SQL.php

Go to the documentation of this file.

<?php
 
class sspmod_sqlauth_Auth_Source_SQL extends sspmod_core_Auth_UserPassBase {
 
 
        private $dsn;
 
 
        private $username;
 
 
        private $password;
 
 
        private $query;
 
 
        public function __construct($info, $config) {
                assert('is_array($info)');
                assert('is_array($config)');
 
                // Call the parent constructor first, as required by the interface
                parent::__construct($info, $config);
 
                // Make sure that all required parameters are present.
                foreach (array('dsn', 'username', 'password', 'query') as $param) {
                        if (!array_key_exists($param, $config)) {
                                throw new Exception('Missing required attribute \'' . $param .
                                        '\' for authentication source ' . $this->authId);
                        }
 
                        if (!is_string($config[$param])) {
                                throw new Exception('Expected parameter \'' . $param .
                                        '\' for authentication source ' . $this->authId .
                                        ' to be a string. Instead it was: ' .
                                        var_export($config[$param], TRUE));
                        }
                }
 
                $this->dsn = $config['dsn'];
                $this->username = $config['username'];
                $this->password = $config['password'];
                $this->query = $config['query'];
        }
 
 
        private function connect() {
                try {
                        $db = new PDO($this->dsn, $this->username, $this->password);
                } catch (PDOException $e) {
                        throw new Exception('sqlauth:' . $this->authId . ': - Failed to connect to \'' .
                                $this->dsn . '\': '. $e->getMessage());
                }
 
                $db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
 
 
                $driver = explode(':', $this->dsn, 2);
                $driver = strtolower($driver[0]);
 
                /* Driver specific initialization. */
                switch ($driver) {
                case 'mysql':
                        /* Use UTF-8. */
                        $db->exec("SET NAMES 'utf8mb4'");
                        break;
                case 'pgsql':
                        /* Use UTF-8. */
                        $db->exec("SET NAMES 'UTF8'");
                        break;
                }
 
                return $db;
        }
 
 
        protected function login($username, $password) {
                assert('is_string($username)');
                assert('is_string($password)');
 
                $db = $this->connect();
 
                try {
                        $sth = $db->prepare($this->query);
                } catch (PDOException $e) {
                        throw new Exception('sqlauth:' . $this->authId .
                                ': - Failed to prepare query: ' . $e->getMessage());
                }
 
                try {
                        $res = $sth->execute(array('username' => $username, 'password' => $password));
                } catch (PDOException $e) {
                        throw new Exception('sqlauth:' . $this->authId .
                                ': - Failed to execute query: ' . $e->getMessage());
                }
 
                try {
                        $data = $sth->fetchAll(PDO::FETCH_ASSOC);
                } catch (PDOException $e) {
                        throw new Exception('sqlauth:' . $this->authId .
                                ': - Failed to fetch result set: ' . $e->getMessage());
                }
 
                SimpleSAML\Logger::info('sqlauth:' . $this->authId . ': Got ' . count($data) .
                        ' rows from database');
 
                if (count($data) === 0) {
                        /* No rows returned - invalid username/password. */
                        SimpleSAML\Logger::error('sqlauth:' . $this->authId .
                                ': No rows in result set. Probably wrong username/password.');
                        throw new SimpleSAML_Error_Error('WRONGUSERPASS');
                }
 
                /* Extract attributes. We allow the resultset to consist of multiple rows. Attributes
                 * which are present in more than one row will become multivalued. NULL values and
                 * duplicate values will be skipped. All values will be converted to strings.
                 */
                $attributes = array();
                foreach ($data as $row) {
                        foreach ($row as $name => $value) {
 
                                if ($value === NULL) {
                                        continue;
                                }
 
                                $value = (string)$value;
 
                                if (!array_key_exists($name, $attributes)) {
                                        $attributes[$name] = array();
                                }
 
                                if (in_array($value, $attributes[$name], TRUE)) {
                                        /* Value already exists in attribute. */
                                        continue;
                                }
 
                                $attributes[$name][] = $value;
                        }
                }
 
                SimpleSAML\Logger::info('sqlauth:' . $this->authId . ': Attributes: ' .
                        implode(',', array_keys($attributes)));
 
                return $attributes;
        }
 
}