Page MenuHomeWickedGov Phorge
Files F4122993

OATHUser.php
No OneTemporary
Actions

Size
3 KB
Referenced Files
None
Subscribers
None

OATHUser.php
View Options

<?php
/**
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License along
* with this program; if not, write to the Free Software Foundation, Inc.,
* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
* http://www.gnu.org/copyleft/gpl.html
*/
namespace MediaWiki\Extension\OATHAuth;
use InvalidArgumentException;
use MediaWiki\User\User;
use ReflectionClass;
/**
* Class representing a user from OATH's perspective
*
* @ingroup Extensions
*/
class OATHUser {
private User $user;
private int $centralId;
/** @var IAuthKey[] */
private array $keys = [];
private ?IModule $module = null;
/**
* Constructor. Can't be called directly. Use OATHUserRepository::findByUser instead.
* @param User $user
* @param int $centralId
*/
public function __construct( User $user, int $centralId ) {
$this->user = $user;
$this->centralId = $centralId;
}
/**
* @return User
*/
public function getUser(): User {
return $this->user;
}
/**
* @return int The central ID of this user
*/
public function getCentralId(): int {
return $this->centralId;
}
/**
* @return string
*/
public function getIssuer() {
global $wgSitename, $wgOATHAuthAccountPrefix;
if ( $wgOATHAuthAccountPrefix !== false ) {
return $wgOATHAuthAccountPrefix;
}
return $wgSitename;
}
/**
* @return string
*/
public function getAccount() {
return $this->user->getName();
}
/**
* Get the key associated with this user.
*
* @return IAuthKey[]
*/
public function getKeys(): array {
return $this->keys;
}
/**
* Set the key associated with this user.
*
* @param IAuthKey[] $keys
*/
public function setKeys( array $keys = [] ) {
$this->keys = [];
foreach ( $keys as $key ) {
$this->addKey( $key );
}
}
/**
* Adds single key to the key array
*
* @param IAuthKey $key
*/
public function addKey( IAuthKey $key ) {
$this->checkKeyTypeCorrect( $key );
$this->keys[] = $key;
}
/**
* Gets the module instance associated with this user
*
* @return IModule|null
*/
public function getModule() {
return $this->module;
}
/**
* Sets the module instance associated with this user
*
* @param IModule|null $module
*/
public function setModule( ?IModule $module = null ) {
$this->module = $module;
}
/**
* @return bool Whether this user has two-factor authentication enabled or not
*/
public function isTwoFactorAuthEnabled(): bool {
return count( $this->getKeys() ) >= 1;
}
/**
* Disables current (if any) auth method
*/
public function disable() {
$this->keys = [];
$this->module = null;
}
/**
* All keys set for the user must be of the same type
* @param IAuthKey $key
*/
private function checkKeyTypeCorrect( IAuthKey $key ): void {
$newKeyClass = get_class( $key );
foreach ( $this->keys as $keyToTest ) {
if ( get_class( $keyToTest ) !== $newKeyClass ) {
$first = ( new ReflectionClass( $keyToTest ) )->getShortName();
$second = ( new ReflectionClass( $key ) )->getShortName();
throw new InvalidArgumentException(
"User already has a key from a different two-factor module enabled ($first !== $second)"
);
}
}
}
}

File Metadata

Mime Type
text/x-php
Expires
Wed, Aug 19, 05:52 (6 h, 49 m ago)
Storage Engine
local-disk
Storage Format
Raw Data
Storage Handle
3b/02/4ff9fac3ce91ace2c37e55cbd189
Default Alt Text
OATHUser.php (3 KB)

Event Timeline