CheckBlocksSecondaryAuthenticationProvider.php

Go to the documentation of this file.

<?php
namespace MediaWiki\Auth;
 
use Config;
use MediaWiki\Block\DatabaseBlock;
use StatusValue;
 
class CheckBlocksSecondaryAuthenticationProvider extends AbstractSecondaryAuthenticationProvider {
 
    protected $blockDisablesLogin = null;
 
    public function __construct( $params = [] ) {
        if ( isset( $params['blockDisablesLogin'] ) ) {
            $this->blockDisablesLogin = (bool)$params['blockDisablesLogin'];
        }
    }
 
    public function setConfig( Config $config ) {
        parent::setConfig( $config );
 
        if ( $this->blockDisablesLogin === null ) {
            $this->blockDisablesLogin = $this->config->get( 'BlockDisablesLogin' );
        }
    }
 
    public function getAuthenticationRequests( $action, array $options ) {
        return [];
    }
 
    public function beginSecondaryAuthentication( $user, array $reqs ) {
        // @TODO Partial blocks should not prevent the user from logging in.
        //       see: https://phabricator.wikimedia.org/T208895
        if ( !$this->blockDisablesLogin ) {
            return AuthenticationResponse::newAbstain();
        } elseif ( $user->getBlock() ) {
            return AuthenticationResponse::newFail(
                new \Message( 'login-userblocked', [ $user->getName() ] )
            );
        } else {
            return AuthenticationResponse::newPass();
        }
    }
 
    public function beginSecondaryAccountCreation( $user, $creator, array $reqs ) {
        return AuthenticationResponse::newAbstain();
    }
 
    public function testUserForCreation( $user, $autocreate, array $options = [] ) {
        $block = $user->isBlockedFromCreateAccount();
        if ( $block ) {
            if ( $block->getReason() ) {
                $reason = $block->getReason();
            } else {
                $msg = \Message::newFromKey( 'blockednoreason' );
                if ( !\RequestContext::getMain()->getUser()->isSafeToLoad() ) {
                    $msg->inContentLanguage();
                }
                $reason = $msg->text();
            }
 
            $errorParams = [
                $block->getTarget(),
                $reason,
                $block->getByName()
            ];
 
            if ( $block->getType() === DatabaseBlock::TYPE_RANGE ) {
                $errorMessage = 'cantcreateaccount-range-text';
                $errorParams[] = $this->manager->getRequest()->getIP();
            } else {
                $errorMessage = 'cantcreateaccount-text';
            }
 
            return StatusValue::newFatal(
                new \Message( $errorMessage, $errorParams )
            );
        } else {
            return StatusValue::newGood();
        }
    }
 
}