Collaboration diagram for ilUserPasswordManager:

Public Member Functions
	__construct (array $config=[])
	Please use the singleton method for instance creation The constructor is still public because of the unit tests. More...

	setSettings (?ilSetting $settings)

	setDb (ilDBInterface $db)

	getEncoderName ()

	setEncoderName (string $encoderName)

	getEncoderFactory ()

	setEncoderFactory (ilUserPasswordEncoderFactory $encoderFactory)

	encodePassword (ilObjUser $user, string $raw)

	isEncodingTypeSupported (string $name)

	verifyPassword (ilObjUser $user, string $raw)

	resetLastPasswordChangeForLocalUsers ()

Static Public Member Functions
static	getInstance ()
	Singleton method to reduce footprint (included files, created instances) More...

Protected Attributes
ilUserPasswordEncoderFactory	$encoderFactory = null

ilSetting	$settings = null

ilDBInterface	$db = null

string	$encoderName = null

array	$config = []

Private Attributes
const	MIN_SALT_SIZE = 16

Static Private Attributes
static self	$instance = null

Detailed Description

Definition at line 26 of file class.ilUserPasswordManager.php.

Constructor & Destructor Documentation

◆ __construct()

ilUserPasswordManager::__construct ( array $config = [] )

Please use the singleton method for instance creation The constructor is still public because of the unit tests.

Parameters

array<string,mixed> $config

Exceptions

ilUserException
JsonException

Definition at line 48 of file class.ilUserPasswordManager.php.

    {
        if (!empty($config)) {
            foreach ($config as $key => $value) {
                switch (strtolower($key)) {
                    case 'settings':
                        $this->setSettings($value);
                        break;
                    case 'db':
                        $this->setDb($value);
                        break;
                    case 'password_encoder':
                        $this->setEncoderName($value);
                        break;
                    case 'encoder_factory':
                        $this->setEncoderFactory($value);
                        break;
                }
            }
        }
 
        if (!$this->getEncoderName()) {
            throw new ilUserException(sprintf(
                '"password_encoder" must be set in %s.',
                json_encode($config, JSON_THROW_ON_ERROR)
            ));
        }
 
        if (!($this->getEncoderFactory() instanceof ilUserPasswordEncoderFactory)) {
            throw new ilUserException(sprintf(
                '"encoder_factory" must be instance of ilUserPasswordEncoderFactory and set in %s.',
                json_encode($config, JSON_THROW_ON_ERROR)
            ));
        }
    }

References $config, ILIAS\LTI\ToolProvider\$key, getEncoderFactory(), getEncoderName(), setDb(), setEncoderFactory(), setEncoderName(), and setSettings().

Here is the call graph for this function:

Member Function Documentation

◆ encodePassword()

ilUserPasswordManager::encodePassword	(	ilObjUser	$user,
		string	$raw
	)

Definition at line 147 of file class.ilUserPasswordManager.php.

                                                                : void
    {
        $encoder = $this->getEncoderFactory()->getEncoderByName($this->getEncoderName());
        $user->setPasswordEncodingType($encoder->getName());
        if ($encoder->requiresSalt()) {
            $user->setPasswordSalt(
                substr(str_replace('+', '.', base64_encode(ilPasswordUtils::getBytes(self::MIN_SALT_SIZE))), 0, 22)
            );
        } else {
            $user->setPasswordSalt(null);
        }
        $user->setPasswd($encoder->encodePassword($raw, (string) $user->getPasswordSalt()), ilObjUser::PASSWD_CRYPTED);
    }

References ilPasswordUtils\getBytes(), getEncoderFactory(), getEncoderName(), ilObjUser\getPasswordSalt(), ilObjUser\PASSWD_CRYPTED, ilObjUser\setPasswd(), ilObjUser\setPasswordEncodingType(), and ilObjUser\setPasswordSalt().

Here is the call graph for this function:

◆ getEncoderFactory()

ilUserPasswordManager::getEncoderFactory ( )

Definition at line 137 of file class.ilUserPasswordManager.php.

                                       : ?ilUserPasswordEncoderFactory
    {
        return $this->encoderFactory;
    }

References $encoderFactory.

Referenced by __construct(), encodePassword(), isEncodingTypeSupported(), and verifyPassword().

Here is the caller graph for this function:

◆ getEncoderName()

ilUserPasswordManager::getEncoderName ( )

Definition at line 127 of file class.ilUserPasswordManager.php.

                                    : ?string
    {
        return $this->encoderName;
    }

References $encoderName.

Referenced by __construct(), encodePassword(), and verifyPassword().

