BasicRequestAuthorizer.php

Go to the documentation of this file.

<?php
 
namespace MediaWiki\Rest\BasicAccess;
 
use MediaWiki\Rest\Handler;
use MediaWiki\Rest\RequestInterface;
 
abstract class BasicRequestAuthorizer {
 
    protected RequestInterface $request;
    protected Handler $handler;
 
    public function __construct( RequestInterface $request, Handler $handler ) {
        $this->request = $request;
        $this->handler = $handler;
    }
 
    public function authorize() {
        if ( $this->handler->needsReadAccess() && !$this->isReadAllowed() ) {
            return 'rest-read-denied';
        }
        if ( $this->handler->needsWriteAccess() && !$this->isWriteAllowed() ) {
            return 'rest-write-denied';
        }
        return null;
    }
 
    abstract protected function isReadAllowed();
 
    abstract protected function isWriteAllowed();
}