暂存

app/service/AdminAuthService.php

@@ -0,0 +1,63 @@
+<?php
+
+namespace app\service;
+
+use support\Request;
+
+class AdminAuthService
+{
+    private const SESSION_KEY = 'proofdb_admin_user_id';
+
+    public function __construct(private readonly ?AdminUserRepository $users = null)
+    {
+    }
+
+    public function authenticate(string $username, string $password): ?array
+    {
+        $username = trim($username);
+        if ($username === '' || $password === '') {
+            return null;
+        }
+
+        $user = $this->users()->findByUsername($username);
+        if ($user === null || !password_verify($password, $user['password_hash'])) {
+            return null;
+        }
+
+        unset($user['password_hash']);
+        return $user;
+    }
+
+    public function login(Request $request, array $user): void
+    {
+        $request->session()->set(self::SESSION_KEY, (int) $user['id']);
+        $this->users()->touchLastLogin((int) $user['id']);
+    }
+
+    public function logout(Request $request): void
+    {
+        $request->session()->delete(self::SESSION_KEY);
+    }
+
+    public function current(Request $request): ?array
+    {
+        $id = (int) $request->session()->get(self::SESSION_KEY, 0);
+        if ($id <= 0) {
+            return null;
+        }
+
+        $user = $this->users()->findById($id);
+        if ($user === null) {
+            $request->session()->delete(self::SESSION_KEY);
+            return null;
+        }
+
+        unset($user['password_hash']);
+        return $user;
+    }
+
+    private function users(): AdminUserRepository
+    {
+        return $this->users ?? new AdminUserRepository();
+    }
+}