You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
186 lines
4.2 KiB
186 lines
4.2 KiB
<?php |
|
namespace common\models; |
|
|
|
use yii\base\NotSupportedException; |
|
use yii\db\ActiveRecord; |
|
use yii\helpers\Security; |
|
use yii\web\IdentityInterface; |
|
|
|
/** |
|
* User model |
|
* |
|
* @property integer $id |
|
* @property string $username |
|
* @property string $password_hash |
|
* @property string $password_reset_token |
|
* @property string $email |
|
* @property string $auth_key |
|
* @property integer $role |
|
* @property integer $status |
|
* @property integer $created_at |
|
* @property integer $updated_at |
|
* @property string $password write-only password |
|
*/ |
|
class User extends ActiveRecord implements IdentityInterface |
|
{ |
|
const STATUS_DELETED = 0; |
|
const STATUS_ACTIVE = 10; |
|
|
|
const ROLE_USER = 10; |
|
|
|
/** |
|
* @inheritdoc |
|
*/ |
|
public static function tableName() |
|
{ |
|
return '{{%user}}'; |
|
} |
|
|
|
/** |
|
* @inheritdoc |
|
*/ |
|
public function behaviors() |
|
{ |
|
return [ |
|
'timestamp' => [ |
|
'class' => 'yii\behaviors\TimestampBehavior', |
|
'attributes' => [ |
|
ActiveRecord::EVENT_BEFORE_INSERT => ['created_at', 'updated_at'], |
|
ActiveRecord::EVENT_BEFORE_UPDATE => ['updated_at'], |
|
], |
|
], |
|
]; |
|
} |
|
|
|
/** |
|
* @inheritdoc |
|
*/ |
|
public function rules() |
|
{ |
|
return [ |
|
['status', 'default', 'value' => self::STATUS_ACTIVE], |
|
['status', 'in', 'range' => [self::STATUS_ACTIVE, self::STATUS_DELETED]], |
|
|
|
['role', 'default', 'value' => self::ROLE_USER], |
|
['role', 'in', 'range' => [self::ROLE_USER]], |
|
]; |
|
} |
|
|
|
/** |
|
* @inheritdoc |
|
*/ |
|
public static function findIdentity($id) |
|
{ |
|
return static::findOne($id); |
|
} |
|
|
|
/** |
|
* @inheritdoc |
|
*/ |
|
public static function findIdentityByAccessToken($token, $type = null) |
|
{ |
|
throw new NotSupportedException('"findIdentityByAccessToken" is not implemented.'); |
|
} |
|
|
|
/** |
|
* Finds user by username |
|
* |
|
* @param string $username |
|
* @return static|null |
|
*/ |
|
public static function findByUsername($username) |
|
{ |
|
return static::findOne(['username' => $username, 'status' => self::STATUS_ACTIVE]); |
|
} |
|
|
|
/** |
|
* Finds user by password reset token |
|
* |
|
* @param string $token password reset token |
|
* @return static|null |
|
*/ |
|
public static function findByPasswordResetToken($token) |
|
{ |
|
$expire = \Yii::$app->params['user.passwordResetTokenExpire']; |
|
$parts = explode('_', $token); |
|
$timestamp = (int) end($parts); |
|
if ($timestamp + $expire < time()) { |
|
// token expired |
|
return null; |
|
} |
|
|
|
return static::findOne([ |
|
'password_reset_token' => $token, |
|
'status' => self::STATUS_ACTIVE, |
|
]); |
|
} |
|
|
|
/** |
|
* @inheritdoc |
|
*/ |
|
public function getId() |
|
{ |
|
return $this->getPrimaryKey(); |
|
} |
|
|
|
/** |
|
* @inheritdoc |
|
*/ |
|
public function getAuthKey() |
|
{ |
|
return $this->auth_key; |
|
} |
|
|
|
/** |
|
* @inheritdoc |
|
*/ |
|
public function validateAuthKey($authKey) |
|
{ |
|
return $this->getAuthKey() === $authKey; |
|
} |
|
|
|
/** |
|
* Validates password |
|
* |
|
* @param string $password password to validate |
|
* @return boolean if password provided is valid for current user |
|
*/ |
|
public function validatePassword($password) |
|
{ |
|
return Security::validatePassword($password, $this->password_hash); |
|
} |
|
|
|
/** |
|
* Generates password hash from password and sets it to the model |
|
* |
|
* @param string $password |
|
*/ |
|
public function setPassword($password) |
|
{ |
|
$this->password_hash = Security::generatePasswordHash($password); |
|
} |
|
|
|
/** |
|
* Generates "remember me" authentication key |
|
*/ |
|
public function generateAuthKey() |
|
{ |
|
$this->auth_key = Security::generateRandomKey(); |
|
} |
|
|
|
/** |
|
* Generates new password reset token |
|
*/ |
|
public function generatePasswordResetToken() |
|
{ |
|
$this->password_reset_token = Security::generateRandomKey() . '_' . time(); |
|
} |
|
|
|
/** |
|
* Removes password reset token |
|
*/ |
|
public function removePasswordResetToken() |
|
{ |
|
$this->password_reset_token = null; |
|
} |
|
}
|
|
|