EmailUser.php

Go to the documentation of this file.

<?php
namespace MediaWiki\Mail;
 
use BadMethodCallException;
use MailAddress;
use MediaWiki\Block\AbstractBlock;
use MediaWiki\Config\ServiceOptions;
use MediaWiki\HookContainer\HookContainer;
use MediaWiki\HookContainer\HookRunner;
use MediaWiki\Language\RawMessage;
use MediaWiki\MainConfigNames;
use MediaWiki\MediaWikiServices;
use MediaWiki\Permissions\Authority;
use MediaWiki\Preferences\MultiUsernameFilter;
use MediaWiki\SpecialPage\SpecialPage;
use MediaWiki\User\CentralId\CentralIdLookup;
use MediaWiki\User\User;
use MediaWiki\User\UserFactory;
use MediaWiki\User\UserOptionsLookup;
use Message;
use MessageSpecifier;
use RequestContext;
use RuntimeException;
use StatusValue;
use ThrottledError;
use UnexpectedValueException;
use Wikimedia\Message\IMessageFormatterFactory;
use Wikimedia\Message\ITextFormatter;
use Wikimedia\Message\MessageValue;
 
class EmailUser {
    public const CONSTRUCTOR_OPTIONS = [
        MainConfigNames::EnableEmail,
        MainConfigNames::EnableUserEmail,
        MainConfigNames::EnableSpecialMute,
        MainConfigNames::PasswordSender,
        MainConfigNames::UserEmailUseReplyTo,
    ];
 
    private ServiceOptions $options;
    private HookRunner $hookRunner;
    private UserOptionsLookup $userOptionsLookup;
    private CentralIdLookup $centralIdLookup;
    private UserFactory $userFactory;
    private IEmailer $emailer;
    private IMessageFormatterFactory $messageFormatterFactory;
    private ITextFormatter $contLangMsgFormatter;
 
    private Authority $sender;
 
    public function __construct(
        ServiceOptions $options,
        HookContainer $hookContainer,
        UserOptionsLookup $userOptionsLookup,
        CentralIdLookup $centralIdLookup,
        UserFactory $userFactory,
        IEmailer $emailer,
        IMessageFormatterFactory $messageFormatterFactory,
        ITextFormatter $contLangMsgFormatter,
        Authority $sender
    ) {
        $options->assertRequiredOptions( self::CONSTRUCTOR_OPTIONS );
        $this->options = $options;
        $this->hookRunner = new HookRunner( $hookContainer );
        $this->userOptionsLookup = $userOptionsLookup;
        $this->centralIdLookup = $centralIdLookup;
        $this->userFactory = $userFactory;
        $this->emailer = $emailer;
        $this->messageFormatterFactory = $messageFormatterFactory;
        $this->contLangMsgFormatter = $contLangMsgFormatter;
 
        $this->sender = $sender;
    }
 
    public function validateTarget( UserEmailContact $target ): StatusValue {
        $targetIdentity = $target->getUser();
 
        if ( !$targetIdentity->getId() ) {
            return StatusValue::newFatal( 'emailnotarget' );
        }
 
        if ( !$target->isEmailConfirmed() ) {
            return StatusValue::newFatal( 'noemailtext' );
        }
 
        $targetUser = $this->userFactory->newFromUserIdentity( $targetIdentity );
        if ( !$targetUser->canReceiveEmail() ) {
            return StatusValue::newFatal( 'nowikiemailtext' );
        }
 
        $senderUser = $this->userFactory->newFromAuthority( $this->sender );
        if (
            !$this->userOptionsLookup->getOption( $targetIdentity, 'email-allow-new-users' ) &&
            $senderUser->isNewbie()
        ) {
            return StatusValue::newFatal( 'nowikiemailtext' );
        }
 
        $muteList = $this->userOptionsLookup->getOption(
            $targetIdentity,
            'email-blacklist',
            ''
        );
        if ( $muteList ) {
            $muteList = MultiUsernameFilter::splitIds( $muteList );
            $senderId = $this->centralIdLookup->centralIdFromLocalUser( $this->sender->getUser() );
            if ( $senderId !== 0 && in_array( $senderId, $muteList ) ) {
                return StatusValue::newFatal( 'nowikiemailtext' );
            }
        }
 
        return StatusValue::newGood();
    }
 
    public function authorizeSend( string $editToken ): StatusValue {
        if (
            !$this->options->get( MainConfigNames::EnableEmail ) ||
            !$this->options->get( MainConfigNames::EnableUserEmail )
        ) {
            return StatusValue::newFatal( 'usermaildisabled' );
        }
 
