SQL.php

Go to the documentation of this file.

<?php

class sspmod_sqlauth_Auth_Source_SQL extends sspmod_core_Auth_UserPassBase {


        private $dsn;


        private $username;


        private $password;


        private $query;


        public function __construct($info, $config) {
                assert('is_array($info)');
                assert('is_array($config)');

                // Call the parent constructor first, as required by the interface
                parent::__construct($info, $config);

                // Make sure that all required parameters are present.
                foreach (array('dsn', 'username', 'password', 'query') as $param) {
                        if (!array_key_exists($param, $config)) {
                                throw new Exception('Missing required attribute \'' . $param .
                                        '\' for authentication source ' . $this->authId);
                        }

                        if (!is_string($config[$param])) {
                                throw new Exception('Expected parameter \'' . $param .
                                        '\' for authentication source ' . $this->authId .
                                        ' to be a string. Instead it was: ' .
                                        var_export($config[$param], TRUE));
                        }
                }

                $this->dsn = $config['dsn'];
                $this->username = $config['username'];
                $this->password = $config['password'];
                $this->query = $config['query'];
        }


        private function connect() {
                try {
                        $db = new PDO($this->dsn, $this->username, $this->password);
                } catch (PDOException $e) {
                        throw new Exception('sqlauth:' . $this->authId . ': - Failed to connect to \'' .
                                $this->dsn . '\': '. $e->getMessage());
                }

                $db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);


                $driver = explode(':', $this->dsn, 2);
                $driver = strtolower($driver[0]);

                /* Driver specific initialization. */
                switch ($driver) {
                case 'mysql':
                        /* Use UTF-8. */
                        $db->exec("SET NAMES 'utf8mb4'");
                        break;
                case 'pgsql':
                        /* Use UTF-8. */
                        $db->exec("SET NAMES 'UTF8'");
                        break;
                }

                return $db;
        }


        protected function login($username, $password) {
                assert('is_string($username)');
                assert('is_string($password)');

                $db = $this->connect();

                try {
                        $sth = $db->prepare($this->query);
                } catch (PDOException $e) {
                        throw new Exception('sqlauth:' . $this->authId .
                                ': - Failed to prepare query: ' . $e->getMessage());
                }

                try {
                        $res = $sth->execute(array('username' => $username, 'password' => $password));
                } catch (PDOException $e) {
                        throw new Exception('sqlauth:' . $this->authId .
                                ': - Failed to execute query: ' . $e->getMessage());
                }

                try {
                        $data = $sth->fetchAll(PDO::FETCH_ASSOC);
                } catch (PDOException $e) {
                        throw new Exception('sqlauth:' . $this->authId .
                                ': - Failed to fetch result set: ' . $e->getMessage());
                }

                SimpleSAML\Logger::info('sqlauth:' . $this->authId . ': Got ' . count($data) .
                        ' rows from database');

                if (count($data) === 0) {
                        /* No rows returned - invalid username/password. */
                        SimpleSAML\Logger::error('sqlauth:' . $this->authId .
                                ': No rows in result set. Probably wrong username/password.');
                        throw new SimpleSAML_Error_Error('WRONGUSERPASS');
                }

                /* Extract attributes. We allow the resultset to consist of multiple rows. Attributes
                 * which are present in more than one row will become multivalued. NULL values and
                 * duplicate values will be skipped. All values will be converted to strings.
                 */
                $attributes = array();
                foreach ($data as $row) {
                        foreach ($row as $name => $value) {

                                if ($value === NULL) {
                                        continue;
                                }

                                $value = (string)$value;

                                if (!array_key_exists($name, $attributes)) {
                                        $attributes[$name] = array();
                                }

                                if (in_array($value, $attributes[$name], TRUE)) {
                                        /* Value already exists in attribute. */
                                        continue;
                                }

                                $attributes[$name][] = $value;
                        }
                }

                SimpleSAML\Logger::info('sqlauth:' . $this->authId . ': Attributes: ' .
                        implode(',', array_keys($attributes)));

                return $attributes;
        }

}