mirror of
				https://github.com/BookStackApp/BookStack.git
				synced 2025-11-03 02:13:16 +03:00 
			
		
		
		
	- Removed LDAP specific logic from login controller, placed in Guard. - Created safer base user provider for ldap login, to be used for SAML soon. - Moved LDAP auth work from user provider to guard.
		
			
				
	
	
		
			102 lines
		
	
	
		
			2.4 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
			
		
		
	
	
			102 lines
		
	
	
		
			2.4 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
<?php
 | 
						|
 | 
						|
namespace BookStack\Auth\Access;
 | 
						|
 | 
						|
use Illuminate\Contracts\Auth\Authenticatable;
 | 
						|
use Illuminate\Contracts\Auth\UserProvider;
 | 
						|
 | 
						|
class ExternalBaseUserProvider implements UserProvider
 | 
						|
{
 | 
						|
 | 
						|
    /**
 | 
						|
     * The user model.
 | 
						|
     *
 | 
						|
     * @var string
 | 
						|
     */
 | 
						|
    protected $model;
 | 
						|
 | 
						|
    /**
 | 
						|
     * LdapUserProvider constructor.
 | 
						|
     * @param             $model
 | 
						|
     */
 | 
						|
    public function __construct(string $model)
 | 
						|
    {
 | 
						|
        $this->model = $model;
 | 
						|
    }
 | 
						|
 | 
						|
    /**
 | 
						|
     * Create a new instance of the model.
 | 
						|
     *
 | 
						|
     * @return \Illuminate\Database\Eloquent\Model
 | 
						|
     */
 | 
						|
    public function createModel()
 | 
						|
    {
 | 
						|
        $class = '\\' . ltrim($this->model, '\\');
 | 
						|
        return new $class;
 | 
						|
    }
 | 
						|
 | 
						|
    /**
 | 
						|
     * Retrieve a user by their unique identifier.
 | 
						|
     *
 | 
						|
     * @param  mixed $identifier
 | 
						|
     * @return \Illuminate\Contracts\Auth\Authenticatable|null
 | 
						|
     */
 | 
						|
    public function retrieveById($identifier)
 | 
						|
    {
 | 
						|
        return $this->createModel()->newQuery()->find($identifier);
 | 
						|
    }
 | 
						|
 | 
						|
    /**
 | 
						|
     * Retrieve a user by their unique identifier and "remember me" token.
 | 
						|
     *
 | 
						|
     * @param  mixed  $identifier
 | 
						|
     * @param  string $token
 | 
						|
     * @return \Illuminate\Contracts\Auth\Authenticatable|null
 | 
						|
     */
 | 
						|
    public function retrieveByToken($identifier, $token)
 | 
						|
    {
 | 
						|
        return null;
 | 
						|
    }
 | 
						|
 | 
						|
 | 
						|
    /**
 | 
						|
     * Update the "remember me" token for the given user in storage.
 | 
						|
     *
 | 
						|
     * @param  \Illuminate\Contracts\Auth\Authenticatable $user
 | 
						|
     * @param  string                                     $token
 | 
						|
     * @return void
 | 
						|
     */
 | 
						|
    public function updateRememberToken(Authenticatable $user, $token)
 | 
						|
    {
 | 
						|
        //
 | 
						|
    }
 | 
						|
 | 
						|
    /**
 | 
						|
     * Retrieve a user by the given credentials.
 | 
						|
     *
 | 
						|
     * @param  array $credentials
 | 
						|
     * @return \Illuminate\Contracts\Auth\Authenticatable|null
 | 
						|
     */
 | 
						|
    public function retrieveByCredentials(array $credentials)
 | 
						|
    {
 | 
						|
        // Search current user base by looking up a uid
 | 
						|
        $model = $this->createModel();
 | 
						|
        return $model->newQuery()
 | 
						|
            ->where('external_auth_id', $credentials['external_auth_id'])
 | 
						|
            ->first();
 | 
						|
    }
 | 
						|
 | 
						|
    /**
 | 
						|
     * Validate a user against the given credentials.
 | 
						|
     *
 | 
						|
     * @param  \Illuminate\Contracts\Auth\Authenticatable $user
 | 
						|
     * @param  array                                      $credentials
 | 
						|
     * @return bool
 | 
						|
     */
 | 
						|
    public function validateCredentials(Authenticatable $user, array $credentials)
 | 
						|
    {
 | 
						|
        // Should be done in the guard.
 | 
						|
        return false;
 | 
						|
    }
 | 
						|
}
 |