CheckBlocksSecondaryAuthenticationProvider.php

Go to the documentation of this file.

<?php
namespace MediaWiki\Auth;
 
use MediaWiki\MainConfigNames;
use MediaWiki\Message\Message;
 
class CheckBlocksSecondaryAuthenticationProvider extends AbstractSecondaryAuthenticationProvider {
 
    protected $blockDisablesLogin = null;
 
    public function __construct( $params = [] ) {
        if ( isset( $params['blockDisablesLogin'] ) ) {
            $this->blockDisablesLogin = (bool)$params['blockDisablesLogin'];
        }
    }
 
    protected function postInitSetup() {
        $this->blockDisablesLogin ??= $this->config->get( MainConfigNames::BlockDisablesLogin );
    }
 
    public function getAuthenticationRequests( $action, array $options ) {
        return [];
    }
 
    public function beginSecondaryAuthentication( $user, array $reqs ) {
        if ( !$this->blockDisablesLogin ) {
            return AuthenticationResponse::newAbstain();
        }
        $block = $user->getBlock();
        // Ignore IP blocks and partial blocks, $wgBlockDisablesLogin was meant for
        // blocks banning specific users.
        if ( $block && $block->isSitewide() && $block->isBlocking( $user ) ) {
            return AuthenticationResponse::newFail(
                new Message( 'login-userblocked', [ $user->getName() ] )
            );
        } else {
            return AuthenticationResponse::newPass();
        }
    }
 
    public function beginSecondaryAccountCreation( $user, $creator, array $reqs ) {
        return AuthenticationResponse::newAbstain();
    }
 
}