2021-07-24 05:16:34 -05:00
|
|
|
// Copyright 2021 The Gitea Authors. All rights reserved.
|
2022-11-27 13:20:29 -05:00
|
|
|
// SPDX-License-Identifier: MIT
|
2021-07-24 05:16:34 -05:00
|
|
|
|
|
|
|
package db
|
|
|
|
|
|
|
|
import (
|
2021-11-22 10:21:55 -05:00
|
|
|
"code.gitea.io/gitea/models/db"
|
2021-11-24 04:49:20 -05:00
|
|
|
user_model "code.gitea.io/gitea/models/user"
|
2021-07-24 05:16:34 -05:00
|
|
|
"code.gitea.io/gitea/modules/setting"
|
|
|
|
)
|
|
|
|
|
|
|
|
// Authenticate authenticates the provided user against the DB
|
2021-11-24 04:49:20 -05:00
|
|
|
func Authenticate(user *user_model.User, login, password string) (*user_model.User, error) {
|
2021-07-24 05:16:34 -05:00
|
|
|
if user == nil {
|
2021-11-24 04:49:20 -05:00
|
|
|
return nil, user_model.ErrUserNotExist{Name: login}
|
2021-07-24 05:16:34 -05:00
|
|
|
}
|
|
|
|
|
|
|
|
if !user.IsPasswordSet() || !user.ValidatePassword(password) {
|
2021-11-24 04:49:20 -05:00
|
|
|
return nil, user_model.ErrUserNotExist{UID: user.ID, Name: user.Name}
|
2021-07-24 05:16:34 -05:00
|
|
|
}
|
|
|
|
|
|
|
|
// Update password hash if server password hash algorithm have changed
|
2022-01-04 10:13:52 -05:00
|
|
|
// Or update the password when the salt length doesn't match the current
|
|
|
|
// recommended salt length, this in order to migrate user's salts to a more secure salt.
|
|
|
|
if user.PasswdHashAlgo != setting.PasswordHashAlgo || len(user.Salt) != user_model.SaltByteLength*2 {
|
2021-07-24 05:16:34 -05:00
|
|
|
if err := user.SetPassword(password); err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
2021-11-24 04:49:20 -05:00
|
|
|
if err := user_model.UpdateUserCols(db.DefaultContext, user, "passwd", "passwd_hash_algo", "salt"); err != nil {
|
2021-07-24 05:16:34 -05:00
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
// WARN: DON'T check user.IsActive, that will be checked on reqSign so that
|
|
|
|
// user could be hint to resend confirm email.
|
|
|
|
if user.ProhibitLogin {
|
2021-11-24 04:49:20 -05:00
|
|
|
return nil, user_model.ErrUserProhibitLogin{
|
2021-07-24 05:16:34 -05:00
|
|
|
UID: user.ID,
|
|
|
|
Name: user.Name,
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2023-04-17 11:36:50 -05:00
|
|
|
// attempting to login as a non-user account
|
|
|
|
if user.Type != user_model.UserTypeIndividual {
|
|
|
|
return nil, user_model.ErrUserProhibitLogin{
|
|
|
|
UID: user.ID,
|
|
|
|
Name: user.Name,
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2021-07-24 05:16:34 -05:00
|
|
|
return user, nil
|
|
|
|
}
|