69 lines
2.1 KiB
PHP
69 lines
2.1 KiB
PHP
<?php
|
|
/**
|
|
* The tokens entry point of ZenTaoPMS.
|
|
*
|
|
* @copyright Copyright 2009-2023 禅道软件（青岛）有限公司(ZenTao Software (Qingdao) Co., Ltd. www.cnezsoft.com)
|
|
* @license ZPL(http://zpl.pub/page/zplv12.html) or AGPL(https://www.gnu.org/licenses/agpl-3.0.en.html)
|
|
* @author Chunsheng Wang <chunsheng@cnezsoft.com>
|
|
* @package entries
|
|
* @version 1
|
|
* @link https://www.zentao.net
|
|
*/
|
|
class tokensEntry extends baseEntry
|
|
{
|
|
/**
|
|
* POST method.
|
|
*
|
|
* @access public
|
|
* @return string
|
|
*/
|
|
public function post()
|
|
{
|
|
$account = $this->request('account');
|
|
$password = $this->request('password', '');
|
|
$authKey = $this->request('authKey', '');
|
|
$addAction = $this->request('addAction', false);
|
|
|
|
$this->loadModel('user');
|
|
|
|
if($password)
|
|
{
|
|
if($this->user->checkLocked($account)) return $this->sendError(400, sprintf($this->lang->user->loginLocked, $this->config->user->lockMinutes));
|
|
$user = $this->user->identify($account, $password);
|
|
}
|
|
else
|
|
{
|
|
$user = $this->loadModel('im')->userIdentifyWithToken($account, $authKey);
|
|
if(is_object($user))
|
|
{
|
|
$user->admin = strpos($this->app->company->admins, ",{$user->account},") !== false;
|
|
}
|
|
else
|
|
{
|
|
$user = null;
|
|
}
|
|
}
|
|
|
|
if($user)
|
|
{
|
|
$this->user->login($user, $addAction);
|
|
return $this->send(201, array('token' => session_id()));
|
|
}
|
|
|
|
$fails = $this->user->failPlus($account);
|
|
$remainTimes = $this->config->user->failTimes - $fails;
|
|
|
|
if($remainTimes <= 0)
|
|
{
|
|
return $this->sendError(400, sprintf($this->lang->user->loginLocked, $this->config->user->lockMinutes));
|
|
}
|
|
|
|
if($remainTimes <= 3)
|
|
{
|
|
return $this->sendError(400, sprintf($this->lang->user->lockWarning, $remainTimes));
|
|
}
|
|
|
|
return $this->sendError(400, $this->lang->user->loginFailed);
|
|
}
|
|
}
|