This is the actual workhorse for Session. More...

Collaboration diagram for MediaWiki\Session\SessionBackend:

[legend]

Public Member Functions
	__construct (SessionId $id, SessionInfo $info, CachedBagOStuff $store, LoggerInterface $logger, HookContainer $hookContainer, $lifetime)

	addData (array $newData)
	Add data to the session. More...

	canSetUser ()
	Indicate whether the session user info can be changed. More...

	delaySave ()
	Delay automatic saving while multiple updates are being made. More...

	deregisterSession ( $index)
	Deregister a Session. More...

	dirty ()
	Mark data as dirty. More...

	getAllowedUserRights ()
	Fetch the rights allowed the user when this session is active. More...

&	getData ()
	Fetch the session data array. More...

	getId ()
	Returns the session ID. More...

	getLoggedOutTimestamp ()
	Fetch the "logged out" timestamp. More...

	getProvider ()
	Fetch the SessionProvider for this session. More...

	getProviderMetadata ()
	Fetch provider metadata. More...

	getRequest ( $index)
	Returns the request associated with a Session. More...

	getSession (WebRequest $request)
	Return a new Session for this backend. More...

	getSessionId ()
	Fetch the SessionId object. More...

	getUser ()
	Returns the authenticated user for this session. More...

	isPersistent ()
	Indicate whether this session is persisted across requests. More...

	persist ()
	Make this session persisted across requests. More...

	renew ()
	Renew the session by resaving everything. More...

	resetId ()
	Changes the session ID. More...

	save ( $closing=false)
	Save the session. More...

	setForceHTTPS ( $force)
	Set whether HTTPS should be forced. More...

	setLoggedOutTimestamp ( $ts=null)
	Set the "logged out" timestamp. More...

	setProviderMetadata ( $metadata)
	Set provider metadata. More...

	setRememberUser ( $remember)
	Set whether the user should be remembered independently of the session ID. More...

	setUser ( $user)
	Set a new user for this session. More...

	shouldForceHTTPS ()
	Whether HTTPS should be forced. More...

	shouldRememberUser ()
	Indicate whether the user should be remembered independently of the session ID. More...

	shutdown ()
	Shut down a session. More...

	suggestLoginUsername ( $index)
	Get a suggested username for the login form. More...

	unpersist ()
	Make this session not persisted across requests. More...

Private Member Functions
	autosave ()
	Save the session, unless delayed. More...

	checkPHPSession ()
	For backwards compatibility, open the PHP session when the global session is persisted. More...

Private Attributes
bool	$checkPHPSessionRecursionGuard = false

int	$curIndex = 0

array null	$data = null

bool	$dataDirty = false

string	$dataHash = null
	Used to detect subarray modifications. More...

int	$delaySave = 0

int	$expires = 0

bool	$forceHTTPS = false

bool	$forcePersist = false

HookRunner	$hookRunner

SessionId	$id

int	$lifetime

int	$loggedOut = 0

LoggerInterface	$logger

bool	$metaDirty = false

bool	$persist = false

SessionProvider	$provider
	provider More...

array null	$providerMetadata = null
	provider-specified metadata More...

bool	$remember = false

WebRequest[]	$requests = []
	Session requests. More...

bool	$shutdown = false

CachedBagOStuff	$store

bool	$usePhpSessionHandling = true

User	$user

Detailed Description

This is the actual workhorse for Session.

Most code does not need to use this class, you want \MediaWiki\Session\Session. The exceptions are SessionProviders and SessionMetadata hook functions, which get an instance of this class rather than Session.

The reasons for this split are:

A session can be attached to multiple requests, but we want the Session object to have some features that correspond to just one of those requests.
We want reasonable garbage collection behavior, but we also want the SessionManager to hold a reference to every active session so it can be saved when the request ends.

Since: 1.27

Definition at line 52 of file SessionBackend.php.

