summaryrefslogtreecommitdiff
path: root/app/Api/Auth.php
diff options
context:
space:
mode:
authorFrederic Guillot <fred@kanboard.net>2015-07-29 17:42:48 -0400
committerFrederic Guillot <fred@kanboard.net>2015-07-29 17:42:48 -0400
commitf595fb2786d884dbaf7ec87d53cee920a0655f0e (patch)
tree0da808ef2f679affa51eff80e172787098c13731 /app/Api/Auth.php
parent2eeb58ae0321f584652714080649302c3f83a831 (diff)
Add first draft of the user api
Diffstat (limited to 'app/Api/Auth.php')
-rw-r--r--app/Api/Auth.php40
1 files changed, 40 insertions, 0 deletions
diff --git a/app/Api/Auth.php b/app/Api/Auth.php
new file mode 100644
index 00000000..9d401746
--- /dev/null
+++ b/app/Api/Auth.php
@@ -0,0 +1,40 @@
+<?php
+
+namespace Api;
+
+use JsonRPC\AuthenticationFailure;
+use Symfony\Component\EventDispatcher\Event;
+
+/**
+ * Base class
+ *
+ * @package api
+ * @author Frederic Guillot
+ */
+class Auth extends Base
+{
+ /**
+ * Check api credentials
+ *
+ * @access public
+ * @param string $username
+ * @param string $password
+ * @param string $class
+ * @param string $method
+ */
+ public function checkCredentials($username, $password, $class, $method)
+ {
+ $this->container['dispatcher']->dispatch('api.bootstrap', new Event);
+
+ if ($username !== 'jsonrpc' && $this->authentication->authenticate($username, $password)) {
+ $this->checkProcedurePermission(true, $method);
+ $this->userSession->refresh($this->user->getByUsername($username));
+ }
+ else if ($username === 'jsonrpc' && $password === $this->config->get('api_token')) {
+ $this->checkProcedurePermission(false, $method);
+ }
+ else {
+ throw new AuthenticationFailure('Wrong credentials');
+ }
+ }
+}