mcndave/ulmus-user
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Merge branch 'master' of https://git.mcnd.ca/mcndave/ulmus-user

Browse Source
This commit is contained in:
Dave M. 2026-07-16 13:28:36 -04:00
commit 61db8fcc95
9 changed files with 131 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/Authorize/Header/BasicMethod.php
View File

@ -5,11 +5,13 @@ namespace Ulmus\User\Authorize\Header;
use Psr\Http\Message\ServerRequestInterface;
use Ulmus\User\Entity\BasicAuthUserInterface;
use Ulmus\User\Entity\UserInterface;
use Ulmus\User\Lib\Authenticate;
use Ulmus\User\Lib\Authorize;
class BasicMethod implements MethodInterface
{
public function __construct(
protected Authenticate $authorize,
protected BasicAuthUserInterface $user,
protected string|array $arguments
) {}
@ -29,7 +31,8 @@ class BasicMethod implements MethodInterface
throw new \RuntimeException("A password must be provided");
}
( new Authorize($this->user) )->authenticate([ $this->user->usernameField() => $userName ], $password);
$this->authorize->user = $this->user;
$this->authorize->authenticate([ $this->user->usernameField() => $userName ], $password);
return $this->user->loggedIn();
}

8
src/Authorize/Header/BearerMethod.php
View File

@ -6,6 +6,7 @@ use Psr\Http\Message\ServerRequestInterface;
use Ulmus\User\Authorize\Bearer\JsonWebToken;
use Ulmus\User\Authorize\Bearer\JsonWebTokenDecoder;
use Ulmus\User\Entity\UserInterface;
use Ulmus\User\Lib\Authenticate;
use Ulmus\User\Lib\Authorize;
class BearerMethod implements MethodInterface
@ -13,20 +14,21 @@ class BearerMethod implements MethodInterface
protected JsonWebTokenDecoder $jwt;
public function __construct(
protected Authenticate $authorize,
protected UserInterface $user,
protected string $token
) {}
public function execute(ServerRequestInterface $request) : bool
{
$this->authorize->user = $this->user;
switch($this->autodetectTokenType()) {
case BearerTokenTypeEnum::JsonWebToken:
$authorize = new Authorize($this->user);
$payload = $this->jwt->getPayload();
if ($payload['sub'] ?? false) {
if ( ! $authorize->logUser((int) $payload['sub']) ) {
if ( ! $this->authorize->logUser($payload['sub']) ) {
throw new \Exception("Given user id do not match with an existing/active user");
}
}

2
src/Authorize/Header/DigestMethod.php
View File

@ -4,10 +4,12 @@ namespace Ulmus\User\Authorize\Header;
use Psr\Http\Message\ServerRequestInterface;
use Ulmus\User\Entity\DigestAuthUserInterface;
use Ulmus\User\Lib\Authenticate;
class DigestMethod implements MethodInterface
{
public function __construct(
protected Authenticate $authorize,
protected DigestAuthUserInterface $user,
protected string|array $arguments
) {}

11
src/Authorize/HeaderAuthentication.php
View File

@ -5,9 +5,14 @@ namespace Ulmus\User\Authorize;
use Psr\Http\Message\ServerRequestInterface;
use Ulmus\User\Common\AuthorizeContentTypeEnum;
use Ulmus\User\Entity\{ DigestAuthUserInterface, UserInterface };
use Ulmus\User\Lib\Authenticate;
class HeaderAuthentication implements AuthorizeMethodInterface
{
public function __construct(
protected Authenticate $authorize,
) { }
public function connect(ServerRequestInterface $request, UserInterface $user): bool
{
if (null !== ( $auth = $request->getHeaderLine('Authorization') )) {
@ -15,7 +20,7 @@ class HeaderAuthentication implements AuthorizeMethodInterface
switch(strtolower($method)) {
case "basic":
$methodObj = new Header\BasicMethod($user, $value);
$methodObj = new Header\BasicMethod($this->authorize, $user, $value);
break;
case "digest":
@ -23,11 +28,11 @@ class HeaderAuthentication implements AuthorizeMethodInterface
throw new \RuntimeException("Your user entity must provide a valid hash of `user:realm:password` ");
}
$methodObj = new Header\DigestMethod($user, $value);
$methodObj = new Header\DigestMethod($this->authorize, $user, $value);
break;
case "bearer":
$methodObj = new Header\BearerMethod($user, $value);
$methodObj = new Header\BearerMethod($this->authorize, $user, $value);
break;
case "token":

