public auto_login( ) (defined in Kohana_Auth_ORM)

Return Values

• mixed

public function auto_login()
{
	if ($token = Cookie::get('authautologin'))
	{
		// Load the token and user
		$token = ORM::factory('user_token', array('token' => $token));

		if ($token->loaded() AND $token->user->loaded())
		{
			if ($token->user_agent === sha1(Request::$user_agent))
			{
				// Save the token to create a new unique token
				$token->save();

				// Set the new token
				Cookie::set('authautologin', $token->token, $token->expires - time());

				// Complete the login with the found data
				$this->complete_login($token->user);

				// Automatic login was successful
				return $token->user;
			}

			// Token is invalid
			$token->delete();
		}
	}

	return FALSE;
}

public check_password( string $password ) (defined in Kohana_Auth_ORM)

Parameters

• string $password required - $password

Return Values

• boolean

public function check_password($password)
{
	$user = $this->get_user();

	if ( ! $user)
		return FALSE;

	return ($this->hash($password) === $user->password);
}

public force_login( mixed $user [, boolean $mark_session_as_forced = bool FALSE ] ) (defined in Kohana_Auth_ORM)

Parameters

• mixed $user required - Username string, or user ORM object
• boolean $mark_session_as_forced = bool FALSE - Mark the session as forced

Return Values

• boolean

public function force_login($user, $mark_session_as_forced = FALSE)
{
	if ( ! is_object($user))
	{
		$username = $user;

		// Load the user
		$user = ORM::factory('user');
		$user->where($user->unique_key($username), '=', $username)->find();
	}

	if ($mark_session_as_forced === TRUE)
	{
		// Mark the session as forced, to prevent users from changing account information
		$this->_session->set('auth_forced', TRUE);
	}

	// Run the standard completion
	$this->complete_login($user);
}

public get_user( [ mixed $default = NULL ] ) (defined in Kohana_Auth_ORM)

Parameters

• mixed $default = NULL - To return in case user isn't logged in

Return Values

• mixed

public function get_user($default = NULL)
{
	$user = parent::get_user($default);

	if ($user === $default)
	{
		// check for "remembered" login
		if (($user = $this->auto_login()) === FALSE)
			return $default;
	}

	return $user;
}

public logged_in( [ mixed $role = NULL ] ) (defined in Kohana_Auth_ORM)

Parameters

• mixed $role = NULL - Role name string, role ORM object, or array with role names

Return Values

• boolean

public function logged_in($role = NULL)
{
	// Get the user from the session
	$user = $this->get_user();

	if ( ! $user)
		return FALSE;

	if ($user instanceof Model_User AND $user->loaded())
	{
		// If we don't have a roll no further checking is needed
		if ( ! $role)
			return TRUE;

		if (is_array($role))
		{
			// Get all the roles
			$roles = ORM::factory('role')
						->where('name', 'IN', $role)
						->find_all()
						->as_array(NULL, 'id');

			// Make sure all the roles are valid ones
			if (count($roles) !== count($role))
				return FALSE;
		}
		else
		{
			if ( ! is_object($role))
			{
				// Load the role
				$roles = ORM::factory('role', array('name' => $role));

				if ( ! $roles->loaded())
					return FALSE;
			}
		}

		return $user->has('roles', $roles);
	}
}

public logout( [ boolean $destroy = bool FALSE , boolean $logout_all = bool FALSE ] ) (defined in Kohana_Auth_ORM)

Parameters

• boolean $destroy = bool FALSE - Completely destroy the session
• boolean $logout_all = bool FALSE - Remove all tokens for user

Return Values

• boolean

public function logout($destroy = FALSE, $logout_all = FALSE)
{
	// Set by force_login()
	$this->_session->delete('auth_forced');

	if ($token = Cookie::get('authautologin'))
	{
		// Delete the autologin cookie to prevent re-login
		Cookie::delete('authautologin');

