mirror/php-auth
1
0
Fork 0
mirror of https://github.com/delight-im/PHP-Auth.git synced 2025-07-31 13:20:11 +02:00
Code Issues Releases Wiki Activity

Create four methods 'Auth#disableTwoFactor*' to let users disable 2FA

Browse Source
This commit is contained in:
Marco
2024-09-24 16:38:02 +02:00
parent 60175e1889
commit 61e4367c31
1 changed files with 96 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

96
src/Auth.php
View File

@@ -2545,6 +2545,102 @@ final class Auth extends UserManager {
return !empty($_SESSION[self::SESSION_FIELD_AWAITING_2FA_UNTIL]) && $_SESSION[self::SESSION_FIELD_AWAITING_2FA_UNTIL] >= \time();
}
/**
* Disables two-factor authentification via time-based one-time passwords (TOTP) for the currently signed-in user
*
* @throws NotLoggedInException if the user is not currently signed in
* @throws TooManyRequestsException if the number of allowed attempts/requests has been exceeded
* @throws AuthError if an internal problem occurred (do *not* catch)
*/
public function disableTwoFactorViaTotp() {
if ($this->isLoggedIn()) {
try {
$this->db->exec(
'DELETE FROM ' . $this->makeTableName('users_2fa') . ' WHERE user_id = ? AND mechanism = ? AND expires_at IS NULL',
[ $this->getUserId(), self::TWO_FACTOR_MECHANISM_TOTP ]
);
}
catch (Error $e) {
throw new DatabaseError($e->getMessage());
}
}
else {
throw new NotLoggedInException();
}
}
/**
* Disables two-factor authentification with one-time passwords sent via SMS for the currently signed-in user
*
* @throws NotLoggedInException if the user is not currently signed in
* @throws TooManyRequestsException if the number of allowed attempts/requests has been exceeded
* @throws AuthError if an internal problem occurred (do *not* catch)
*/
public function disableTwoFactorViaSms() {
if ($this->isLoggedIn()) {
try {
$this->db->exec(
'DELETE FROM ' . $this->makeTableName('users_2fa') . ' WHERE user_id = ? AND mechanism = ? AND expires_at IS NULL',
[ $this->getUserId(), self::TWO_FACTOR_MECHANISM_SMS ]
);
}
catch (Error $e) {
throw new DatabaseError($e->getMessage());
}
}
else {
throw new NotLoggedInException();
}
}
/**
* Disables two-factor authentification with one-time passwords sent via email for the currently signed-in user
*
* @throws NotLoggedInException if the user is not currently signed in
* @throws TooManyRequestsException if the number of allowed attempts/requests has been exceeded
* @throws AuthError if an internal problem occurred (do *not* catch)
*/
public function disableTwoFactorViaEmail() {
if ($this->isLoggedIn()) {
try {
$this->db->exec(
'DELETE FROM ' . $this->makeTableName('users_2fa') . ' WHERE user_id = ? AND mechanism = ? AND expires_at IS NULL',
[ $this->getUserId(), self::TWO_FACTOR_MECHANISM_EMAIL ]
);
}
catch (Error $e) {
throw new DatabaseError($e->getMessage());
}
}
else {
throw new NotLoggedInException();
}
}
/**
* Disables two-factor authentification by any method for the currently signed-in user
*
* @throws NotLoggedInException if the user is not currently signed in
* @throws TooManyRequestsException if the number of allowed attempts/requests has been exceeded
* @throws AuthError if an internal problem occurred (do *not* catch)
*/
public function disableTwoFactor() {
if ($this->isLoggedIn()) {
try {
$this->db->exec(
'DELETE FROM ' . $this->makeTableName('users_2fa') . ' WHERE user_id = ? AND expires_at IS NULL',
[ $this->getUserId() ]
);
}
catch (Error $e) {
throw new DatabaseError($e->getMessage());
}
}
else {
throw new NotLoggedInException();
}
}
/**
* Performs throttling or rate limiting using the token bucket algorithm (inverse leaky bucket algorithm)
*