cerebrate-project
/
cerebrate
mirror of https://github.com/cerebrate-project/cerebrate
1
0
Fork 0
Code Issues Releases Wiki Activity

chg: [auditlog] log api authentication failures / successes

pull/92/head
iglocska 2021-11-17 15:46:32 +01:00
parent 2e1ee2d064
commit 1f77569344
No known key found for this signature in database
GPG Key ID: BEA224F1FEF113AC
1 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
src/Controller/AppController.php
View File

@ -111,6 +111,7 @@ class AppController extends Controller
} }
unset($user['password']); unset($user['password']);
$this->ACL->setUser($user); $this->ACL->setUser($user);
$this->request->getSession()->write('authUser', $user);
$this->isAdmin = $user['role']['perm_admin']; $this->isAdmin = $user['role']['perm_admin'];
$this->set('menu', $this->ACL->getMenu()); $this->set('menu', $this->ACL->getMenu());
$this->set('loggedUser', $this->ACL->getUser()); $this->set('loggedUser', $this->ACL->getUser());
@ -147,13 +148,31 @@ class AppController extends Controller
{ {
if (!empty($_SERVER['HTTP_AUTHORIZATION']) && strlen($_SERVER['HTTP_AUTHORIZATION'])) { if (!empty($_SERVER['HTTP_AUTHORIZATION']) && strlen($_SERVER['HTTP_AUTHORIZATION'])) {
$this->loadModel('AuthKeys'); $this->loadModel('AuthKeys');
$logModel = $this->Users->auditLogs();
$authKey = $this->AuthKeys->checkKey($_SERVER['HTTP_AUTHORIZATION']); $authKey = $this->AuthKeys->checkKey($_SERVER['HTTP_AUTHORIZATION']);
if (!empty($authKey)) { if (!empty($authKey)) {
$this->loadModel('Users'); $this->loadModel('Users');
$user = $this->Users->get($authKey['user_id']); $user = $this->Users->get($authKey['user_id']);
$user = $logModel->userInfo();
$logModel->insert([
'action' => 'login',
'model' => 'Users',
'model_id' => $user['id'],
'model_title' => $user['name'],
'change' => []
]);
if (!empty($user)) { if (!empty($user)) {
$this->Authentication->setIdentity($user); $this->Authentication->setIdentity($user);
} }
} else {
$user = $logModel->userInfo();
$logModel->insert([
'action' => 'login',
'model' => 'Users',
'model_id' => $user['id'],
'model_title' => $user['name'],
'change' => []
]);
} }
} }
} }