Avoid login from onUserAuthenticate

Question

I'm trying to dismiss the login if my $completed var is false. I can make it work with die() but I wan't to know how to do this correct, so that the user gets returned to the login page with a error message.

I've tried with return NULL;, return false; and just return;

I can't make it work or find the solution anywhere. I really hope you can help me out.

This is my code:

defined('_JEXEC') or die;

class plgAuthenticationTestlogin extends JPlugin{
    function onUserAuthenticate( $credentials, $options, &$response ){
        $captcha_plugin = JFactory::getConfig()->get('captcha');
        $captcha = JCaptcha::getInstance($captcha_plugin);
        $completed = $captcha->CheckAnswer('captcha');
        if(!$completed){
            $response->status = JAuthentication::STATUS_FAILURE;
            $response->error_message = 'captcha not correct';
            die("not valid reCaptcha");
        }
    }
}

It is placed inside a plugin made. placed inside the folder: plugins > authentication > mypluginFolder > myplugin.php This plugin works fine as described above - The login is aborted if I use die("not valid reCaptcha");

Answer 1

This is not a correct way of doing this as you should not use 'die'

The proper way to do this will be using this method in the Authentication plugin

function onUserAuthenticate($credentials, $options, &$response)
{
    // check your condition and stop login here
    $response->status        = JAuthentication::STATUS_FAILURE;
    $response->type          = 'Test';
    $response->error_message = JText::sprintf('JGLOBAL_AUTH_FAILED', JText::_('NOT_LOGGED_IN'));
    return false;
}

You cannot set redirect here, to set redirect make sure to set it in the parameter(variable in JInput)

If the method is not triggered make sure to set the ordering in the correct sequence.

Answer 2

Looks like it's working this way. But is that the correct approach?

if(!$completed){
    $app = JFactory::getApplication();
    $app->enqueueMessage('ReCaptcha not validated', 'Fail');
    $app->redirect(JRoute::_('index.php'));
    die();
}

I feel like it's wrong and I should be using JAuthentication::STATUS_FAILURE;