MediaWiki REL1_35
AuthManagerSpecialPage Class Reference

A special page subclass for authentication-related special pages. More...

Inheritance diagram for AuthManagerSpecialPage:
Collaboration diagram for AuthManagerSpecialPage:

Public Member Functions

 getRequest ()
 Get the WebRequest being used for this instance.
 
 handleFormSubmit ( $data)
 Submit handler callback for HTMLForm.
 
 onAuthChangeFormFields (array $requests, array $fieldInfo, array &$formDescriptor, $action)
 Change the form descriptor that determines how a field will look in the authentication form.
 
- Public Member Functions inherited from SpecialPage
 __construct ( $name='', $restriction='', $listed=true, $function=false, $file='', $includable=false)
 Default constructor for special pages Derivative classes should call this from their constructor Note that if the user does not have the required level, an error message will be displayed by the default execute() method, without the global function ever being called.
 
 addHelpLink ( $to, $overrideBaseUrl=false)
 Adds help link with an icon via page indicators.
 
 checkPermissions ()
 Checks if userCanExecute, and if not throws a PermissionsError.
 
 checkReadOnly ()
 If the wiki is currently in readonly mode, throws a ReadOnlyError.
 
 doesWrites ()
 Indicates whether this special page may perform database writes.
 
 execute ( $subPage)
 Default execute method Checks user permissions.
 
 getConfig ()
 Shortcut to get main config object.
 
 getContext ()
 Gets the context this SpecialPage is executed in.
 
 getDescription ()
 Returns the name that goes in the \<h1\> in the special page itself, and also the name that will be listed in Special:Specialpages.
 
 getFinalGroupName ()
 Get the group that the special page belongs in on Special:SpecialPage Use this method, instead of getGroupName to allow customization of the group name from the wiki side.
 
 getFullTitle ()
 Return the full title, including $par.
 
 getLanguage ()
 Shortcut to get user's language.
 
 getLinkRenderer ()
 
 getLocalName ()
 Get the localised name of the special page Stable to override.
 
 getName ()
 Get the name of this Special Page.
 
 getOutput ()
 Get the OutputPage being used for this instance.
 
 getPageTitle ( $subpage=false)
 Get a self-referential title object.
 
 getRestriction ()
 Get the permission that a user must have to execute this page.
 
 getSkin ()
 Shortcut to get the skin being used for this instance.
 
 getUser ()
 Shortcut to get the User executing this instance.
 
 including ( $x=null)
 Whether the special page is being evaluated via transclusion.
 
 isCached ()
 Is this page cached? Expensive pages are cached or disabled in miser mode.
 
 isExpensive ()
 Is this page expensive (for some definition of expensive)? Expensive pages are disabled or cached in miser mode.
 
 isIncludable ()
 Whether it's allowed to transclude the special page via {{Special:Foo/params}} Stable to override.
 
 isListed ()
 Whether this special page is listed in Special:SpecialPages Stable to override.
 
 isRestricted ()
 Can be overridden by subclasses with more complicated permissions schemes.
 
 listed ( $x=null)
 Get or set whether this special page is listed in Special:SpecialPages.
 
 maxIncludeCacheTime ()
 How long to cache page when it is being included.
 
 msg ( $key,... $params)
 Wrapper around wfMessage that sets the current context.
 
 prefixSearchSubpages ( $search, $limit, $offset)
 Return an array of subpages beginning with $search that this special page will accept.
 
 requireLogin ( $reasonMsg='exception-nologin-text', $titleMsg='exception-nologin')
 If the user is not logged in, throws UserNotLoggedIn error.
 
 run ( $subPage)
 Entry point.
 
 setContext ( $context)
 Sets the context this SpecialPage is executed in.
 
 setHookContainer (HookContainer $hookContainer)
 
 setLinkRenderer (LinkRenderer $linkRenderer)
 
 setListed ( $listed)
 Set whether this page is listed in Special:Specialpages, at run-time.
 
 userCanExecute (User $user)
 Checks if the given user (identified by an object) can execute this special page (as defined by $mRestriction).
 

