Token.php

Go to the documentation of this file.

<?php
 
namespace Rsi\Fred\User\Authenticator;
 
class Token extends \Rsi\Fred\User\Authenticator{
 
  public $tokenTime = 10; //!< Time (in seconds) for which the token is valid.
 
  protected function check(){
    return null;
  }
 
  public function token(){
    $this->session->time = time();
    return $this->session->token = \Rsi\Str::random();
  }
 
  public function verify($secret,$hash){
    $this->verified(
      $secret &&
      ($token = $this->session->token) &&
      ($this->session->time > time() - $this->tokenTime) &&
      hash_equals(md5($secret . $token),$hash)
    );
    return $this->checked;
  }
 
}