55
src/Authorize/MacAddressAuthentication.php Normal file
View File

@ -0,0 +1,55 @@
<?php
namespace Ulmus\User\Authorize;
use Psr\Http\Message\ServerRequestInterface;
use Ulmus\User\Entity\UserInterface;
use Ulmus\User\Lib\Authenticate;
class MacAddressAuthentication implements AuthorizeMethodInterface
{
public function __construct(
public Authenticate $authenticate,
protected string $fieldUser = "mac",
) {}
public function connect(ServerRequestInterface $request, UserInterface $user): bool
{
$server = $request->getServerParams();
# var_dump($server, $this->getArpMacAddress($server['REMOTE_ADDR']));die();
return false;
return $this->authenticate->authenticate([ $this->fieldUser => $post[$this->postFieldUser] ], $post[$this->postFieldPassword]);
}
public function catchRequest(ServerRequestInterface $request): bool
{
return true;
$post = $request->getParsedBody();
return strtoupper( $request->getMethod() ) === "POST" && isset($post[$this->postFieldUser], $post[$this->postFieldPassword]);
}
protected function getArpMacAddress(string $ip) : ?string
{
#run the external command, break output into lines
$arp = shell_exec(sprintf("arp -a %s", escapeshellarg($ip)));
$lines = explode("\n", $arp);
#look for the output line describing our IP address
foreach($lines as $line)
{
$cols = preg_split('/\s+/', trim($line));
if ($cols[0] === $ip)
{
return $cols[0];
}
}
return false;
}
}

14
src/Lib/Authenticate.php
View File

@ -121,15 +121,19 @@ class Authenticate {
return $this;
}
public function logUser(?int $id) : ? UserInterface
public function logUser(null|int|object $id) : ? UserInterface
{
try {
if ($id === null || null === ($entity = $this->user::repository()->loadFromPk($id))) {
if (! is_object($id)) {
try {
if ($id === null || null === ($entity = $this->user::repository()->loadFromPk($id))) {
return null;
}
} catch (\Exception $ex) {
return null;
}
}
catch(\Exception $ex) {
return null;
else {
$entity = $id;
}
$this->user->fromArray($entity);

6
src/Middleware/HeaderAuthenticationMiddleware.php
View File

@ -10,17 +10,19 @@ use Psr\Http\{
};
use Ulmus\User\Entity\UserInterface;
use Ulmus\User\Authorize\HeaderAuthentication;
use Ulmus\User\Lib\Authenticate;
class HeaderAuthenticationMiddleware implements MiddlewareInterface
{
protected HeaderAuthentication $authenticator;
public function __construct(
protected Authenticate $authorize,
protected UserInterface $entity,
protected \Closure $loginFailedResponse,
HeaderAuthentication $authenticator = null,
? HeaderAuthentication $authenticator = null,
) {
$this->authenticator = $authenticator ?: new HeaderAuthentication();
$this->authenticator = $authenticator ?: new HeaderAuthentication($authorize);
}
public function process(ServerRequestInterface $request, RequestHandlerInterface $handler): ResponseInterface

40
src/Middleware/LocalMacAddressMiddleware.php Normal file
View File

@ -0,0 +1,40 @@
<?php
namespace Ulmus\User\Middleware;
use Psr\Http\{
Message\ResponseInterface,
Message\ServerRequestInterface,
Server\MiddlewareInterface,
Server\RequestHandlerInterface
};
use Ulmus\User\Authorize\MacAddressAuthentication;
use Ulmus\User\Entity\UserInterface;
use Ulmus\User\Authorize\PostRequestAuthentication;
use Ulmus\User\Lib\Authenticate;
class LocalMacAddressMiddleware implements MiddlewareInterface
{
protected MacAddressAuthentication $authenticator;
public function __construct(
protected UserInterface $entity,
protected \Closure $loginFailedResponse,
? MacAddressAuthentication $authenticator = null,
) {
$this->authenticator = $authenticator ?: new MacAddressAuthentication(new Authenticate($entity));
}
public function process(ServerRequestInterface $request, RequestHandlerInterface $handler): ResponseInterface
{
$this->authenticator->authenticate->rememberMe();
if ( $this->authenticator->catchRequest($request) ) {
if ( ! $this->authenticator->connect($request, $this->entity) ) {
return call_user_func($this->loginFailedResponse, "Login failed");
}
}
return $handler->handle($request);
}
}

5
src/Middleware/PostRequestAuthenticationMiddleware.php
View File

@ -19,7 +19,7 @@ class PostRequestAuthenticationMiddleware implements MiddlewareInterface
public function __construct(
protected UserInterface $entity,
protected \Closure $loginFailedResponse,
PostRequestAuthentication $authenticator = null,
? PostRequestAuthentication $authenticator = null,
) {
$this->authenticator = $authenticator ?: new PostRequestAuthentication(new Authenticate($entity));
}
@ -30,6 +30,9 @@ class PostRequestAuthenticationMiddleware implements MiddlewareInterface
if ( $this->authenticator->catchRequest($request) ) {
if ( ! $this->authenticator->connect($request, $this->entity) ) {
# Adds random sleep after a bad login attempts
sleep(random_int(2,8));
return call_user_func($this->loginFailedResponse, "Login failed");
}
}