File Coverage

blib/lib/Rubric/WebApp/Login/Post.pm

Criterion	Covered	Total	%
statement	21	21	100.0
branch	4	4	100.0
condition	2	3	66.6
subroutine	7	7	100.0
pod	3	3	100.0
total	37	38	97.3

use strict;
use warnings;
package Rubric::WebApp::Login::Post;
# ABSTRACT: process web login from query parameters
$Rubric::WebApp::Login::Post::VERSION = '0.156';
use parent qw(Rubric::WebApp::Login);

use Digest::MD5 qw(md5_hex);

#pod =head1 DESCRIPTION
#pod
#pod This module checks the submitted query for information needed to confirm that a
#pod user is logged into the Rubric.
#pod
#pod =head1 METHODS
#pod
#pod =head2 get_login_username
#pod
#pod This checks for the username in a current login request.  First it checks
#pod whether there is a C value in this session.  If not, it looks for
#pod a C query parameter.
#pod
#pod =cut

sub get_login_username {
	my ($class, $webapp) = @_;

	$webapp->session->param('current_user') || $webapp->query->param('user');
}

#pod =head2 authenticate_login($webapp, $user)
#pod
#pod This returns true if the username came from the session.  Otherwise, it checks
#pod for a C query parameter and compares its md5sum against the user's
#pod stored password md5sum.
#pod
#pod =cut

sub authenticate_login {
	my ($self, $webapp, $user) = @_;

	return 1 if
		$webapp->session->param('current_user') and
		$webapp->session->param('current_user') eq $user;

	my $password = $webapp->query->param('password');

	return (md5_hex($password) eq $user->password);
}

#pod =head2 set_current_user($webapp, $user)
#pod
#pod This method sets the current user in the session and then calls the superclass
#pod C.
#pod
#pod =cut

sub set_current_user {
	my ($self, $webapp, $user) = @_;

	$webapp->session->param(current_user => $user->username);
	$self->SUPER::set_current_user($webapp, $user);
}

1;

__END__