65 private $userOptionsLookup;
83 if ( isset(
$params[
'emailEnabled'] ) ) {
84 $this->emailEnabled = (bool)
$params[
'emailEnabled'];
86 if ( isset(
$params[
'newPasswordExpiry'] ) ) {
87 $this->newPasswordExpiry = (int)
$params[
'newPasswordExpiry'];
89 if ( isset(
$params[
'passwordReminderResendTime'] ) ) {
90 $this->passwordReminderResendTime =
$params[
'passwordReminderResendTime'];
92 if ( isset(
$params[
'allowRequiringEmailForResets'] ) ) {
93 $this->allowRequiringEmail =
$params[
'allowRequiringEmailForResets'];
95 $this->dbProvider = $dbProvider;
96 $this->userOptionsLookup = $userOptionsLookup;
102 $this->passwordReminderResendTime ??=
104 $this->allowRequiringEmail ??=
111 'msg' =>
wfMessage(
'resetpass-temp-emailed' ),
125 if ( isset( $options[
'username'] ) && $this->emailEnabled ) {
144 if ( !$req || $req->username ===
null || $req->password ===
null ) {
148 $username = $this->userNameUtils->getCanonical(
149 $req->username, UserRigorOptions::RIGOR_USABLE );
150 if ( $username ===
false ) {
154 $row = $this->dbProvider->getReplicaDatabase()->newSelectQueryBuilder()
155 ->select( [
'user_id',
'user_newpassword',
'user_newpass_time' ] )
157 ->where( [
'user_name' => $username ] )
158 ->caller( __METHOD__ )->fetchRow();
164 if ( !$status->isOK() ) {
168 $pwhash = $this->
getPassword( $row->user_newpassword );
169 if ( !$pwhash->verify( $req->password ) ||
170 !$this->isTimestampValid( $row->user_newpass_time )
178 $this->logger->info(
"{user} successfully logged in using temp password",
181 'requestIP' => $this->manager->getRequest()->getIP()
191 $username = $this->userNameUtils->getCanonical( $username, UserRigorOptions::RIGOR_USABLE );
192 if ( $username ===
false ) {
196 $row = $this->dbProvider->getReplicaDatabase()->newSelectQueryBuilder()
197 ->select( [
'user_newpassword',
'user_newpass_time' ] )
199 ->where( [
'user_name' => $username ] )
200 ->caller( __METHOD__ )->fetchRow();
206 public function testUserExists( $username, $flags = IDBAccessObject::READ_NORMAL ) {
207 $username = $this->userNameUtils->getCanonical( $username, UserRigorOptions::RIGOR_USABLE );
208 if ( $username ===
false ) {
212 $db = \DBAccessObjectUtils::getDBFromRecency( $this->dbProvider, $flags );
213 return (
bool)$db->newSelectQueryBuilder()
214 ->select( [
'user_id' ] )
216 ->where( [
'user_name' => $username ] )
218 ->caller( __METHOD__ )->fetchField();
224 if ( get_class( $req ) !== TemporaryPasswordAuthenticationRequest::class ) {
226 return \StatusValue::newGood(
'ignored' );
230 return \StatusValue::newGood();
233 $username = $this->userNameUtils->getCanonical(
234 $req->username, UserRigorOptions::RIGOR_USABLE );
235 if ( $username ===
false ) {
236 return \StatusValue::newGood(
'ignored' );
239 $row = $this->dbProvider->getPrimaryDatabase()->newSelectQueryBuilder()
240 ->select( [
'user_id',
'user_newpass_time' ] )
242 ->where( [
'user_name' => $username ] )
243 ->caller( __METHOD__ )->fetchRow();
245 return \StatusValue::newGood(
'ignored' );
248 $sv = \StatusValue::newGood();
249 if ( $req->password !==
null ) {
252 if ( $req->mailpassword ) {
253 if ( !$this->emailEnabled ) {
254 return \StatusValue::newFatal(
'passwordreset-emaildisabled' );
263 $this->passwordReminderResendTime
264 && $row->user_newpass_time
265 && time() < (
int)
wfTimestamp( TS_UNIX, $row->user_newpass_time )
266 + $this->passwordReminderResendTime * 3600
270 return \StatusValue::newFatal(
'throttled-mailpassword',
271 round( $this->passwordReminderResendTime, 3 ) );
274 if ( !$req->caller ) {
275 return \StatusValue::newFatal(
'passwordreset-nocaller' );
277 if ( !IPUtils::isValid( $req->caller ) ) {
278 $caller = User::newFromName( $req->caller );
280 return \StatusValue::newFatal(
'passwordreset-nosuchcaller', $req->caller );
289 $username = $req->username !==
null ?
