webauthn/src/Application/Controller/d3_account_webauthn.php

205 lines
7.0 KiB
PHP
Raw Normal View History

2022-10-24 22:24:40 +02:00
<?php
/**
2022-11-04 22:45:47 +01:00
* For the full copyright and license information, please view the LICENSE
* file that was distributed with this source code.
*
* https://www.d3data.de
2022-10-24 22:24:40 +02:00
*
* @copyright (C) D3 Data Development (Inh. Thomas Dartsch)
2022-11-04 22:45:47 +01:00
* @author D3 Data Development - Daniel Seifert <info@shopmodule.com>
* @link https://www.oxidmodule.com
2022-10-24 22:24:40 +02:00
*/
2022-11-04 22:02:44 +01:00
declare(strict_types=1);
2022-10-24 22:24:40 +02:00
namespace D3\Webauthn\Application\Controller;
2022-12-12 23:41:07 +01:00
use Assert\AssertionFailedException;
use D3\TestingTools\Production\IsMockable;
use D3\Webauthn\Application\Controller\Traits\accountTrait;
use D3\Webauthn\Application\Model\Credential\PublicKeyCredential;
use D3\Webauthn\Application\Model\Credential\PublicKeyCredentialList;
2022-11-03 13:18:02 +01:00
use D3\Webauthn\Application\Model\Exceptions\WebauthnCreateException;
use D3\Webauthn\Application\Model\Exceptions\WebauthnException;
use D3\Webauthn\Application\Model\Webauthn;
2022-11-03 13:18:02 +01:00
use Doctrine\DBAL\Driver\Exception as DoctrineDriverException;
use Doctrine\DBAL\Exception as DoctrineException;
2022-10-24 22:24:40 +02:00
use OxidEsales\Eshop\Application\Controller\AccountController;
use OxidEsales\Eshop\Core\Language;
2022-10-24 22:24:40 +02:00
use OxidEsales\Eshop\Core\Registry;
2023-01-21 13:50:18 +01:00
use OxidEsales\Eshop\Core\Request;
2022-11-04 22:02:44 +01:00
use OxidEsales\Eshop\Core\SeoEncoder;
use OxidEsales\Eshop\Core\UtilsView;
2022-11-03 13:18:02 +01:00
use Psr\Container\ContainerExceptionInterface;
use Psr\Container\NotFoundExceptionInterface;
2023-01-21 13:50:18 +01:00
use Psr\Log\LoggerInterface;
2022-12-12 23:41:07 +01:00
use Throwable;
2022-10-24 22:24:40 +02:00
class d3_account_webauthn extends AccountController
{
use accountTrait;
use IsMockable;
2022-10-24 22:24:40 +02:00
protected $_sThisTemplate = 'd3_account_webauthn.tpl';
/**
* @return string
*/
2022-10-30 00:27:11 +02:00
public function render(): string
2022-10-24 22:24:40 +02:00
{
$sRet = parent::render();
$this->addTplParam('user', $this->getUser());
2023-01-21 13:50:18 +01:00
$this->addTplParam('readonly', !(d3GetOxidDIC()->get(Webauthn::class)->isAvailable()));
2022-10-24 22:24:40 +02:00
return $sRet;
}
/**
* @return publicKeyCredentialList
2022-11-04 22:02:44 +01:00
* @throws ContainerExceptionInterface
* @throws DoctrineDriverException
* @throws DoctrineException
* @throws NotFoundExceptionInterface
2022-10-24 22:24:40 +02:00
*/
2022-10-30 00:27:11 +02:00
public function getCredentialList(): PublicKeyCredentialList
2022-10-24 22:24:40 +02:00
{
$oUser = $this->getUser();
2023-01-21 13:50:18 +01:00
$credentialList = d3GetOxidDIC()->get(PublicKeyCredentialList::class);
return $credentialList->getAllFromUser($oUser);
}
2022-10-24 22:24:40 +02:00
2022-11-03 13:18:02 +01:00
/**
* @throws ContainerExceptionInterface
* @throws NotFoundExceptionInterface
* @throws DoctrineDriverException
* @throws DoctrineException
2022-11-04 22:02:44 +01:00
* @return void
2022-11-03 13:18:02 +01:00
*/
2022-11-04 22:02:44 +01:00
public function requestNewCredential(): void
{
2022-11-03 13:18:02 +01:00
try {
$this->setAuthnRegister();
$this->setPageType('requestnew');
} catch (WebauthnException $e) {
2023-01-21 13:50:18 +01:00
d3GetOxidDIC()->get('d3ox.webauthn.'.LoggerInterface::class)->error($e->getDetailedErrorMessage(), ['UserId: ' => $this->getUser()->getId()]);
d3GetOxidDIC()->get('d3ox.webauthn.'.LoggerInterface::class)->debug($e->getTraceAsString());
d3GetOxidDIC()->get('d3ox.webauthn.'.UtilsView::class)->addErrorToDisplay($e);
2022-11-03 13:18:02 +01:00
}
}
2022-10-24 22:24:40 +02:00
2022-11-04 22:02:44 +01:00
/**
* @param $pageType
* @return void
*/
public function setPageType($pageType): void
{
$this->addTplParam('pageType', $pageType);
2022-10-24 22:24:40 +02:00
}
2022-11-03 13:18:02 +01:00
/**
