PHP Scalr_Account_User::create方法代码示例

 private function AuthenticateLdap($request)
 {
     if (!isset($request['Login']) || empty($request['Login'])) {
         throw new Exception("Login is missing");
     }
     if (!isset($request['Password']) || empty($request['Password'])) {
         throw new Exception("Password is missing");
     }
     if (!isset($request['EnvID']) || empty($request['EnvID'])) {
         throw new Exception("Environment ID is missing");
     }
     if (\Scalr::config('scalr.auth_mode') != 'ldap') {
         throw new Exception("LDAP auth not enabled on Scalr");
     }
     $ldap = \Scalr::getContainer()->ldap($request['Login'], $request['Password']);
     $tldap = 0;
     $start = microtime(true);
     $result = $ldap->isValidUser();
     $tldap = microtime(true) - $start;
     if ($result) {
         //Provides that login is always with domain suffix
         $request['Login'] = $ldap->getUsername();
         $this->debug['ldapUsername'] = $request['Login'];
         $this->Environment = Scalr_Environment::init()->loadById($request['EnvID']);
         $start = microtime(true);
         $groups = $ldap->getUserGroups();
         $tldap += microtime(true) - $start;
         header(sprintf('X-Scalr-LDAP-Query-Time: %0.4f sec', $tldap));
         $this->debug['ldapGroups'] = json_encode($groups);
         //Get User
         $this->user = Scalr_Account_User::init()->loadByEmail($request['Login'], $this->Environment->clientId);
         if (!$this->user) {
             $this->user = new Scalr_Account_User();
             $this->user->type = Scalr_Account_User::TYPE_TEAM_USER;
             $this->user->status = Scalr_Account_User::STATUS_ACTIVE;
             $this->user->create($request['Login'], $this->Environment->clientId);
         }
         $this->user->applyLdapGroups($groups);
         $this->debug['ldapEnvId'] = $this->Environment->id;
         $this->user->getPermissions()->setEnvironmentId($this->Environment->id)->validate($this->Environment);
         $this->debug['ldapAuth'] = 1;
         //We must set environment to DI Container.
         $this->setDiContainer();
     } else {
         throw new Exception("Incorrect login or password (1)");
     }
 }

 private function loginUserGet($login, $password, $accountId, $scalrCaptcha, $scalrCaptchaChallenge)
 {
     if ($login != '' && $password != '') {
         $isAdminLogin = $this->db->GetOne('SELECT * FROM account_users WHERE email = ? AND account_id = 0', array($login));
         if ($this->getContainer()->config->get('scalr.auth_mode') == 'ldap' && !$isAdminLogin) {
             $ldap = $this->getContainer()->ldap($login, $password);
             $this->response->setHeader('X-Scalr-LDAP-Login', $login);
             $tldap = 0;
             $start = microtime(true);
             $result = $ldap->isValidUser();
             $tldap = microtime(true) - $start;
             if ($result) {
                 try {
                     //Tries to retrieve user's email address from LDAP or provides that login is always with domain suffix
                     if (($pos = strpos($login, '@')) === false) {
                         $login = $ldap->getEmail();
                     }
                     $start = microtime(true);
                     $groups = $ldap->getUserGroups();
                     $gtime = microtime(true) - $start;
                     $tldap += $gtime;
                     $this->response->setHeader('X-Scalr-LDAP-G-Query-Time', sprintf('%0.4f sec', $gtime));
                     $this->response->setHeader('X-Scalr-LDAP-Query-Time', sprintf('%0.4f sec', $tldap));
                     $this->response->setHeader('X-Scalr-LDAP-CLogin', $login);
                     $this->ldapGroups = $groups;
                 } catch (Exception $e) {
                     throw new Exception($e->getMessage() . $ldap->getLog());
                 }
                 foreach ($groups as $key => $name) {
                     $groups[$key] = $this->db->qstr($name);
                 }
                 $userAvailableAccounts = array();
                 if ($ldap->getConfig()->debug) {
                     $this->response->varDump($groups);
                     $this->response->setHeader('X-Scalr-LDAP-Debug', json_encode($ldap->getLog()));
                 }
                 // System users are not members of any group so if there is no groups then skip this.
