nextcloud / server

lib/private/Authentication/Token/IWipeableToken.php

Indentation +4 added lines, -4 removed lines

@@ -27,8 +27,8 @@
 namespace OC\Authentication\Token;
 
 interface IWipeableToken extends IToken {
-	/**
-	 * Mark the token for remote wipe
-	 */
-	public function wipe(): void;
+    /**
+     * Mark the token for remote wipe
+     */
+    public function wipe(): void;
 }

lib/private/Authentication/TwoFactorAuth/ProviderManager.php

Indentation +49 added lines, -49 removed lines

@@ -33,62 +33,62 @@
 use OCP\IUser;
 
 class ProviderManager {
-	/** @var ProviderLoader */
-	private $providerLoader;
+    /** @var ProviderLoader */
+    private $providerLoader;
 
-	/** @var IRegistry */
-	private $providerRegistry;
+    /** @var IRegistry */
+    private $providerRegistry;
 
-	public function __construct(ProviderLoader $providerLoader, IRegistry $providerRegistry) {
-		$this->providerLoader = $providerLoader;
-		$this->providerRegistry = $providerRegistry;
-	}
+    public function __construct(ProviderLoader $providerLoader, IRegistry $providerRegistry) {
+        $this->providerLoader = $providerLoader;
+        $this->providerRegistry = $providerRegistry;
+    }
 
-	private function getProvider(string $providerId, IUser $user): IProvider {
-		$providers = $this->providerLoader->getProviders($user);
+    private function getProvider(string $providerId, IUser $user): IProvider {
+        $providers = $this->providerLoader->getProviders($user);
 
-		if (!isset($providers[$providerId])) {
-			throw new InvalidProviderException($providerId);
-		}
+        if (!isset($providers[$providerId])) {
+            throw new InvalidProviderException($providerId);
+        }
 
-		return $providers[$providerId];
-	}
+        return $providers[$providerId];
+    }
 
-	/**
-	 * Try to enable the provider with the given id for the given user
-	 *
-	 * @param IUser $user
-	 *
-	 * @return bool whether the provider supports this operation
-	 */
-	public function tryEnableProviderFor(string $providerId, IUser $user): bool {
-		$provider = $this->getProvider($providerId, $user);
+    /**
+     * Try to enable the provider with the given id for the given user
+     *
+     * @param IUser $user
+     *
+     * @return bool whether the provider supports this operation
+     */
+    public function tryEnableProviderFor(string $providerId, IUser $user): bool {
+        $provider = $this->getProvider($providerId, $user);
 
-		if ($provider instanceof IActivatableByAdmin) {
-			$provider->enableFor($user);
-			$this->providerRegistry->enableProviderFor($provider, $user);
-			return true;
-		} else {
-			return false;
-		}
-	}
+        if ($provider instanceof IActivatableByAdmin) {
+            $provider->enableFor($user);
+            $this->providerRegistry->enableProviderFor($provider, $user);
+            return true;
+        } else {
+            return false;
+        }
+    }
 
-	/**
-	 * Try to disable the provider with the given id for the given user
-	 *
-	 * @param IUser $user
-	 *
-	 * @return bool whether the provider supports this operation
-	 */
-	public function tryDisableProviderFor(string $providerId, IUser $user): bool {
-		$provider = $this->getProvider($providerId, $user);
+    /**
+     * Try to disable the provider with the given id for the given user
+     *
+     * @param IUser $user
+     *
+     * @return bool whether the provider supports this operation
+     */
+    public function tryDisableProviderFor(string $providerId, IUser $user): bool {
+        $provider = $this->getProvider($providerId, $user);
 
-		if ($provider instanceof IDeactivatableByAdmin) {
-			$provider->disableFor($user);
-			$this->providerRegistry->disableProviderFor($provider, $user);
-			return true;
-		} else {
-			return false;
-		}
-	}
+        if ($provider instanceof IDeactivatableByAdmin) {
+            $provider->disableFor($user);
+            $this->providerRegistry->disableProviderFor($provider, $user);
+            return true;
+        } else {
+            return false;
+        }
+    }
 }

lib/private/Authentication/TwoFactorAuth/MandatoryTwoFactor.php

Indentation +67 added lines, -67 removed lines

@@ -30,82 +30,82 @@
 use OCP\IUser;
 
 class MandatoryTwoFactor {
-	/** @var IConfig */
-	private $config;
+    /** @var IConfig */
+    private $config;
 