Here is the caller graph for this function:

◆ getInstance()

static ilUserPasswordManager::getInstance ( )

static

Singleton method to reduce footprint (included files, created instances)

Returns: self

Exceptions

ilUserException
ilPasswordException

Definition at line 90 of file class.ilUserPasswordManager.php.

                                        : self
    {
        global $DIC;
 
        if (self::$instance instanceof self) {
            return self::$instance;
        }
 
        $password_manager = new ilUserPasswordManager(
            [
                'encoder_factory' => new ilUserPasswordEncoderFactory(
                    [
                        'default_password_encoder' => 'bcryptphp',
                        'ignore_security_flaw' => true,
                        'data_directory' => ilFileUtils::getDataDir()
                    ]
                ),
                'password_encoder' => 'bcryptphp',
                'settings' => $DIC->isDependencyAvailable('settings') ? $DIC->settings() : null,
                'db' => $DIC->database(),
            ]
        );
 
        self::$instance = $password_manager;
        return self::$instance;
    }

References $DIC, $instance, and ilFileUtils\getDataDir().

Referenced by ilPDNewsBlockGUI\changeFeedSettings(), ilObjUserFolderGUI\forceUserPasswordResetObject(), ilObjUser\isPasswordChangeDemanded(), ilObjUser\saveAsNew(), ilPersonalSettingsGUI\savePassword(), and ilObjUser\update().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ isEncodingTypeSupported()

ilUserPasswordManager::isEncodingTypeSupported ( string $name )

Definition at line 161 of file class.ilUserPasswordManager.php.

                                                         : bool
    {
        return in_array($name, $this->getEncoderFactory()->getSupportedEncoderNames());
    }

References $name, and getEncoderFactory().

Here is the call graph for this function:

◆ resetLastPasswordChangeForLocalUsers()

ilUserPasswordManager::resetLastPasswordChangeForLocalUsers ( )

Definition at line 185 of file class.ilUserPasswordManager.php.

                                                          : void
    {
        $defaultAuthMode = $this->settings->get('auth_mode');
        $defaultAuthModeCondition = '';
        if ((int) $defaultAuthMode === ilAuthUtils::AUTH_LOCAL) {
            $defaultAuthModeCondition = ' OR auth_mode = ' . $this->db->quote('default', 'text');
        }
 
        $this->db->manipulateF(
            "UPDATE usr_data SET passwd_policy_reset = %s WHERE (auth_mode = %s $defaultAuthModeCondition)",
            ['integer', 'text'],
            [1, 'local']
        );
    }

References ilAuthUtils\AUTH_LOCAL, and ILIAS\Repository\settings().

Here is the call graph for this function:

◆ setDb()

ilUserPasswordManager::setDb ( ilDBInterface $db )

Definition at line 122 of file class.ilUserPasswordManager.php.

                                            : void
    {
        $this->db = $db;
    }

References $db.

Referenced by __construct().

Here is the caller graph for this function:

◆ setEncoderFactory()

ilUserPasswordManager::setEncoderFactory ( ilUserPasswordEncoderFactory $encoderFactory )

Definition at line 142 of file class.ilUserPasswordManager.php.

                                                                                   : void
    {
        $this->encoderFactory = $encoderFactory;
    }

References $encoderFactory.

Referenced by __construct().

Here is the caller graph for this function:

◆ setEncoderName()

ilUserPasswordManager::setEncoderName ( string $encoderName )

Definition at line 132 of file class.ilUserPasswordManager.php.

                                                       : void
    {
        $this->encoderName = $encoderName;
    }

References $encoderName.

Referenced by __construct().

Here is the caller graph for this function:

◆ setSettings()

ilUserPasswordManager::setSettings ( ?ilSetting $settings )

Definition at line 117 of file class.ilUserPasswordManager.php.

                                                     : void
    {
        $this->settings = $settings;
    }

References $settings, and ILIAS\Repository\settings().

Referenced by __construct().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ verifyPassword()

ilUserPasswordManager::verifyPassword	(	ilObjUser	$user,
		string	$raw
	)

Definition at line 166 of file class.ilUserPasswordManager.php.

                                                                : bool
    {
        $encoder = $this->getEncoderFactory()->getEncoderByName($user->getPasswordEncodingType(), true);
        if ($this->getEncoderName() !== $encoder->getName()) {
            if ($encoder->isPasswordValid($user->getPasswd(), $raw, (string) $user->getPasswordSalt())) {
                $user->resetPassword($raw, $raw);
                return true;
            }
        } elseif ($encoder->isPasswordValid($user->getPasswd(), $raw, (string) $user->getPasswordSalt())) {
            if ($encoder->requiresReencoding($user->getPasswd())) {
                $user->resetPassword($raw, $raw);
            }
 
            return true;
        }
 
        return false;
    }