* public function _getMethodRoles($methodName){ * if($methodName == 'adminMethod'){ * return array('admin'); * }else{ * return null; * } * } * * * * To authenticate a user, the plugin looks for a 'login' method. This method can either be called * explicitly, or by setting a header with the name 'Credentials', containing {userid: userid, password: password}, as defined by the AS2 * NetConnection.setCredentials method. It is considered good practise to have a 'logout' method, though this is optional * The login method returns a role in a 'string'. It takes 2 parameters, the user id and the password. * The logout method should call AmfphpAuthentication::clearSessionInfo(); * * See the AuthenticationService class in the test data for an example of an implementation. * * Roles are stored in an associative array in $_SESSION[self::SESSION_FIELD_ROLES], using the role as key for easy access * * @link https://github.com/silexlabs/amfphp-2.0/blob/master/Tests/TestData/Services/AuthenticationService.php * @package Amfphp_Plugins_Authentication * @author Ariel Sommeria-klein */ class AmfphpAuthentication { /** * the field in the session where the roles array is stored */ const SESSION_FIELD_ROLES = 'amfphp_roles'; /** * the name of the method on the service where the method roles are given */ const METHOD_GET_METHOD_ROLES = '_getMethodRoles'; /** * the name of the login method */ const METHOD_LOGIN = 'login'; /** * the user id passed in the credentials header * @var String */ public $headerUserId; /** * the password passed in the credentials header * @var String */ protected $headerPassword; /** * constructor. * @param array $config optional key/value pairs in an associative array. Used to override default configuration values. */ public function __construct(array $config = null) { $filterManager = Amfphp_Core_FilterManager::getInstance(); $filterManager->addFilter(Amfphp_Core_Common_ServiceRouter::FILTER_SERVICE_OBJECT, $this, 'filterServiceObject'); $filterManager->addFilter(Amfphp_Core_Amf_Handler::FILTER_AMF_REQUEST_HEADER_HANDLER, $this, 'filterAmfRequestHeaderHandler'); $this->headerUserId = null; $this->headerPassword = null; } /** * filter amf request header handler * @param Object $handler * @param Amfphp_Core_Amf_Header $header the request header * @return AmfphpAuthentication */ public function filterAmfRequestHeaderHandler($handler, Amfphp_Core_Amf_Header $header) { if ($header->name == Amfphp_Core_Amf_Constants::CREDENTIALS_HEADER_NAME) { return $this; } } /** * called when the service object is created, just before the method call. * Tries to authenticate if a credentials header was sent in the packet. * Throws an exception if the roles don't match * * @param