boinc/html/inc/token.inc

60 lines
2.0 KiB
PHP

<?php
// This file is part of BOINC.
// https://boinc.berkeley.edu
// Copyright (C) 2018 University of California
//
// BOINC is free software; you can redistribute it and/or modify it
// under the terms of the GNU Lesser General Public License
// as published by the Free Software Foundation,
// either version 3 of the License, or (at your option) any later version.
//
// BOINC is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
// See the GNU Lesser General Public License for more details.
//
// You should have received a copy of the GNU Lesser General Public License
// along with BOINC. If not, see <https://www.gnu.org/licenses/>.
require_once("../inc/boinc_db.inc");
require_once("../inc/util.inc");
// Constants for valid token types
define("TOKEN_TYPE_DELETE_ACCOUNT", "D");
define("TOKEN_TYPE_CHANGE_EMAIL", "E");
define("TOKEN_TYPE_LOGIN_INTERCEPT", "L");
// Constants for token durations
define("TOKEN_DURATION_TWO_HOURS", 7200);
define("TOKEN_DURATION_ONE_DAY", 86400);
define("TOKEN_DURATION_ONE_WEEK", 604800);
function create_token($userid, $type, $duration) {
$token = random_string();
$now = time();
$expiration = $now + $duration;
$type = BoincDb::escape_string($type);
$ret = BoincToken::insert("(token,userid,type,create_time,expire_time) values ('$token', $userid, '$type', $now, $expiration)");
if ( !$ret ) {
return null;
}
return $token;
}
function delete_token($userid, $token, $type) {
$token = BoincDb::escape_string($token);
$type = BoincDb::escape_string($type);
$result = BoincToken::delete_token("userid = $userid and token = '$token' and type = '$type'");
return $result;
}
function is_valid_token($userid, $token, $type) {
$boincToken = BoincToken::lookup_valid_token($userid, $token, $type);
if ( $boincToken == null ) {
return false;
}
return true;
}
?>