[TYPO3-dev] authUser() not used

[Helmut Hummel]

Hi Marcel,

On 20.12.14 09:51, Marcel Utz wrote:

> I'm trying to create my own authentication service for TYPO3. The services itself works fine, I check the user in the function getUser() to another database. But when I'm working with authUser() there is a problem. When I delete the function authUser() in "\TYPO3\CMS\Sv\AuthenticationService" (no other auth service installed) the login still works fine. So the function authUser() is not used by typo3 auth. This issue I got with TYPO3 Version 6.0.4 and 4.7.8. Do you have any idea why the function authUser() is not used?

These are the currently available subtypes of authentication services:

getUserBE, authUserBE, getUserFE, authUserFE, getGroupsFE, 
processLoginDataBE, processLoginDataFE

Your own service can register to any of them.

You can get an overview of all registered services in the reports module 
(switch select box on top to "Installed Services")

In a "plain" TYPO3 installation the following services are registered:

TYPO3\CMS\Sv\AuthenticationService
Priority 50, Quality 50
Subtypes:
getUserBE, authUserBE, getUserFE, authUserFE, getGroupsFE, 
processLoginDataBE, processLoginDataFE

TYPO3\CMS\Rsaauth\RsaAuthService
Priority 60, Quality 60
Subtypes:
processLoginDataBE, processLoginDataFE

TYPO3\CMS\Saltedpasswords\SaltedPasswordService
Priority 70, Quality 70
Subtypes:
authUserFE, authUserBE


 > My service has priority and quality 60.

To be able to reliably override all authentication requests in one 
service, it must have the highest priority in the system.

Make your service priority and quality 80 and returning 0 from authUser 
will deny authentication for a given request.

Kind regards,
Helmut

-- 
Helmut Hummel
Release Manager TYPO3 6.0
TYPO3 CMS Active Contributor, TYPO3 Security Team Member

TYPO3 .... inspiring people to share!
Get involved: typo3.org