mirror of
https://github.com/silverstripe/silverstripe-framework
synced 2024-06-18 02:31:36 +02:00
0c41a97a8b
API Add HasRequestHandler interface API Refactor Link() and url handling behaviour from Controller into RequestHandler API RequestHandler classes now must define url_segment to have a default Link() API Clean up redirectBack()
94 lines
2.8 KiB
PHP
94 lines
2.8 KiB
PHP
<?php
|
|
|
|
namespace SilverStripe\Security;
|
|
|
|
use SilverStripe\Control\HTTPResponse;
|
|
use SilverStripe\Core\Convert;
|
|
|
|
class CMSMemberLoginHandler extends MemberLoginHandler
|
|
{
|
|
/**
|
|
* Login form handler method
|
|
*
|
|
* This method is called when the user clicks on "Log in"
|
|
*
|
|
* @param array $data Submitted data
|
|
* @return HTTPResponse
|
|
*/
|
|
public function dologin($data)
|
|
{
|
|
if ($this->performLogin($data)) {
|
|
return $this->logInUserAndRedirect($data);
|
|
}
|
|
|
|
return $this->redirectBackToForm();
|
|
}
|
|
|
|
public function redirectBackToForm()
|
|
{
|
|
// Redirect back to form
|
|
$url = $this->addBackURLParam(CMSSecurity::singleton()->Link('login'));
|
|
return $this->redirect($url);
|
|
}
|
|
|
|
/**
|
|
* Redirect the user to the change password form.
|
|
*
|
|
* @skipUpgrade
|
|
* @return HTTPResponse
|
|
*/
|
|
protected function redirectToChangePassword()
|
|
{
|
|
// Since this form is loaded via an iframe, this redirect must be performed via javascript
|
|
$changePasswordForm = ChangePasswordForm::create($this->form->getController(), 'ChangePasswordForm');
|
|
$changePasswordForm->sessionMessage(
|
|
_t('Member.PASSWORDEXPIRED', 'Your password has expired. Please choose a new one.'),
|
|
'good'
|
|
);
|
|
|
|
// Get redirect url
|
|
$changePasswordURL = $this->addBackURLParam(Security::singleton()->Link('changepassword'));
|
|
$changePasswordURLATT = Convert::raw2att($changePasswordURL);
|
|
$changePasswordURLJS = Convert::raw2js($changePasswordURL);
|
|
$message = _t(
|
|
'CMSMemberLoginForm.PASSWORDEXPIRED',
|
|
'<p>Your password has expired. <a target="_top" href="{link}">Please choose a new one.</a></p>',
|
|
'Message displayed to user if their session cannot be restored',
|
|
array('link' => $changePasswordURLATT)
|
|
);
|
|
|
|
// Redirect to change password page
|
|
$response = HTTPResponse::create()
|
|
->setBody(<<<PHP
|
|
<!DOCTYPE html>
|
|
<html><body>
|
|
$message
|
|
<script type="application/javascript">
|
|
setTimeout(function(){top.location.href = "$changePasswordURLJS";}, 0);
|
|
</script>
|
|
</body></html>
|
|
PHP
|
|
);
|
|
return $response;
|
|
}
|
|
|
|
/**
|
|
* Send user to the right location after login
|
|
*
|
|
* @param array $data
|
|
* @return HTTPResponse
|
|
*/
|
|
protected function logInUserAndRedirect($data)
|
|
{
|
|
// Check password expiry
|
|
if (Member::currentUser()->isPasswordExpired()) {
|
|
// Redirect the user to the external password change form if necessary
|
|
return $this->redirectToChangePassword();
|
|
}
|
|
|
|
// Link to success template
|
|
$url = CMSSecurity::singleton()->Link('success');
|
|
return $this->redirect($url);
|
|
}
|
|
}
|