Protected Member Functions

 addTabIndex (&$formDescriptor)
 Adds a sequential tabindex starting from 1 to all form elements.
 
 beforeExecute ( $subPage)
 Stable to override.
 
 displayForm ( $status)
 Display the form.
 
 fieldInfoToFormDescriptor (array $requests, array $fieldInfo, $action)
 Turns a field info array into a form descriptor.
 
 getAuthForm (array $requests, $action)
 Stable to override.
 
 getAuthFormDescriptor ( $requests, $action)
 Generates a HTMLForm descriptor array from a set of authentication requests.
 
 getContinueAction ( $action)
 Gets the _CONTINUE version of an action.
 
 getDefaultAction ( $subPage)
 Get the default action for this special page, if none is given via URL/POST data.
 
 getLoginSecurityLevel ()
 Stable to override.
 
 getPreservedParams ( $withToken=false)
 Returns URL query parameters which can be used to reload the page (or leave and return) while preserving all information that is necessary for authentication to continue.
 
 getRequestBlacklist ()
 Allows blacklisting certain request types.
 
 getToken ()
 Returns the CSRF token.
 
 getTokenName ()
 Returns the name of the CSRF token (under which it should be found in the POST or GET data).
 
 handleReauthBeforeExecute ( $subPage)
 Handle redirection when the user needs to (re)authenticate.
 
 handleReturnBeforeExecute ( $subPage)
 Handle redirection from the /return subpage.
 
 hasOwnSubmitButton (AuthenticationRequest $req)
 Checks whether the given AuthenticationRequest has its own submit button.
 
 isActionAllowed ( $action)
 Checks whether AuthManager is ready to perform the action.
 
 isContinued ()
 Returns true if this is not the first step of the authentication.
 
 loadAuth ( $subPage, $authAction=null, $reset=false)
 Load or initialize $authAction, $authRequests and $subPage.
 
 messageKey ( $defaultKey)
 Return custom message key.
 
 needsSubmitButton (array $requests)
 Returns true if the form built from the given AuthenticationRequests needs a submit button.
 
 performAuthenticationStep ( $action, array $requests)
 
 setRequest (array $data, $wasPosted=null)
 Override the POST data, GET data from the real request is preserved.
 
 trySubmit ()
 Attempts to do an authentication step with the submitted data.
 
- Protected Member Functions inherited from SpecialPage
 addFeedLinks ( $params)
 Adds RSS/atom links.
 
 afterExecute ( $subPage)
 Gets called after.
 
 buildPrevNextNavigation ( $offset, $limit, array $query=[], $atend=false, $subpage=false)
 Generate (prev x| next x) (20|50|100...) type links for paging.
 
 checkLoginSecurityLevel ( $level=null)
 Verifies that the user meets the security level, possibly reauthenticating them in the process.
 
 displayRestrictionError ()
 Output an error message telling the user what access level they have to have Stable to override.
 
 getCacheTTL ()
 Stable to override.
 
 getGroupName ()
 Under which header this special page is listed in Special:SpecialPages See messages 'specialpages-group-*' for valid names This method defaults to group 'other'.
 
 getHookContainer ()
 
 getHookRunner ()
 
 getLanguageConverter ()
 Shortcut to get language's converter.
 
 getRobotPolicy ()
 Return the robot policy.
 
 getSubpagesForPrefixSearch ()
 Return an array of subpages that this special page will accept for prefix searches.
 
 outputHeader ( $summaryMessageKey='')
 Outputs a summary message on top of special pages Per default the message key is the canonical name of the special page May be overridden, i.e.
 
 prefixSearchString ( $search, $limit, $offset)
 Perform a regular substring search for prefixSearchSubpages.
 
 setHeaders ()
 Sets headers - this should be called from the execute() method of all derived classes! Stable to override.
 
 setReauthPostData (array $data)
 Record preserved POST data after a reauthentication.
 
 useTransactionalTimeLimit ()
 Call wfTransactionalTimeLimit() if this request was POSTed.
 

