TOTPDisableForm.php

Go to the documentation of this file.

<?php
 
namespace MediaWiki\Extension\OATHAuth\HTMLForm;
 
use MediaWiki\Extension\OATHAuth\Module\TOTP;
use MediaWiki\Logger\LoggerFactory;
use Message;
use MWException;
 
class TOTPDisableForm extends OATHAuthOOUIHTMLForm implements IManageForm {
    public function onSuccess() {
        $this->getOutput()->addWikiMsg( 'oathauth-disabledoath' );
    }
 
    protected function getDescriptors() {
        return [
            'token' => [
                'type' => 'text',
                'label-message' => 'oathauth-entertoken',
                'name' => 'token',
                'required' => true,
                'autofocus' => true,
                'dir' => 'ltr',
                'autocomplete' => false,
                'spellcheck' => false,
            ]
        ];
    }
 
    public function onSubmit( array $formData ) {
        // Don't increase pingLimiter, just check for limit exceeded.
        if ( $this->oathUser->getUser()->pingLimiter( 'badoath', 0 ) ) {
            // Arbitrary duration given here
            LoggerFactory::getInstance( 'authentication' )->info(
                'OATHAuth {user} rate limited while disabling 2FA from {clientip}', [
                    'user' => $this->getUser()->getName(),
                    'clientip' => $this->getRequest()->getIP(),
                ]
            );
            return [ 'oathauth-throttled', Message::durationParam( 60 ) ];
        }
 
        $module = $this->oathUser->getModule();
        if ( $module instanceof TOTP ) {
            if ( !$module->verify( $this->oathUser, [ 'token' => $formData['token'] ] ) ) {
                LoggerFactory::getInstance( 'authentication' )->info(
                    'OATHAuth {user} failed to provide a correct token while disabling 2FA from {clientip}', [
                        'user' => $this->getUser()->getName(),
                        'clientip' => $this->getRequest()->getIP(),
                    ]
                );
                return [ 'oathauth-failedtovalidateoath' ];
            }
        }
 
        $this->oathUser->setKeys();
        $this->oathRepo->remove( $this->oathUser, $this->getRequest()->getIP() );
 
        return true;
    }
}