Collaboration diagram for ILIAS\WebDAV\Auth\ILIASAuthenticationFileCache:

Public Member Functions
	__construct (private Filesystem $filesystem, SecretKeyRotation $secret_key_rotation)

	isAuthenticated (string $username, string $password)

	setAuthenticated (string $username, string $password, int $user_id)

Private Member Functions
	getAuthCacheFile (string $username)

	readAuthCache (string $username)

	writeAuthCache (string $username, string $password_hash, int $usr_id)

Private Attributes
const string	SALT = 'webdav'

const string	F_USERNAME = 'username'

const string	F_USR_ID = 'usr_id'

const string	F_PW_HASH = 'password'

DataSigner	$data_signer

Detailed Description

Author: Fabian Schmid fabia.nosp@m.n@sr.nosp@m..solu.nosp@m.tion.nosp@m.s

Definition at line 30 of file ILIASAuthenticationFileCache.php.

Constructor & Destructor Documentation

◆ __construct()

ILIAS\WebDAV\Auth\ILIASAuthenticationFileCache::__construct	(	private Filesystem	$filesystem,
		SecretKeyRotation	$secret_key_rotation
	)

Definition at line 38 of file ILIASAuthenticationFileCache.php.

      {
        $this->data_signer = new DataSigner(
            $secret_key_rotation
        );
    }

Member Function Documentation

◆ getAuthCacheFile()

ILIAS\WebDAV\Auth\ILIASAuthenticationFileCache::getAuthCacheFile ( string $username )

private

Definition at line 47 of file ILIASAuthenticationFileCache.php.

                                                       : string
    {
        return 'davcache_' . hash('sha256', $username);
    }

Referenced by ILIAS\WebDAV\Auth\ILIASAuthenticationFileCache\readAuthCache(), and ILIAS\WebDAV\Auth\ILIASAuthenticationFileCache\writeAuthCache().

Here is the caller graph for this function:

◆ isAuthenticated()

ILIAS\WebDAV\Auth\ILIASAuthenticationFileCache::isAuthenticated	(	string	$username,
		string	$password
	)

Definition at line 77 of file ILIASAuthenticationFileCache.php.

                                                                       : ?int
    {
        $cached = $this->readAuthCache($username);
        if ($cached === null) {
            return null;
        }
        // has the password, since we stored it hashed
        $password = hash('sha256', $password);
 
        if ($cached[self::F_USERNAME] === $username && $cached[self::F_PW_HASH] === $password) {
            return (int) $cached[self::F_USR_ID]; // retun user_id if corrent
        }
 
        return null;
    }

References ILIAS\WebDAV\Auth\ILIASAuthenticationFileCache\F_USR_ID, and ILIAS\WebDAV\Auth\ILIASAuthenticationFileCache\readAuthCache().

Here is the call graph for this function:

◆ readAuthCache()

ILIAS\WebDAV\Auth\ILIASAuthenticationFileCache::readAuthCache ( string $username )

private

Definition at line 52 of file ILIASAuthenticationFileCache.php.

                                                    : ?array
    {
        $file = $this->getAuthCacheFile($username);
        if (!$this->filesystem->has($file)) {
            return null;
        }
        $raw = $this->filesystem->read($file);
 
        return $this->data_signer->verify($raw, self::SALT);
    }

References ILIAS\Repository\filesystem(), and ILIAS\WebDAV\Auth\ILIASAuthenticationFileCache\getAuthCacheFile().

Referenced by ILIAS\WebDAV\Auth\ILIASAuthenticationFileCache\isAuthenticated().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ setAuthenticated()

ILIAS\WebDAV\Auth\ILIASAuthenticationFileCache::setAuthenticated	(	string	$username,
		string	$password,
		int	$user_id
	)

Definition at line 93 of file ILIASAuthenticationFileCache.php.

     : void {
        // has the password, since we do not want to store them
        $password = hash('sha256', $password);
 
        $this->writeAuthCache($username, $password, $user_id);
    }

◆ writeAuthCache()

ILIAS\WebDAV\Auth\ILIASAuthenticationFileCache::writeAuthCache	(	string	$username,
		string	$password_hash,
		int	$usr_id
	)

private

Definition at line 63 of file ILIASAuthenticationFileCache.php.

                                                                                         : void
    {
        $file = $this->getAuthCacheFile($username);
 
        $payload = [
            self::F_USR_ID => $usr_id,
            self::F_USERNAME => $username,
            self::F_PW_HASH => $password_hash,
        ];
 
        $payload = $this->data_signer->sign($payload, self::SALT);
        $this->filesystem->put($file, $payload);
    }