87 lines
2.2 KiB
PHP
87 lines
2.2 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
namespace Kirby\Cms\Auth;
|
||
|
|
|
||
|
|
use Kirby\Cms\User;
|
||
|
|
use Kirby\Toolkit\I18n;
|
||
|
|
use Kirby\Toolkit\Str;
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Creates and verifies one-time auth codes
|
||
|
|
* that are sent via email
|
||
|
|
*
|
||
|
|
* @package Kirby Cms
|
||
|
|
* @author Lukas Bestle <lukas@getkirby.com>
|
||
|
|
* @link https://getkirby.com
|
||
|
|
* @copyright Bastian Allgeier
|
||
|
|
* @license https://getkirby.com/license
|
||
|
|
*/
|
||
|
|
class EmailChallenge extends Challenge
|
||
|
|
{
|
||
|
|
/**
|
||
|
|
* Checks whether the challenge is available
|
||
|
|
* for the passed user and purpose
|
||
|
|
*
|
||
|
|
* @param \Kirby\Cms\User $user User the code will be generated for
|
||
|
|
* @param 'login'|'password-reset'|'2fa' $mode Purpose of the code
|
||
|
|
*/
|
||
|
|
public static function isAvailable(User $user, string $mode): bool
|
||
|
|
{
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Generates a random one-time auth code and returns that code
|
||
|
|
* for later verification
|
||
|
|
*
|
||
|
|
* @param \Kirby\Cms\User $user User to generate the code for
|
||
|
|
* @param array $options Details of the challenge request:
|
||
|
|
* - 'mode': Purpose of the code ('login', 'password-reset' or '2fa')
|
||
|
|
* - 'timeout': Number of seconds the code will be valid for
|
||
|
|
* @return string The generated and sent code
|
||
|
|
*/
|
||
|
|
public static function create(User $user, array $options): string
|
||
|
|
{
|
||
|
|
$code = Str::random(6, 'num');
|
||
|
|
|
||
|
|
// insert a space in the middle for easier readability
|
||
|
|
$formatted = substr($code, 0, 3) . ' ' . substr($code, 3, 3);
|
||
|
|
|
||
|
|
// use the login templates for 2FA
|
||
|
|
$mode = match($options['mode']) {
|
||
|
|
'2fa' => 'login',
|
||
|
|
default => $options['mode']
|
||
|
|
};
|
||
|
|
|
||
|
|
$kirby = $user->kirby();
|
||
|
|
$from = $kirby->option(
|
||
|
|
'auth.challenge.email.from',
|
||
|
|
'noreply@' . $kirby->url('index', true)->host()
|
||
|
|
);
|
||
|
|
$name = $kirby->option(
|
||
|
|
'auth.challenge.email.fromName',
|
||
|
|
$kirby->site()->title()
|
||
|
|
);
|
||
|
|
$subject = $kirby->option(
|
||
|
|
'auth.challenge.email.subject',
|
||
|
|
I18n::translate('login.email.' . $mode . '.subject', null, $user->language())
|
||
|
|
);
|
||
|
|
|
||
|
|
$kirby->email([
|
||
|
|
'from' => $from,
|
||
|
|
'fromName' => $name,
|
||
|
|
'to' => $user,
|
||
|
|
'subject' => $subject,
|
||
|
|
'template' => 'auth/' . $mode,
|
||
|
|
'data' => [
|
||
|
|
'user' => $user,
|
||
|
|
'site' => $kirby->system()->title(),
|
||
|
|
'code' => $formatted,
|
||
|
|
'timeout' => round($options['timeout'] / 60)
|
||
|
|
]
|
||
|
|
]);
|
||
|
|
|
||
|
|
return $code;
|
||
|
|
}
|
||
|
|
}
|