Initial commit of Session/Authentication code

Plugin architecture with single Database-backed implementation.

source/lib/SihnonFramework/Auth/IFinelyPermissionable.class.php

@@ -0,0 +1,9 @@
+<?php
+
+interface SihnonFramework_Auth_IFinelyPermissionable extends Sihnon_Auth_IPermissionable {
+    
+    public function hasPermission(Sihnon_Auth_IUser $user, $permission);
+    
+}
+
+?>

source/lib/SihnonFramework/Auth/IPermissionable.class.php

@@ -0,0 +1,9 @@
+<?php
+
+interface SihnonFramework_Auth_IPermissionable {
+    
+    public function isAdministrator(Sihnon_Auth_IUser $user);
+    
+}
+
+?>

source/lib/SihnonFramework/Auth/IPlugin.class.php

@@ -0,0 +1,23 @@
+<?php
+
+interface SihnonFramework_Auth_IPlugin extends Sihnon_IPlugin {
+    
+    /**
+     * Creates a new instance of the Auth Plugin
+     * 
+     * @param SihnonFramework_Config $config Config option to retrieve plugin configuration
+     * @return SihnonFramework_Auth_IPlugin
+     */
+    public static function create(SihnonFramework_Config $config);
+    
+    public function userExists($username);
+    
+    public function listUsers();
+    
+    public function authenticate($username, $password);
+    
+    public function authenticateSession($username);
+    
+}
+
+?>

source/lib/SihnonFramework/Auth/IUpdateable.class.php

@@ -0,0 +1,13 @@
+<?php
+
+interface SihnonFramework_Auth_IUpdateable {
+
+    public function addUser($username, $password);
+    
+    public function removeUser(Sihnon_Auth_IUser $user);
+    
+    public function changePassword(Sihnon_Auth_IUser $user, $new_password);
+    
+}
+
+?>

source/lib/SihnonFramework/Auth/IUser.class.php

@@ -0,0 +1,11 @@
+<?php
+
+interface SihnonFramework_Auth_IUser {
+    
+    public function username();
+    
+    public function checkPassword($password);
+    
+}
+
+?>

source/lib/SihnonFramework/Auth/Plugin/Database.class.php

@@ -0,0 +1,83 @@
+<?php
+
+class SihnonFramework_Auth_Plugin_Database
+    extends    Sihnon_PluginBase 
+    implements Sihnon_Auth_IPlugin, 
+               Sihnon_Auth_IUpdateable, 
+               Sihnon_Auth_IFinelyPermissionable {
+
+    protected $config;
+    protected $database;
+    
+    protected function __construct($config) {
+        $this->config = $config;
+        $this->database = SihnonFramework_Main::instance()->database();
+    }
+    
+    /*
+     * IPlugin methods 
+     */
+    
+    public static function create(SihnonFramework_Config $config) {
+        return new self($config);
+    }
+    
+    public function userExists($username) {
+        return Sihnon_Auth_Plugin_Database_User::exists($username);
+    }
+    
+    public function listUsers() {
+        return Sihnon_Auth_Plugin_Database_User::all();
+    }
+    
+    public function authenticate($username, $password) {
+        $user = Sihnon_Auth_Plugin_Database_User::from('username', $username);
+        
+        if ( ! $user->checkPassword($password)) {
+            throw new Sihnon_Exception_IncorrectPassword();
+        }
+        
+        return $user;
+    }
+    
+    public function authenticateSession($username) {
+        return Sihnon_Auth_Plugin_Database_User::from('username', $username);
+    }
+    
+    /*
+     * IUpdateable methods
+     */
+    
+    public function addUser($username, $password) {
+        return Sihnon_Auth_Plugin_Database_User::add($username, $password);
+    }
+    
+    public function removeUser(Sihnon_Auth_IUser $user) {
+        $user->delete();
+    }
+    
+    public function changePassword(Sihnon_Auth_IUser $user, $new_password) {
+        $user->changePassword($new_password);
+    }
+    
+    /*
+     * IPermissionable methods
+     */
+    
+    public function isAdministrator(Sihnon_Auth_IUser $user) {
+        // As this class supports fine-grained permissions, map the isAdministrator function to the Superadmin privilege
+        // to fallback for badly written applications
+        return $user->hasPermission(Sihnon_Auth_Plugin_Database_Permission::PERM_Administrator);
+    }
+    
+    /*
+     * IFinelyPermissionable methods
+     */
+
+    public function hasPermission(Sihnon_Auth_IUser $user, $permission) {
+        return new $user->hasPermission($permission);
+    }
+    
+}
+
+?>

source/lib/SihnonFramework/Auth/Plugin/Database/Group.class.php

@@ -0,0 +1,12 @@
+<?php
+
+class SihnonFramework_Auth_Plugin_Database_Group extends Sihnon_DatabaseObject {
+    
+    protected static $table = 'group';
+    
+    protected $_db_id;
+    protected $_db_name;
+    protected $_db_description;
+    
+    
+}

