BasicRequestAuthorizer.php
No OneTemporary
Actions

Size

1 KB

Referenced Files

None

Subscribers

None

BasicRequestAuthorizer.php
View Options

	<?php

	namespace MediaWiki\Rest\BasicAccess;

	use MediaWiki\Rest\Handler;
	use MediaWiki\Rest\RequestInterface;

	/**
	* A request authorizer which checks needsReadAccess() and needsWriteAccess() in the
	* handler and calls isReadAllowed() and/or isWriteAllowed() in the subclass
	* accordingly.
	*
	* @internal
	*/
	abstract class BasicRequestAuthorizer {
	protected RequestInterface $request;
	protected Handler $handler;

	/**
	* @param RequestInterface $request
	* @param Handler $handler
	*/
	public function __construct( RequestInterface $request, Handler $handler ) {
	$this->request = $request;
	$this->handler = $handler;
	}

	/**
	* @see BasicAuthorizerInterface::authorize()
	* @return string\|null If the request is denied, the string error code. If
	* the request is allowed, null.
	*/
	public function authorize() {
	if ( $this->handler->needsReadAccess() && !$this->isReadAllowed() ) {
	return 'rest-read-denied';
	}
	if ( $this->handler->needsWriteAccess() && !$this->isWriteAllowed() ) {
	return 'rest-write-denied';
	}
	return null;
	}

	/**
	* Check if the current user is allowed to read from the wiki
	*
	* @return bool
	*/
	abstract protected function isReadAllowed();

	/**
	* Check if the current user is allowed to write to the wiki
	*
	* @return bool
	*/
	abstract protected function isWriteAllowed();
	}