d245bd25ae
This implements the AuthManager class and its needed interfaces and subclasses, and integrates them into the backend portion of MediaWiki. Integration with frontend portions of MediaWiki (e.g. ApiLogin, Special:Login) is left for a followup. Bug: T91699 Bug: T71589 Bug: T111299 Co-Authored-By: Gergő Tisza <gtisza@wikimedia.org> Change-Id: If89d24838e326fe25fe867d02181eebcfbb0e196
105 lines
2.9 KiB
PHP
105 lines
2.9 KiB
PHP
<?php
|
|
/**
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License along
|
|
* with this program; if not, write to the Free Software Foundation, Inc.,
|
|
* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
* http://www.gnu.org/copyleft/gpl.html
|
|
*
|
|
* @file
|
|
* @ingroup Auth
|
|
*/
|
|
|
|
namespace MediaWiki\Auth;
|
|
|
|
/**
|
|
* This represents the intention to set a temporary password for the user.
|
|
* @ingroup Auth
|
|
* @since 1.27
|
|
*/
|
|
class TemporaryPasswordAuthenticationRequest extends AuthenticationRequest {
|
|
/** @var string|null Temporary password */
|
|
public $password;
|
|
|
|
/** @var bool Email password to the user. */
|
|
public $mailpassword = false;
|
|
|
|
/**
|
|
* @var bool Do not fail certain operations if the password cannot be mailed, there is a
|
|
* backchannel present.
|
|
*/
|
|
public $hasBackchannel = false;
|
|
|
|
/** @var string Username or IP address of the caller */
|
|
public $caller;
|
|
|
|
public function getFieldInfo() {
|
|
return [
|
|
'mailpassword' => [
|
|
'type' => 'checkbox',
|
|
'label' => wfMessage( 'createaccountmail' ),
|
|
'help' => wfMessage( 'createaccountmail-help' ),
|
|
],
|
|
];
|
|
}
|
|
|
|
/**
|
|
* @param string|null $password
|
|
*/
|
|
public function __construct( $password = null ) {
|
|
$this->password = $password;
|
|
if ( $password ) {
|
|
$this->mailpassword = true;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Return an instance with a new, random password
|
|
* @return TemporaryPasswordAuthenticationRequest
|
|
*/
|
|
public static function newRandom() {
|
|
$config = \ConfigFactory::getDefaultInstance()->makeConfig( 'main' );
|
|
|
|
// get the min password length
|
|
$minLength = $config->get( 'MinimalPasswordLength' );
|
|
$policy = $config->get( 'PasswordPolicy' );
|
|
foreach ( $policy['policies'] as $p ) {
|
|
if ( isset( $p['MinimalPasswordLength'] ) ) {
|
|
$minLength = max( $minLength, $p['MinimalPasswordLength'] );
|
|
}
|
|
if ( isset( $p['MinimalPasswordLengthToLogin'] ) ) {
|
|
$minLength = max( $minLength, $p['MinimalPasswordLengthToLogin'] );
|
|
}
|
|
}
|
|
|
|
$password = \PasswordFactory::generateRandomPasswordString( $minLength );
|
|
|
|
return new self( $password );
|
|
}
|
|
|
|
/**
|
|
* Return an instance with an invalid password
|
|
* @return TemporaryPasswordAuthenticationRequest
|
|
*/
|
|
public static function newInvalid() {
|
|
$request = new self( null );
|
|
return $request;
|
|
}
|
|
|
|
public function describeCredentials() {
|
|
return [
|
|
'provider' => wfMessage( 'authmanager-provider-temporarypassword' ),
|
|
'account' => new \RawMessage( '$1', [ $this->username ] ),
|
|
] + parent::describeCredentials();
|
|
}
|
|
|
|
}
|