empty($this->password)) {
                if (!empty($this->server['HTTP_AUTHORIZATION'])) {
                    list($this->username, $this->password) = 
                        explode(':', base64_decode(substr($this->server['HTTP_AUTHORIZATION'], 6)));
                }
            }
        } elseif ($this->authType == 'digest') {
            $this->username = '';
            $this->password = '';
 
            $this->digest_header = null;
            if (!empty($this->server['PHP_AUTH_DIGEST'])) {
                $this->digest_header = substr($this->server['PHP_AUTH_DIGEST'],
                                              strpos($this->server['PHP_AUTH_DIGEST'],' ')+1);
            } else {
                $headers = getallheaders();
                if(isset($headers['Authorization']) && !empty($headers['Authorization'])) {
                    $this->digest_header = substr($headers['Authorization'],
                                                  strpos($headers['Authorization'],' ')+1);
                }
            }
 
            if($this->digest_header) {
                $authtemp = explode(',', $this->digest_header);
                $auth = array();
                foreach($authtemp as $key => $value) {
                    $value = trim($value);
                    if(strpos($value,'=') !== false) {
                        $lhs = substr($value,0,strpos($value,'='));
                        $rhs = substr($value,strpos($value,'=')+1);
                        if(substr($rhs,0,1) == '"' && substr($rhs,-1,1) == '"') {
                            $rhs = substr($rhs,1,-1);
                        }
                        $auth[$lhs] = $rhs;
                    }
                }
            }
            if (!isset($auth['uri']) || !isset($auth['realm'])) {
                return;
            }
            
            if ($this->selfURI() == $auth['uri']) {
                $this->uri = $auth['uri'];
                if (substr($headers['Authorization'],0,7) == 'Digest ') {
                    
                    $this->authType = 'digest';
 
                    if (!isset($auth['nonce']) || !isset($auth['username']) || 
                  !isset($auth['response']) || !isset($auth['qop']) || 
                  !isset($auth['nc']) || !isset($auth['cnonce'])){
                        return;
                    }
 
               if ($auth['qop'] != 'auth' && $auth['qop'] != 'auth-int') {
                        return;
               }
                    
                    $this->stale = $this->_judgeStale($auth['nonce']);
 
               if ($this->nextNonce == false) {
                  return;
               }
 
                    $this->username = $auth['username'];
                    $this->password = $auth['response'];
                    $this->auth['nonce'] = $auth['nonce'];
                    
               $this->auth['qop'] = $auth['qop'];
               $this->auth['nc'] = $auth['nc'];
               $this->auth['cnonce'] = $auth['cnonce'];
 
                    if (isset($auth['opaque'])) {
                        $this->auth['opaque'] = $auth['opaque'];
                    }
                    
                } elseif (substr($headers['Authorization'],0,6) == 'Basic ') {
                    if ($this->options['forceDigestOnly']) {
                        return; // Basic authentication is not allowed.
                    }
                    
                    $this->authType = 'basic';
                    list($username, $password) = 
                        explode(':',base64_decode(substr($headers['Authorization'],6)));
                    $this->username = $username;
                    $this->password = $password;
                }
            }
        } else {
            return PEAR::raiseError('authType is invalid.');
        }
 
        if ($this->options['sessionSharing'] && 
            isset($this->username) && isset($this->password)) {
            session_id(md5('Auth_HTTP' . $this->username . $this->password));
        }
        
         $this->_sessionName = "_authhttp".md5($this->realm);
    }

References $auth, Auth\$password, Auth\$username, _judgeStale(), PEAR\raiseError(), and selfURI().

Here is the call graph for this function:

◆ Auth_HTTP()

Auth_HTTP::Auth_HTTP	(	$storageDriver,
		$options = `''`
	)

Constructor.

Parameters

string	Type of the storage driver
mixed	Additional options for the storage driver (example: if you are using DB as the storage driver, you have to pass the dsn string here)

Returns: void

Definition at line 173 of file HTTP.php.

    {
        /* set default values for options */
        $this->options = array('cryptType' => 'md5',
                               'algorithm' => 'MD5',
                               'qop' => 'auth-int,auth',
                               'opaquekey' => 'moo',
                               'noncekey' => 'moo',
                               'digestRealm' => 'protected area',
                               'forceDigestOnly' => false,
                               'nonceLife' => 300,
                               'sessionSharing' => true,
                               );
                
        if (!empty($options['authType'])) {
            $this->authType = strtolower($options['authType']);
        }
                
        if (is_array($options)) {
            foreach($options as $key => $value) {
                if (array_key_exists( $key, $this->options)) {
                    $this->options[$key] = $value;
                }
            }
                
            if (!empty($this->options['opaquekey'])) {
                $this->opaque = md5($this->options['opaquekey']);
            }
        }
                
                $this->Auth($storageDriver, $options);
        }

References $options, and Auth\Auth().

