AdminPassword.php

Go to the documentation of this file.

<?php
 
class sspmod_core_Auth_Source_AdminPassword extends sspmod_core_Auth_UserPassBase {
 
 
        public function __construct($info, $config) {
                assert('is_array($info)');
                assert('is_array($config)');
 
                // Call the parent constructor first, as required by the interface
                parent::__construct($info, $config);
 
                $this->setForcedUsername("admin");
        }
 
 
        protected function login($username, $password) {
                assert('is_string($username)');
                assert('is_string($password)');
 
                $config = SimpleSAML_Configuration::getInstance();
                $adminPassword = $config->getString('auth.adminpassword', '123');
                if ($adminPassword === '123') {
                        // We require that the user changes the password
                        throw new SimpleSAML_Error_Error('NOTSET');
                }
 
                if ($username !== "admin") {
                        throw new SimpleSAML_Error_Error('WRONGUSERPASS');
                }
 
                if (!SimpleSAML\Utils\Crypto::pwValid($adminPassword, $password)) {
                        throw new SimpleSAML_Error_Error('WRONGUSERPASS');
                }
 
                return array('user' => array('admin'));
        }
 
}