php [cakephp：AuthComponent示例] AuthComponent的示例代码。 #cakephp

Posted 2021-05-05

<?php 

// in controller->edit()
  public function edit(int $id=null) {
    $user = $this->Users->get($id, [
      'contain' => []
    ]);
    if ($this->request->is(['patch', 'post', 'put'])) {
      /** 
       * Password Verification 
       * --------------------- */
      $inputtedPW = $this->request->data('password');
      $inputtedOldPW = $this->request->data('old_password');
      if ($user->password !== $inputtedPW) { /* change PW? */
        if (!$user->checkPassword($inputtedOldPW)) {
          $this->Flash->error('旧パスワードが一致しません。');
          return $this->redirect(['action' => 'edit', $id]);
        }
      } elseif ($this->request->data('old_password')) {
        $this->Flash->error('パスワードを変更しない場合、旧パスワードは入力しないでください。');
        return $this->redirect(['action' => 'edit', $id]);
      }
      $user = $this->Users->patchEntity($user, $this->request->getData());
      if ($this->Users->save($user)) {
        $this->Flash->success(MSG_UPDATE_SUCCESS);
        return $this->redirect(['action' => 'edit', $id]);
      }
      $this->Flash->error(MSG_UPDATE_ERROR);
    }
    $this->set(compact('user'));
    $this->set('_serialize', ['user']);
  }

// in User Entity
  namespace App\Model\Entity;
  use Cake\ORM\Entity;
  use Cake\Auth\DefaultPasswordHasher;

  class User extends Entity
  {

    /**
     * Set Password via DefaultPasswordHasher
     * Set hashed password through patchEntity() in CREATE & UPDATE .
     * @param string $password
     * @return string (hashed password)
     */
    protected function _setPassword($password) {
      return (new DefaultPasswordHasher)->hash($password);
    }

    /**
     * Get hashed string via DefaultPasswordHasher
     * @param string $str
     * @return string (hashed str)
     */
    public function hashString(string $str='') {
      if (empty($str)) return false;
      return (new DefaultPasswordHasher)->hash($str);
    }

    /**
     * Check Password by DefaultPasswordHasher
     * Older password verification on UPDATE.
     * @param string $plainString 
     * @return bool true | false
     */
    public function checkPassword(string $plainString='') {
      if (empty($plainString)) return false;
      return (new DefaultPasswordHasher)->check($plainString, $this->password);
    }
  
  }

?>

<!-- in view -->
<?php echo $this->Form->password('password') ?>
<?php echo $this->Form->password('old_password', [
  'placeholder' => '変更する場合は旧パスワードを入力してください'
]) ?>