misc

lyrasoft · Nov 18, 2023 · 5634632 · 5634632
1 parent 725a245
commit 5634632
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 2 deletions.
diff --git a/src/Auth/LunaAuthMethod.php b/src/Auth/LunaAuthMethod.php
@@ -116,8 +116,11 @@ public function authenticate(array $credential): AuthResult
             $M2 = BigInteger::fromBase($M2, 16);
 
             $proof = (string) $this->srpService->getUserState();
+
             $proof = BigInteger::fromBase($proof, 16);
 
+            $this->srpService->clearUserState();
+
             if (!hash_equals((string) $proof, (string) $M2)) {
                 return new AuthResult(AuthResult::INVALID_PASSWORD, $credential);
             }

diff --git a/src/Auth/SRP/SRPService.php b/src/Auth/SRP/SRPService.php
@@ -42,9 +42,14 @@ public function getUserState(): mixed
         return $this->session->get(static::SESSION_KEY);
     }
 
-    public function setUserState(mixed $data): mixed
+    public function setUserState(mixed $data): void
     {
-        return $this->session->set(static::SESSION_KEY, $data);
+        $this->session->set(static::SESSION_KEY, $data);
+    }
+
+    public function clearUserState(): void
+    {
+        $this->session->remove(static::SESSION_KEY);
     }
 
     public function generateVerifier(string $identity, string $password): PasswordFile