		// Clear the autologin token from the database
		$token = ORM::factory('user_token', array('token' => $token));

		if ($token->loaded() AND $logout_all)
		{
			// Delete all user tokens. This isn't the most elegant solution but does the job
			$tokens = ORM::factory('user_token')->where('user_id','=',$token->user_id)->find_all();
			
			foreach ($tokens as $_token)
			{
				$_token->delete();
			}
		}
		elseif ($token->loaded())
		{
			$token->delete();
		}
	}

	return parent::logout($destroy);
}

public password( mixed $user ) (defined in Kohana_Auth_ORM)

Parameters

• mixed $user required - Username string, or user ORM object

Return Values

• string

public function password($user)
{
	if ( ! is_object($user))
	{
		$username = $user;

		// Load the user
		$user = ORM::factory('user');
		$user->where($user->unique_key($username), '=', $username)->find();
	}

	return $user->password;
}

public __construct( [ array $config = array(0) ] ) (defined in Kohana_Auth)

Parameters

• array $config = array(0) - Config Options

Return Values

• void

public function __construct($config = array())
{
	// Save the config in the object
	$this->_config = $config;

	$this->_session = Session::instance($this->_config['session_type']);
}

public hash( string $str ) (defined in Kohana_Auth)

Parameters

• string $str required - String to hash

Return Values

• string

public function hash($str)
{
	if ( ! $this->_config['hash_key'])
		throw new Kohana_Exception('A valid hash key must be set in your auth config.');

	return hash_hmac($this->_config['hash_method'], $str, $this->_config['hash_key']);
}

public hash_password( string $password ) (defined in Kohana_Auth)

Parameters

• string $password required - Plaintext password

Tags

• Deprecated -

public function hash_password($password)
{
	return $this->hash($password);
}

public static instance( ) (defined in Kohana_Auth)

Return Values

• Auth

public static function instance()
{
	if ( ! isset(Auth::$_instance))
	{
		// Load the configuration for this type
		$config = Kohana::$config->load('auth');

		if ( ! $type = $config->get('driver'))
		{
			$type = 'file';
		}

		// Set the session class name
		$class = 'Auth_'.ucfirst($type);

		// Create a new session instance
		Auth::$_instance = new $class($config);
	}

	return Auth::$_instance;
}

public login( string $username , string $password [, boolean $remember = bool FALSE ] ) (defined in Kohana_Auth)

Parameters

• string $username required - Username to log in
• string $password required - Password to check against
• boolean $remember = bool FALSE - Enable autologin

Return Values

• boolean

public function login($username, $password, $remember = FALSE)
{
	if (empty($password))
		return FALSE;

	return $this->_login($username, $password, $remember);
}

protected _login( string $user , string $password , boolean $remember ) (defined in Kohana_Auth_ORM)

Parameters

• string $user required - Name
• string $password required - $password
• boolean $remember required - Enable autologin

Return Values

• boolean

protected function _login($user, $password, $remember)
{
	if ( ! is_object($user))
	{
		$username = $user;

		// Load the user
		$user = ORM::factory('user');
		$user->where($user->unique_key($username), '=', $username)->find();
	}

	if (is_string($password))
	{
		// Create a hashed password
		$password = $this->hash($password);
	}

	// If the passwords match, perform a login
	if ($user->has('roles', ORM::factory('role', array('name' => 'login'))) AND $user->password === $password)
	{
		if ($remember === TRUE)
		{
			// Token data
			$data = array(
				'user_id'    => $user->pk(),
				'expires'    => time() + $this->_config['lifetime'],
				'user_agent' => sha1(Request::$user_agent),
			);

			// Create a new autologin token
			$token = ORM::factory('user_token')
						->values($data)
						->create();

			// Set the autologin cookie
			Cookie::set('authautologin', $token->token, $this->_config['lifetime']);
		}

		// Finish the login
		$this->complete_login($user);

		return TRUE;
	}

	// Login failed
	return FALSE;
}

protected complete_login( object $user ) (defined in Kohana_Auth_ORM)

Parameters

• object $user required - User ORM object

Return Values

• void

protected function complete_login($user)
{
	$user->complete_login();

	return parent::complete_login($user);
}