Constructor & Destructor Documentation

◆ __construct()

MediaWiki\Session\SessionBackend::__construct	(	SessionId	$id,
		SessionInfo	$info,
		CachedBagOStuff	$store,
		LoggerInterface	$logger,
		HookContainer	$hookContainer,
			$lifetime
	)

Parameters

SessionId	$id
SessionInfo	$info	Session info to populate from
CachedBagOStuff	$store	Backend data store
LoggerInterface	$logger
HookContainer	$hookContainer
int	$lifetime	Session data lifetime in seconds

Definition at line 132 of file SessionBackend.php.

Member Function Documentation

◆ addData()

MediaWiki\Session\SessionBackend::addData ( array $newData )

Add data to the session.

Overwrites any existing data under the same keys.

Parameters

array $newData Key-value pairs to add to the session

Definition at line 556 of file SessionBackend.php.

References MediaWiki\Session\SessionBackend\$data, MediaWiki\Session\SessionBackend\getData(), and wfGetAllCallers().

Referenced by MediaWiki\Session\CookieSessionProvider\persistSession().

◆ autosave()

MediaWiki\Session\SessionBackend::autosave ( )

private

Save the session, unless delayed.

See also: SessionBackend::save()

Definition at line 635 of file SessionBackend.php.

References MediaWiki\Session\SessionBackend\delaySave(), and MediaWiki\Session\SessionBackend\save().

Referenced by MediaWiki\Session\SessionBackend\persist(), MediaWiki\Session\SessionBackend\renew(), MediaWiki\Session\SessionBackend\resetId(), MediaWiki\Session\SessionBackend\setForceHTTPS(), MediaWiki\Session\SessionBackend\setLoggedOutTimestamp(), MediaWiki\Session\SessionBackend\setProviderMetadata(), MediaWiki\Session\SessionBackend\setRememberUser(), MediaWiki\Session\SessionBackend\setUser(), and MediaWiki\Session\SessionBackend\unpersist().

◆ canSetUser()

MediaWiki\Session\SessionBackend::canSetUser ( )

Indicate whether the session user info can be changed.

Returns: bool

Definition at line 415 of file SessionBackend.php.

Referenced by MediaWiki\Session\SessionBackend\setUser().

◆ checkPHPSession()

MediaWiki\Session\SessionBackend::checkPHPSession ( )

private

For backwards compatibility, open the PHP session when the global session is persisted.

Definition at line 781 of file SessionBackend.php.

References MediaWiki\Session\SessionManager\getGlobalSession(), MediaWiki\Session\SessionBackend\getId(), and MediaWiki\Session\PHPSessionHandler\isEnabled().

Referenced by MediaWiki\Session\SessionBackend\save().

◆ delaySave()

MediaWiki\Session\SessionBackend::delaySave ( )

Delay automatic saving while multiple updates are being made.

Calls to save() will not be delayed.

Returns: \Wikimedia\ScopedCallback When this goes out of scope, a save will be triggered

Definition at line 621 of file SessionBackend.php.

References MediaWiki\Session\SessionBackend\save().

Referenced by MediaWiki\Session\SessionBackend\autosave().

◆ deregisterSession()

MediaWiki\Session\SessionBackend::deregisterSession ( $index )

Deregister a Session.

Definition at line 212 of file SessionBackend.php.

References MediaWiki\Session\SessionBackend\save(), and MediaWiki\Session\SessionBackend\shutdown().

◆ dirty()

MediaWiki\Session\SessionBackend::dirty ( )

Mark data as dirty.

Definition at line 576 of file SessionBackend.php.

References wfGetAllCallers().

◆ getAllowedUserRights()

MediaWiki\Session\SessionBackend::getAllowedUserRights ( )

Fetch the rights allowed the user when this session is active.

Returns: null|string[] Allowed user rights, or null to allow all.

Definition at line 407 of file SessionBackend.php.

◆ getData()

& MediaWiki\Session\SessionBackend::getData ( )

Fetch the session data array.

Note the caller is responsible for calling $this->dirty() if anything in the array is changed.

Definition at line 545 of file SessionBackend.php.