Static Protected Member Functions

static getField (array $array, $fieldName, $default=null)
 Get an array value, or a default if it does not exist.
 
static mapFieldInfoTypeToFormDescriptorType ( $type)
 Maps AuthenticationRequest::getFieldInfo() types to HTMLForm types.
 
static mapSingleFieldInfo ( $singleFieldInfo, $fieldName)
 Maps an authentication field configuration for a single field (as returned by AuthenticationRequest::getFieldInfo()) to a HTMLForm field descriptor.
 
static mergeDefaultFormDescriptor (array $fieldInfo, array $formDescriptor, array $defaultFormDescriptor)
 Apply defaults to a form descriptor, without creating non-existend fields.
 
static sortFormDescriptorFields (array &$formDescriptor)
 Sort the fields of a form descriptor by their 'weight' property.
 
- Static Protected Member Functions inherited from SpecialPage
static prefixSearchArray ( $search, $limit, array $subpages, $offset)
 Helper function for implementations of prefixSearchSubpages() that filter the values in memory (as opposed to making a query).
 

Protected Attributes

string $authAction
 one of the AuthManager::ACTION_* constants.
 
AuthenticationRequest[] $authRequests
 
bool $isReturn
 True if the current request is a result of returning from a redirect flow.
 
WebRequest null $savedRequest
 If set, will be used instead of the real request.
 
string $subPage
 Subpage of the special page.
 
- Protected Attributes inherited from SpecialPage
IContextSource $mContext
 Current request context.
 
 $mIncludable
 
 $mIncluding
 
 $mName
 
 $mRestriction
 

Static Protected Attributes

static string[] $allowedActions
 The list of actions this special page deals with.
 
static array $messages = []
 Customized messages.
 

Additional Inherited Members

- Static Public Member Functions inherited from SpecialPage
static getSafeTitleFor ( $name, $subpage=false)
 Get a localised Title object for a page name with a possibly unvalidated subpage.
 
static getTitleFor ( $name, $subpage=false, $fragment='')
 Get a localised Title object for a specified special page name If you don't need a full Title object, consider using TitleValue through getTitleValueFor() below.
 
static getTitleValueFor ( $name, $subpage=false, $fragment='')
 Get a localised TitleValue object for a specified special page name.
 

Detailed Description

A special page subclass for authentication-related special pages.

It generates a form from a set of AuthenticationRequest objects, submits the result to AuthManager and partially handles the response.

Stable to extend

Definition at line 17 of file AuthManagerSpecialPage.php.

Member Function Documentation

◆ addTabIndex()

AuthManagerSpecialPage::addTabIndex ( $formDescriptor)
protected

Adds a sequential tabindex starting from 1 to all form elements.

This way the user can use the tab key to traverse the form without having to step through all links and such.

Parameters
array[]&$formDescriptor

Definition at line 626 of file AuthManagerSpecialPage.php.

Referenced by getAuthFormDescriptor(), and LoginSignupSpecialPage\postProcessFormDescriptor().

◆ beforeExecute()

AuthManagerSpecialPage::beforeExecute (   $subPage)
protected

Stable to override.

Parameters
string | null$subPage
Returns
bool|void

Reimplemented from SpecialPage.

Reimplemented in LoginSignupSpecialPage, and SpecialUserLogin.

Definition at line 100 of file AuthManagerSpecialPage.php.

References SpecialPage\getOutput(), handleReauthBeforeExecute(), and handleReturnBeforeExecute().

◆ displayForm()

AuthManagerSpecialPage::displayForm (   $status)
protected

Display the form.