-	/** @var IGroupManager */
-	private $groupManager;
+    /** @var IGroupManager */
+    private $groupManager;
 
-	public function __construct(IConfig $config, IGroupManager $groupManager) {
-		$this->config = $config;
-		$this->groupManager = $groupManager;
-	}
+    public function __construct(IConfig $config, IGroupManager $groupManager) {
+        $this->config = $config;
+        $this->groupManager = $groupManager;
+    }
 
-	/**
-	 * Get the state of enforced two-factor auth
-	 */
-	public function getState(): EnforcementState {
-		return new EnforcementState(
-			$this->config->getSystemValue('twofactor_enforced', 'false') === 'true',
-			$this->config->getSystemValue('twofactor_enforced_groups', []),
-			$this->config->getSystemValue('twofactor_enforced_excluded_groups', [])
-		);
-	}
+    /**
+     * Get the state of enforced two-factor auth
+     */
+    public function getState(): EnforcementState {
+        return new EnforcementState(
+            $this->config->getSystemValue('twofactor_enforced', 'false') === 'true',
+            $this->config->getSystemValue('twofactor_enforced_groups', []),
+            $this->config->getSystemValue('twofactor_enforced_excluded_groups', [])
+        );
+    }
 
-	/**
-	 * Set the state of enforced two-factor auth
-	 */
-	public function setState(EnforcementState $state) {
-		$this->config->setSystemValue('twofactor_enforced', $state->isEnforced() ? 'true' : 'false');
-		$this->config->setSystemValue('twofactor_enforced_groups', $state->getEnforcedGroups());
-		$this->config->setSystemValue('twofactor_enforced_excluded_groups', $state->getExcludedGroups());
-	}
+    /**
+     * Set the state of enforced two-factor auth
+     */
+    public function setState(EnforcementState $state) {
+        $this->config->setSystemValue('twofactor_enforced', $state->isEnforced() ? 'true' : 'false');
+        $this->config->setSystemValue('twofactor_enforced_groups', $state->getEnforcedGroups());
+        $this->config->setSystemValue('twofactor_enforced_excluded_groups', $state->getExcludedGroups());
+    }
 
-	/**
-	 * Check if two-factor auth is enforced for a specific user
-	 *
-	 * The admin(s) can enforce two-factor auth system-wide, for certain groups only
-	 * and also have the option to exclude users of certain groups. This method will
-	 * check their membership of those groups.
-	 *
-	 * @param IUser $user
-	 *
-	 * @return bool
-	 */
-	public function isEnforcedFor(IUser $user): bool {
-		$state = $this->getState();
-		if (!$state->isEnforced()) {
-			return false;
-		}
-		$uid = $user->getUID();
+    /**
+     * Check if two-factor auth is enforced for a specific user
+     *
+     * The admin(s) can enforce two-factor auth system-wide, for certain groups only
+     * and also have the option to exclude users of certain groups. This method will
+     * check their membership of those groups.
+     *
+     * @param IUser $user
+     *
+     * @return bool
+     */
+    public function isEnforcedFor(IUser $user): bool {
+        $state = $this->getState();
+        if (!$state->isEnforced()) {
+            return false;
+        }
+        $uid = $user->getUID();
 
-		/*
+        /*
 		 * If there is a list of enforced groups, we only enforce 2FA for members of those groups.
 		 * For all the other users it is not enforced (overruling the excluded groups list).
 		 */
-		if (!empty($state->getEnforcedGroups())) {
-			foreach ($state->getEnforcedGroups() as $group) {
-				if ($this->groupManager->isInGroup($uid, $group)) {
-					return true;
-				}
-			}
-			// Not a member of any of these groups -> no 2FA enforced
-			return false;
-		}
+        if (!empty($state->getEnforcedGroups())) {
+            foreach ($state->getEnforcedGroups() as $group) {
+                if ($this->groupManager->isInGroup($uid, $group)) {
+                    return true;
+                }
+            }
+            // Not a member of any of these groups -> no 2FA enforced
+            return false;
+        }
 
