[SOLVED] PART I - Definitely Yii isn't friendly with its Authentication feature

[mnobre (Marconobre)]

(my environment is: Apache/2.2.11 (Win32) DAV/2 mod_ssl/2.2.11 OpenSSL/0.9.8i mod_autoindex_color PHP/5.2.8 Yii Framework/1.0.3)

First Scenario - Following the instructions founded at Definitive Guide (http://www.yiiframework.com/doc/guide/topics.auth) and Yii CookBook (http://www.yiiframework.com/doc/cookbook/6/)

--------------------------------------------------------------------------

Step 1: main.php config file has

Quote

...

'user'=>array(

                  'allowAutoLogin'=>TRUE, // enable cookie-based authentication

                ),

…

Step 2: extending the CUserIdentity Yii class

Quote

<?php

class UserIdentity extends CUserIdentity

{

public $_id = NULL;	











public function authenticate()





{ 





	$senha	= md5($this->password);

        $user = Usuario::model()->findByAttributes( array('de_nick'=>"{$this->username}", 'de_senha'=>"{$senha}") );

	if( $user===null ) {





		$this->errorCode=self::ERROR_UNKNOWN_IDENTITY;





	} else {





		$this->_id		= $user->id_usuario;





		$this->password = $senha;

                          // customizing USER object !!!

		$this->setState( 'tp_pessoa', $user['tp_pessoa'] );





		$this->setState( 'guestName', $user['de_nick'] );





		$this->errorCode=self::ERROR_NONE;





	}





	return !$this->errorCode;





}











public function getId()





{





	return $this->_id;





}		

}

?>

Step 3: Evaluating the Yii::App()->user has changed as expected, at SiteControler program (assuming the input of a valid login data).

Quote

public function actionIndex()

{





	// renders the view file 'protected/views/site: /index.php or /login.php'





	// using the default layout 'protected/views/layouts: /mainLayout.php or /loginLayout.php'





	if( Yii::App()->user->isGuest ) {





		$this->layout = 'loginLayout';





		$form = new LoginForm;





		// collect user input data





		if(isset($_POST['LoginForm']))





		{





			$form->attributes=$_POST['LoginForm'];





			// validate user input and redirect to previous page if valid





			if($form->validate())





				$this->redirect(Yii::app()->user->returnUrl);





		}





		// display the login form





		$this->render( 'login', array('form'=>$form) ); 





	} else {

var_dump(Yii::App()->user); // (***)

die();

// display the main program

		$this->layout = 'mainLayout';





		$this->render('index');





	}





}</div></div>

Step 4: The great disappointment: Where is the customization?

Quote

( the output of var_dump  *** )

object(CWebUser)#8 { [“allowAutoLogin”]=>  bool(true) [“guestName”]=>  string(5) “Guest” [“loginUrl”]=>  array(1) { [0]=>  string(10) “site/login” } ["_keyPrefix:private"]=>  string(32) “7f3668ab9970a2aec82f5148750368e0” [“behaviors”]=>  array(0) { } ["_initialized:private"]=>  bool(true) ["_e:private"]=>  NULL ["_m:private"]=>  NULL }

At next post I will expose the second scenario of desapointment.

TIA

MN

[qiang (Qiang Xue)]

The customized data are stored in $_SESSION. That's why you couldn't see them in var_dump of the user object.

[mnobre (Marconobre)]

( Only for curiosity, my php was configured with session_auto_start = On )

But I think that "$this->setState( 'prop', 'data' );" into UserIdentity would injecting a new property into Yii::App()->user instance ?!?!? Wouldn't it ?

MN

[qiang (Qiang Xue)]

It does. However, CWebUser doesn't keep them in memory. Instead, they are stored in $_SESSION so that they are persistent during the whole session.

[mnobre (Marconobre)]

So, how can I investigate it ?

If you are right, what kind of fixing code that I can do ? (and Where?)

This is a bug or a need to repair the Yii?

TIA MN.

[mnobre (Marconobre)]

You are right !

WebUser is putting those "new" (injected) properties in $_SESSION !!!

For example:

All like this: $_SESSION['7f3668ab9970a2aec82f5148750368e0guestName']=>'superadmin' ie. prefixed by _keyPrefix value !

I was sad because I wanted to access the "new" User data by: Yii::App()->user->de_nick, for example.

Any clue ?

MN

[jonah (Poppitypop)]

You can do that (my app is customized to do this too).

Just extend CWebUser::init() to inject the session data back into the object.  Ex:

$this->email = $this->getState('email');

I thought as of yii 1.0.3 this is done automatically though… at least that's what I have written down in my code docs

[mnobre (Marconobre)]

BINGO !!!

You are right !

I can do it with a litle (bit) change on your ideia. My WebUser class looks like:

Quote

<?php

class WebUser extends CWebUser

{

/* the same Usuario (my User) ActiveRecord (db table) properties	*/





public $id_usuario			= NULL;





public $de_senha			= NULL;





public $tp_status			= NULL;





public $de_codigo_ativacao	= NULL;





public $de_observacao		= NULL;





public $de_nick				= NULL;





public $dt_registro			= NULL;





public $dt_cancelamento		= NULL;





public $tp_pessoa			= NULL;





public $id_pessoa_fisica	= NULL;





public $de_config			= NULL; 





public $id_perfil			= NULL;





public $arr_role			= NULL;





public $de_theme 			= NULL;

// Your tip !!!

public function init()

{





	parent::init();





	$propertiesUsuario = get_class_vars( 'WebUser' );





	foreach( $propertiesUsuario as $k=>$v ) 





		if(! is_array($v) ) $this->$k = $this->getState($k);





}</span>











public function login($identity,$duration=0) 





{





	parent::login($identity,$duration);











	if( ! empty($identity-&gt;id) ) 





	{





		$user = Usuario::model()-&gt;findByAttributes( array(&#039;de_nick&#039;=&gt;&quot;{$identity-&gt;username}&quot;, &#039;de_senha&#039;=&gt;&quot;{$identity-&gt;password}&quot;) ); 





		if( ! is_null($user) ) 





		{





			// Injects the same name Usuario (AR) properties





			$propertiesUsuario = get_class_vars( &#039;WebUser&#039; );





			foreach( $propertiesUsuario as $k=&gt;$v ) {





				if(! is_array($v) )&nbsp; 





					if( isset( $user-&gt;$k ) ) $this-&gt;setState( $k, $user[$k] );





			}





			$this-&gt;setState( &#039;guestName&#039;, $user&#91;&#039;de_nick&#039;] );





			$this-&gt;saveIdentityStates();





		}





	}





}

}

?>