source/lib/SihnonFramework/Auth/Plugin/Database/GroupPermission.class.php

@@ -0,0 +1,13 @@
+<?php
+
+class SihnonFramework_Auth_Plugin_Database_GroupPermission extends Sihnon_DatabaseObject {
+    
+    protected static $table = 'grouppermission';
+    
+    protected $_db_id;
+    protected $_db_group;
+    protected $_db_permission;
+    protected $_db_added;
+    
+    
+}

source/lib/SihnonFramework/Auth/Plugin/Database/Permission.class.php

@@ -0,0 +1,20 @@
+<?php
+
+class SihnonFramework_Auth_Plugin_Database_Permission extends Sihnon_DatabaseObject {
+    
+    /*
+     * Built-in permissions
+     */
+    
+    // The Administrator permission always exists, and is always offers the most functionality
+    // This maps to the isAdministrator method for coarse-grained permissions.
+    const PERM_Administrator = 1;
+    
+    protected static $table = 'permission';
+    
+    protected $_db_id;
+    protected $_db_name;
+    protected $_db_description;
+    
+    
+}

source/lib/SihnonFramework/Auth/Plugin/Database/User.class.php

@@ -0,0 +1,74 @@
+<?php
+
+class SihnonFramework_Auth_Plugin_Database_User extends Sihnon_DatabaseObject implements Sihnon_Auth_IUser {
+    
+    protected static $table = 'user';
+
+    protected $_db_id;
+    protected $_db_username;
+    protected $_db_password;
+    protected $_db_fullname;
+    protected $_db_email;
+    protected $_db_last_login;
+    protected $_db_last_password_change;
+    
+    protected $groups = null;
+    protected $permissions = null;
+    
+    public static function exists($username) {
+        return static::exists('username', $username);
+    }
+    
+    public static function add($username, $password) {
+        $user = new self();
+        $user->username = $username;
+        $user->password = sha1($password);
+        $user->last_password_change = time();
+        $user->create();
+        
+        return $user;
+    }
+    
+    public function username() {
+        return $this->username;
+    }
+    
+    public function checkPassword($password) {
+        return ($this->password == sha1($password));
+    }
+    
+    public function changePassword($new_password) {
+        $this->password = sha1($new_password);
+        $this->save();
+    }
+    
+    public function groups($ignore_cache = false) {
+        if ($this->groups === null || $ignore_cache) {
+            $this->groups = Sihnon_Auth_Plugin_Database_Group::all_for('user', $this->id, 'groups_by_user');
+        }
+        
+        return $this->groups;
+    }
+    
+    public function permissions($ignore_cache = false) {
+        if ($this->permissions === null || $ignore_cache) {
+            $this->permissions = Sihnon_Auth_Plugin_Database_Permission::all_for('user', $this->id, 'permissions_by_user');
+        }
+        
+        return $this->permissions;
+    }
+    
+    public function hasPermission($permission) {
+        $permissions = $this->permissions();
+        foreach ($permissions as $has_permission) {
+            if ($permission == $has_permission->id) {
+                return true;
+            }
+        }
+        
+        return false;
+    }
+    
+}
+
+?>

source/lib/SihnonFramework/Auth/Plugin/Database/UserGroup.class.php

@@ -0,0 +1,13 @@
+<?php
+
+class SihnonFramework_Auth_Plugin_Database_UserGroup extends Sihnon_DatabaseObject {
+    
+    protected static $table = 'uergroup';
+    
+    protected $_db_id;
+    protected $_db_user;
+    protected $_db_group;
+    protected $_db_added;
+    
+    
+}

source/lib/SihnonFramework/Auth/PluginFactory.class.php

@@ -0,0 +1,30 @@
+<?php
+
+class SihnonFramework_Auth_PluginFactory extends Sihnon_PluginFactory {
+    
+    protected static $plugin_prefix    = 'Sihnon_Auth_Plugin_';
+    protected static $plugin_interface = 'SihnonFramework_Auth_IPlugin';
+    protected static $plugin_dir       = array(
+    	SihnonFramework_Lib => 'SihnonFramework/Auth/Plugin/',
+    	Sihnon_Lib          => 'Sihnon/Auth/Plugin/',
+	);
+    
+    public static function init() {
+        
+    }
+    
+    public static function create(SihnonFramework_Config $config, $plugin) {
+        self::ensureScanned();
+        
+        if (! self::isValidPlugin($plugin)) {
+            throw new Sihnon_Exception_InvalidPluginName($plugin);
+        }
+        
+        $classname = self::classname($plugin);
+        
+        return call_user_func(array($classname, 'create'), $config);
+    }
+    
+}
+
+?>