1: <?php
 2: /**
 3:  * PHP 5
 4:  *
 5:  * CakePHP(tm) : Rapid Development Framework (http://cakephp.org)
 6:  * Copyright 2005-2012, Cake Software Foundation, Inc. (http://cakefoundation.org)
 7:  *
 8:  * Licensed under The MIT License
 9:  * Redistributions of files must retain the above copyright notice.
10:  *
11:  * @copyright     Copyright 2005-2012, Cake Software Foundation, Inc. (http://cakefoundation.org)
12:  * @link          http://cakephp.org CakePHP(tm) Project
13:  * @license       MIT License (http://www.opensource.org/licenses/mit-license.php)
14:  */
15: 
16: App::uses('BaseAuthenticate', 'Controller/Component/Auth');
17: 
18: /**
19:  * An authentication adapter for AuthComponent.  Provides the ability to authenticate using POST
20:  * data.  Can be used by configuring AuthComponent to use it via the AuthComponent::$authenticate setting.
21:  *
22:  * {{{
23:  *  $this->Auth->authenticate = array(
24:  *      'Form' => array(
25:  *          'scope' => array('User.active' => 1)
26:  *      )
27:  *  )
28:  * }}}
29:  *
30:  * When configuring FormAuthenticate you can pass in settings to which fields, model and additional conditions
31:  * are used. See FormAuthenticate::$settings for more information.
32:  *
33:  * @package       Cake.Controller.Component.Auth
34:  * @since 2.0
35:  * @see AuthComponent::$authenticate
36:  */
37: class FormAuthenticate extends BaseAuthenticate {
38: 
39: /**
40:  * Authenticates the identity contained in a request.  Will use the `settings.userModel`, and `settings.fields`
41:  * to find POST data that is used to find a matching record in the `settings.userModel`.  Will return false if
42:  * there is no post data, either username or password is missing, of if the scope conditions have not been met.
43:  *
44:  * @param CakeRequest $request The request that contains login information.
45:  * @param CakeResponse $response Unused response object.
46:  * @return mixed.  False on login failure.  An array of User data on success.
47:  */
48:     public function authenticate(CakeRequest $request, CakeResponse $response) {
49:         $userModel = $this->settings['userModel'];
50:         list($plugin, $model) = pluginSplit($userModel);
51: 
52:         $fields = $this->settings['fields'];
53:         if (empty($request->data[$model])) {
54:             return false;
55:         }
56:         if (
57:             empty($request->data[$model][$fields['username']]) ||
58:             empty($request->data[$model][$fields['password']])
59:         ) {
60:             return false;
61:         }
62:         return $this->_findUser(
63:             $request->data[$model][$fields['username']],
64:             $request->data[$model][$fields['password']]
65:         );
66:     }
67: 
68: }
69: