77 lines
2.5 KiB
PHP
77 lines
2.5 KiB
PHP
<?php
|
|
|
|
namespace Controllers;
|
|
|
|
require '../vendor/autoload.php';
|
|
|
|
use \Slim\Http\Request as Request;
|
|
use \Slim\Http\Response as Response;
|
|
|
|
class Sessions
|
|
{
|
|
/** @var \Monolog\Logger */
|
|
private $logger;
|
|
|
|
/** @var \Slim\Container */
|
|
private $container;
|
|
|
|
public function __construct(\Slim\Container $c)
|
|
{
|
|
$this->logger = $c->logger;
|
|
$this->container = $c;
|
|
}
|
|
|
|
public function post(Request $req, Response $res, array $args)
|
|
{
|
|
$body = $req->getParsedBody();
|
|
|
|
if (!array_key_exists('username', $body) ||
|
|
!array_key_exists('password', $body)) {
|
|
return $res->withJson(['error' => 'One of the required fields is missing'], 422);
|
|
}
|
|
|
|
$userAuth = new \Operations\UserAuth($this->container);
|
|
$sessionStorage = new \Operations\Sessionstorage($this->container);
|
|
|
|
$sessionTimeout = $this->container['config']['sessionstorage']['timeout'];
|
|
|
|
try {
|
|
$userId = $userAuth->authenticate($body['username'], $body['password']);
|
|
} catch (\Exceptions\PluginNotFoundException $e) {
|
|
return $res->withJson(['error' => $e->getMessage()], 500);
|
|
}
|
|
|
|
if ($userId >= 0) {
|
|
$secret = openssl_random_pseudo_bytes(64);
|
|
$secretString = base64_encode($secret);
|
|
$secretString = rtrim(strtr($secretString, '+/', '-_'), '=');
|
|
|
|
$sessionStorage->set($secretString, $userId, $sessionTimeout);
|
|
|
|
$this->logger->info('User authenticated successfully', ['username' => $body['username']]);
|
|
return $res->withJson([
|
|
'username' => $body['username'],
|
|
'token' => $secretString
|
|
], 201);
|
|
} else {
|
|
$this->logger->info('User failed to authenticate', ['username' => $body['username'], 'ip' => $req->getAttribute('clientIp')]);
|
|
return $res->withJson(['error' => 'Username or password is invalid'], 403);
|
|
}
|
|
}
|
|
|
|
public function delete(Request $req, Response $res, array $args)
|
|
{
|
|
$sessionStorage = new \Operations\Sessionstorage($this->container);
|
|
|
|
if ($sessionStorage->exists($args['sessionId'])) {
|
|
$sessionStorage->delete($args['sessionId']);
|
|
|
|
$this->logger->info('Deleting session', ['token' => $args['sessionId']]);
|
|
return $res->withStatus(204);
|
|
} else {
|
|
$this->logger->warning('Trying to delete non existing session', ['token' => $args['sessionId']]);
|
|
return $res->withJson(['error' => 'Session not found'], 404);
|
|
}
|
|
}
|
|
}
|