ログイン成功後のユーザー名またはパスワードの認識できないエラー
User_loginブロック形式で、私はバリデーターを添付しています：ws_res_auth_authenticate（以下のdsm出力の最後の1つ）で、このコードを使用してユーザーにログインします。
user_login_submit(array(), $form_state);
現在、この関数はユーザーを正しくログインしています。ページを更新するとログインしたことが表示されるため、セッションを開きます。
しかし、問題は、「申し訳ありませんが、認識できないユーザー名またはパスワードです。」というエラーが表示されることです。実際には、更新時にログイン領域やその他のマイアカウント情報が表示されるため、ログインしているように見えます。したがって、リダイレクトは行われません。リダイレクトするだけですPHPヘッダー関数、次に「ダイ」と呼びます。
つまり、login/passwdを指定して送信を押すと、「申し訳ありませんが、認識できないユーザー名またはパスワードです。」というエラーが表示されます。しかし、このページを更新すると、ログイン領域が表示されます。
Form_alter内のバリデーターの順序を変更して、バリデーター「res_auth_authenticate」が最初に呼び出されるようにしました。しかし、まだ同じ問題。
何が欠けていますか？
私がやろうとしていること
アカウントには、ローカルアカウント、LDAPおよびCSVソースの3種類があります。ログインしたユーザーがCSVソースで見つかった場合、そのユーザーをログインしたいのですが。
dsm（$ form ['＃validate']）の出力
... (Array, 7 elements)
0 (String, 32 characters ) ldap_user_grab_password_validate | (Callback) ldap_user_grab_password_validate();
1 (String, 24 characters ) user_login_name_validate | (Callback) user_login_name_validate();
2 (String, 66 characters ) ldap_authentication_core_override_user_login_au... | (Callback) ldap_authentication_core_override_user_login_au...();
3 (String, 52 characters ) ldap_authentication_user_login_authenticate_val... | (Callback) ldap_authentication_user_login_authenticate_val...();
4 (String, 38 characters ) noreqnewpass_user_login_final_validate | (Callback) noreqnewpass_user_login_final_validate();
5 (String, 32 characters ) readonlymode_check_form_validate | (Callback) readonlymode_check_form_validate();
6 (String, 22 characters ) ws_rest_auth_authenticate | (Callback) rest_auth_authenticate();
ここに完全なコードがあります
<?php
/**
* @file
* Allow users to login using an external web service.
*
* Users can login to the site using a RESTful web service. If the user is
* associated with a Drupal user, that user is logged in. If not, a new user is
* created.
*/
/**
* Implements hook_menu().
*/
function ws_rest_auth_menu()
{
$items['admin/config/people/rest_auth'] = array(
'title' => 'REST Auth',
'description' => 'Administer REST Auth settings.',
'page callback' => 'drupal_get_form',
'page arguments' => array('ws_rest_auth_settings_form'),
'access arguments' => array('administer users'),
);
return $items;
}
/**
* Form to administer REST Auth settings.
*/
function ws_rest_auth_settings_form($form, &$form_state)
{
$form = array();
$form['rest_auth_general'] = array(
'#type' => 'fieldset',
'#title' => t('General settings'),
'#collapsible' => TRUE,
'#collapsed' => FALSE,
);
$form['rest_auth_general']['rest_auth_url'] = array(
'#type' => 'textfield',
'#title' => t('Host'),
'#description' => t('Enter the fully-formed URL of the authentication service.'),
'#default_value' => variable_get('rest_auth_url'),
'#required' => TRUE,
);
$form['rest_auth_general']['rest_auth_param_name'] = array(
'#type' => 'textfield',
'#title' => t('Username parameter'),
'#description' => t('Enter the username parameter name that will get passed to the web service. If the username is buried inside the JSON response object, enter the hierarchy using <strong>\\</strong> as level delimiter. For example, if the username is inside <code>{"User": {"name": "Druplicon"}}</code>, enter <code>User\\name</code> in this box.'),
'#default_value' => variable_get('rest_auth_param_name'),
'#required' => TRUE,
);
$form['rest_auth_general']['rest_auth_param_pass'] = array(
'#type' => 'textfield',
'#title' => t('Password parameter'),
'#description' => t('Enter the password parameter name that will get passed to the web service. If the password is buried inside the JSON response object, enter the hierarchy using <strong>\\</strong> as level delimiter. For example, if the password is inside <code>{"User": {"password": "letmein"}}</code>, enter <code>User\\password</code> in this box.'),
'#default_value' => variable_get('rest_auth_param_pass'),
'#required' => TRUE,
);
$form['rest_auth_advanced'] = array(
'#type' => 'fieldset',
'#title' => t('Advanced settings'),
'#collapsible' => TRUE,
'#collapsed' => TRUE,
);
$form['rest_auth_advanced']['rest_auth_auth_side'] = array(
'#type' => 'radios',
'#title' => t('Authentication side'),
'#description' => t('This options allows you to determine where authentication happens.<br /><em>Note: It is more secure to authenticate provider-side, but it may require additional code from the web service provider.</em>'),
'#options' => array(
'provider' => t('Provider (Web service)'),