        $user = $this->userFactory->newFromAuthority( $this->sender );
 
        // Run this before checking 'sendemail' permission
        // to show appropriate message to anons (T160309)
        if ( !$user->isEmailConfirmed() ) {
            return StatusValue::newFatal( 'mailnologin' );
        }
 
        // TODO We should simply use Authority for checking permissions and blocks (and the rate limit, after T310476)
        // However, that requires a target page, and it's unclear what page should be used here (T339822).
        if ( !$this->sender->isAllowed( 'sendemail' ) ) {
            return StatusValue::newFatal( 'badaccess' );
        }
 
        $block = $this->sender->getBlock();
        if ( $block instanceof AbstractBlock && $block->appliesToRight( 'sendemail' ) ) {
            return StatusValue::newFatal( $this->getBlockedMessage( $user ) );
        }
 
        // Check the ping limiter without incrementing it - we'll check it
        // again later and increment it on a successful send
        if ( $user->pingLimiter( 'sendemail', 0 ) ) {
            return StatusValue::newFatal( 'actionthrottledtext' );
        }
 
        $hookErr = false;
 
        // TODO Remove deprecated hooks
        $this->hookRunner->onUserCanSendEmail( $user, $hookErr );
        $this->hookRunner->onEmailUserPermissionsErrors( $user, $editToken, $hookErr );
        if ( is_array( $hookErr ) ) {
            // SpamBlacklist uses null for the third element, and there might be more handlers not using an array.
            $msgParamsArray = is_array( $hookErr[2] ) ? $hookErr[2] : [];
            $ret = StatusValue::newFatal( $hookErr[1], ...$msgParamsArray );
            $ret->value = $hookErr[0];
            return $ret;
        }
        $hookStatus = StatusValue::newGood();
        $hookRes = $this->hookRunner->onEmailUserAuthorizeSend( $this->sender, $hookStatus );
        if ( !$hookRes && !$hookStatus->isGood() ) {
            return $hookStatus;
        }
 
        return StatusValue::newGood();
    }
 
    public function sendEmailUnsafe(
        UserEmailContact $target,
        string $subject,
        string $text,
        bool $CCMe,
        string $langCode
    ): StatusValue {
        $senderIdentity = $this->sender->getUser();
        $targetStatus = $this->validateTarget( $target );
        if ( !$targetStatus->isGood() ) {
            return $targetStatus;
        }
 
        $senderUser = $this->userFactory->newFromAuthority( $this->sender );
        // Check and increment the rate limits
        if ( $senderUser->pingLimiter( 'sendemail' ) ) {
            throw $this->getThrottledError();
        }
 
        $toAddress = MailAddress::newFromUser( $target );
        $fromAddress = MailAddress::newFromUser( $senderUser );
 
        // Add a standard footer and trim up trailing newlines
        $text = rtrim( $text ) . "\n\n-- \n";
        $text .= $this->contLangMsgFormatter->format(
            MessageValue::new( 'emailuserfooter', [ $fromAddress->name, $toAddress->name ] )
        );
 
        if ( $this->options->get( MainConfigNames::EnableSpecialMute ) ) {
            $text .= "\n" . $this->contLangMsgFormatter->format(
                MessageValue::new(
                    'specialmute-email-footer',
                    [
                        $this->getSpecialMuteCanonicalURL( $senderIdentity->getName() ),
                        $senderIdentity->getName()
                    ]
                )
            );
        }
 