                 if (count($groups) > 0) {
                     foreach ($this->db->GetAll('
                         SELECT clients.id, clients.name
                         FROM clients
                         JOIN client_environments ON client_environments.client_id = clients.id
                         JOIN account_team_envs ON account_team_envs.env_id = client_environments.id
                         JOIN account_teams ON account_teams.id = account_team_envs.team_id
                         WHERE account_teams.name IN(' . join(',', $groups) . ')') as $value) {
                         $userAvailableAccounts[$value['id']] = $value;
                     }
                 }
                 foreach ($this->db->GetAll("\n                        SELECT clients.id, clients.name, clients.org, clients.dtadded\n                        FROM clients\n                        JOIN account_users ON account_users.account_id = clients.id\n                        WHERE account_users.email = ? AND account_users.type = ?", array($login, Scalr_Account_User::TYPE_ACCOUNT_OWNER)) as $value) {
                     $value['dtadded'] = Scalr_Util_DateTime::convertTz($value['dtadded'], 'M j, Y');
                     $userAvailableAccounts[$value['id']] = $value;
                 }
                 $userAvailableAccounts = array_values($userAvailableAccounts);
                 if (count($userAvailableAccounts) == 0) {
                     throw new Scalr_Exception_Core('You don\'t have access to any account. ' . $ldap->getLog());
                 }
                 if (count($userAvailableAccounts) == 1) {
                     $accountId = $userAvailableAccounts[0]['id'];
                 } else {
                     $ids = array();
                     foreach ($userAvailableAccounts as $value) {
                         $ids[] = $value['id'];
                     }
                     if (!$accountId && !in_array($accountId, $ids)) {
                         $this->response->data(array('accounts' => $userAvailableAccounts));
                         throw new Exception();
                     }
                 }
                 $user = new Scalr_Account_User();
                 $user = $user->loadByEmail($login, $accountId);
                 if (!$user) {
                     $user = new Scalr_Account_User();
                     $user->type = Scalr_Account_User::TYPE_TEAM_USER;
                     $user->status = Scalr_Account_User::STATUS_ACTIVE;
                     $user->create($login, $accountId);
                 }
                 if (!$user->fullname) {
                     $user->fullname = $ldap->getFullName();
                     $user->save();
                 }
                 if ($ldap->getUsername() != $ldap->getEmail()) {
                     $user->setSetting(Scalr_Account_User::SETTING_LDAP_EMAIL, $ldap->getEmail());
                 } else {
                     $user->setSetting(Scalr_Account_User::SETTING_LDAP_EMAIL, '');
                 }
             } else {
                 throw new Exception("Incorrect login or password (1) " . $ldap->getLog());
             }
         } else {
             $userAvailableAccounts = $this->db->GetAll('
                 SELECT account_users.id AS userId, clients.id, clients.name, clients.org, clients.dtadded, au.email AS `owner`
                 FROM account_users
                 LEFT JOIN clients ON clients.id = account_users.account_id
                 LEFT JOIN account_users au ON account_users.account_id = au.account_id
                 WHERE account_users.email = ? AND (au.type = ? OR account_users.type = ? OR account_users.type = ?)
                 GROUP BY userId
             ', array($login, Scalr_Account_User::TYPE_ACCOUNT_OWNER, Scalr_Account_User::TYPE_SCALR_ADMIN, Scalr_Account_User::TYPE_FIN_ADMIN));
             foreach ($userAvailableAccounts as &$ac) {
                 $ac['dtadded'] = Scalr_Util_DateTime::convertTz($ac['dtadded'], 'M j, Y');
             }
//.........这里部分代码省略.........

