SaltFactory.php

Go to the documentation of this file.

<?php
namespace TYPO3\CMS\Saltedpasswords\Salt;

/*
 * This file is part of the TYPO3 CMS project.
 *
 * It is free software; you can redistribute it and/or modify it under
 * the terms of the GNU General Public License, either version 2
 * of the License, or any later version.
 *
 * For the full copyright and license information, please read the
 * LICENSE.txt file that was distributed with this source code.
 *
 * The TYPO3 project - inspiring people to share!
 */

class SaltFactory
{
    protected static $instance = null;

    public static function getRegisteredSaltedHashingMethods()
    {
        $saltMethods = static::getDefaultSaltMethods();
        if (isset($GLOBALS['TYPO3_CONF_VARS']['SC_OPTIONS']['ext/saltedpasswords']['saltMethods'])) {
            $configuredMethods = (array)$GLOBALS['TYPO3_CONF_VARS']['SC_OPTIONS']['ext/saltedpasswords']['saltMethods'];
            if (!empty($configuredMethods)) {
                if (isset($configuredMethods[0])) {
                    // ensure the key of the array is not numeric, but a class name
                    foreach ($configuredMethods as $method) {
                        $saltMethods[$method] = $method;
                    }
                } else {
                    $saltMethods = array_merge($saltMethods, $configuredMethods);
                }
            }
        }
        return $saltMethods;
    }

    protected static function getDefaultSaltMethods()
    {
        return [
            \TYPO3\CMS\Saltedpasswords\Salt\Md5Salt::class => \TYPO3\CMS\Saltedpasswords\Salt\Md5Salt::class,
            \TYPO3\CMS\Saltedpasswords\Salt\BlowfishSalt::class => \TYPO3\CMS\Saltedpasswords\Salt\BlowfishSalt::class,
            \TYPO3\CMS\Saltedpasswords\Salt\PhpassSalt::class => \TYPO3\CMS\Saltedpasswords\Salt\PhpassSalt::class
        ];
    }

    public static function getSaltingInstance($saltedHash = '', $mode = TYPO3_MODE)
    {
        // Creating new instance when
        // * no instance existing
        // * a salted hash given to determine salted hashing method from
        // * a NULL parameter given to reset instance back to default method
        if (!is_object(self::$instance) || !empty($saltedHash) || $saltedHash === null) {
            // Determine method by checking the given hash
            if (!empty($saltedHash)) {
                $result = self::determineSaltingHashingMethod($saltedHash, $mode);
                if (!$result) {
                    self::$instance = null;
                }
            } else {
                $classNameToUse = \TYPO3\CMS\Saltedpasswords\Utility\SaltedPasswordsUtility::getDefaultSaltingHashingMethod($mode);
                $availableClasses = static::getRegisteredSaltedHashingMethods();
                self::$instance = \TYPO3\CMS\Core\Utility\GeneralUtility::getUserObj($availableClasses[$classNameToUse]);
            }
        }
        return self::$instance;
    }

    public static function determineSaltingHashingMethod($saltedHash, $mode = TYPO3_MODE)
    {
        $registeredMethods = static::getRegisteredSaltedHashingMethods();
        $defaultClassName = \TYPO3\CMS\Saltedpasswords\Utility\SaltedPasswordsUtility::getDefaultSaltingHashingMethod($mode);
        $defaultReference = $registeredMethods[$defaultClassName];
        unset($registeredMethods[$defaultClassName]);
        // place the default method first in the order
        $registeredMethods = [$defaultClassName => $defaultReference] + $registeredMethods;
        $methodFound = false;
        foreach ($registeredMethods as $method) {
            $objectInstance = \TYPO3\CMS\Core\Utility\GeneralUtility::getUserObj($method);
            if ($objectInstance instanceof SaltInterface) {
                $methodFound = $objectInstance->isValidSaltedPW($saltedHash);
                if ($methodFound) {
                    self::$instance = $objectInstance;
                    break;
                }
            }
        }
        return $methodFound;
    }

    public static function setPreferredHashingMethod($resource)
    {
        self::$instance = null;
        $objectInstance = \TYPO3\CMS\Core\Utility\GeneralUtility::getUserObj($resource);
        if (is_object($objectInstance) && is_subclass_of($objectInstance, \TYPO3\CMS\Saltedpasswords\Salt\AbstractSalt::class)) {
            self::$instance = $objectInstance;
        }
        return self::$instance;
    }
}