archive/httpcb
Archived
1
0
Fork 0
Code Releases Activity

app/library/Auth.php: adding impersonate() and impersonateClear() methods

Browse source
This commit is contained in:
Henrik Hautakoski 2023-04-30 17:34:59 +02:00
parent 6439a83edb
commit 69fd7a6e19
1 changed files with 35 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

36
app/library/Auth.php
View file

@ -10,6 +10,7 @@ use App\Model\Data\User,
class Auth extends Injectable class Auth extends Injectable
{ {
const SESSION_KEY = 'auth'; const SESSION_KEY = 'auth';
const IMPERSONATEOR_ID = 'auth.impersonateor';
/** /**
* Login using email/user + password combination. * Login using email/user + password combination.
@ -86,6 +87,34 @@ class Auth extends Injectable
$this->eventsManager->fire('auth:onLogin', $this, 'System'); $this->eventsManager->fire('auth:onLogin', $this, 'System');
} }
/**
* Impersonate a user
*
* @param User $user
*/
public function impersonate(User $user)
{
$current = $this->getIdentity();
if ($current === null) {
throw new \InvalidArgumentException("Need to be authenticated to be able to impersonate someone");
}
if ($current->getId() === $user->getId()) {
// Same user
throw new \DomainException("Can't impersonate yourself");
}
$this->session->set(self::IMPERSONATEOR_ID, $current->getId());
$this->setIdentity($user->getId());
$this->eventsManager->fire('auth:onImpersonate', $this, $current);
}
public function impersonateClear($imp_id)
{
$this->session->remove(self::IMPERSONATEOR_ID);
$this->session->set(self::SESSION_KEY, $imp_id);
}
/** /**
* @param $identity * @param $identity
* @return Auth * @return Auth
@ -135,7 +164,12 @@ class Auth extends Injectable
*/ */
public function clearIdentity() public function clearIdentity()
{ {
$this->session->remove(self::SESSION_KEY); $imp_id = $this->session->get(self::IMPERSONATEOR_ID);
if ($imp_id !== null) {
$this->impersonateClear($imp_id);
} else {
$this->session->remove(self::SESSION_KEY);
}
return $this; return $this;
} }
} }