Parameters
false | Status | StatusValue$statusA form submit status, as in HTMLForm::trySubmit()

Definition at line 569 of file AuthManagerSpecialPage.php.

References getAuthForm().

Referenced by SpecialChangeCredentials\execute(), SpecialLinkAccounts\execute(), SpecialUnlinkAccounts\execute(), and SpecialLinkAccounts\success().

◆ fieldInfoToFormDescriptor()

AuthManagerSpecialPage::fieldInfoToFormDescriptor ( array  $requests,
array  $fieldInfo,
  $action 
)
protected

Turns a field info array into a form descriptor.

Behavior can be modified by the AuthChangeFormFields hook.

Parameters
AuthenticationRequest[]$requests
array$fieldInfoField information, in the format used by AuthenticationRequest::getFieldInfo()
string$actionOne of the AuthManager::ACTION_* constants
Returns
array A form descriptor that can be passed to HTMLForm

Definition at line 670 of file AuthManagerSpecialPage.php.

References SpecialPage\getHookRunner(), mapSingleFieldInfo(), onAuthChangeFormFields(), serialize(), and sortFormDescriptorFields().

Referenced by LoginSignupSpecialPage\getAuthForm(), and getAuthFormDescriptor().

◆ getAuthForm()

AuthManagerSpecialPage::getAuthForm ( array  $requests,
  $action 
)
protected

Stable to override.

Parameters
AuthenticationRequest[]$requests
string$actionAuthManager action name (one of the AuthManager::ACTION_* constants)
Returns
HTMLForm

Reimplemented in SpecialChangeCredentials, and SpecialLinkAccounts.

Definition at line 548 of file AuthManagerSpecialPage.php.

References getAuthFormDescriptor(), SpecialPage\getContext(), SpecialPage\getFullTitle(), getPreservedParams(), getRequest(), getToken(), getTokenName(), and needsSubmitButton().

Referenced by displayForm(), and trySubmit().

◆ getAuthFormDescriptor()

AuthManagerSpecialPage::getAuthFormDescriptor (   $requests,
  $action 
)
protected

Generates a HTMLForm descriptor array from a set of authentication requests.

Stable to override

Parameters
AuthenticationRequest[]$requests
string$actionAuthManager action name (one of the AuthManager::ACTION_* constants)
Returns
array[]

Reimplemented in SpecialChangeCredentials.

Definition at line 533 of file AuthManagerSpecialPage.php.

References addTabIndex(), and fieldInfoToFormDescriptor().

Referenced by getAuthForm().

◆ getContinueAction()

AuthManagerSpecialPage::getContinueAction (   $action)
protected

Gets the _CONTINUE version of an action.

Parameters
string$actionAn AuthManager::ACTION_* constant.
Returns
string An AuthManager::ACTION_*_CONTINUE constant.

Definition at line 297 of file AuthManagerSpecialPage.php.

Referenced by LoginSignupSpecialPage\execute(), getPreservedParams(), loadAuth(), and LoginSignupSpecialPage\showExtraInformation().

◆ getDefaultAction()

AuthManagerSpecialPage::getDefaultAction (   $subPage)
abstractprotected

Get the default action for this special page, if none is given via URL/POST data.

Subclasses should override this (or override loadAuth() so this is never called). Stable to override

Parameters
string$subPageSubpage of the special page.
Returns
string an AuthManager::ACTION_* constant.

Reimplemented in SpecialChangeCredentials, SpecialCreateAccount, SpecialLinkAccounts, SpecialRemoveCredentials, SpecialUnlinkAccounts, and SpecialUserLogin.

Referenced by LoginSignupSpecialPage\execute(), getPreservedParams(), loadAuth(), and LoginSignupSpecialPage\mainLoginForm().

◆ getField()

static AuthManagerSpecialPage::getField ( array  $array,
  $fieldName,
  $default = null 
)
staticprotected

Get an array value, or a default if it does not exist.