        $error = false;
        // TODO Remove deprecated ugly hook
        if ( !$this->hookRunner->onEmailUser( $toAddress, $fromAddress, $subject, $text, $error ) ) {
            if ( $error instanceof StatusValue ) {
                return $error;
            } elseif ( $error === false || $error === '' || $error === [] ) {
                // Possibly to tell HTMLForm to pretend there was no submission?
                return StatusValue::newFatal( 'hookaborted' );
            } elseif ( $error === true ) {
                // Hook sent the mail itself and indicates success?
                return StatusValue::newGood();
            } elseif ( is_array( $error ) ) {
                $status = StatusValue::newGood();
                foreach ( $error as $e ) {
                    $status->fatal( $e );
                }
                return $status;
            } elseif ( $error instanceof MessageSpecifier ) {
                return StatusValue::newFatal( $error );
            } else {
                // Setting $error to something else was deprecated in 1.29 and
                // removed in 1.36, and so an exception is now thrown
                $type = is_object( $error ) ? get_class( $error ) : gettype( $error );
                throw new UnexpectedValueException(
                    'EmailUser hook set $error to unsupported type ' . $type
                );
            }
        }
 
        $hookStatus = StatusValue::newGood();
        $hookRes = $this->hookRunner->onEmailUserSendEmail(
            $this->sender,
            $fromAddress,
            $target,
            $toAddress,
            $subject,
            $text,
            $hookStatus
        );
        if ( !$hookRes && !$hookStatus->isGood() ) {
            return $hookStatus;
        }
 
        [ $mailFrom, $replyTo ] = $this->getFromAndReplyTo( $fromAddress );
 
        $status = $this->emailer->send(
            $toAddress,
            $mailFrom,
            $subject,
            $text,
            null,
            [ 'replyTo' => $replyTo ]
        );
 
        if ( !$status->isGood() ) {
            return $status;
        }
 
        // if the user requested a copy of this mail, do this now,
        // unless they are emailing themselves, in which case one
        // copy of the message is sufficient.
        if ( $CCMe && !$toAddress->equals( $fromAddress ) ) {
            $userMsgFormatter = $this->messageFormatterFactory->getTextFormatter( $langCode );
            $ccTo = $fromAddress;
            $ccFrom = $fromAddress;
            $ccSubject = $userMsgFormatter->format(
                MessageValue::new( 'emailccsubject' )->plaintextParams(
                    $target->getUser()->getName(),
                    $subject
                )
            );
            $ccText = $text;
 
            $this->hookRunner->onEmailUserCC( $ccTo, $ccFrom, $ccSubject, $ccText );
 
            [ $mailFrom, $replyTo ] = $this->getFromAndReplyTo( $ccFrom );
 
            $ccStatus = $this->emailer->send(
                $ccTo,
                $mailFrom,
                $ccSubject,
                $ccText,
                null,
                [ 'replyTo' => $replyTo ]
            );
            $status->merge( $ccStatus );
        }
 
        $this->hookRunner->onEmailUserComplete( $toAddress, $fromAddress, $subject, $text );
 
        return $status;
    }
 
    private function getFromAndReplyTo( MailAddress $fromAddress ): array {
        if ( $this->options->get( MainConfigNames::UserEmailUseReplyTo ) ) {
            $mailFrom = new MailAddress(
                $this->options->get( MainConfigNames::PasswordSender ),
                $this->contLangMsgFormatter->format( MessageValue::new( 'emailsender' ) )
            );
            $replyTo = $fromAddress;
        } else {
            $mailFrom = $fromAddress;
            $replyTo = null;
        }
        return [ $mailFrom, $replyTo ];
    }
 
    private function getSpecialMuteCanonicalURL( string $targetName ): string {
        if ( defined( 'MW_PHPUNIT_TEST' ) ) {
            return "Ceci n'est pas une URL";
        }
        return SpecialPage::getTitleFor( 'Mute', $targetName )->getCanonicalURL();
    }
 
    private function getThrottledError() {
        if ( defined( 'MW_PHPUNIT_TEST' ) ) {
            return new RuntimeException( "You are throttled, and I am not running heavy logic in the constructor" );
        }
        return new ThrottledError();
    }
 
    private function getBlockedMessage( User $user ): Message {
        if ( defined( 'MW_PHPUNIT_TEST' ) ) {
            return new RawMessage( 'You shall not send' );
        }
        $blockErrorFormatter = MediaWikiServices::getInstance()->getBlockErrorFormatter();
        $block = $user->getBlock();
        if ( !$block ) {
            throw new BadMethodCallException( 'This method should only be called if the user is blocked' );
        }
        return $blockErrorFormatter->getMessage(
            $block,
            $user,
            RequestContext::getMain()->getLanguage(),
            RequestContext::getMain()->getRequest()->getIP()
        );
    }
}