| Server IP : 167.235.224.122 / Your IP : 216.73.216.110 Web Server : Apache/2.4.58 (Ubuntu) System : Linux newplayground 6.8.0-136-generic #136-Ubuntu SMP PREEMPT_DYNAMIC Wed Jul 1 21:33:11 UTC 2026 aarch64 User : deploy ( 1000) PHP Version : 8.4.23 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : OFF Directory : /var/www/html/wiki/extensions/OATHAuth/src/ |
Upload File : |
<?php
/**
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License along
* with this program; if not, write to the Free Software Foundation, Inc.,
* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
* http://www.gnu.org/copyleft/gpl.html
*/
namespace MediaWiki\Extension\OATHAuth;
use InvalidArgumentException;
use MediaWiki\User\UserIdentity;
use ReflectionClass;
/**
* Class representing a user from OATH's perspective
*
* @ingroup Extensions
*/
class OATHUser {
private UserIdentity $user;
private int $centralId;
/** @var IAuthKey[] */
private array $keys = [];
private ?IModule $module = null;
/**
* Constructor. Can't be called directly. Use OATHUserRepository::findByUser instead.
* @param UserIdentity $user
* @param int $centralId
*/
public function __construct( UserIdentity $user, int $centralId ) {
$this->user = $user;
$this->centralId = $centralId;
}
public function getUser(): UserIdentity {
return $this->user;
}
/**
* @return int The central ID of this user
*/
public function getCentralId(): int {
return $this->centralId;
}
/**
* @return string
*/
public function getIssuer() {
global $wgSitename, $wgOATHAuthAccountPrefix;
if ( $wgOATHAuthAccountPrefix !== false ) {
return $wgOATHAuthAccountPrefix;
}
return $wgSitename;
}
/**
* @return string
*/
public function getAccount() {
return $this->user->getName();
}
/**
* Get the key associated with this user.
*
* @return IAuthKey[]
*/
public function getKeys(): array {
return $this->keys;
}
/**
* Set the key associated with this user.
*
* @param IAuthKey[] $keys
*/
public function setKeys( array $keys = [] ) {
$this->keys = [];
foreach ( $keys as $key ) {
$this->addKey( $key );
}
}
/**
* Adds single key to the key array
*
* @param IAuthKey $key
*/
public function addKey( IAuthKey $key ) {
$this->checkKeyTypeCorrect( $key );
$this->keys[] = $key;
}
/**
* Gets the module instance associated with this user
*
* @return IModule|null
* @deprecated Use {@link IAuthKey::getModule()} instead
*/
public function getModule() {
return $this->module;
}
/**
* Sets the module instance associated with this user
*
* @param IModule|null $module
* @internal
*/
public function setModule( ?IModule $module = null ) {
$this->module = $module;
}
/**
* @return bool Whether this user has two-factor authentication enabled or not
*/
public function isTwoFactorAuthEnabled(): bool {
return count( $this->getKeys() ) >= 1;
}
/**
* Disables current (if any) auth method
*/
public function disable() {
$this->keys = [];
$this->module = null;
}
/**
* All keys set for the user must be of the same type
* @param IAuthKey $key
*/
private function checkKeyTypeCorrect( IAuthKey $key ): void {
$newKeyClass = get_class( $key );
foreach ( $this->keys as $keyToTest ) {
if ( get_class( $keyToTest ) !== $newKeyClass ) {
$first = ( new ReflectionClass( $keyToTest ) )->getShortName();
$second = ( new ReflectionClass( $key ) )->getShortName();
throw new InvalidArgumentException(
"User already has a key from a different two-factor module enabled ($first !== $second)"
);
}
}
}
}