References MediaWiki\Session\SessionBackend\$data.

Referenced by MediaWiki\Session\SessionBackend\addData().

◆ getId()

MediaWiki\Session\SessionBackend::getId ( )

Returns the session ID.

Returns: string

Definition at line 233 of file SessionBackend.php.

References MediaWiki\Session\SessionBackend\$id.

Referenced by MediaWiki\Session\SessionBackend\checkPHPSession(), MediaWiki\Session\SessionManager\deregisterSessionBackend(), MediaWiki\Session\ImmutableSessionProviderWithCookie\persistSession(), and MediaWiki\Session\CookieSessionProvider\persistSession().

◆ getLoggedOutTimestamp()

MediaWiki\Session\SessionBackend::getLoggedOutTimestamp ( )

Fetch the "logged out" timestamp.

Returns: int

Definition at line 484 of file SessionBackend.php.

References MediaWiki\Session\SessionBackend\$loggedOut.

Referenced by MediaWiki\Session\CookieSessionProvider\persistSession().

◆ getProvider()

MediaWiki\Session\SessionBackend::getProvider ( )

Fetch the SessionProvider for this session.

Returns: SessionProviderInterface

Definition at line 290 of file SessionBackend.php.

References MediaWiki\Session\SessionBackend\$provider.

Referenced by MediaWiki\Session\Session\BotPasswordSessionProvider\getAllowedUserRights(), and MediaWiki\Session\SessionProvider\getAllowedUserRights().

◆ getProviderMetadata()

MediaWiki\Session\SessionBackend::getProviderMetadata ( )

Fetch provider metadata.

Note: For use by SessionProvider subclasses only

Returns: array|null

Definition at line 511 of file SessionBackend.php.

References MediaWiki\Session\SessionBackend\$providerMetadata.

Referenced by MediaWiki\Session\Session\BotPasswordSessionProvider\getAllowedUserRights().

◆ getRequest()

MediaWiki\Session\SessionBackend::getRequest ( $index )

Returns the request associated with a Session.

Parameters

int $index Session index

Returns: WebRequest

Definition at line 388 of file SessionBackend.php.

◆ getSession()

MediaWiki\Session\SessionBackend::getSession ( WebRequest $request )

Return a new Session for this backend.

Parameters

WebRequest $request

Returns: Session

Definition at line 200 of file SessionBackend.php.

References MediaWiki\Session\SessionBackend\$curIndex.

◆ getSessionId()

MediaWiki\Session\SessionBackend::getSessionId ( )

Fetch the SessionId object.

Definition at line 242 of file SessionBackend.php.

References MediaWiki\Session\SessionBackend\$id.

Referenced by MediaWiki\Session\SessionManager\changeBackendId(), MediaWiki\Session\SessionManager\deregisterSessionBackend(), and MediaWiki\Session\SessionBackend\save().

◆ getUser()

MediaWiki\Session\SessionBackend::getUser ( )

Returns the authenticated user for this session.

Returns: User

Definition at line 399 of file SessionBackend.php.

References MediaWiki\Session\SessionBackend\$user.

Referenced by MediaWiki\Session\ImmutableSessionProviderWithCookie\persistSession(), and MediaWiki\Session\CookieSessionProvider\persistSession().

◆ isPersistent()

MediaWiki\Session\SessionBackend::isPersistent ( )

Indicate whether this session is persisted across requests.

For example, if cookies are set.

Returns: bool

Definition at line 301 of file SessionBackend.php.

References MediaWiki\Session\SessionBackend\$persist.

◆ persist()

MediaWiki\Session\SessionBackend::persist ( )

Make this session persisted across requests.

If the session is already persistent, equivalent to calling $this->renew().

Definition at line 311 of file SessionBackend.php.

References MediaWiki\Session\SessionBackend\autosave(), and MediaWiki\Session\SessionBackend\renew().

Referenced by MediaWiki\Session\SessionBackend\__construct(), MediaWiki\Session\SessionBackend\renew(), MediaWiki\Session\SessionBackend\save(), and MediaWiki\Session\SessionBackend\unpersist().

