SpecialLinkAccounts.php

Go to the documentation of this file.

<?php
 
use MediaWiki\Auth\AuthenticationRequest;
use MediaWiki\Auth\AuthenticationResponse;
use MediaWiki\Auth\AuthManager;
 
class SpecialLinkAccounts extends AuthManagerSpecialPage {
    protected static $allowedActions = [
        AuthManager::ACTION_LINK, AuthManager::ACTION_LINK_CONTINUE,
    ];
 
    public function __construct() {
        parent::__construct( 'LinkAccounts' );
    }
 
    protected function getGroupName() {
        return 'users';
    }
 
    public function isListed() {
        return AuthManager::singleton()->canLinkAccounts();
    }
 
    protected function getRequestBlacklist() {
        return $this->getConfig()->get( 'ChangeCredentialsBlacklist' );
    }
 
    public function execute( $subPage ) {
        $this->setHeaders();
        $this->loadAuth( $subPage );
 
        if ( !$this->isActionAllowed( $this->authAction ) ) {
            if ( $this->authAction === AuthManager::ACTION_LINK ) {
                // looks like no linking provider is installed or willing to take this user
                $titleMessage = $this->msg( 'cannotlink-no-provider-title' );
                $errorMessage = $this->msg( 'cannotlink-no-provider' );
                throw new ErrorPageError( $titleMessage, $errorMessage );
            } else {
                // user probably back-button-navigated into an auth session that no longer exists
                // FIXME would be nice to show a message
                $this->getOutput()->redirect( $this->getPageTitle()->getFullURL( '', false,
                    PROTO_HTTPS ) );
                return;
            }
        }
 
        $this->outputHeader();
 
        $status = $this->trySubmit();
 
        if ( $status === false || !$status->isOK() ) {
            $this->displayForm( $status );
            return;
        }
 
        $response = $status->getValue();
 
        switch ( $response->status ) {
            case AuthenticationResponse::PASS:
                $this->success();
                break;
            case AuthenticationResponse::FAIL:
                $this->loadAuth( '', AuthManager::ACTION_LINK, true );
                $this->displayForm( StatusValue::newFatal( $response->message ) );
                break;
            case AuthenticationResponse::REDIRECT:
                $this->getOutput()->redirect( $response->redirectTarget );
                break;
            case AuthenticationResponse::UI:
                $this->authAction = AuthManager::ACTION_LINK_CONTINUE;
                $this->authRequests = $response->neededRequests;
                $this->displayForm( StatusValue::newFatal( $response->message ) );
                break;
            default:
                throw new LogicException( 'invalid AuthenticationResponse' );
        }
    }
 
    protected function getDefaultAction( $subPage ) {
        return AuthManager::ACTION_LINK;
    }
 
    protected function getAuthForm( array $requests, $action ) {
        $form = parent::getAuthForm( $requests, $action );
        $form->setSubmitTextMsg( 'linkaccounts-submit' );
        return $form;
    }
 
    protected function success() {
        $this->loadAuth( '', AuthManager::ACTION_LINK, true );
        $this->displayForm( StatusValue::newFatal( $this->msg( 'linkaccounts-success-text' ) ) );
    }
}