Parameters
array$array
string$fieldName
mixed | null$default
Returns
mixed

Definition at line 761 of file AuthManagerSpecialPage.php.

Referenced by sortFormDescriptorFields().

◆ getLoginSecurityLevel()

AuthManagerSpecialPage::getLoginSecurityLevel ( )
protected

Stable to override.

Returns
bool|string

Reimplemented from SpecialPage.

Reimplemented in SpecialCreateAccount, SpecialUnlinkAccounts, and SpecialUserLogin.

Definition at line 67 of file AuthManagerSpecialPage.php.

References SpecialPage\getName().

Referenced by handleReauthBeforeExecute().

◆ getPreservedParams()

AuthManagerSpecialPage::getPreservedParams (   $withToken = false)
protected

Returns URL query parameters which can be used to reload the page (or leave and return) while preserving all information that is necessary for authentication to continue.

These parameters will be preserved in the action URL of the form and in the return URL for redirect flow. Stable to override

Parameters
bool$withTokenInclude CSRF token
Returns
array

Reimplemented in LoginSignupSpecialPage, and SpecialChangeCredentials.

Definition at line 515 of file AuthManagerSpecialPage.php.

References getContinueAction(), getDefaultAction(), getToken(), and getTokenName().

Referenced by getAuthForm(), handleReturnBeforeExecute(), and performAuthenticationStep().

◆ getRequest()

◆ getRequestBlacklist()

AuthManagerSpecialPage::getRequestBlacklist ( )
protected

Allows blacklisting certain request types.

Stable to override

Returns
array A list of AuthenticationRequest subclass names

Reimplemented in SpecialChangeCredentials, SpecialLinkAccounts, SpecialRemoveCredentials, and SpecialUnlinkAccounts.

Definition at line 235 of file AuthManagerSpecialPage.php.

Referenced by loadAuth().

◆ getToken()

AuthManagerSpecialPage::getToken ( )
protected

Returns the CSRF token.

Stable to override

Returns
Token

Reimplemented in SpecialCreateAccount, and SpecialUserLogin.

Definition at line 647 of file AuthManagerSpecialPage.php.

References SpecialPage\getName(), and getRequest().

Referenced by LoginSignupSpecialPage\execute(), getAuthForm(), LoginSignupSpecialPage\getAuthForm(), getPreservedParams(), and trySubmit().

◆ getTokenName()

AuthManagerSpecialPage::getTokenName ( )
protected

Returns the name of the CSRF token (under which it should be found in the POST or GET data).

Stable to override

Returns
string

Reimplemented in LoginSignupSpecialPage, SpecialCreateAccount, and SpecialUserLogin.

Definition at line 657 of file AuthManagerSpecialPage.php.

Referenced by getAuthForm(), getPreservedParams(), and trySubmit().

◆ handleFormSubmit()

AuthManagerSpecialPage::handleFormSubmit (   $data)

Submit handler callback for HTMLForm.

Reimplemented in SpecialChangeCredentials, and SpecialUnlinkAccounts.

Definition at line 499 of file AuthManagerSpecialPage.php.

References performAuthenticationStep().

Referenced by trySubmit().

◆ handleReauthBeforeExecute()

AuthManagerSpecialPage::handleReauthBeforeExecute (   $subPage)
protected

Handle redirection when the user needs to (re)authenticate.

Send the user to the login form if needed; in case the request was a POST, stash in the session and simulate it once the user gets back.

Parameters
string$subPage
Returns
bool False if execution should be stopped.
Exceptions
ErrorPageErrorWhen the user is not allowed to use this page.

Definition at line 161 of file AuthManagerSpecialPage.php.

References $title, MWCryptRand\generateHex(), SpecialPage\getFullTitle(), getLoginSecurityLevel(), SpecialPage\getName(), SpecialPage\getOutput(), getRequest(), SpecialPage\getTitleFor(), PROTO_HTTPS, setRequest(), and wfArrayToCgi().