◆ renew()

MediaWiki\Session\SessionBackend::renew ( )

Renew the session by resaving everything.

Resets the TTL in the backend store if the session is near expiring, and re-persists the session to any active WebRequests if persistent.

Definition at line 592 of file SessionBackend.php.

References MediaWiki\Session\SessionBackend\autosave(), MediaWiki\Session\SessionBackend\persist(), and wfGetAllCallers().

Referenced by MediaWiki\Session\SessionBackend\persist().

◆ resetId()

MediaWiki\Session\SessionBackend::resetId ( )

Changes the session ID.

Returns: string New ID (might be the same as the old)

Definition at line 250 of file SessionBackend.php.

References MediaWiki\Session\SessionBackend\$id, MediaWiki\Session\SessionBackend\autosave(), and MediaWiki\Session\PHPSessionHandler\isEnabled().

◆ save()

MediaWiki\Session\SessionBackend::save ( $closing = false )

Save the session.

Update both the backend data and the associated WebRequest(s) to reflect the state of the SessionBackend. This might include persisting or unpersisting the session.

Parameters

bool $closing Whether the session is being closed

Definition at line 650 of file SessionBackend.php.

Referenced by MediaWiki\Session\SessionBackend\autosave(), MediaWiki\Session\SessionBackend\delaySave(), MediaWiki\Session\SessionBackend\deregisterSession(), and MediaWiki\Session\SessionBackend\shutdown().

◆ setForceHTTPS()

MediaWiki\Session\SessionBackend::setForceHTTPS ( $force )

Set whether HTTPS should be forced.

Parameters

bool $force

Definition at line 467 of file SessionBackend.php.

References MediaWiki\Session\SessionBackend\autosave().

◆ setLoggedOutTimestamp()

MediaWiki\Session\SessionBackend::setLoggedOutTimestamp ( $ts = null )

Set the "logged out" timestamp.

Parameters

int | null $ts

Definition at line 492 of file SessionBackend.php.

References MediaWiki\Session\SessionBackend\autosave().

◆ setProviderMetadata()

MediaWiki\Session\SessionBackend::setProviderMetadata ( $metadata )

Set provider metadata.

Note: For use by SessionProvider subclasses only

Parameters

array | null $metadata

Definition at line 520 of file SessionBackend.php.

References MediaWiki\Session\SessionBackend\autosave().

◆ setRememberUser()

MediaWiki\Session\SessionBackend::setRememberUser ( $remember )

Set whether the user should be remembered independently of the session ID.

Parameters

bool $remember

Definition at line 370 of file SessionBackend.php.

References MediaWiki\Session\SessionBackend\$remember, and MediaWiki\Session\SessionBackend\autosave().

◆ setUser()

MediaWiki\Session\SessionBackend::setUser ( $user )

Set a new user for this session.

Note: This should only be called when the user has been authenticated via a login process

Parameters

User $user User to set on the session. This may become a "UserValue" in the future, or User may be refactored into such.

Definition at line 426 of file SessionBackend.php.

References MediaWiki\Session\SessionBackend\$user, MediaWiki\Session\SessionBackend\autosave(), and MediaWiki\Session\SessionBackend\canSetUser().

◆ shouldForceHTTPS()

MediaWiki\Session\SessionBackend::shouldForceHTTPS ( )

Whether HTTPS should be forced.

Returns: bool

Definition at line 459 of file SessionBackend.php.

References MediaWiki\Session\SessionBackend\$forceHTTPS.

Referenced by MediaWiki\Session\ImmutableSessionProviderWithCookie\persistSession(), and MediaWiki\Session\CookieSessionProvider\persistSession().

◆ shouldRememberUser()

MediaWiki\Session\SessionBackend::shouldRememberUser ( )

Indicate whether the user should be remembered independently of the session ID.

Returns: bool

Definition at line 361 of file SessionBackend.php.

References MediaWiki\Session\SessionBackend\$remember.