 /**
  * @param string $login
  * @param string $password
  * @param int    $accountId
  * @param string $scalrCaptcha
  * @return Scalr_Account_User
  * @throws Exception
  * @throws Scalr_Exception_Core
  * @throws \Scalr\System\Config\Exception\YamlException
  */
 private function loginUserGet($login, $password, $accountId, $scalrCaptcha)
 {
     if ($login != '' && $password != '') {
         $isAdminLogin = $this->db->GetOne('SELECT * FROM account_users WHERE email = ? AND account_id = 0', array($login));
         if ($this->getContainer()->config->get('scalr.auth_mode') == 'ldap' && !$isAdminLogin) {
             $ldap = $this->getContainer()->ldap($login, $password);
             $this->response->setHeader('X-Scalr-LDAP-Login', $login);
             $tldap = 0;
             $start = microtime(true);
             $result = $ldap->isValidUser();
             $tldap = microtime(true) - $start;
             if ($result) {
                 try {
                     //Tries to retrieve user's email address from LDAP or provides that login is always with domain suffix
                     if (($pos = strpos($login, '@')) === false) {
                         $login = $ldap->getEmail();
                     }
                     $start = microtime(true);
                     $groups = $ldap->getUserGroups();
                     $gtime = microtime(true) - $start;
                     $tldap += $gtime;
                     $this->response->setHeader('X-Scalr-LDAP-G-Query-Time', sprintf('%0.4f sec', $gtime));
                     $this->response->setHeader('X-Scalr-LDAP-Query-Time', sprintf('%0.4f sec', $tldap));
                     $this->response->setHeader('X-Scalr-LDAP-CLogin', $login);
                     $this->ldapGroups = $groups;
                 } catch (Exception $e) {
                     throw new Exception($e->getMessage() . $ldap->getLog());
                 }
                 foreach ($groups as $key => $name) {
                     $groups[$key] = $this->db->qstr($name);
                 }
                 $userAvailableAccounts = array();
                 if ($ldap->getConfig()->debug) {
                     $this->response->setHeader('X-Scalr-LDAP-Debug', json_encode($ldap->getLog()));
                 }
                 // System users are not members of any group so if there is no groups then skip this.
                 if (count($groups) > 0) {
                     foreach ($this->db->GetAll('
                         SELECT clients.id, clients.name
                         FROM clients
                         JOIN client_environments ON client_environments.client_id = clients.id
                         JOIN account_team_envs ON account_team_envs.env_id = client_environments.id
                         JOIN account_teams ON account_teams.id = account_team_envs.team_id
                         WHERE account_teams.name IN(' . join(',', $groups) . ')') as $value) {
                         $userAvailableAccounts[$value['id']] = $value;
                     }
                 }
                 foreach ($this->db->GetAll("\n                        SELECT clients.id, clients.name, clients.org, clients.dtadded\n                        FROM clients\n                        JOIN account_users ON account_users.account_id = clients.id\n                        WHERE account_users.email = ? AND account_users.type = ?", array($login, Scalr_Account_User::TYPE_ACCOUNT_OWNER)) as $value) {
                     $value['dtadded'] = Scalr_Util_DateTime::convertTz($value['dtadded'], 'M j, Y');
                     $userAvailableAccounts[$value['id']] = $value;
                 }
                 $userAvailableAccounts = array_values($userAvailableAccounts);
                 if (empty($userAvailableAccounts)) {
                     throw new Scalr_Exception_Core('You don\'t have access to any account. ' . $ldap->getLog());
                 } elseif (count($userAvailableAccounts) == 1) {
                     $accountId = $userAvailableAccounts[0]['id'];
                 } else {
                     $ids = array();
                     foreach ($userAvailableAccounts as $value) {
                         $ids[] = $value['id'];
                     }
                     if (!$accountId && !in_array($accountId, $ids)) {
                         $this->response->data(array('accounts' => $userAvailableAccounts));
                         throw new Exception();
                     }
                 }
                 $user = new Scalr_Account_User();
                 $user = $user->loadByEmail($login, $accountId);
                 if (!$user) {
                     $user = new Scalr_Account_User();
                     $user->type = Scalr_Account_User::TYPE_TEAM_USER;
                     $user->status = Scalr_Account_User::STATUS_ACTIVE;
                     $user->create($login, $accountId);
                 }
                 if (!$user->fullname) {
                     $user->fullname = $ldap->getFullName();
                     $user->save();
                 }
                 if ($ldap->getUsername() != $ldap->getEmail()) {
                     $user->setSetting(Scalr_Account_User::SETTING_LDAP_EMAIL, $ldap->getEmail());
                     $user->setSetting(Scalr_Account_User::SETTING_LDAP_USERNAME, $ldap->getUsername());
                 } else {
                     $user->setSetting(Scalr_Account_User::SETTING_LDAP_EMAIL, '');
                 }
             } else {
                 throw new Exception("Incorrect login or password (1) " . $ldap->getLog());
             }
         } else {
             $userAvailableAccounts = $this->db->GetAll('
                 SELECT account_users.id AS userId, clients.id, clients.name, clients.org, clients.dtadded, au.email AS `owner`
//.........这里部分代码省略.........