'consumer' => t('Consumer (Drupal)'),
),
'#default_value' => variable_get('rest_auth_auth_side', 'provider'),
);
$form['rest_auth_advanced']['rest_auth_response_name'] = array(
'#type' => 'textfield',
'#title' => t('Response username'),
'#description' => t('If your authentication is consumer-side, and the username is located in a different part of the JSON response object, enter that location here. If the username is burried inside the JSON response object, enter the hierarchy using <strong>\\</strong> as level delimiter. For example, if the username is inside <code>{"User": {"username": "Druplicon"}}</code>, enter <code>User\\username</code> in this box.'),
'#default_value' => variable_get('rest_auth_response_name'),
);
$form['rest_auth_advanced']['rest_auth_param_email'] = array(
'#type' => 'textfield',
'#title' => t('Email parameter'),
'#description' => t('If the response contains an email address, enter the email parameter name that will be returned from the web service. If this is left empty or if the parameter is not found, the module will try to use the username as the account email. If the email is buried inside the JSON response object, enter the hierarchy using <strong>\\</strong> as level delimiter. For example, if the email is inside <code>{"User": {"email": "[email protected]"}}</code>, enter <code>User\\email</code> in this box.'),
'#default_value' => variable_get('rest_auth_param_email'),
);
$roles = user_roles(TRUE);
unset($roles[DRUPAL_AUTHENTICATED_RID]);
$form['rest_auth_advanced']['rest_auth_roles'] = array(
'#type' => 'checkboxes',
'#title' => t('Roles'),
'#description' => t('Select the role(s) you would like to assign to new users created by REST Auth.'),
'#options' => $roles,
'#default_value' => variable_get('rest_auth_roles', array()),
);
if (module_exists('devel'))
{
$form['rest_auth_advanced']['rest_auth_debug'] = array(
'#type' => 'radios',
'#title' => t('Debug'),
'#description' => t('This option allows you to view the response object. Turn off for production websites.'),
'#options' => array(
0 => t('Disabled'),
1 => t('Enabled'),
),
'#default_value' => variable_get('rest_auth_debug', 0),
);
}
return system_settings_form($form);
}
/**
* Implements hook_form_alter().
*/
function ws_rest_auth_form_alter(&$form, &$form_state, $form_id)
{
if ($form_id == 'user_login' || $form_id == 'user_login_block')
{
if (isset($form_state['input']['name']))
{
array_unshift($form['#validate'], 'ws_rest_auth_authenticate');
dsm($form['#validate']);
}
}
}
/**
* Authenticates the user.
*/
function ws_rest_auth_authenticate($form, &$form_state)
{
$url = variable_get('rest_auth_url');
$name = $form_state['values']['name'];
$pass = $form_state['values']['pass'];
$data = array(
variable_get('rest_auth_param_name', 'name') => $name,
variable_get('rest_auth_param_pass', 'pass') => md5($pass),
);
$options = array(
'headers' => array(
'Accept' => 'application/json',
'Content-Type' => 'application/x-www-form-urlencoded',
),
'method' => 'POST',
'data' => drupal_http_build_query($data),
);
$response = drupal_http_request($url, $options);
if (module_exists('devel') && variable_get('rest_auth_debug', 0))
{
dpm($response, t('Response'));
}
// Verify for response error
if (isset($response->error))
{
drupal_set_message($response->error, 'error');
}
else
{
// Parse response data
$data = json_decode($response->data, TRUE);
if (module_exists('devel') && variable_get('rest_auth_debug', 0))
{
dpm($data, t('Data'));
}
if ($error = json_last_error())
{
// Error
switch ($error)
{
case JSON_ERROR_DEPTH:
drupal_set_message(t('The maximum stack depth has been exceeded'), 'error');
break;
case JSON_ERROR_STATE_MISMATCH:
drupal_set_message(t('Underflow or mode mismatch'), 'error');
break;
case JSON_ERROR_CTRL_CHAR:
drupal_set_message(t('Unexpected control character found'), 'error');
break;
case JSON_ERROR_SYNTAX:
drupal_set_message(t('Syntax error. Invalid or malformed JSON'), 'error');
break;
case JSON_ERROR_UTF8:
drupal_set_message(t('Malformed UTF-8 characters, possibly incorrectly encoded'), 'error');
break;
default:
drupal_set_message(t('Unknown error parsing data'), 'error');
break;
}
}
else
{
// Success
if ($uid = _rest_auth_login_register($data, $name, $pass, $form_state))
{
$form_state['uid'] = $uid;
return true;
dd(__LINE__);
}
}
}
}
/**
* Log in the user, registering if the user doesn't exist yet.