Referenced by MediaWiki\Session\CookieSessionProvider\persistSession(), and MediaWiki\Session\CookieSessionProvider\setForceHTTPSCookie().

◆ shutdown()

MediaWiki\Session\SessionBackend::shutdown ( )

Shut down a session.

Definition at line 224 of file SessionBackend.php.

References MediaWiki\Session\SessionBackend\save().

Referenced by MediaWiki\Session\SessionBackend\deregisterSession().

◆ suggestLoginUsername()

MediaWiki\Session\SessionBackend::suggestLoginUsername ( $index )

Get a suggested username for the login form.

Parameters

int $index Session index

Returns: string|null

Definition at line 448 of file SessionBackend.php.

◆ unpersist()

MediaWiki\Session\SessionBackend::unpersist ( )

Make this session not persisted across requests.

Definition at line 330 of file SessionBackend.php.

References MediaWiki\Session\SessionBackend\autosave(), MediaWiki\Session\PHPSessionHandler\isEnabled(), and MediaWiki\Session\SessionBackend\persist().

Member Data Documentation

◆ $checkPHPSessionRecursionGuard

bool MediaWiki\Session\SessionBackend::$checkPHPSessionRecursionGuard = false

private

Definition at line 119 of file SessionBackend.php.

◆ $curIndex

int MediaWiki\Session\SessionBackend::$curIndex = 0

private

Definition at line 96 of file SessionBackend.php.

Referenced by MediaWiki\Session\SessionBackend\getSession().

◆ $data

array null MediaWiki\Session\SessionBackend::$data = null

private

Definition at line 66 of file SessionBackend.php.

Referenced by MediaWiki\Session\SessionBackend\addData(), and MediaWiki\Session\SessionBackend\getData().

◆ $dataDirty

bool MediaWiki\Session\SessionBackend::$dataDirty = false

private

Definition at line 75 of file SessionBackend.php.

◆ $dataHash

string MediaWiki\Session\SessionBackend::$dataHash = null

private

Used to detect subarray modifications.

Definition at line 78 of file SessionBackend.php.

◆ $delaySave

int MediaWiki\Session\SessionBackend::$delaySave = 0

private

Definition at line 114 of file SessionBackend.php.

◆ $expires

int MediaWiki\Session\SessionBackend::$expires = 0

private

Definition at line 108 of file SessionBackend.php.

◆ $forceHTTPS

bool MediaWiki\Session\SessionBackend::$forceHTTPS = false

private

Definition at line 63 of file SessionBackend.php.

Referenced by MediaWiki\Session\SessionBackend\save(), and MediaWiki\Session\SessionBackend\shouldForceHTTPS().

◆ $forcePersist

bool MediaWiki\Session\SessionBackend::$forcePersist = false

private

Definition at line 69 of file SessionBackend.php.

◆ $hookRunner

HookRunner MediaWiki\Session\SessionBackend::$hookRunner

private

Definition at line 87 of file SessionBackend.php.

◆ $id

SessionId MediaWiki\Session\SessionBackend::$id

private

Definition at line 54 of file SessionBackend.php.

Referenced by MediaWiki\Session\SessionBackend\__construct(), MediaWiki\Session\SessionBackend\getId(), MediaWiki\Session\SessionBackend\getSessionId(), and MediaWiki\Session\SessionBackend\resetId().

◆ $lifetime

int MediaWiki\Session\SessionBackend::$lifetime

private

Definition at line 90 of file SessionBackend.php.

Referenced by MediaWiki\Session\SessionBackend\__construct(), and MediaWiki\Session\SessionBackend\save().

◆ $loggedOut

int MediaWiki\Session\SessionBackend::$loggedOut = 0

private

Definition at line 111 of file SessionBackend.php.

Referenced by MediaWiki\Session\SessionBackend\getLoggedOutTimestamp(), and MediaWiki\Session\SessionBackend\save().

◆ $logger

LoggerInterface MediaWiki\Session\SessionBackend::$logger

private

Definition at line 84 of file SessionBackend.php.

