File Coverage

blib/lib/Ark/Plugin/Authentication/Credential/Password.pm

Criterion	Covered	Total	%
statement	19	20	95.0
branch	3	4	75.0
condition			n/a
subroutine	4	4	100.0
pod	0	1	0.0
total	26	29	89.6

package Ark::Plugin::Authentication::Credential::Password;
use strict;
use warnings;
use Ark::Plugin 'Auth';

has cred_password_user_field => (
    is      => 'rw',
    isa     => 'Str',
    lazy    => 1,
    default => sub {
        my $self = shift;
        $self->class_config->{user_field} || 'username';
    },
);

has cred_password_password_field => (
    is      => 'rw',
    isa     => 'Str',
    lazy    => 1,
    default => sub {
        my $self = shift;
        $self->class_config->{password_field} || 'password';
    },
);

has cred_password_password_type => (
    is      => 'rw',
    isa     => 'Str',
    lazy    => 1,
    default => sub {
        my $self = shift;
        $self->class_config->{password_type} || 'clear';
    },
);

has cred_password_password_digest_model => (
    is      => 'rw',
    isa     => 'Object',
    lazy    => 1,
    default => sub {
        my $self  = shift;
        my $model = eval {
            $self->app->model($self->class_config->{digest_model} || 'Digest');
        };
    },
);

has cred_password_password_pre_salt => (
    is      => 'rw',
    isa     => 'Str',
    lazy    => 1,
    default => sub {
        my $self = shift;
        $self->class_config->{password_pre_salt} || '';
    },
);

has cred_password_password_post_salt => (
    is      => 'rw',
    isa     => 'Str',
    lazy    => 1,
    default => sub {
        my $self = shift;
        $self->class_config->{password_post_salt} || '';
    },
);

around authenticate => sub {
    my $prev = shift->(@_);
    return $prev if $prev;

    my ($self, $info) = @_;

    my $id = $info->{ $self->cred_password_user_field };
    if (my $user = $self->find_user($id, $info)) {
        my $check_password = __PACKAGE__->can('check_password');
        if ($check_password->($self, $info, $user)) {
            $self->persist_user($user);
            return $user;
        }
    }

    return;
};

sub check_password {
    my ($self, $info, $user) = @_;

    my $password          = $info->{ $self->cred_password_password_field };
    my $password_expected = $user->hash->{ $self->cred_password_password_field };

    if ($self->cred_password_password_type eq 'clear') {
        return $password eq $password_expected;
    }
    elsif ($self->cred_password_password_type eq 'hashed') {
        my $digest = $self->cred_password_password_digest_model;
        $digest->add( $self->cred_password_password_pre_salt );
        $digest->add( $password );
        $digest->add( $self->cred_password_password_post_salt );

        return $digest->hexdigest eq $password_expected;
    }
    else {
        die qq/Unknown password type "$self->{password_type}"/;
    }
}

1;