PreviouslyRenamedAccountPreAuthenticationProvider.php

Go to the documentation of this file.

<?php
 
namespace MediaWiki\Auth;
 
use MediaWiki\RenameUser\RenameuserSQL;
use MediaWiki\User\UserFactory;
use StatusValue;
use Wikimedia\Rdbms\DBAccessObjectUtils;
use Wikimedia\Rdbms\IConnectionProvider;
use Wikimedia\Rdbms\IDBAccessObject;
 
class PreviouslyRenamedAccountPreAuthenticationProvider extends AbstractPreAuthenticationProvider {
 
    public function __construct(
        private readonly IConnectionProvider $dbProvider,
        private readonly UserFactory $userFactory,
        array $params = [],
    ) {
    }
 
    public function getAuthenticationRequests( $action, array $options ) {
        if ( $action === AuthManager::ACTION_CREATE ) {
            if ( $options['username'] ) {
                $creator = $this->userFactory->newFromName( $options['username'] )
                    ?: $this->userFactory->newAnonymous();
            } else {
                $creator = $this->userFactory->newAnonymous();
            }
            if ( $creator->isAllowed( 'createpreviouslyrenamedaccount' ) ) {
                return [ new PreviouslyRenamedAccountAuthenticationRequest() ];
            }
        }
        return [];
    }
 
    public function testForAccountCreation( $user, $creator, array $reqs ) {
        $req = AuthenticationRequest::getRequestByClass( $reqs,
            PreviouslyRenamedAccountAuthenticationRequest::class );
        if (
            $req instanceof PreviouslyRenamedAccountAuthenticationRequest &&
            $req->allowPreviouslyRenamedAccount &&
            $creator->authorizeAction( 'createpreviouslyrenamedaccount' )
        ) {
            // Check overridden by the user
            return StatusValue::newGood();
        }
        return $this->previouslyRenamedAccountStatus( $user->getName(), IDBAccessObject::READ_LATEST );
    }
 
    public function testUserForCreation( $user, $autocreate, array $options = [] ) {
        // This is used by the "cancreate" API, so don't check permissions here to allow users
        // who can override to still see whether normal registration attempt would be an error.
        if ( $autocreate || !empty( $options['creating'] ) ) {
            return StatusValue::newGood();
        }
        return $this->previouslyRenamedAccountStatus( $user->getName(), IDBAccessObject::READ_NORMAL );
    }
 
    protected function previouslyRenamedAccountStatus( string $username, int $flags ): StatusValue {
        $db = DBAccessObjectUtils::getDBFromRecency( $this->dbProvider, $flags );
        if ( RenameuserSQL::isPreviouslyRenamedAccount( $username, $db ) ) {
            return StatusValue::newFatal( 'username-previously-renamed-account' );
        }
        return StatusValue::newGood();
    }
}