ticket #5017 add userFields setting to BaseAuthenticate

lib/Cake/Controller/Component/Auth/BaseAuthenticate.php

@@ -27,6 +27,7 @@ abstract class BaseAuthenticate {
  *
  * - `fields` The fields to use to identify a user by.
  * - `userModel` The model name of the User, defaults to User.
+ * - `userFields` Array of fields to retrieve from User model, null to retrieve all. Defaults to null.
  * - `scope` Additional conditions to use when looking up and authenticating users,
  *    i.e. `array('User.is_active' => 1).`
  * - `recursive` The value of the recursive key passed to find(). Defaults to 0.
@@ -43,6 +44,7 @@ abstract class BaseAuthenticate {
 			'password' => 'password'
 		),
 		'userModel' => 'User',
+		'userFields' => null,
 		'scope' => array(),
 		'recursive' => 0,
 		'contain' => null,
@@ -105,9 +107,15 @@ protected function _findUser($username, $password = null) {
 			$conditions = array_merge($conditions, $this->settings['scope']);
 		}
 
+		$userFields = $this->settings['userFields'];
+		if ($password !== null && $userFields !== null) {
+			$userFields[] = $fields['password'];
+		}
+
 		$result = ClassRegistry::init($userModel)->find('first', array(
 			'conditions' => $conditions,
 			'recursive' => $this->settings['recursive'],
+			'fields' => $userFields,
 			'contain' => $this->settings['contain'],
 		));
 		if (empty($result[$model])) {

lib/Cake/Test/Case/Controller/Component/Auth/BasicAuthenticateTest.php

@@ -197,6 +197,27 @@ public function testAuthenticateSuccess() {
 		$this->assertEquals($expected, $result);
 	}
 
+/**
+ * test userFields success
+ *
+ * @return void
+ */
+	public function testAuthenticateUserFieldsSuccess() {
+		$this->auth->settings['userFields'] = array('id', 'user');
+		$request = new CakeRequest('posts/index', false);
+		$request->addParams(array('pass' => array(), 'named' => array()));
+
+		$_SERVER['PHP_AUTH_USER'] = 'mariano';
+		$_SERVER['PHP_AUTH_PW'] = 'password';
+
+		$result = $this->auth->authenticate($request, $this->response);
+		$expected = array(
+			'id' => 1,
+			'user' => 'mariano',
+		);
+		$this->assertEquals($expected, $result);
+	}
+
 /**
  * test scope failure.
  *