[TYPO3-dev] How to check credentials for FE-user?

[Jost Baron]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Charles,

This only works if EXT:saltedpasswords is used. This is currently the
case, as the extension is mandatory part of the core. But if either
this extension is replaced, or another authentication method is used
(e.g. OpenID, or something else), this will break.

I'd like to have a generic method to check a users credentials, no
matter how they are checked (not always possible, then an error should
be thrown).

I have found the class "AuthenticationService" [1], but no
documentation on how it is intended to be used. It looks like each
authentication service is part of some service chain, where each one
does some modifications.

Regards,
Jost

[1]:
http://api.typo3.org/typo3cms/current/html/class_t_y_p_o3_1_1_c_m_s_1_1_sv_1_1_authentication_service.html

On 09/05/2014 06:17 PM, Charles Brunet wrote:
> To look if a user exists, simply look into the fe_users table. In
> your query, be sure it is not desactivated nor deleted.
> 
> To check the password, look at 
> http://docs.typo3.org/typo3cms/extensions/saltedpasswords/6.2/DevelopersGuide/Index.html
>
>  Charles.
> 
> *Charles Brunet, B. Ing.* Webmestre. Étudiant au doctorat, génie
> électrique, Université Laval.
> 
> 
> 2014-09-05 11:43 GMT-04:00 Jost Baron <jost.baron at gmx.de>:
> 
> Hi!
> 
> Given a username/password combination, how do I check in an
> extension if this user exists and if the password is correct?
> 
> The goal is to create an integration with an OpenID provider,
> where the TYPO3 database is used to check the credentials. In order
> to do that, I want to build an extension that gets username and
> password as JSON (via HTTPS), and then tells the requester if the
> credentials are correct.
> 
> Regards, Jost
>> _______________________________________________ TYPO3-dev mailing
>> list TYPO3-dev at lists.typo3.org 
>> http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-dev
>> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iEYEARECAAYFAlQJ5akACgkQNme/yCvmvTICmgCfcIM3GVrtIctlm2WP8fHuRdIR
1qkAn0VfsMlIugZvg3jttHziKnCo+w01
=iFQr
-----END PGP SIGNATURE-----