AdminPassword.php

Go to the documentation of this file.

<?php

class sspmod_core_Auth_Source_AdminPassword extends sspmod_core_Auth_UserPassBase {


        public function __construct($info, $config) {
                assert('is_array($info)');
                assert('is_array($config)');

                // Call the parent constructor first, as required by the interface
                parent::__construct($info, $config);

                $this->setForcedUsername("admin");
        }


        protected function login($username, $password) {
                assert('is_string($username)');
                assert('is_string($password)');

                $config = SimpleSAML_Configuration::getInstance();
                $adminPassword = $config->getString('auth.adminpassword', '123');
                if ($adminPassword === '123') {
                        // We require that the user changes the password
                        throw new SimpleSAML_Error_Error('NOTSET');
                }

                if ($username !== "admin") {
                        throw new SimpleSAML_Error_Error('WRONGUSERPASS');
                }

                if (!SimpleSAML\Utils\Crypto::pwValid($adminPassword, $password)) {
                        throw new SimpleSAML_Error_Error('WRONGUSERPASS');
                }

                return array('user' => array('admin'));
        }

}