fs
f4ce9f3378
- Add single-line class docblocks to all 59 repository classes and interfaces describing scope and responsibility - Add multi-line docblocks to key services documenting business rules: AuthService (6-step login cascade), ImportService (3-phase CSV workflow), TenantScopeService (strict/permissive modes), PermissionService (RBAC resolution + two-tier caching), UserAccountService (atomicity + audit) - Add transaction(callable) wrapper to DatabaseSessionRepository to DRY up begin/commit/rollback boilerplate Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
104 lines
3.2 KiB
PHP
104 lines
3.2 KiB
PHP
<?php
|
|
|
|
namespace MintyPHP\Repository\Auth;
|
|
|
|
use MintyPHP\DB;
|
|
|
|
/** Manages persistent login tokens with rotation, family tracking, and admin-initiated expiry. */
|
|
class RememberTokenRepository implements RememberTokenRepositoryInterface
|
|
{
|
|
private function unwrapList($rows): array
|
|
{
|
|
if (!is_array($rows)) {
|
|
return [];
|
|
}
|
|
$list = [];
|
|
foreach ($rows as $row) {
|
|
$data = $row['user_remember_tokens'] ?? $row;
|
|
if (is_array($data)) {
|
|
$list[] = $data;
|
|
}
|
|
}
|
|
return $list;
|
|
}
|
|
|
|
public function create(int $userId, string $selector, string $tokenHash, string $expiresAt): ?int
|
|
{
|
|
$id = DB::insert(
|
|
'insert into user_remember_tokens (user_id, selector, token_hash, expires_at, created) values (?,?,?,?,NOW())',
|
|
(string) $userId,
|
|
$selector,
|
|
$tokenHash,
|
|
$expiresAt
|
|
);
|
|
return $id ? (int) $id : null;
|
|
}
|
|
|
|
public function findBySelector(string $selector): ?array
|
|
{
|
|
$row = DB::selectOne(
|
|
'select id, user_id, selector, token_hash, expires_at, expired_by_admin_at, last_used from user_remember_tokens where selector = ? limit 1',
|
|
$selector
|
|
);
|
|
if (!$row || !isset($row['user_remember_tokens'])) {
|
|
return null;
|
|
}
|
|
return $row['user_remember_tokens'];
|
|
}
|
|
|
|
public function updateToken(int $id, string $tokenHash, string $expiresAt): bool
|
|
{
|
|
$result = DB::update(
|
|
'update user_remember_tokens set token_hash = ?, expires_at = ?, expired_by_admin_at = NULL, last_used = NOW() where id = ?',
|
|
$tokenHash,
|
|
$expiresAt,
|
|
(string) $id
|
|
);
|
|
return $result !== false;
|
|
}
|
|
|
|
public function expireAllByAdmin(): int
|
|
{
|
|
$result = DB::update(
|
|
'update user_remember_tokens set expires_at = NOW(), expired_by_admin_at = NOW() where expires_at > NOW()'
|
|
);
|
|
return $result !== false ? (int) $result : 0;
|
|
}
|
|
|
|
public function deleteById(int $id): bool
|
|
{
|
|
$result = DB::delete('delete from user_remember_tokens where id = ?', (string) $id);
|
|
return $result !== false;
|
|
}
|
|
|
|
public function deleteByUserId(int $userId): bool
|
|
{
|
|
$result = DB::delete('delete from user_remember_tokens where user_id = ?', (string) $userId);
|
|
return $result !== false;
|
|
}
|
|
|
|
public function listByUserId(int $userId, int $limit = 20): array
|
|
{
|
|
if ($userId <= 0) {
|
|
return [];
|
|
}
|
|
if ($limit < 1) {
|
|
$limit = 20;
|
|
} elseif ($limit > 100) {
|
|
$limit = 100;
|
|
}
|
|
$rows = DB::select(
|
|
'select id, user_id, selector, expires_at, expired_by_admin_at, last_used, created from user_remember_tokens where user_id = ? order by id desc limit ?',
|
|
(string) $userId,
|
|
(string) $limit
|
|
);
|
|
return $this->unwrapList($rows);
|
|
}
|
|
|
|
public function countActive(): int
|
|
{
|
|
$count = DB::selectValue('select count(*) from user_remember_tokens where expires_at > NOW()');
|
|
return $count ? (int) $count : 0;
|
|
}
|
|
}
|