Here is the call graph for this function:

◆ authenticationInfo()

Auth_HTTP::authenticationInfo ( $contentMD5 = '' )

output HTTP Authentication-Info header

@notes md5 hash of contents is required if 'qop' is 'auth-int'

@access private

Parameters

string MD5 hash of content

Definition at line 682 of file HTTP.php.

                                                  {
        
        if($this->getAuth() && ($this->getAuthData('a1') != null)) {
            $a1 = $this->getAuthData('a1');
 
            // Work out authorisation response
            $a2unhashed = ":".$this->selfURI();
            if($this->auth['qop'] == 'auth-int') {
                $a2unhashed .= ':'.$contentMD5;
            }
            $a2 = md5($a2unhashed);
            $combined = $a1.':'.
                        $this->nonce.':'.
                        $this->auth['nc'].':'.
                        $this->auth['cnonce'].':'.
                        $this->auth['qop'].':'.
                        $a2;
            
            // Send authentication info
            $wwwauth = 'Authentication-Info: ';
            if($this->nonce != $this->nextNonce) {
                $wwwauth .= 'nextnonce="'.$this->nextNonce.'", ';
            }
            $wwwauth .= 'qop='.$this->auth['qop'].', ';
            $wwwauth .= 'rspauth="'.md5($combined).'", ';
            $wwwauth .= 'cnonce="'.$this->auth['cnonce'].'", ';
            $wwwauth .= 'nc='.$this->auth['nc'].'';
            header($wwwauth);
        }
    }

References Auth\getAuth(), and Auth\getAuthData().

Referenced by login().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ drawLogin()

Auth_HTTP::drawLogin ( $username = "" )

Launch the login box.

Parameters

string $username Username

Returns: void @access private

Send the header commands

This code is only executed if the user hits the cancel button or if he enters wrong data 3 times.

Definition at line 449 of file HTTP.php.

    {
        if ($this->authType == 'basic') {
            header("WWW-Authenticate: Basic realm=\"".$this->realm."\"");
            header('HTTP/1.0 401 Unauthorized');            
        } else if ($this->authType == 'digest') {
            $this->nonce = $this->_getNonce();
 
            $wwwauth = 'WWW-Authenticate: Digest ';
            $wwwauth .= 'qop="'.$this->options['qop'].'", ';
            $wwwauth .= 'algorithm='.$this->options['algorithm'].', ';
            $wwwauth .= 'realm="'.$this->options['digestRealm'].'", ';
            $wwwauth .= 'nonce="'.$this->nonce.'", ';
            if ($this->stale) {
                $wwwauth .= 'stale=true, ';
            }
            if (!empty($this->opaque)) {
                $wwwauth .= 'opaque="'.$this->opaque.'"' ;
            }
            $wwwauth .= "\r\n";
            if (!$this->options['forceDigestOnly']) {
                $wwwauth .= 'WWW-Authenticate: Basic realm="'.$this->realm.'"';
            }
            header($wwwauth);
            header('HTTP/1.0 401 Unauthorized');            
        }
 
        if ($this->stale) {
            echo 'Stale nonce value, please re-authenticate.';
        } else {
            echo $this->CancelText;
        }
        exit;
    }

References $CancelText, _getNonce(), and exit.

Referenced by ilAuthHTTP\failedLoginObserver(), login(), and validateDigest().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ getOption()

Auth_HTTP::getOption ( $name )

get authentication option

@access public

Parameters

string $name key of option

Returns: mixed option value

Definition at line 746 of file HTTP.php.

    {
        if (array_key_exists( $name, $this->options)) {
            return $this->options[$name];
        }
        if ($name == 'CancelText') {
            return $this->CancelText;
        }
        if ($name == 'Realm') {
            return $this->realm;
        }
        return false;
    }

References $CancelText, and $realm.

◆ login()

Auth_HTTP::login ( )

Login function.

@access private

Returns: void

When the user has already entered a username, we have to validate it.

If the login failed or the user entered no username, output the login screen again.

Reimplemented from Auth.

Definition at line 348 of file HTTP.php.

