Subversion Repositories oidplus

Rev

Rev 461 | Go to most recent revision | Blame | Last modification | View Log | RSS feed

  1. <?php
  2.  
  3. /*
  4.  * OIDplus 2.0
  5.  * Copyright 2019 - 2021 Daniel Marschall, ViaThinkSoft
  6.  *
  7.  * Licensed under the Apache License, Version 2.0 (the "License");
  8.  * you may not use this file except in compliance with the License.
  9.  * You may obtain a copy of the License at
  10.  *
  11.  *     http://www.apache.org/licenses/LICENSE-2.0
  12.  *
  13.  * Unless required by applicable law or agreed to in writing, software
  14.  * distributed under the License is distributed on an "AS IS" BASIS,
  15.  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  16.  * See the License for the specific language governing permissions and
  17.  * limitations under the License.
  18.  */
  19.  
  20. if (!defined('INSIDE_OIDPLUS')) die();
  21.  
  22. class OIDplusAuthPluginBCrypt extends OIDplusAuthPlugin {
  23.  
  24.         public function verify(OIDplusRAAuthInfo $authInfo, $check_password) {
  25.                 $authKey = $authInfo->getAuthKey();
  26.                 $salt = $authInfo->getSalt();
  27.                 @list($s_authmethod, $s_authkey) = explode('#', $authKey, 2);
  28.  
  29.                 if ($s_authmethod == 'A3') {
  30.                         // A3#$2a$10$N9qo8uLOickgx2ZMRZoMyeIjZAgcfl7p92ldGxad68LJZdL17lhWy
  31.                         //    \__/\/ \____________________/\_____________________________/
  32.                         //     Alg Cost      Salt                        Hash
  33.                         if ($salt != '') {
  34.                                 throw new OIDplusException(_L('This function does not accept a salt'));
  35.                         }
  36.                         return password_verify($check_password, $s_authkey);
  37.                 } else {
  38.                         // Invalid auth code
  39.                         return false;
  40.                 }
  41.         }
  42.  
  43.         public function generate($password): OIDplusRAAuthInfo {
  44.                 $s_salt = ''; // BCrypt automatically generates a salt
  45.                 $calc_authkey = 'A3#'.password_hash($password, PASSWORD_BCRYPT);
  46.                 return new OIDplusRAAuthInfo($s_salt, $calc_authkey);
  47.         }
  48.  
  49. }
  50.