json-api-auth / controllers / Auth.php

Auth.php in JSON API Auth 2.3.0, at controllers/Auth.php

106 lines 3.9 KB

Raw Download Zip

1	<?php
2	/*
3	Controller Name: Auth
4	Controller Description: Authentication add-on controller for the Wordpress JSON API plugin
5	Controller Author: Matt Berg, Ali Qureshi
6	Controller Author Twitter: @parorrey
7	*/
8
9
10	class JSON_API_Auth_Controller {
11	public function __construct() {
12	global $json_api;
13	// allow only connection over https. because, well, you care about your passwords and sniffing.
14	// turn this sanity-check off if you feel safe inside your localhost or intranet.
15	// send an extra POST parameter: insecure=cool
16	if (empty($_SERVER['HTTPS']) \|\|
17	(isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] == 'off')) {
18	if (empty($_REQUEST['insecure']) \|\| $_REQUEST['insecure'] != 'cool') {
19	$json_api->error("I'm sorry Dave. I'm afraid I can't do that. (use _https_ please)");
20	}
21	}
22	$allowed_from_post = array('cookie', 'username', 'password', 'seconds', 'nonce');
23	foreach($allowed_from_post as $param) {
24	if (isset($_POST[$param])) {
25	$json_api->query->$param = $_POST[$param];
26	}
27	}
28	}
29	public function validate_auth_cookie() {
30	global $json_api;
31	if (!$json_api->query->cookie) {
32	$json_api->error("You must include a 'cookie' authentication cookie. Use the `create_auth_cookie` Auth API method.");
33	}
34	$valid = wp_validate_auth_cookie($json_api->query->cookie, 'logged_in') ? true : false;
35	return array(
36	"valid" => $valid
37	);
38	}
39	public function generate_auth_cookie() {
40	global $json_api;
41	if (!$json_api->query->username) {
42	$json_api->error("You must include a 'username' var in your request.");
43	}
44	if (!$json_api->query->password) {
45	$json_api->error("You must include a 'password' var in your request.");
46	}
47	if ($json_api->query->seconds) $seconds = (int) $json_api->query->seconds;
48	else $seconds = 1209600;//14 days
49	$user = wp_authenticate($json_api->query->username, $json_api->query->password);
50	if (is_wp_error($user)) {
51	$json_api->error("Invalid username and/or password.", 'error', '401');
52	remove_action('wp_login_failed', $json_api->query->username);
53	}
54	$expiration = time() + apply_filters('auth_cookie_expiration', $seconds, $user->ID, true);
55	$cookie = wp_generate_auth_cookie($user->ID, $expiration, 'logged_in');
56	preg_match('\|src="(.+?)"\|', get_avatar( $user->ID, 32 ), $avatar);
57	return array(
58	"cookie" => $cookie,
59	"cookie_name" => LOGGED_IN_COOKIE,
60	"user" => array(
61	"id" => $user->ID,
62	"username" => $user->user_login,
63	"nicename" => $user->user_nicename,
64	"email" => $user->user_email,
65	"url" => $user->user_url,
66	"registered" => $user->user_registered,
67	"displayname" => $user->display_name,
68	"firstname" => $user->user_firstname,
69	"lastname" => $user->last_name,
70	"nickname" => $user->nickname,
71	"description" => $user->user_description,
72	"capabilities" => $user->wp_capabilities,
73	"avatar" => $avatar[1]
74	),
75	);
76	}
77	public function get_currentuserinfo() {
78	global $json_api;
79	if (!$json_api->query->cookie) {
80	$json_api->error("You must include a 'cookie' var in your request. Use the `generate_auth_cookie` Auth API method.");
81	}
82	$user_id = wp_validate_auth_cookie($json_api->query->cookie, 'logged_in');
83	if (!$user_id) {
84	$json_api->error("Invalid authentication cookie. Use the `generate_auth_cookie` Auth API method.");
85	}
86	$user = get_userdata($user_id);
87	preg_match('\|src="(.+?)"\|', get_avatar( $user->ID, 32 ), $avatar);
88	return array(
89	"user" => array(
90	"id" => $user->ID,
91	"username" => $user->user_login,
92	"nicename" => $user->user_nicename,
93	"email" => $user->user_email,
94	"url" => $user->user_url,
95	"registered" => $user->user_registered,
96	"displayname" => $user->display_name,
97	"firstname" => $user->user_firstname,
98	"lastname" => $user->last_name,
99	"nickname" => $user->nickname,
100	"description" => $user->user_description,
101	"capabilities" => $user->wp_capabilities,
102	"avatar" => $avatar[1]
103	)
104	);
105	}
106	}