    {
        $login_ok = false;
        if (method_exists($this, '_loadStorage')) {
            $this->_loadStorage();
        }
        $this->storage->_auth_obj->_sessionName =& $this->_sessionName;
 
        if (!empty($this->username) && !empty($this->password)) {
            if ($this->authType == 'basic' && !$this->options['forceDigestOnly']) {
                if (true === $this->storage->fetchData($this->username, $this->password)) {
                    $login_ok = true;
                }
            } else { /* digest authentication */
 
                if (!$this->getAuth() || $this->getAuthData('a1') == null) {
                    /* 
                     * note:
                     *  - only PEAR::DB is supported as container.
                     *  - password should be stored in container as plain-text 
                     *    (if $options['cryptType'] == 'none') or 
                     *     A1 hashed form (md5('username:realm:password')) 
                     *    (if $options['cryptType'] == 'md5')
                     */
                    $dbs = $this->storage;
                    if (!DB::isConnection($dbs->db)) {
                        $dbs->_connect($dbs->options['dsn']);
                    }
                    
                    $query = 'SELECT '.$dbs->options['passwordcol']." FROM ".$dbs->options['table'].
                        ' WHERE '.$dbs->options['usernamecol']." = '".
                        $dbs->db->quoteString($this->username)."' ";
                    
                    $pwd = $dbs->db->getOne($query); // password stored in container.
                    
                    if (DB::isError($pwd)) {
                        return PEAR::raiseError($pwd->getMessage(), $pwd->getCode());
                    }
                    
                    if ($this->options['cryptType'] == 'none') {
                        $a1 = md5($this->username.':'.$this->options['digestRealm'].':'.$pwd);
                    } else {
                        $a1 = $pwd;
                    }
                    
                    $this->setAuthData('a1', $a1, true);
                } else {
                    $a1 = $this->getAuthData('a1');
                }
                
                $login_ok = $this->validateDigest($this->password, $a1);
                if ($this->nextNonce == false) {
                    $login_ok = false;
                }
            }
            
            if (!$login_ok && is_callable($this->loginFailedCallback)) {
                call_user_func($this->loginFailedCallback,$this->username, $this);
            }
        }
        
        if (!empty($this->username) && $login_ok) {
            $this->setAuth($this->username);
            if (is_callable($this->loginCallback)) {
                call_user_func($this->loginCallback,$this->username, $this);
            }
        }
        
        if (!empty($this->username) && !$login_ok) {
            $this->status = AUTH_WRONG_LOGIN;
        }
        
        if ((empty($this->username) || !$login_ok) && $this->showLogin) {
            $this->drawLogin($this->storage->activeUser);
            return;
        }
 
      if (!empty($this->username) && $login_ok && $this->authType == 'digest'
         && $this->auth['qop'] == 'auth') { 
         $this->authenticationInfo();
      }
    }

References Auth\$_sessionName, $query, Auth\$storage, Auth\_loadStorage(), AUTH_WRONG_LOGIN, authenticationInfo(), drawLogin(), Auth\getAuth(), Auth\getAuthData(), PEAR\raiseError(), Auth\setAuth(), Auth\setAuthData(), and validateDigest().

Here is the call graph for this function:

◆ selfURI()

Auth_HTTP::selfURI ( )

get self URI

@access public

Returns: string self URI

Definition at line 768 of file HTTP.php.

    {
        if (method_exists($this, '_importGlobalVariable')) {
            $this->server = &$this->_importGlobalVariable('server');
        }
 
        if (preg_match("/MSIE/",$this->server['HTTP_USER_AGENT'])) {
            // query string should be removed for MSIE
            $uri = preg_replace("/^(.*)\?/","\\1",$this->server['REQUEST_URI']);
        } else {
            $uri = $this->server['REQUEST_URI'];
        }
        return $uri;
    }

References $uri.

Referenced by assignData(), and validateDigest().

Here is the caller graph for this function:

◆ setCancelText()

Auth_HTTP::setCancelText ( $text )

Set the text to send if user hits the cancel button.

@access public

Parameters

string $text Text to send

Returns: void

Definition at line 520 of file HTTP.php.

    {
        $this->CancelText = $text;
    }

References $text.

◆ setOption()

Auth_HTTP::setOption	(	$name,
		$value = `null`
	)

set authentication option

@access public

Parameters

mixed	$name	key of option
mixed	$value	value of option

Returns: void

Definition at line 722 of file HTTP.php.

    {
        if (is_array($name)) {
            foreach($name as $key => $value) {
                if (array_key_exists( $key, $this->options)) {
                    $this->options[$key] = $value;
                }
            }
        } else {
            if (array_key_exists( $name, $this->options)) {
                    $this->options[$name] = $value;
            }
        }
    }

◆ setRealm()

Auth_HTTP::setRealm	(	$realm,
		$digestRealm = `''`
	)

Set name of the current realm.

@access public

Parameters

string	$realm	Name of the realm
string	$digestRealm	Name of the realm for digest authentication

Returns: void

Definition at line 502 of file HTTP.php.

    {
        $this->realm = $realm;
        if (!empty($digestRealm)) {
            $this->options['digestRealm'] = $digestRealm;
        }
    }

References $realm.

