Why: * When code throws a UserNotLoggedIn error for a temporary account, this takes them to Special:UserLogin and asks them to log in to an account * Users using temporary accounts are less likely to have a named account, so should instead be sent to Special:CreateAccount (as described in T358586) * When doing this, the warning message should be customised to talk about the user needing to create an account (and not log in) What: * Update UserNotLoggedIn to redirect to Special:CreateAccount when the user is logged in to a temporary account ** The code which constructs the exception object can override this and force the redirect to always be to Special:UserLogin. * When the redirect is to Special:CreateAccount, allow customising the message shown by adding a '-for-temp-user' suffix to the message key in UserNotLoggedIn. ** This suffix is only added if the resulting message exists, so that code can choose whether they need a message that is different to the one on Special:UserLogin. * Update SpecialPage::requiredNamedUser to allow special pages to force the redirect to always be to Special:UserLogin ** This is made use of in Special:ChangeEmail and Special:ConfirmEmail, as these special pages only make sense for use with an existing account. * Update and add message keys to allow a different message for Special:CreateAccount. * Update and add tests for these changes. Bug: T358586 Change-Id: Ie0dd06f51b1e2b85eef6be377f673a02732ce604
149 lines
5.7 KiB
PHP
149 lines
5.7 KiB
PHP
<?php
|
|
/**
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License along
|
|
* with this program; if not, write to the Free Software Foundation, Inc.,
|
|
* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
* http://www.gnu.org/copyleft/gpl.html
|
|
*
|
|
* @file
|
|
*/
|
|
|
|
use MediaWiki\Context\RequestContext;
|
|
use MediaWiki\SpecialPage\SpecialPage;
|
|
|
|
/**
|
|
* Redirect a user to the login page or account creation page
|
|
*
|
|
* This is essentially an ErrorPageError exception which by default uses the
|
|
* 'exception-nologin' as a title and 'exception-nologin-text' for the message.
|
|
*
|
|
* When the user is a temporary account, the redirect will point to the Special:CreateAccount page unless
|
|
* specifically set not to. In all other cases, the redirect is to the Special:UserLogin page.
|
|
*
|
|
* The message key for the reason will be modified to include '-for-temp-user' when the user is logged
|
|
* in to a temporary account and this message key exists (i.e. defined and not empty).
|
|
*
|
|
* @note In order for this exception to redirect, the error message passed to the
|
|
* constructor has to be explicitly added to LoginHelper::validErrorMessages or with
|
|
* the LoginFormValidErrorMessages hook. Otherwise, the user will just be shown the message
|
|
* rather than redirected.
|
|
*
|
|
* @par Example:
|
|
* @code
|
|
* if ( $user->isAnon() ) {
|
|
* throw new UserNotLoggedIn();
|
|
* }
|
|
* @endcode
|
|
*
|
|
* Note the parameter order differs from ErrorPageError, this allows you to
|
|
* simply specify a reason without overriding the default title.
|
|
*
|
|
* @par Example:
|
|
* @code
|
|
* if ( $user->isAnon() ) {
|
|
* throw new UserNotLoggedIn( 'action-require-loggedin' );
|
|
* }
|
|
* @endcode
|
|
*
|
|
* You can use {@link SpecialPage::requireLogin} and {@link SpecialPage::requireNamedUser} to throw this
|
|
* exception when the user is an anon user or not named respectively.
|
|
*
|
|
* @newable
|
|
* @see T39627
|
|
* @since 1.20
|
|
* @ingroup Exception
|
|
*/
|
|
class UserNotLoggedIn extends ErrorPageError {
|
|
|
|
private bool $alwaysRedirectToLoginPage;
|
|
|
|
/**
|
|
* @stable to call
|
|
*
|
|
* @note The value of the $reasonMsg parameter must be set with the LoginFormValidErrorMessages
|
|
* hook if you want the user to be automatically redirected to the login form.
|
|
*
|
|
* @param string $reasonMsg A message key containing the reason for the error. '-for-temp-user' will be
|
|
* appended to the end of the message key if the user is a temporary account and the redirect is
|
|
* to the Special:CreateAccount page. The modification is skipped if the message key does not
|
|
* exist.
|
|
* Optional, default: 'exception-nologin-text'
|
|
* @param string $titleMsg A message key to set the page title.
|
|
* Optional, default: 'exception-nologin'
|
|
* @param array $params Parameters to wfMessage() for $reasonMsg and $tempUserReasonMsg
|
|
* Optional, default: []
|
|
* @param bool $alwaysRedirectToLoginPage Whether we should always redirect to the login page, even if the
|
|
* user is a temporary account. If false (the default), the redirect will be to Special:CreateAccount
|
|
* when the user is logged in to a temporary account.
|
|
*/
|
|
public function __construct(
|
|
$reasonMsg = 'exception-nologin-text',
|
|
$titleMsg = 'exception-nologin',
|
|
$params = [],
|
|
bool $alwaysRedirectToLoginPage = false
|
|
) {
|
|
$context = RequestContext::getMain();
|
|
// Replace the reason message for one that describes creating account when the user is a temporary account
|
|
// when such a custom message exists (T358586).
|
|
if ( $context->getUser()->isTemp() && !$alwaysRedirectToLoginPage ) {
|
|
// For grep to find usages: exception-nologin-text-for-temp-user
|
|
$tempUserReasonMsg = $reasonMsg . '-for-temp-user';
|
|
if ( $context->msg( $tempUserReasonMsg )->exists() ) {
|
|
$reasonMsg = $tempUserReasonMsg;
|
|
}
|
|
}
|
|
parent::__construct( $titleMsg, $reasonMsg, $params );
|
|
$this->alwaysRedirectToLoginPage = $alwaysRedirectToLoginPage;
|
|
}
|
|
|
|
/**
|
|
* Redirect to Special:Userlogin or Special:CreateAccount if the specified message is compatible. Otherwise,
|
|
* show an error page as usual.
|
|
* @param int $action
|
|
*/
|
|
public function report( $action = self::SEND_OUTPUT ) {
|
|
// If an unsupported message is used, don't try redirecting to Special:Userlogin,
|
|
// since the message may not be compatible.
|
|
if ( !in_array( $this->msg, LoginHelper::getValidErrorMessages() ) ) {
|
|
parent::report( $action );
|
|
return;
|
|
}
|
|
|
|
$context = RequestContext::getMain();
|
|
|
|
// Message is valid. Redirect to Special:Userlogin, unless the user is a temporary account in which case
|
|
// redirect to Special:CreateAccount (T358586).
|
|
$specialPageName = 'Userlogin';
|
|
if ( $context->getUser()->isTemp() && !$this->alwaysRedirectToLoginPage ) {
|
|
$specialPageName = 'CreateAccount';
|
|
}
|
|
|
|
$output = $context->getOutput();
|
|
$query = $context->getRequest()->getValues();
|
|
// Title will be overridden by returnto
|
|
unset( $query['title'] );
|
|
// Redirect to Special:Userlogin
|
|
$output->redirect( SpecialPage::getTitleFor( $specialPageName )->getFullURL( [
|
|
// Return to this page when the user logs in
|
|
'returnto' => $context->getTitle()->getFullText(),
|
|
'returntoquery' => wfArrayToCgi( $query ),
|
|
'warning' => $this->msg,
|
|
// Forward the 'display' parameter if provided
|
|
'display' => $query['display'] ?? null,
|
|
] ) );
|
|
|
|
if ( $action === self::SEND_OUTPUT ) {
|
|
$output->output();
|
|
}
|
|
}
|
|
}
|