app/Api/Auth.php


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38

<?php

namespace Kanboard\Api;

use JsonRPC\AuthenticationFailure;
use Symfony\Component\EventDispatcher\Event;

/**
 * Base class
 *
 * @package  api
 * @author   Frederic Guillot
 */
class Auth extends Base
{
    /**
     * Check api credentials
     *
     * @access public
     * @param  string  $username
     * @param  string  $password
     * @param  string  $class
     * @param  string  $method
     */
    public function checkCredentials($username, $password, $class, $method)
    {
        $this->container['dispatcher']->dispatch('api.bootstrap', new Event);

        if ($username !== 'jsonrpc' && ! $this->authentication->hasCaptcha($username) && $this->authentication->authenticate($username, $password)) {
            $this->checkProcedurePermission(true, $method);
            $this->userSession->refresh($this->user->getByUsername($username));
        } elseif ($username === 'jsonrpc' && $password === $this->config->get('api_token')) {
            $this->checkProcedurePermission(false, $method);
        } else {
            throw new AuthenticationFailure('Wrong credentials');
        }
    }
}