/**

* User object

*

* @var unknown_type

*/

var $u;

/**

* Array of permission roles that users can have

*

* @var array

*/

var $roles;

var $status_msg;

/**

* Login credentials

*

* @var array

*/

var $credentials = array();

/**

* Status of Authentication

*

* @var boolean

*/

var $auth_status = false;

var $_is_user = false;

var $_priviledge_level;

var $_is_priviledged = false;

var $params;

var $check_for_credentials = false;

/**

* Auth class Singleton

*

* @return object

*/

public static function &get_instance($plugin = '') {

static $auth;

if (!$auth) {

$auth = new owa_auth();

}

return $auth;

}

/**

* Class Constructor

*

* @return owa_auth

*/

function __construct() {

// register auth cookies

owa_coreAPI::registerStateStore('u', time()+3600*24*365*10, '', '', 'cookie');

owa_coreAPI::registerStateStore('p', time()+3600*2, '', '', 'cookie');

parent::__construct();

$this->eq = owa_coreAPI::getEventDispatch();

}

/**

* Used by controllers to check if the user exists and if they are priviledged.

*

* @param string $necessary_role

*/

function authenticateUser() {

// check existing auth status first in case someone else took care of this already.

if (owa_coreAPI::getCurrentUser()->isAuthenticated()) {

$ret = true;

} elseif (owa_coreAPI::getRequestParam('apiKey')) {

// auth user by api key

$ret = $this->authByApiKey(owa_coreAPI::getRequestParam('apiKey'));

} elseif (owa_coreAPI::getRequestParam('pk') && owa_coreAPI::getStateParam('u')) {

// auth user by temporary passkey. used in forgot password situations

$ret = $this->authenticateUserByUrlPasskey(owa_coreAPI::getRequestParam('pk'));

} elseif (owa_coreAPI::getRequestParam('user_id') && owa_coreAPI::getRequestParam('password')) {

// auth user by login form input

$ret = $this->authByInput(owa_coreAPI::getRequestParam('user_id'), owa_coreAPI::getRequestParam('password'));

} elseif (owa_coreAPI::getStateParam('u') && owa_coreAPI::getStateParam('p')) {

// auth user by cookies

$ret = $this->authByCookies(owa_coreAPI::getStateParam('u'), owa_coreAPI::getStateParam('p'));

// bump expiration time

//owa_coreAPI::setState('p', '', owa_coreAPI::getStateParam('p'));

} else {

$ret = false;

owa_coreAPI::debug("Could not find any credentials to authenticate with.");

}

// filter results for modules can add their own auth logic.

$ret = $this->eq->filter('auth_status', $ret);

return array('auth_status' => $ret);

}

function authByApiKey($key) {

// fetch user object from the db

$this->u = owa_coreAPI::entityFactory('base.user');

$this->u->load($key, 'api_key');

if ($this->u->get('user_id')) {

// get current user

$cu = &owa_coreAPI::getCurrentUser();

// set as new current user in service layer

$cu->loadNewUserByObject($this->u);

$cu->setAuthStatus(true);

$this->_is_user = true;

return true;

} else {

return false;

}

}

function authByCookies($user_id, $password) {

// set credentials

$this->credentials['user_id'] = $user_id;

$this->credentials['password'] = $password;

// lookup user if not already done.

if ($this->_is_user == false) {

// check to see if the current user has already been authenticated by something upstream

$cu = &owa_coreAPI::getCurrentUser();

if (!$cu->isAuthenticated()) {

// check to see if they are a user.

return $this->isUser();

}

} else {

return true;

}

}

function authByInput($user_id, $password) {

// set credentials

$this->credentials['user_id'] = $user_id;

// must encrypt password to see if it matches whats in the db

$this->credentials['password'] = $this->encryptPassword($password);

//owa_coreAPI::debug(print_r($this->credentials, true));

$ret = $this->isUser();

if ($ret === true) {

$this->saveCredentials();

}

return $ret;

}

/**

* Looks up user by temporary Passkey Column in db

*

* @param unknown_type $key

* @return unknown

*/

function authenticateUserTempPasskey($key) {

$this->u = owa_coreAPI::entityFactory('base.user');

$this->u->getByColumn('temp_passkey', $key);

$id = $this->u->get('id');

if (!empty($id)):

return true;

else:

return false;

endif;

}

/**

* Authenticates user by a passkey

*

* @param unknown_type $key

* @return unknown

*/

function authenticateUserByUrlPasskey($user_id, $passkey) {

// set credentials

$this->credentials['user_id'] = $user_id;

$this->credentials['passkey'] = $passkey;

// fetch user obj

$this->getUser();

// generate a new passkey from its components in the db

$key = $this->generateUrlPasskey($this->u->get('user_id'), $this->u->get('password'));

// see if it matches the key on the url

if ($key == $passkey):

return true;

else:

return false;

endif;

}

/**

* Sets a temporary Passkey for a user

*

* @param string $email_address

* @return boolean

*/

function setTempPasskey($email_address) {

$this->u = owa_coreAPI::entityFactory('base.user');

$this->u->getByColumn('email_address', $email_address);

$id = $u->get('id');

if (!empty($id)):

$this->eq->log(array('email_address' => $this->u->email_address), 'user.set_temp_passkey');

return true;

else:

return false;

endif;

}

function generateTempPasskey($seed) {

return md5($seed.time().rand());

}

function generateUrlPasskey($user_name, $password) {

return md5($user_name . $password);

}

/**

* Sets the initial Passkey for a new user

*

* @param string $user_id

* @return boolean

* @deprecated

*/

function setInitialPasskey($user_id) {

return $this->eq->log(array('user_id' => $user_id), 'user.set_initial_passkey');

}

/**

* Saves login credentails to persistant browser cookies

* TODO: refactor to use state facility

*/

function saveCredentials() {

$this->e->debug('saving user credentials to cookies');

setcookie($this->config['ns'].'u', $this->u->get('user_id'), time()+3600*24*365*10, '/', $this->config['cookie_domain']);

setcookie($this->config['ns'].'p', $this->u->get('password'), time()+3600*24*30, '/', $this->config['cookie_domain']);

}

/**

* Removes credentials

* @return boolean

*/

function deleteCredentials() {

return owa_coreAPI::clearState('p');

}

/**

* Simple Password Encryption Scheme

*

* @param string $password

* @return string

*/

function encryptPassword($password) {

return owa_lib::encryptPassword($password);

}

function getUser() {

// fetch user object from the db

$this->u = owa_coreAPI::entityFactory('base.user');

$this->u->getByColumn('user_id', $this->credentials['user_id']);

}

/**

* Checks to see if the user credentials match a real user object in the DB

*

* @return boolean

*/

function isUser() {

// get current user

$cu = &owa_coreAPI::getCurrentUser();

// fetches user object from DB

$this->getUser();

if ($this->credentials['user_id'] === $this->u->get('user_id')):

if ($this->credentials['password'] === $this->u->get('password')):

$this->_is_user = true;

// set as new current user in service layer

$cu->loadNewUserByObject($this->u);

$cu->setAuthStatus(true);

return true;

else:

$this->_is_user = false;

return false;

endif;

else:

$this->_is_user = false;

return false;

endif;

}