Referenced by beforeExecute().

◆ handleReturnBeforeExecute()

AuthManagerSpecialPage::handleReturnBeforeExecute (   $subPage)
protected

Handle redirection from the /return subpage.

This is used in the redirect flow where we need to be able to process data that was sent via a GET request. We set the /return subpage as the reentry point so we know we need to treat GET as POST, but we don't want to handle all future GETs as POSTs so we need to normalize the URL. (Also we don't want to show any received parameters around in the URL; they are ugly and might be sensitive.)

Thus when on the /return subpage, we stash the request data in the session, redirect, then use the session to detect that we have been redirected, recover the data and replace the real WebRequest with a fake one that contains the saved data.

Parameters
string$subPage
Returns
bool False if execution should be stopped.

Definition at line 123 of file AuthManagerSpecialPage.php.

References SpecialPage\getName(), SpecialPage\getOutput(), SpecialPage\getPageTitle(), getPreservedParams(), getRequest(), loadAuth(), PROTO_HTTPS, and setRequest().

Referenced by beforeExecute().

◆ hasOwnSubmitButton()

AuthManagerSpecialPage::hasOwnSubmitButton ( AuthenticationRequest  $req)
protected

Checks whether the given AuthenticationRequest has its own submit button.

Parameters
AuthenticationRequest$req
Returns
bool

Definition at line 612 of file AuthManagerSpecialPage.php.

References MediaWiki\Auth\AuthenticationRequest\getFieldInfo().

Referenced by needsSubmitButton().

◆ isActionAllowed()

AuthManagerSpecialPage::isActionAllowed (   $action)
protected

Checks whether AuthManager is ready to perform the action.

ACTION_CHANGE needs special verification (AuthManager::allowsAuthenticationData*) which is the caller's responsibility.

Parameters
string$actionOne of the AuthManager::ACTION_* constants in static::$allowedActions
Returns
bool
Exceptions
LogicExceptionif $action is invalid

Definition at line 320 of file AuthManagerSpecialPage.php.

References $authAction.

Referenced by LoginSignupSpecialPage\execute(), SpecialLinkAccounts\execute(), and SpecialUnlinkAccounts\execute().

◆ isContinued()

AuthManagerSpecialPage::isContinued ( )
protected

Returns true if this is not the first step of the authentication.

Returns
bool

Definition at line 284 of file AuthManagerSpecialPage.php.

Referenced by LoginSignupSpecialPage\canBypassForm(), and LoginSignupSpecialPage\getFieldDefinitions().

◆ loadAuth()

AuthManagerSpecialPage::loadAuth (   $subPage,
  $authAction = null,
  $reset = false 
)
protected

Load or initialize $authAction, $authRequests and $subPage.

Subclasses should call this from execute() or otherwise ensure the variables are initialized. Stable to override

Parameters
string$subPageSubpage of the special page.
string | null$authActionOverride auth action specified in request (this is useful when the form needs to be changed from <action> to <action>_CONTINUE after a successful authentication step)
bool$resetRegenerate the requests even if a cached version is available

Reimplemented in SpecialChangeCredentials.

Definition at line 249 of file AuthManagerSpecialPage.php.

References $authAction, $subPage, getContinueAction(), getDefaultAction(), getRequest(), getRequestBlacklist(), and SpecialPage\getUser().

Referenced by LoginSignupSpecialPage\execute(), SpecialLinkAccounts\execute(), SpecialUnlinkAccounts\execute(), handleReturnBeforeExecute(), LoginSignupSpecialPage\load(), and SpecialLinkAccounts\success().

◆ mapFieldInfoTypeToFormDescriptorType()

static AuthManagerSpecialPage::mapFieldInfoTypeToFormDescriptorType (   $type)
staticprotected

Maps AuthenticationRequest::getFieldInfo() types to HTMLForm types.

Parameters
string$type
Returns
string
Exceptions

\LogicException

Definition at line 775 of file AuthManagerSpecialPage.php.