Referenced by MediaWiki\Session\SessionBackend\__construct().

◆ $metaDirty

bool MediaWiki\Session\SessionBackend::$metaDirty = false

private

Definition at line 72 of file SessionBackend.php.

◆ $persist

bool MediaWiki\Session\SessionBackend::$persist = false

private

Definition at line 57 of file SessionBackend.php.

Referenced by MediaWiki\Session\SessionBackend\isPersistent(), and MediaWiki\Session\SessionBackend\save().

◆ $provider

SessionProvider MediaWiki\Session\SessionBackend::$provider

private

provider

Definition at line 102 of file SessionBackend.php.

Referenced by MediaWiki\Session\SessionBackend\getProvider().

◆ $providerMetadata

array null MediaWiki\Session\SessionBackend::$providerMetadata = null

private

provider-specified metadata

Definition at line 105 of file SessionBackend.php.

Referenced by MediaWiki\Session\SessionBackend\getProviderMetadata().

◆ $remember

bool MediaWiki\Session\SessionBackend::$remember = false

private

Definition at line 60 of file SessionBackend.php.

Referenced by MediaWiki\Session\SessionBackend\save(), MediaWiki\Session\SessionBackend\setRememberUser(), and MediaWiki\Session\SessionBackend\shouldRememberUser().

◆ $requests

WebRequest [] MediaWiki\Session\SessionBackend::$requests = []

private

Session requests.

Definition at line 99 of file SessionBackend.php.

◆ $shutdown

bool MediaWiki\Session\SessionBackend::$shutdown = false

private

Definition at line 122 of file SessionBackend.php.

◆ $store

CachedBagOStuff MediaWiki\Session\SessionBackend::$store

private

Definition at line 81 of file SessionBackend.php.

Referenced by MediaWiki\Session\SessionBackend\__construct().

◆ $usePhpSessionHandling

bool MediaWiki\Session\SessionBackend::$usePhpSessionHandling = true

private

Definition at line 117 of file SessionBackend.php.

◆ $user

User MediaWiki\Session\SessionBackend::$user

private

Definition at line 93 of file SessionBackend.php.

Referenced by MediaWiki\Session\SessionBackend\getUser(), MediaWiki\Session\SessionBackend\save(), and MediaWiki\Session\SessionBackend\setUser().

The documentation for this class was generated from the following file:

includes/session/SessionBackend.php

Public Member Functions

Private Member Functions

Private Attributes

Detailed Description

Constructor & Destructor Documentation

◆ __construct()

Member Function Documentation

◆ addData()

◆ autosave()

◆ canSetUser()

◆ checkPHPSession()

◆ delaySave()

◆ deregisterSession()

◆ dirty()

◆ getAllowedUserRights()

◆ getData()

◆ getId()

◆ getLoggedOutTimestamp()

◆ getProvider()

◆ getProviderMetadata()

◆ getRequest()

◆ getSession()

◆ getSessionId()

◆ getUser()

◆ isPersistent()

◆ persist()

◆ renew()

◆ resetId()

◆ save()

◆ setForceHTTPS()

◆ setLoggedOutTimestamp()

◆ setProviderMetadata()

◆ setRememberUser()

◆ setUser()

◆ shouldForceHTTPS()

◆ shouldRememberUser()

◆ shutdown()

◆ suggestLoginUsername()

◆ unpersist()

Member Data Documentation

◆ $checkPHPSessionRecursionGuard

◆ $curIndex

◆ $data

◆ $dataDirty

◆ $dataHash

◆ $delaySave

◆ $expires

◆ $forceHTTPS

◆ $forcePersist

◆ $hookRunner

◆ $id

◆ $lifetime

◆ $loggedOut

◆ $logger

◆ $metaDirty

◆ $persist

◆ $provider

◆ $providerMetadata

◆ $remember

◆ $requests

◆ $shutdown

◆ $store

◆ $usePhpSessionHandling

◆ $user