290 $this->userNameUtils->getCanonical( $req->username, UserRigorOptions::RIGOR_USABLE ) :
false;
291 if ( $username ===
false ) {
295 $dbw = $this->dbProvider->getPrimaryDatabase();
299 get_class( $req ) === TemporaryPasswordAuthenticationRequest::class
302 $newpassTime = $dbw->timestamp();
303 $sendMail = $req->mailpassword;
310 $dbw->newUpdateQueryBuilder()
313 'user_newpassword' => $pwhash->toString(),
314 'user_newpass_time' => $newpassTime,
316 ->where( [
'user_name' => $username ] )
317 ->caller( __METHOD__ )->execute();
321 $dbw->onTransactionCommitOrIdle(
322 function () use ( $req ) {
338 $reqs, TemporaryPasswordAuthenticationRequest::class
341 $ret = \StatusValue::newGood();
343 if ( $req->mailpassword ) {
344 if ( !$this->emailEnabled ) {
345 $ret->merge( \StatusValue::newFatal(
'emaildisabled' ) );
346 } elseif ( !$user->getEmail() ) {
347 $ret->merge( \StatusValue::newFatal(
'noemailcreate' ) );
361 $reqs, TemporaryPasswordAuthenticationRequest::class
363 if ( $req && $req->username !==
null && $req->password !==
null ) {
365 if ( $req->username !== $user->getName() ) {
367 $req->username = $user->getName();
370 if ( $req->mailpassword ) {
372 $this->manager->setAuthenticationSessionData(
'no-email',
true );
376 $ret->createRequest = $req;
384 $req = $res->createRequest;
385 $mailpassword = $req->mailpassword;
386 $req->mailpassword =
false;
391 if ( $mailpassword ) {
393 $this->dbProvider->getPrimaryDatabase()->onTransactionCommitOrIdle(
394 function () use ( $user, $creator, $req ) {
401 return $mailpassword ?
'byemail' :
null;
411 if ( $time !==
null ) {
413 if ( time() >= $expiry ) {
431 return \MediaWiki\Status\Status::newFatal(
'badipaddress' );
435 $this->
getHookRunner()->onUser__mailPasswordInternal( $creatingUser, $ip, $user );
437 $mainPageUrl = Title::newMainPage()->getCanonicalURL();
438 $userLanguage = $this->userOptionsLookup->getOption( $user,
'language' );
439 $subjectMessage =
wfMessage(
'createaccount-title' )->inLanguage( $userLanguage );
440 $bodyMessage =
wfMessage(
'createaccount-text', $ip, $user->
getName(), $password,
441 '<' . $mainPageUrl .
'>', round( $this->newPasswordExpiry / 86400 ) )
442 ->inLanguage( $userLanguage );
444 $status = $user->
sendMail( $subjectMessage->text(), $bodyMessage->text() );
448 if ( !$status->isGood() ) {
449 $this->logger->warning(
'Could not send account creation email: ' .
450 $status->getWikiText(
false,
false,
'en' ) );
462 $user = User::newFromName( $req->username );
464 return \MediaWiki\Status\Status::newFatal(
'noname' );
466 $userLanguage = $this->userOptionsLookup->getOption( $user,
'language' );
467 $callerIsAnon = IPUtils::isValid( $req->caller );
468 $callerName = $callerIsAnon ? $req->caller : User::newFromName( $req->caller )->getName();
469 $passwordMessage =
wfMessage(
'passwordreset-emailelement', $user->getName(),
470 $req->password )->inLanguage( $userLanguage );
471 $emailMessage =
wfMessage( $callerIsAnon ?
'passwordreset-emailtext-ip'
472 :
'passwordreset-emailtext-user' )->inLanguage( $userLanguage );
473 $body = $emailMessage->params( $callerName, $passwordMessage->text(), 1,
474 '<' . Title::newMainPage()->getCanonicalURL() .
'>',
475 round( $this->newPasswordExpiry / 86400 ) )->text();
477 if ( $this->allowRequiringEmail && !$this->userOptionsLookup
478 ->getBoolOption( $user,
'requireemail' )
483 $body .=
wfMessage(
'passwordreset-emailtext-require-email' )
484 ->inLanguage( $userLanguage )
489 $emailTitle =
wfMessage(
'passwordreset-emailtitle' )->inLanguage( $userLanguage );
490 return $user->sendMail( $emailTitle->text(), $body );
wfTimestampOrNull( $outputtype=TS_UNIX, $ts=null)
Return a formatted timestamp, or null if input is null.
wfTimestamp( $outputtype=TS_UNIX, $ts=0)
Get a timestamp string in one of various formats.
wfMessage( $key,... $params)
This is the function for getting translated interface messages.
array $params
The job parameters.
A class containing constants representing the names of configuration variables.
const PasswordReminderResendTime
Name constant for the PasswordReminderResendTime setting, for use with Config::get()
const EnableEmail
Name constant for the EnableEmail setting, for use with Config::get()
const NewPasswordExpiry
Name constant for the NewPasswordExpiry setting, for use with Config::get()
const AllowRequiringEmailForResets
Name constant for the AllowRequiringEmailForResets setting, for use with Config::get()
Parent class for all special pages.
static getTitleFor( $name, $subpage=false, $fragment='')
Get a localised Title object for a specified special page name If you don't need a full Title object,...
Interface for database access objects.