Annajwaszahro
/
MIF_E31222691
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

improving auth class comments.

This commit is contained in:
Taylor Otwell 2011-06-16 19:51:32 -05:00
parent f841e5d289
commit ab08987247
1 changed files with 13 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
system/auth.php
View File

@ -34,7 +34,9 @@ public static function check()
public static function user() public static function user()
{ {
// ----------------------------------------------------- // -----------------------------------------------------
// Verify that sessions are enabled. // Verify that sessions are enabled. Since the user ID
// is stored in the session, we can't authenticate
// without a session driver specified.
// ----------------------------------------------------- // -----------------------------------------------------
if (Config::get('session.driver') == '') if (Config::get('session.driver') == '')
{ {
@ -64,19 +66,18 @@ public static function login($username, $password)
{ {
$model = static::model(); $model = static::model();
// -----------------------------------------------------
// Get the user by username.
// -----------------------------------------------------
$user = $model::where(Config::get('auth.username'), '=', $username)->first(); $user = $model::where(Config::get('auth.username'), '=', $username)->first();
if ( ! is_null($user)) if ( ! is_null($user))
{ {
// ----------------------------------------------------- // -----------------------------------------------------
// Hash the password. // Hash the password. If a salt is present on the user
// record, we will recreate the hashed password using
// the salt. Otherwise, we will just use a plain hash.
// ----------------------------------------------------- // -----------------------------------------------------
$password = (isset($user->salt)) ? Hash::make($password, $user->salt)->value : sha1($password); $password = (isset($user->salt)) ? Hash::make($password, $user->salt)->value : sha1($password);
if ($user->password == $password) if ($user->password === $password)
{ {
static::$user = $user; static::$user = $user;
@ -96,7 +97,13 @@ public static function login($username, $password)
*/ */
public static function logout() public static function logout()
{ {
// -----------------------------------------------------
// By removing the user ID from the session, the user
// will no longer be considered logged in on subsequent
// requests to the application.
// -----------------------------------------------------
Session::forget(static::$key); Session::forget(static::$key);
static::$user = null; static::$user = null;
} }