* @throws DoctrineDriverException
* @throws DoctrineException
* @throws ContainerExceptionInterface
* @throws NotFoundExceptionInterface
2022-11-04 22:02:44 +01:00
* @return void
2022-11-03 13:18:02 +01:00
*/
2022-11-04 22:02:44 +01:00
public function setAuthnRegister(): void
2022-10-24 22:24:40 +02:00
{
2023-01-21 13:50:18 +01:00
$publicKeyCredentialCreationOptions = d3GetOxidDIC()->get(Webauthn::class)
->getCreationOptions($this->getUser());
2022-10-31 00:11:06 +01:00
2022-11-04 22:02:44 +01:00
$this->addTplParam('webauthn_publickey_create', $publicKeyCredentialCreationOptions);
$this->addTplParam('isAdmin', isAdmin());
$this->addTplParam('keyname', Registry::getRequest()->getRequestEscapedParameter('credenialname'));
2022-10-24 22:24:40 +02:00
}
2022-11-04 22:02:44 +01:00
/**
* @return void
* @throws DoctrineDriverException
* @throws DoctrineException
2022-12-12 23:41:07 +01:00
* @throws Throwable
2022-11-04 22:02:44 +01:00
*/
public function saveAuthn(): void
2022-10-24 22:24:40 +02:00
{
2022-11-03 13:18:02 +01:00
try {
2023-01-21 13:50:18 +01:00
/** @var Request $request */
$request = d3GetOxidDIC()->get('d3ox.webauthn.'.Request::class);
$error = $request->getRequestEscapedParameter('error');
2022-11-13 21:43:33 +01:00
if (strlen((string) $error)) {
2022-11-03 13:18:02 +01:00
/** @var WebauthnCreateException $e */
2022-12-13 22:24:33 +01:00
$e = oxNew(WebauthnCreateException::class, $error);
2022-11-03 13:18:02 +01:00
throw $e;
}
2023-01-21 13:50:18 +01:00
$credential = d3GetOxidDIC()->get('d3ox.webauthn.'.Request::class)->getRequestEscapedParameter('credential');
2022-11-13 21:43:33 +01:00
if (strlen((string) $credential)) {
2023-01-21 13:50:18 +01:00
$webauthn = d3GetOxidDIC()->get(Webauthn::class);
$webauthn->saveAuthn($credential, d3GetOxidDIC()->get('d3ox.webauthn.'.Request::class)->getRequestEscapedParameter('keyname'));
2022-11-03 13:18:02 +01:00
}
} catch (WebauthnException $e) {
d3GetOxidDIC()->get('d3ox.webauthn.'.LoggerInterface::class)->error(
$e->getDetailedErrorMessage(),
['UserId' => $this->getUser()->getId()]
);
d3GetOxidDIC()->get('d3ox.webauthn.'.LoggerInterface::class)->debug($e->getTraceAsString());
2023-01-21 13:50:18 +01:00
d3GetOxidDIC()->get('d3ox.webauthn.'.UtilsView::class)->addErrorToDisplay($e);
} catch (AssertionFailedException $e) {
/** @var Language $language */
$language = d3GetOxidDIC()->get('d3ox.webauthn.'.Language::class);
d3GetOxidDIC()->get('d3ox.webauthn.'.LoggerInterface::class)->error(
$e->getMessage(),
['UserId' => $this->getUser()->getId()]
);
d3GetOxidDIC()->get('d3ox.webauthn.'.LoggerInterface::class)->debug($e->getTraceAsString());
d3GetOxidDIC()->get('d3ox.webauthn.'.UtilsView::class)->addErrorToDisplay(
$language->translateString('D3_WEBAUTHN_ERR_NOTCREDENTIALNOTSAVEABLE')
);
}
2022-10-24 22:24:40 +02:00
}
2022-11-04 22:02:44 +01:00
/**
* @return void
*/
public function deleteKey(): void
2022-10-24 22:24:40 +02:00
{
2023-01-21 13:50:18 +01:00
$deleteId = d3GetOxidDIC()->get('d3ox.webauthn.'.Request::class)->getRequestEscapedParameter('deleteoxid');
2022-11-17 00:27:43 +01:00
if ($deleteId) {
2023-01-21 13:50:18 +01:00
$credential = d3GetOxidDIC()->get(PublicKeyCredential::class);
2022-11-17 00:27:43 +01:00
$credential->delete($deleteId);
2022-10-24 22:24:40 +02:00
}
}
2022-11-04 22:02:44 +01:00
/**
* @return array
*/
public function getBreadCrumb(): array
{
$aPaths = [];
$aPath = [];
$iBaseLanguage = Registry::getLang()->getBaseLanguage();
/** @var SeoEncoder $oSeoEncoder */
$oSeoEncoder = Registry::getSeoEncoder();
2022-12-12 23:41:07 +01:00
$aPath['title'] = Registry::getLang()->translateString(
'MY_ACCOUNT',
(int) $iBaseLanguage,
false
);
2022-11-04 22:02:44 +01:00
$aPath['link'] = $oSeoEncoder->getStaticUrl($this->getViewConfig()->getSelfLink() . "cl=account");
$aPaths[] = $aPath;
2022-12-12 23:41:07 +01:00
$aPath['title'] = Registry::getLang()->translateString(
'D3_WEBAUTHN_ACCOUNT',
(int) $iBaseLanguage,
false
);
2022-11-04 22:02:44 +01:00
$aPath['link'] = $this->getLink();
$aPaths[] = $aPath;
return $aPaths;
}
2022-12-13 22:24:33 +01:00
}