Referenced by ilAuthHTTP\__construct().

Here is the caller graph for this function:

◆ validateDigest()

Auth_HTTP::validateDigest	(	$response,
		$a1
	)

judge if the client response is valid.

@access private

Parameters

string	$response	client response
string	$a1	password or hashed password stored in container

Returns: bool true if success, false otherwise

Definition at line 536 of file HTTP.php.

    {
        if (method_exists($this, '_importGlobalVariable')) {
            $this->server = &$this->_importGlobalVariable('server');
        }
 
        $a2unhashed = $this->server['REQUEST_METHOD'].":".$this->selfURI();
        if($this->auth['qop'] == 'auth-int') {
            if(isset($GLOBALS["HTTP_RAW_POST_DATA"])) {
                // In PHP < 4.3 get raw POST data from this variable
                $body = $GLOBALS["HTTP_RAW_POST_DATA"];
            } else if($lines = @file('php://input')) {
                // In PHP >= 4.3 get raw POST data from this file
                $body = implode("\n", $lines);
            } else {
                if (method_exists($this, '_importGlobalVariable')) {
                    $this->post = &$this->_importGlobalVariable('post');
                }
                $body = '';
                foreach($this->post as $key => $value) {
                    if($body != '') $body .= '&';
                    $body .= rawurlencode($key) . '=' . rawurlencode($value);
                }
            }
 
            $a2unhashed .= ':'.md5($body);
        }
        
        $a2 = md5($a2unhashed);
        $combined = $a1.':'.
            $this->auth['nonce'].':'.
            $this->auth['nc'].':'.
            $this->auth['cnonce'].':'.
            $this->auth['qop'].':'.
            $a2;
        $expectedResponse = md5($combined);
        
        if(!isset($this->auth['opaque']) || $this->auth['opaque'] == $this->opaque) {
            if($response == $expectedResponse) { // password is valid
                if(!$this->stale) {
                    return true;
                } else {
                    $this->drawLogin();
                }
            }
        }
        
        return false;
    }

References $GLOBALS, drawLogin(), and selfURI().

Referenced by login().

Here is the call graph for this function:

Here is the caller graph for this function:

Field Documentation

◆ $auth

Auth_HTTP::$auth = array()

Definition at line 123 of file HTTP.php.

Referenced by assignData().

◆ $authType

Auth_HTTP::$authType = 'basic'

Definition at line 65 of file HTTP.php.

◆ $CancelText

Auth_HTTP::$CancelText = "Error 401 - Access denied"

Definition at line 83 of file HTTP.php.

Referenced by drawLogin(), and getOption().

◆ $cookie

Auth_HTTP::$cookie

Definition at line 157 of file HTTP.php.

◆ $nextNonce

Auth_HTTP::$nextNonce = ''

Definition at line 131 of file HTTP.php.

◆ $nonce

Auth_HTTP::$nonce = ''

Definition at line 139 of file HTTP.php.

Referenced by _decodeNonce(), and _judgeStale().

◆ $opaque

Auth_HTTP::$opaque = 'dummy'

Definition at line 107 of file HTTP.php.

◆ $options

Auth_HTTP::$options = array()

Definition at line 91 of file HTTP.php.

Referenced by Auth_HTTP().

◆ $post

Auth_HTTP::$post

Definition at line 151 of file HTTP.php.

◆ $realm

Auth_HTTP::$realm = "protected area"

Definition at line 74 of file HTTP.php.

Referenced by getOption(), and setRealm().

◆ $server

Auth_HTTP::$server

Definition at line 145 of file HTTP.php.

◆ $stale

Auth_HTTP::$stale = false

Definition at line 99 of file HTTP.php.

Referenced by _judgeStale().

◆ $uri

Auth_HTTP::$uri = ''

Definition at line 115 of file HTTP.php.

Referenced by selfURI().

The documentation for this class was generated from the following file:

Services/PEAR/lib/Auth/HTTP.php

Public Member Functions

Data Fields

Additional Inherited Members

Detailed Description

Member Function Documentation

◆ _decodeNonce()

◆ _getNonce()

◆ _judgeStale()

◆ assignData()

◆ Auth_HTTP()

◆ authenticationInfo()

◆ drawLogin()

◆ getOption()

◆ login()

◆ selfURI()

◆ setCancelText()

◆ setOption()

◆ setRealm()

◆ validateDigest()

Field Documentation

◆ $auth

◆ $authType

◆ $CancelText

◆ $cookie

◆ $nextNonce

◆ $nonce

◆ $opaque

◆ $options

◆ $post

◆ $realm

◆ $server

◆ $stale

◆ $uri