ApiLogout.php

Go to the documentation of this file.

<?php
use MediaWiki\Session\BotPasswordSessionProvider;
 
class ApiLogout extends ApiBase {
 
    public function execute() {
        $session = MediaWiki\Session\SessionManager::getGlobalSession();
 
        // Handle bot password logout specially
        if ( $session->getProvider() instanceof BotPasswordSessionProvider ) {
            $session->unpersist();
            return;
        }
 
        // Make sure it's possible to log out
        if ( !$session->canSetUser() ) {
            $this->dieWithError(
                [
                    'cannotlogoutnow-text',
                    $session->getProvider()->describe( $this->getErrorFormatter()->getLanguage() )
                ],
                'cannotlogout'
            );
        }
 
        $user = $this->getUser();
        $oldName = $user->getName();
        $user->logout();
 
        // Give extensions to do something after user logout
        $injected_html = '';
        $this->getHookRunner()->onUserLogoutComplete( $user, $injected_html, $oldName );
    }
 
    public function mustBePosted() {
        return true;
    }
 
    public function needsToken() {
        return 'csrf';
    }
 
    public function isWriteMode() {
        // While core is optimized by default to not require DB writes on log out,
        // these are authenticated POST requests and extensions (eg. CheckUser) are
        // allowed to perform DB writes here without warnings.
        return true;
    }
 
    protected function getWebUITokenSalt( array $params ) {
        return 'logoutToken';
    }
 
    public function isReadMode() {
        return false;
    }
 
    protected function getExamplesMessages() {
        return [
            'action=logout&token=123ABC'
                => 'apihelp-logout-example-logout',
        ];
    }
 
    public function getHelpUrls() {
        return 'https://www.mediawiki.org/wiki/Special:MyLanguage/API:Logout';
    }
}