Proyectos de Subversion LeadersLinked - Services

<?php

declare(strict_types = 1);

namespace LeadersLinked\Authentication;

use Laminas\Authentication\Adapter\AdapterInterface as AuthAdapterInterface;

use Laminas\Authentication\Result;

use Laminas\Db\Adapter\AdapterInterface;

use Laminas\Log\LoggerInterface;

use LeadersLinked\Model\User;

use LeadersLinked\Mapper\UserMapper;

use LeadersLinked\Library\Functions;

use LeadersLinked\Mapper\DeviceMapper;

use LeadersLinked\Mapper\DeviceHistoryMapper;

use LeadersLinked\Model\DeviceHistory;

use LeadersLinked\Model\UserType;

use LeadersLinked\Mapper\CompanyMapper;

use LeadersLinked\Model\Company;

use LeadersLinked\Mapper\CompanyUserMapper;

use LeadersLinked\Model\CompanyUser;

class AuthImpersonateAdapter implements AuthAdapterInterface

{

    /**

     *

     * @var AdapterInterface

     */

    private $adapter;

    /**

     *

     * @var array

     */

    private $config;

    /**

     *

     * @var string

     */

    private $user_uuid;

    /**

     *

     * @var string

     */

    private $password;

    /**

     *

     * @var string

     */

    private $timestamp;

    /**

     *

     * @var int

     */

    private $rand;

    /**

     *

     * @var string

     */

    private $company_uuid;

    /**

     *

     * @var int

     */

    private $usertype_id;

    /**

     *

     * @param AdapterInterface $adapter

     * @param array $config

     */

    public function __construct(AdapterInterface $adapter, $config)

    {

        $this->adapter = $adapter;

        $this->config = $config;

    }

    /**

     *

     * @param string $user_uuid

     * @param string $token

     * @param string $timestamp

     * @param int $rand

     */

    public function setDataAdmin($user_uuid, $password, $timestamp, $rand)

    {

        $this->user_uuid = $user_uuid;

        $this->password = $password;

        $this->timestamp = $timestamp;

        $this->rand = $rand;

        $this->usertype_id = UserType::ADMIN;

    }

    /**

     *

     * @param string $user_uuid

     * @param string $token

     * @param string $timestamp

     * @param int $rand

     * @param

     *            string company_uuid

     */

    public function setDataCompany($user_uuid, $password, $timestamp, $rand, $company_uuid)

    {

        $this->user_uuid = $user_uuid;

        $this->password = $password;

        $this->timestamp = $timestamp;

        $this->rand = $rand;

        $this->usertype_id = UserType::COMPANY;

        $this->company_uuid = $company_uuid;

    }

    /**

     *

     * {@inheritdoc}

     * @see \Laminas\Authentication\Adapter\AdapterInterface::authenticate()

     */

    public function authenticate()

    {

        $userMapper = UserMapper::getInstance($this->adapter);

        $user = $userMapper->fetchOneByUuid($this->user_uuid);

        if (! $user) {

            return new Result(Result::FAILURE_UNCATEGORIZED, null, [

                'ERROR_USER_NOT_FOUND'

            ]);

        }

        if (User::BLOCKED_YES == $user->blocked) {

            return new Result(Result::FAILURE_UNCATEGORIZED, null, [

                'ERROR_USER_IS_BLOCKED'

            ]);

        }

        if (User::STATUS_INACTIVE == $user->status) {

            return new Result(Result::FAILURE_UNCATEGORIZED, null, [

                'ERROR_USER_IS_INACTIVE'

            ]);

        }

        if ($user->is_super_user == User::IS_SUPER_USER_NO) {

            return new Result(Result::FAILURE_UNCATEGORIZED, null, [

                'ERROR_CANNOT_IMPERSONATE_YOU_ARE_NOT_SUPER_ADMIN'

            ]);

        }

        $dt = \DateTimeImmutable::createFromFormat('Y-m-d\TH:i:s', gmdate('Y-m-d\TH:i:s'));

        $t1 = $dt->sub(new \DateInterval('PT5M'));

        $t1 = $t1->getTimestamp();

        $t2 = $dt->add(new \DateInterval('PT5M'));

        $t2 = $t2->getTimestamp();

        if ($this->timestamp < $t1 || $this->timestamp > $t2) {

            return new Result(Result::FAILURE_UNCATEGORIZED, null, [

                'ERROR_WEBSERVICE_TIMESTAMP'

            ]);

        }

        $sandbox = $this->config['leaderslinked.runmode.sandbox'];

        if ($sandbox) {

            $salt = $this->config['leaderslinked.backend.sandbox_salt'];

        } else {

            $salt = $this->config['leaderslinked.backend.production_salt'];

        }

        $passworVerification = md5($user->one_time_password . '-' . $this->rand . '-' . $this->timestamp . '-' . $salt);

        if ($this->password != $passworVerification) {

            return new Result(Result::FAILURE_UNCATEGORIZED, null, [

                'ERROR_WEBSERVICE_PASSWORD'

            ]);

        } else {

            $userMapper->update($user);

        }

        $data = [

            'user_id' => $user->id

        ];

        return new Result(Result::SUCCESS, $data, []);

    }

}