setDescription('Create admin backend user');
$this->setHelp('Create a new user with administrative access.');
$this->setDefinition(
[
new InputArgument(
'username',
InputArgument::REQUIRED,
'Username of the user'
),
new InputArgument(
'password',
InputArgument::REQUIRED,
'Password of the user'
),
]
);
}
protected function interact(InputInterface $input, OutputInterface $output)
{
$io = new SymfonyStyle($input, $output);
if (empty($input->getArgument('username'))) {
$username = $io->ask(
'Username',
null,
function ($username) {
if ($error = $this->validateUsername($username)) {
throw new ArgumentValidationFailedException($error);
}
return $username;
}
);
$input->setArgument('username', $username);
}
if (empty($input->getArgument('password'))) {
$password = $io->askHidden(
'Password',
function ($password) {
if ($error = $this->validatePassword($password)) {
throw new ArgumentValidationFailedException($error);
}
return $password;
}
);
$this->passwordAsArgument = false;
$input->setArgument('password', $password);
}
}
protected function execute(InputInterface $input, OutputInterface $output): int
{
$username = $input->getArgument('username');
$password = $input->getArgument('password');
if ($this->passwordAsArgument) {
$output->writeln('Using a password on the command line interface can be insecure.');
}
if ($userError = $this->validateUsername($username)) {
$output->writeln(sprintf('%s', $userError));
}
if ($passwordError = $this->validatePassword($password)) {
$output->writeln(sprintf('%s', $passwordError));
}
if (isset($userError) || isset($passwordError)) {
return 1;
}
$passwordHasher = GeneralUtility::makeInstance(PasswordHashFactory::class)->getDefaultHashInstance('BE');
$adminUserFields = [
'username' => $username,
'password' => $passwordHasher->getHashedPassword($password),
'admin' => 1,
'tstamp' => $GLOBALS['EXEC_TIME'],
'crdate' => $GLOBALS['EXEC_TIME'],
];
$connectionPool = GeneralUtility::makeInstance(ConnectionPool::class);
$connectionPool->getConnectionForTable('be_users')
->insert('be_users', $adminUserFields);
$output->writeln(sprintf('Created admin user with username "%s".', $username));
return 0;
}
private function validateUsername(?string $username): ?string
{
if (empty($username)) {
return 'Username must not be empty.';
}
$cleanedUsername = strtolower(preg_replace('/\\s/i', '', $username));
if ($username !== $cleanedUsername) {
return sprintf('No special characters are allowed in username. Use "%s" as username instead.', $cleanedUsername);
}
$queryBuilder = GeneralUtility::makeInstance(ConnectionPool::class)->getQueryBuilderForTable('be_users');
$queryBuilder->getRestrictions()
->removeByType(StartTimeRestriction::class)
->removeByType(EndTimeRestriction::class)
->removeByType(HiddenRestriction::class);
$userExists = $queryBuilder->count('uid')
->from('be_users')
->where(
$queryBuilder->expr()->eq('username', $queryBuilder->createNamedParameter($username))
)->execute()->fetchColumn() > 0;
if ($userExists) {
return sprintf('A user with username "%s" already exists.', $username);
}
return null;
}
private function validatePassword(?string $password): ?string
{
if (empty($password)) {
return 'Password must not be empty.';
}
if (strlen($password) < 8) {
return 'Password must have at least 8 characters.';
}
return null;
}
}