final class SqlAuthenticator (View source)

Session login against the users table with lockout checks, hash upgrades and MFA hand-off.

Methods

__construct(ConfigurationInterface $configManager, AuditService $auditService, CsrfTokenService $csrfTokenService, LoggerInterface $logger, LoginAttemptService $loginAttemptService, ClientContext $client, MfaService $mfaService, UserRepositoryInterface $userRepository, SessionInterface $session)

No description

authenticate(LoginCredentials|null $credentials = null)

Verifies the session's stored credentials, or the just-posted $credentials on the login request, and records the result in the session. The caller turns the outcome into a redirect; nothing here writes to the response.

Details

__construct(ConfigurationInterface $configManager, AuditService $auditService, CsrfTokenService $csrfTokenService, LoggerInterface $logger, LoginAttemptService $loginAttemptService, ClientContext $client, MfaService $mfaService, UserRepositoryInterface $userRepository, SessionInterface $session)

No description

Parameters

ConfigurationInterface $configManager
AuditService $auditService
CsrfTokenService $csrfTokenService
LoggerInterface $logger
LoginAttemptService $loginAttemptService
ClientContext $client
MfaService $mfaService
UserRepositoryInterface $userRepository
SessionInterface $session

AuthOutcome authenticate(LoginCredentials|null $credentials = null)

Verifies the session's stored credentials, or the just-posted $credentials on the login request, and records the result in the session. The caller turns the outcome into a redirect; nothing here writes to the response.

Parameters

LoginCredentials|null $credentials

Return Value

AuthOutcome