class.ilAuthProviderDatabase.php

Go to the documentation of this file.

<?php

declare(strict_types=1);

use ILIAS\Authentication\Password\LocalUserPasswordManager;

class ilAuthProviderDatabase extends ilAuthProvider
{
    private bool $verify_password = true;

    public function withoutPasswordVerification(): self
    {
        $clone = clone $this;
        $clone->verify_password = false;

        return $clone;
    }

    public function doAuthentication(ilAuthStatus $status): bool
    {
        $user = ilObjectFactory::getInstanceByObjId(ilObjUser::_loginExists($this->getCredentials()->getUsername()), false);

        $this->getLogger()->debug('Trying to authenticate user: ' . $this->getCredentials()->getUsername());
        if ($user instanceof ilObjUser) {
            if ($user->getId() === ANONYMOUS_USER_ID) {
                $this->getLogger()->notice('Failed authentication for anonymous user id. ');
                $this->handleAuthenticationFail($status, 'err_wrong_login');

                return false;
            }

            if (!ilAuthUtils::isLocalPasswordEnabledForAuthMode($user->getAuthMode(true))) {
                $this->getLogger()->debug('DB authentication failed: current user auth mode does not allow local validation.');
                $this->getLogger()->debug('User auth mode: ' . $user->getAuthMode(true));
                $this->handleAuthenticationFail($status, 'err_wrong_login');

                return false;
            }

            if (!$this->verify_password || LocalUserPasswordManager::getInstance()->verifyPassword($user, $this->getCredentials()->getPassword())) {
                $this->getLogger()->debug('Successfully authenticated user: ' . $this->getCredentials()->getUsername());
                $status->setStatus(ilAuthStatus::STATUS_AUTHENTICATED);
                $status->setAuthenticatedUserId($user->getId());

                return true;
            }
        }

        $this->handleAuthenticationFail($status, 'err_wrong_login');

        return false;
    }
}