看板初始化提交

2026-06-01 21:23:12 -07:00
commit 54a842f4ab
2104 changed files with 241695 additions and 0 deletions
@@ -0,0 +1,117 @@
+<?php
+
+namespace Kanboard\Subscriber;
+
+use Symfony\Component\EventDispatcher\EventSubscriberInterface;
+use Kanboard\Core\Security\AuthenticationManager;
+use Kanboard\Core\Session\SessionManager;
+use Kanboard\Event\AuthSuccessEvent;
+use Kanboard\Event\AuthFailureEvent;
+
+/**
+ * Authentication Subscriber
+ *
+ * @package subscriber
+ * @author  Frederic Guillot
+ */
+class AuthSubscriber extends BaseSubscriber implements EventSubscriberInterface
+{
+    /**
+     * Get event listeners
+     *
+     * @static
+     * @access public
+     * @return array
+     */
+    public static function getSubscribedEvents()
+    {
+        return array(
+            AuthenticationManager::EVENT_SUCCESS => 'afterLogin',
+            AuthenticationManager::EVENT_FAILURE => 'onLoginFailure',
+            SessionManager::EVENT_DESTROY => 'afterLogout',
+        );
+    }
+
+    /**
+     * After Login callback
+     *
+     * @access public
+     * @param  AuthSuccessEvent $event
+     */
+    public function afterLogin(AuthSuccessEvent $event)
+    {
+        $this->logger->debug('Subscriber executed: '.__METHOD__);
+
+        $userAgent = $this->request->getUserAgent();
+        $ipAddress = $this->request->getIpAddress();
+
+        $this->userLockingModel->resetFailedLogin($this->userSession->getUsername());
+        $this->captchaModel->resetFailedLogin($ipAddress);
+
+        $this->lastLoginModel->create(
+            $event->getAuthType(),
+            $this->userSession->getId(),
+            $ipAddress,
+            $userAgent
+        );
+
+        if ($event->getAuthType() === 'RememberMe') {
+            $this->userSession->setPostAuthenticationAsValidated();
+        }
+
+        if (REMEMBER_ME_AUTH && session_is_true('hasRememberMe') && ! $this->userSession->hasPostAuthentication()) {
+            $session = $this->rememberMeSessionModel->create($this->userSession->getId(), $ipAddress, $userAgent);
+            $this->rememberMeCookie->write($session['token'], $session['sequence'], $session['expiration']);
+        }
+    }
+
+    /**
+     * Destroy RememberMe session on logout
+     *
+     * @access public
+     */
+    public function afterLogout()
+    {
+        $this->logger->debug('Subscriber executed: '.__METHOD__);
+        $credentials = $this->rememberMeCookie->read();
+
+        if ($credentials !== false) {
+            $session = $this->rememberMeSessionModel->find($credentials['token'], $credentials['sequence']);
+
+            if (! empty($session)) {
+                $this->rememberMeSessionModel->remove($session['id']);
+            }
+
+            $this->rememberMeCookie->remove();
+        }
+    }
+
+    /**
+     * Increment failed login counter
+     *
+     * @access public
+     * @param AuthFailureEvent $event
+     */
+    public function onLoginFailure(AuthFailureEvent $event)
+    {
+        $this->logger->debug('Subscriber executed: '.__METHOD__);
+        $username = $event->getUsername();
+        $ipAddress = $this->request->getIpAddress();
+
+        // IP-based captcha
+        $this->captchaModel->incrementFailedLogin($ipAddress);
+
+        if (! empty($username)) {
+            // log login failure in web server log to allow fail2ban usage
+            error_log('Kanboard: user '.$username.' authentication failure with IP address: '.$ipAddress);
+            $this->userLockingModel->incrementFailedLogin($username);
+
+            if ($this->userLockingModel->getFailedLogin($username) > BRUTEFORCE_LOCKDOWN) {
+                $this->userLockingModel->lock($username, BRUTEFORCE_LOCKDOWN_DURATION);
+            }
+        } else {
+            // log login failure in web server log to allow fail2ban usage
+            error_log('Kanboard: user Unknown authentication failure with IP address: '.$ipAddress);
+        }
+    }
+}