Token.php

Go to the documentation of this file.

<?php

namespace Rsi\Fred\User\Authenticator;

class Token extends \Rsi\Fred\User\Authenticator{

  public $tokenTime = 10; //!< Time (in seconds) for which the token is valid.

  protected function check(){
    return null;
  }

  public function token(){
    $this->session->time = time();
    return $this->session->token = \Rsi\Str::random();
  }

  public function verify($secret,$hash){
    $this->verified(
      $secret &&
      ($token = $this->session->token) &&
      ($this->session->time > time() - $this->tokenTime) &&
      hash_equals(md5($secret . $token),$hash)
    );
    return $this->checked;
  }

}