Server : Apache System : Linux server2.corals.io 4.18.0-348.2.1.el8_5.x86_64 #1 SMP Mon Nov 15 09:17:08 EST 2021 x86_64 User : corals ( 1002) PHP Version : 7.4.33 Disable Function : exec,passthru,shell_exec,system Directory :  /home/corals/old/vendor/magento/module-two-factor-auth/Model/

Upload File : current_dir [ Writeable ] document_root [ Writeable ]

<?php
/**
 * Copyright © Magento, Inc. All rights reserved.
 * See COPYING.txt for license details.
 */

declare(strict_types=1);

namespace Magento\TwoFactorAuth\Model;

use Magento\Framework\Exception\AuthorizationException;
use Magento\Framework\Exception\LocalizedException;
use Magento\Framework\Serialize\Serializer\Json;
use Magento\TwoFactorAuth\Api\TfaInterface;
use Magento\TwoFactorAuth\Api\UserConfigTokenManagerInterface;
use Magento\User\Model\ResourceModel\User as UserResource;
use Magento\User\Model\User;
use Magento\User\Model\UserFactory;

/**
 * Retrieves users from credentials and enforced throttling
 */
class UserAuthenticator
{
    /**
     * @var UserFactory
     */
    private $userFactory;

    /**
     * @var UserResource
     */
    private $userResource;

    /**
     * @var TfaInterface
     */
    private $tfa;

    /**
     * @var UserConfigTokenManagerInterface
     */
    private $tokenManager;

    /**
     * @var Json
     */
    private $json;

    /**
     * @param UserFactory $userFactory
     * @param UserResource $userResource
     * @param UserConfigTokenManagerInterface $tokenManager
     * @param TfaInterface $tfa
     * @param Json $json
     */
    public function __construct(
        UserFactory $userFactory,
        UserResource $userResource,
        UserConfigTokenManagerInterface $tokenManager,
        TfaInterface $tfa,
        Json $json
    ) {
        $this->userFactory = $userFactory;
        $this->userResource = $userResource;
        $this->tfa = $tfa;
        $this->tokenManager = $tokenManager;
        $this->json = $json;
    }

    /**
     * Obtain a user with an id and a tfa token
     *
     * @param string $tfaToken
     * @param string $providerCode
     * @return User
     * @throws AuthorizationException
     * @throws LocalizedException
     */
    public function authenticateWithTokenAndProvider(string $tfaToken, string $providerCode): User
    {
        try {
            // phpcs:ignore Magento2.Functions.DiscouragedFunction
            ['user_id' => $userId] = $this->json->unserialize(explode('.', base64_decode($tfaToken))[0]);
        } catch (\Throwable $e) {
            throw new AuthorizationException(
                __('Invalid two-factor authorization token')
            );
        }

        if (!$this->tfa->getProviderIsAllowed($userId, $providerCode)) {
            throw new LocalizedException(__('Provider is not allowed.'));
        } elseif ($this->tfa->getProviderByCode($providerCode)->isActive($userId)) {
            throw new LocalizedException(__('Provider is already configured.'));
        } elseif (!$this->tokenManager->isValidFor($userId, $tfaToken)) {
            throw new AuthorizationException(
                __('Invalid two-factor authorization token')
            );
        }

        $user = $this->userFactory->create();
        $this->userResource->load($user, $userId);

        return $user;
    }

    /**
     * Validate the user is allowed to use the provider
     *
     * @param int $userId
     * @param string $providerCode
     * @throws LocalizedException
     */
    public function assertProviderIsValidForUser(int $userId, string $providerCode): void
    {
        if (!$this->tfa->getProviderIsAllowed($userId, $providerCode)) {
            throw new LocalizedException(__('Provider is not allowed.'));
        } elseif (!$this->tfa->getProviderByCode($providerCode)->isActive($userId)) {
            throw new LocalizedException(__('Provider is not configured.'));
        }
    }
}