References $type.

Referenced by mapSingleFieldInfo().

◆ mapSingleFieldInfo()

static AuthManagerSpecialPage::mapSingleFieldInfo (   $singleFieldInfo,
  $fieldName 
)
staticprotected

Maps an authentication field configuration for a single field (as returned by AuthenticationRequest::getFieldInfo()) to a HTMLForm field descriptor.

Parameters
array$singleFieldInfo
string$fieldName
Returns
array

Definition at line 699 of file AuthManagerSpecialPage.php.

References $type, and mapFieldInfoTypeToFormDescriptorType().

Referenced by fieldInfoToFormDescriptor().

◆ mergeDefaultFormDescriptor()

static AuthManagerSpecialPage::mergeDefaultFormDescriptor ( array  $fieldInfo,
array  $formDescriptor,
array  $defaultFormDescriptor 
)
staticprotected

Apply defaults to a form descriptor, without creating non-existend fields.

Overrides $formDescriptor fields with their $defaultFormDescriptor equivalent, but only if the field is defined in $fieldInfo, uses the special 'basefield' property to refer to a $fieldInfo field, or it is not a real field (e.g. help text). Applies some common-sense behaviors to ensure related fields are overridden in a consistent manner.

Parameters
array$fieldInfo
array$formDescriptor
array$defaultFormDescriptor
Returns
array

Definition at line 804 of file AuthManagerSpecialPage.php.

Referenced by LoginSignupSpecialPage\onAuthChangeFormFields(), and SpecialChangeCredentials\onAuthChangeFormFields().

◆ messageKey()

AuthManagerSpecialPage::messageKey (   $defaultKey)
protected

Return custom message key.

Allows subclasses to customize messages.

Parameters
string$defaultKey
Returns
string

Definition at line 225 of file AuthManagerSpecialPage.php.

Referenced by trySubmit().

◆ needsSubmitButton()

AuthManagerSpecialPage::needsSubmitButton ( array  $requests)
protected

Returns true if the form built from the given AuthenticationRequests needs a submit button.

Providers using redirect flow (e.g. Google login) need their own submit buttons; if using one of those custom buttons is the only way to proceed, there is no point in displaying the default button which won't do anything useful. Stable to override

Parameters
AuthenticationRequest[]$requestsAn array of AuthenticationRequests from which the form will be built
Returns
bool

Reimplemented in SpecialChangeCredentials.

Definition at line 588 of file AuthManagerSpecialPage.php.

References hasOwnSubmitButton().

Referenced by getAuthForm(), and LoginSignupSpecialPage\postProcessFormDescriptor().

◆ onAuthChangeFormFields()

AuthManagerSpecialPage::onAuthChangeFormFields ( array  $requests,
array  $fieldInfo,
array &  $formDescriptor,
  $action 
)

Change the form descriptor that determines how a field will look in the authentication form.

Called from fieldInfoToFormDescriptor(). Stable to override

Parameters
AuthenticationRequest[]$requests
array$fieldInfoField information array (union of all AuthenticationRequest::getFieldInfo() responses).
array&$formDescriptorHTMLForm descriptor. The special key 'weight' can be set to change the order of the fields.
string$actionAuthentication type (one of the AuthManager::ACTION_* constants)

Reimplemented in LoginSignupSpecialPage, and SpecialChangeCredentials.

Definition at line 58 of file AuthManagerSpecialPage.php.

Referenced by fieldInfoToFormDescriptor().

◆ performAuthenticationStep()

AuthManagerSpecialPage::performAuthenticationStep (   $action,
array  $requests 
)
protected
Parameters
string$actionOne of the AuthManager::ACTION_* constants
AuthenticationRequest[]$requests
Returns
AuthenticationResponse
Exceptions
LogicExceptionif $action is invalid

Definition at line 360 of file AuthManagerSpecialPage.php.