*/
function _rest_auth_login_register($data, $name, $pass, &$form_state)
{
$account = null;
//this user should not be existing in ldap_user
$count = db_query("SELECT module FROM {authmap} WHERE authname = :authname and module <> :module ", array(':authname' => $name, ':module' => 'ws_rest_auth'))->rowCount();
if ($count > 0)
{
//ignore it as this user has already entry thru another extrnal authentication
return FALSE;
}
// Authenticate if necessary
// Create account if it does not exist
if (!$account)
{
// Determine what the email for the user should be
$mail_candidate = _rest_auth_parse_data($data, variable_get('rest_auth_param_email'));
if (valid_email_address($mail_candidate))
{
// Use if it is a valid email
$mail = $mail_candidate;
}
elseif (valid_email_address($name))
{
// Default to username as email
$mail = $name;
}
else
{
drupal_set_message(t('A valid email was not found for this user'), 'error');
return FALSE;
}
//A valid email has been found
if (_rest_auth_user_exists($name))
{
//just verify the password and log him in
$account = user_external_load($name); //he must be existing in this
}
else
{
// Create and save new user
$userinfo = array(
'name' => $name,
'pass' => $pass,
'mail' => $mail,
'init' => $mail,
'status' => 1,
'roles' => variable_get('rest_auth_roles', array()),
'access' => REQUEST_TIME,
'data' => $data,
);
// Provide hook to alter user information
drupal_alter('rest_auth_user', $userinfo, $data);
$account = user_save(drupal_anonymous_user(), $userinfo);
// Set an error if the account creation failed
if (!$account)
{
drupal_set_message(t('Error saving user account.'), 'error');
return FALSE;
}
user_set_authmaps($account, array('authname_rest_auth' => $name));
}
}
else
{
// Update $user->data with information from the server
$userinfo = array('data' => $data);
// Provide hook to alter user information
$context = array('user' => clone $account);
drupal_alter('rest_auth_user', $userinfo, $data, $context);
user_save($account, $userinfo);
}
// Log the user in
dd($account->uid, 'uid');
$form_state['uid'] = $account->uid;
user_login_submit(array(), $form_state);
header('Location: http://localhost/my/user/1');
die();
return $account->uid;
}
/**
* Checks if a username already exists.
*/
function _rest_auth_user_exists($name)
{
if (db_query_range('SELECT 1 FROM {users} WHERE name = :name', 0, 1, array(':name' => $name))->fetchField())
{
return TRUE;
}
else
{
return FALSE;
}
}
/**
* Get the email based on the configured response path.
*/
function _rest_auth_parse_data($data, $xpath)
{
if ($xpath)
{
$xpath = explode('\\', $xpath);
$value = $data;
foreach ($xpath as $key)
{
if (isset($value[$key]))
{
$value = $value[$key];
}
}
return $value;
}
}
検証中にフォームを手動で送信しないでください。検証に合格すると、送信機能が自動的に呼び出されます。つまり、エラーをチェックして form_set_error チェックが失敗した場合。
表示されるエラーメッセージは、空の情報を使用してログインフォームを手動で送信しようとしたためです。そして、エラーにもかかわらず、ユーザーがまだログインしている理由は、検証エラーがないため、元のフォーム送信メソッドも呼び出されるためです。
これがそうであるかどうかはわかりませんが、user.moduleを調べていたときに、user_login_final_validate関数（user.moduleの2184行目）に遭遇しました。
その関数の状態のコメント：
/**
* The final validation handler on the login form.
*
* Sets a form error if user has not been authenticated, or if too many
* logins have been attempted. This validation function should always
* be the last one.
*/
最終的な検証が検証のリストに含まれていないことに気付き、それが原因かどうか疑問に思いました。