Property | Type | Description | |
---|---|---|---|
$_capabilities | array | An array of capabilities, so that the driver can report which operations it supports and which it doesn't. |
Method | Description | |
---|---|---|
__construct ( array $params = [] ) | Constructor. | |
transparent ( ) : boolean | Automatic authentication: checks if the username is set in the configured header. |
Method | Description | |
---|---|---|
_authenticate ( string $userId, array $credentials ) | Not implemented. | |
_validate ( $certificate ) : boolean | Perform additional validation of certificate fields. |
public __construct ( array $params = [] ) | ||
$params | array | Parameters: - password: (string) If available, the password to use for the session. DEFAULT: no password used. - username_field: (string) Name of the $_SERVER field that the username can be found in. DEFAULT: 'SSL_CLIENT_S_DN_EMAILADDRESS'. - certificate_field: (string) Name of the $_SERVER field that contains the full certificate. DEFAULT: 'SSL_CLIENT_CERT' - ignore_purpose: (boolean) If true, will ignore any usage restrictions on the presented client certificate. I.e., if openssl_x509_checkpurpose returns false, authentication may still proceed. DEFAULT: false - ONLY ENABLE THIS IF YOU KNOW WHY YOU ARE DOING SO. - filter: (array) An array where the keys are field names and the values are the values those certificate fields MUST match to be considered valid. Keys in the format of fieldone:fieldtwo will be taken as parent:child. DEFAULT: no additionachecks applied. |
protected _authenticate ( string $userId, array $credentials ) | ||
$userId | string | The userID to check. |
$credentials | array | An array of login credentials. |
public transparent ( ) : boolean | ||
return | boolean | Whether or not the client is allowed. |
protected array $_capabilities | ||
return | array |