References SpecialPage\getHookRunner(), SpecialPage\getPageTitle(), getPreservedParams(), SpecialPage\getUser(), and PROTO_HTTPS.

Referenced by handleFormSubmit(), SpecialChangeCredentials\handleFormSubmit(), and SpecialUnlinkAccounts\handleFormSubmit().

◆ setRequest()

AuthManagerSpecialPage::setRequest ( array  $data,
  $wasPosted = null 
)
protected

Override the POST data, GET data from the real request is preserved.

Used to preserve POST data over a HTTP redirect.

Stable to override

Parameters
array$data
bool | null$wasPosted

Reimplemented in LoginSignupSpecialPage.

Definition at line 85 of file AuthManagerSpecialPage.php.

References SpecialPage\getContext().

Referenced by handleReauthBeforeExecute(), and handleReturnBeforeExecute().

◆ sortFormDescriptorFields()

static AuthManagerSpecialPage::sortFormDescriptorFields ( array &  $formDescriptor)
staticprotected

Sort the fields of a form descriptor by their 'weight' property.

(Fields with higher weight are shown closer to the bottom; weight defaults to 0. Negative weight is allowed.) Keep order if weights are equal.

Parameters
array&$formDescriptor

Definition at line 740 of file AuthManagerSpecialPage.php.

References getField().

Referenced by fieldInfoToFormDescriptor().

◆ trySubmit()

AuthManagerSpecialPage::trySubmit ( )
protected

Attempts to do an authentication step with the submitted data.

Subclasses should probably call this from execute().

Returns
false|Status
  • false if there was no submit at all
  • a good Status wrapping an AuthenticationResponse if the form submit was successful. This does not necessarily mean that the authentication itself was successful; see the response for that.
  • a bad Status for form errors.

Definition at line 415 of file AuthManagerSpecialPage.php.

References getAuthForm(), SpecialPage\getHookRunner(), getRequest(), getToken(), getTokenName(), handleFormSubmit(), and messageKey().

Referenced by LoginSignupSpecialPage\execute(), SpecialChangeCredentials\execute(), SpecialLinkAccounts\execute(), and SpecialUnlinkAccounts\execute().

Member Data Documentation

◆ $allowedActions

string [] AuthManagerSpecialPage::$allowedActions
staticprotected
Initial value:
= [
AuthManager::ACTION_LOGIN, AuthManager::ACTION_LOGIN_CONTINUE,
AuthManager::ACTION_CREATE, AuthManager::ACTION_CREATE_CONTINUE,
AuthManager::ACTION_LINK, AuthManager::ACTION_LINK_CONTINUE,
AuthManager::ACTION_CHANGE, AuthManager::ACTION_REMOVE, AuthManager::ACTION_UNLINK,
]

The list of actions this special page deals with.

Subclasses should override this.

Definition at line 21 of file AuthManagerSpecialPage.php.

◆ $authAction

string AuthManagerSpecialPage::$authAction
protected

one of the AuthManager::ACTION_* constants.

Definition at line 32 of file AuthManagerSpecialPage.php.

Referenced by isActionAllowed(), loadAuth(), and SpecialChangeCredentials\loadAuth().

◆ $authRequests

AuthenticationRequest [] AuthManagerSpecialPage::$authRequests
protected

◆ $isReturn

bool AuthManagerSpecialPage::$isReturn
protected

True if the current request is a result of returning from a redirect flow.

Definition at line 41 of file AuthManagerSpecialPage.php.

◆ $messages

array AuthManagerSpecialPage::$messages = []
staticprotected

Customized messages.

Definition at line 29 of file AuthManagerSpecialPage.php.

◆ $savedRequest

WebRequest null AuthManagerSpecialPage::$savedRequest
protected

If set, will be used instead of the real request.

Used for redirection.

Definition at line 44 of file AuthManagerSpecialPage.php.

◆ $subPage


The documentation for this class was generated from the following file: