Zeta Components - high quality PHP components

If there are no filters in the group, then the run() method will return STATUS_OK.

The way of grouping the filters is specified with the mode option:

• ezcAuthenticationGroupFilter::MODE_OR (default): at least one filter in the group needs to succeed in order for the group to succeed.
• ezcAuthenticationGroupFilter::MODE_AND: all filters in the group need to succeed in order for the group to succeed.

1.  $options = new ezcAuthenticationGroupOptions();
2.  $options->mode = ezcAuthenticationGroupFilter::MODE_AND;
3.  
4.  // $filter1 and $filter2 are authentication filters which all need to succeed
5.  // in order for the group to succeed
6.  $filter = new ezcAuthenticationGroupFilter( array( $filter1, $filter2 ), $options );

Example of using the group filter with LDAP and Database filters:

1.  $credentials = new ezcAuthenticationPasswordCredentials( 'jan.modaal', 'qwerty' );
2.  
3.  // create a database filter
4.  $database = new ezcAuthenticationDatabaseInfo( ezcDbInstance::get(), 'users', array( 'user', 'password' ) );
5.  $databaseFilter = new ezcAuthenticationDatabaseFilter( $database );
6.  
7.  // create an LDAP filter
8.  $ldap = new ezcAuthenticationLdapInfo( 'localhost', 'uid=%id%', 'dc=example,dc=com', 389 );
9.  $ldapFilter = new ezcAuthenticationLdapFilter( $ldap );
10.  $authentication = new ezcAuthentication( $credentials );
11.  
12.  // use the database and LDAP filters in paralel (at least one needs to succeed in
13.  // order for the user to be authenticated)
14.  $authentication->addFilter( new ezcAuthenticationGroupFilter( array( $databaseFilter, $ldapFilter ) ) );
15.  // add more filters if needed
16.  if ( !$authentication->run() )
17.  {
18.      // authentication did not succeed, so inform the user
19.      $status = $authentication->getStatus();
20.      $err = array(
21.              array( 'ezcAuthenticationLdapFilter' => array(
22.                  ezcAuthenticationLdapFilter::STATUS_USERNAME_INCORRECT => 'Incorrect username',
23.                  ezcAuthenticationLdapFilter::STATUS_PASSWORD_INCORRECT => 'Incorrect password'
24.                  ) ),
25.              array( 'ezcAuthenticationDatabaseFilter' => array(
26.                  ezcAuthenticationDatabaseFilter::STATUS_USERNAME_INCORRECT => 'Incorrect username',
27.                  ezcAuthenticationDatabaseFilter::STATUS_PASSWORD_INCORRECT => 'Incorrect password'
28.                  ) )
29.              );
30.      foreach ( $status as $line => $error )
31.      {
32.          list( $key, $value ) = each( $error );
33.          echo $err[$line][$key][$value] . "\n";
34.      }
35.  }
36.  else
37.  {
38.      // authentication succeeded, so allow the user to see his content
39.  }

It is possible to use multiple credentials when grouping filters together, by enabling the option multipleCredentials for the Group filter object. When this option is enabled, each filter added to the group must have a credentials object passed along with it.

Example of using the Group filter to handle multiple credentials:

1.  $credentials1 = new ezcAuthenticationPasswordCredentials( 'jan.modaal', 'b1b3773a05c0ed0176787a4f1574ff0075f7521e' ); // incorrect password
2.  $credentials2 = new ezcAuthenticationPasswordCredentials( 'john.doe', 'wpeE20wyWHnLE' ); // correct username + password
3.  
4.  $options = new ezcAuthenticationGroupOptions();
5.  $options->multipleCredentials = true;
6.  $options->mode = ezcAuthenticationGroupFilter::MODE_AND;
7.  $group = new ezcAuthenticationGroupFilter( array(), $options );
8.  
9.  $group->addFilter( new ezcAuthenticationHtpasswdFilter( '../../tests/filters/htpasswd/data/htpasswd' ), $credentials1 );
10.  $group->addFilter( new ezcAuthenticationHtpasswdFilter( '../../tests/filters/htpasswd/data/htpasswd' ), $credentials2 );
11.  
12.  $authentication = new ezcAuthentication( $credentials1 );
13.  $authentication->addFilter( $group );
14.  // add more filters if needed
15.  
16.  if ( !$authentication->run() )
17.  {
18.      // authentication did not succeed, so inform the user
19.      $status = $authentication->getStatus();
20.  
21.      $err = array(
22.                  array( 'ezcAuthenticationHtpasswdFilter' => array(
23.                          ezcAuthenticationHtpasswdFilter::STATUS_OK => '',
24.                          ezcAuthenticationHtpasswdFilter::STATUS_USERNAME_INCORRECT => 'Incorrect username ' . $credentials1->id,
25.                          ezcAuthenticationHtpasswdFilter::STATUS_PASSWORD_INCORRECT => 'Incorrect password for ' . $credentials1->id
26.                          ) ),
27.  
28.                  array( 'ezcAuthenticationHtpasswdFilter' => array(
29.                          ezcAuthenticationHtpasswdFilter::STATUS_OK => '',
30.                          ezcAuthenticationHtpasswdFilter::STATUS_USERNAME_INCORRECT => 'Incorrect username ' . $credentials2->id,
31.                          ezcAuthenticationHtpasswdFilter::STATUS_PASSWORD_INCORRECT => 'Incorrect password for ' . $credentials2->id
32.                          ) )
33.                  );
34.  
35.      foreach ( $status as $line => $error )
36.      {
37.          list( $key, $value ) = each( $error );
38.          echo $err[$line][$key][$value] . "\n";
39.      }
40.  }
41.  else
42.  {
43.      // authentication succeeded, so allow the user to see his content
44.  }

The filters can be specified as an array of filter objects, or as an array of array(fiter,credentials) when the multipleCredentials option is enabled.

Example of using multipleCredentials:

1.  $credentials1 = new ezcAuthenticationPasswordCredentials( 'john.doe', '1234' );
2.  $credentials1 = new ezcAuthenticationPasswordCredentials( 'jan.modaal', 'qwerty' );
3.  
4.  $filter1 = new ezcAuthenticationHtpasswdFilter( '/etc/htpasswd1' );
5.  $filter2 = new ezcAuthenticationHtpasswdFilter( '/etc/htpasswd2' );
6.  
7.  // enable multiple credentials
8.  $options = new ezcAuthenticationGroupOptions();
9.  $options->multipleCredentials = true;
10.  
11.  // add the filters to the group with the constructor
12.  $group = new ezcAuthenticationGroupFilter( array(
13.               array( $filter1, $credentials1 ),
14.               array( $filter2, $credentials2 ) ), $options );
15.  
16.  // the filters can also be added to the group with addFilter()

Example of using multipleCredentials:

1.  $credentials1 = new ezcAuthenticationPasswordCredentials( 'john.doe', '1234' );
2.  $credentials1 = new ezcAuthenticationPasswordCredentials( 'jan.modaal', 'qwerty' );
3.  
4.  $filter1 = new ezcAuthenticationHtpasswdFilter( '/etc/htpasswd1' );
5.  $filter2 = new ezcAuthenticationHtpasswdFilter( '/etc/htpasswd2' );
6.  
7.  // enable multiple credentials
8.  $options = new ezcAuthenticationGroupOptions();
9.  $options->multipleCredentials = true;
10.  
11.  // add the filters to the group with addFilter()
12.  $group = new ezcAuthenticationGroupFilter( array(), $options );
13.  $group->addFilter( $filter1, $credentials1 );
14.  $group->addFilter( $filter2, $credentials2 );
15.  
16.  // the filters can also be added to the group with the constructor