<?php

/**
 * A simple authenticator for the Restful server.
 *
 * This allows users to be authenticated against that RestfulServer using their
 * login details, however they will be passed 'in the open' and will require the
 * application accessing the RestfulServer to store logins in plain text (or in
 * decrytable form)
 */
class BasicRestfulAuthenticator  {

	/**
	 * The authenticate function
	 *
	 * Takes the basic auth details and attempts to log a user in from the DB
	 *
	 * @return Member|false The Member object, or false if no member
	 */
	public static function authenticate() {
		//if there is no username or password, break
		if(!isset($_SERVER['PHP_AUTH_USER']) || !isset($_SERVER['PHP_AUTH_PW'])) return false;

		//Attempt to authenticate with the default authenticator for the site
		$authClass = Authenticator::get_default_authenticator();
		$member = $authClass::authenticate(array(
			'Email' => $_SERVER['PHP_AUTH_USER'],
			'Password' => $_SERVER['PHP_AUTH_PW'],
		));

		//Log the member in and return the member, if they were found
		if($member) {
			$member->LogIn(false);
			return $member;
		}
		return false;
	}

}