AjaxLoginHandler.php

Go to the documentation of this file.

<?php
namespace TYPO3\CMS\Backend;

class AjaxLoginHandler {

    public function login(array $parameters, \TYPO3\CMS\Core\Http\AjaxRequestHandler $ajaxObj) {
        if ($this->isAuthorizedBackendSession()) {
            $json = array('success' => TRUE);
            if ($this->hasLoginBeenProcessed()) {
                $formProtection = \TYPO3\CMS\Core\FormProtection\FormProtectionFactory::get();
                $formProtection->setSessionTokenFromRegistry();
                $formProtection->persistSessionToken();
            }
        } else {
            $json = array('success' => FALSE);
        }
        $ajaxObj->addContent('login', $json);
        $ajaxObj->setContentFormat('json');
    }

    protected function isAuthorizedBackendSession() {
        return isset($GLOBALS['BE_USER']) && $GLOBALS['BE_USER'] instanceof \TYPO3\CMS\Core\Authentication\BackendUserAuthentication && isset($GLOBALS['BE_USER']->user['uid']);
    }

    protected function hasLoginBeenProcessed() {
        $loginFormData = $GLOBALS['BE_USER']->getLoginFormData();
        return $loginFormData['status'] === 'login' && !empty($loginFormData['uname']) && !empty($loginFormData['uident']);
    }

    public function logout(array $parameters, \TYPO3\CMS\Core\Http\AjaxRequestHandler $ajaxObj) {
        $GLOBALS['BE_USER']->logoff();
        if (isset($GLOBALS['BE_USER']->user['uid'])) {
            $ajaxObj->addContent('logout', array('success' => FALSE));
        } else {
            $ajaxObj->addContent('logout', array('success' => TRUE));
        }
        $ajaxObj->setContentFormat('json');
    }

    public function refreshLogin(array $parameters, \TYPO3\CMS\Core\Http\AjaxRequestHandler $ajaxObj) {
        $GLOBALS['BE_USER']->checkAuthentication();
        $ajaxObj->addContent('refresh', array('success' => TRUE));
        $ajaxObj->setContentFormat('json');
    }

    public function isTimedOut(array $parameters, \TYPO3\CMS\Core\Http\AjaxRequestHandler $ajaxObj) {
        if (is_object($GLOBALS['BE_USER'])) {
            $ajaxObj->setContentFormat('json');
            if (@is_file((PATH_typo3conf . 'LOCK_BACKEND'))) {
                $ajaxObj->addContent('login', array('will_time_out' => FALSE, 'locked' => TRUE));
                $ajaxObj->setContentFormat('json');
            } elseif (!isset($GLOBALS['BE_USER']->user['uid'])) {
                $ajaxObj->addContent('login', array('timed_out' => TRUE));
            } else {
                $GLOBALS['BE_USER']->fetchUserSession(TRUE);
                $ses_tstamp = $GLOBALS['BE_USER']->user['ses_tstamp'];
                $timeout = $GLOBALS['BE_USER']->auth_timeout_field;
                // If 120 seconds from now is later than the session timeout, we need to show the refresh dialog.
                // 120 is somewhat arbitrary to allow for a little room during the countdown and load times, etc.
                if ($GLOBALS['EXEC_TIME'] >= $ses_tstamp + $timeout - 120) {
                    $ajaxObj->addContent('login', array('will_time_out' => TRUE));
                } else {
                    $ajaxObj->addContent('login', array('will_time_out' => FALSE));
                }
            }
        } else {
            $ajaxObj->addContent('login', array('success' => FALSE, 'error' => 'No BE_USER object'));
        }
    }

    public function getChallenge(array $parameters, \TYPO3\CMS\Core\Http\AjaxRequestHandler $parent) {
        session_start();
        $_SESSION['login_challenge'] = md5(uniqid('', TRUE) . getmypid());
        session_commit();
        $parent->addContent('challenge', $_SESSION['login_challenge']);
        $parent->setContentFormat('json');
    }

}