SpecialOATHDisable.php

Go to the documentation of this file.

<?php
class SpecialOATHDisable extends FormSpecialPage {
    private $OATHRepository;
 
    private $OATHUser;
 
    public function __construct( OATHUserRepository $repository, OATHUser $user ) {
        parent::__construct( 'OATH', '', false );
        $this->OATHRepository = $repository;
        $this->OATHUser = $user;
    }
 
    public function doesWrites() {
        return true;
    }
 
    public function alterForm( HTMLForm $form ) {
        $form->setMessagePrefix( 'oathauth' );
        $form->setWrapperLegend( false );
        $form->getOutput()->setPageTitle( $this->msg( 'oathauth-disable' ) );
    }
 
    protected function getDisplayFormat() {
        return 'ooui';
    }
 
    public function requiresUnblock() {
        return false;
    }
 
    protected function checkExecutePermissions( User $user ) {
        parent::checkExecutePermissions( $user );
 
        $this->requireLogin();
    }
 
    public function execute( $par ) {
        $this->getOutput()->disallowUserJs();
        parent::execute( $par );
    }
 
    protected function getFormFields() {
        return [
            'token' => [
                'type' => 'text',
                'label-message' => 'oathauth-entertoken',
                'name' => 'token',
                'required' => true,
                'autofocus' => true,
            ],
            'returnto' => [
                'type' => 'hidden',
                'default' => $this->getRequest()->getVal( 'returnto' ),
                'name' => 'returnto',
            ],
            'returntoquery' => [
                'type' => 'hidden',
                'default' => $this->getRequest()->getVal( 'returntoquery' ),
                'name' => 'returntoquery',
            ]
        ];
    }
 
    public function onSubmit( array $formData ) {
        // Don't increase pingLimiter, just check for limit exceeded.
        if ( $this->OATHUser->getUser()->pingLimiter( 'badoath', 0 ) ) {
            // Arbitrary duration given here
            \MediaWiki\Logger\LoggerFactory::getInstance( 'authentication' )->info(
                'OATHAuth {user} rate limited while disabling 2FA from {clientip}', [
                    'user' => $this->getUser()->getName(),
                    'clientip' => $this->getRequest()->getIP(),
                ]
            );
            return [ 'oathauth-throttled', Message::durationParam( 60 ) ];
        }
 
        if ( !$this->OATHUser->getKey()->verifyToken( $formData['token'], $this->OATHUser ) ) {
            \MediaWiki\Logger\LoggerFactory::getInstance( 'authentication' )->info(
                'OATHAuth {user} failed to provide a correct token while disabling 2FA from {clientip}', [
                    'user' => $this->getUser()->getName(),
                    'clientip' => $this->getRequest()->getIP(),
                ]
            );
            return [ 'oathauth-failedtovalidateoath' ];
        }
 
        $this->OATHUser->setKey( null );
        $this->OATHRepository->remove( $this->OATHUser, $this->getRequest()->getIP() );
 
        return true;
    }
 
    public function onSuccess() {
        $this->getOutput()->addWikiMsg( 'oathauth-disabledoath' );
        $this->getOutput()->returnToMain();
    }
}