-		/**
-		 * If the user is member of an excluded group, 2FA won't be enforced.
-		 */
-		foreach ($state->getExcludedGroups() as $group) {
-			if ($this->groupManager->isInGroup($uid, $group)) {
-				return false;
-			}
-		}
+        /**
+         * If the user is member of an excluded group, 2FA won't be enforced.
+         */
+        foreach ($state->getExcludedGroups() as $group) {
+            if ($this->groupManager->isInGroup($uid, $group)) {
+                return false;
+            }
+        }
 
-		/**
-		 * No enforced groups configured and user not member of an excluded groups,
-		 * so 2FA is enforced.
-		 */
-		return true;
-	}
+        /**
+         * No enforced groups configured and user not member of an excluded groups,
+         * so 2FA is enforced.
+         */
+        return true;
+    }
 }

lib/private/Authentication/TwoFactorAuth/ProviderSet.php

Indentation +39 added lines, -39 removed lines

@@ -33,49 +33,49 @@
  * Contains all two-factor provider information for the two-factor login challenge
  */
 class ProviderSet {
-	/** @var IProvider */
-	private $providers;
+    /** @var IProvider */
+    private $providers;
 
-	/** @var bool */
-	private $providerMissing;
+    /** @var bool */
+    private $providerMissing;
 
-	/**
-	 * @param IProvider[] $providers
-	 * @param bool $providerMissing
-	 */
-	public function __construct(array $providers, bool $providerMissing) {
-		$this->providers = [];
-		foreach ($providers as $provider) {
-			$this->providers[$provider->getId()] = $provider;
-		}
-		$this->providerMissing = $providerMissing;
-	}
+    /**
+     * @param IProvider[] $providers
+     * @param bool $providerMissing
+     */
+    public function __construct(array $providers, bool $providerMissing) {
+        $this->providers = [];
+        foreach ($providers as $provider) {
+            $this->providers[$provider->getId()] = $provider;
+        }
+        $this->providerMissing = $providerMissing;
+    }
 
-	/**
-	 * @param string $providerId
-	 * @return IProvider|null
-	 */
-	public function getProvider(string $providerId) {
-		return $this->providers[$providerId] ?? null;
-	}
+    /**
+     * @param string $providerId
+     * @return IProvider|null
+     */
+    public function getProvider(string $providerId) {
+        return $this->providers[$providerId] ?? null;
+    }
 
-	/**
-	 * @return IProvider[]
-	 */
-	public function getProviders(): array {
-		return $this->providers;
-	}
+    /**
+     * @return IProvider[]
+     */
+    public function getProviders(): array {
+        return $this->providers;
+    }
 
-	/**
-	 * @return IProvider[]
-	 */
-	public function getPrimaryProviders(): array {
-		return array_filter($this->providers, function (IProvider $provider) {
-			return !($provider instanceof BackupCodesProvider);
-		});
-	}
+    /**
+     * @return IProvider[]
+     */
+    public function getPrimaryProviders(): array {
+        return array_filter($this->providers, function (IProvider $provider) {
+            return !($provider instanceof BackupCodesProvider);
+        });
+    }
 
-	public function isProviderMissing(): bool {
-		return $this->providerMissing;
-	}
+    public function isProviderMissing(): bool {
+        return $this->providerMissing;
+    }
 }

lib/private/Authentication/Events/ARemoteWipeEvent.php

Indentation +9 added lines, -9 removed lines

@@ -29,15 +29,15 @@
 use OCP\EventDispatcher\Event;
 
 abstract class ARemoteWipeEvent extends Event {
-	/** @var IToken */
-	private $token;
+    /** @var IToken */
+    private $token;
 
-	public function __construct(IToken $token) {
-		parent::__construct();
-		$this->token = $token;
-	}
+    public function __construct(IToken $token) {
+        parent::__construct();
+        $this->token = $token;
+    }
 
-	public function getToken(): IToken {
-		return $this->token;
-	}
+    public function getToken(): IToken {
+        return $this->token;
+    }
 }

lib/private/Authentication/Listeners/UserLoggedInListener.php

Indentation +24 added lines, -24 removed lines

@@ -35,28 +35,28 @@
  * @template-implements IEventListener<\OCP\User\Events\PostLoginEvent>
  */
 class UserLoggedInListener implements IEventListener {
-	/** @var Manager */
-	private $manager;
-
-	public function __construct(Manager $manager) {
-		$this->manager = $manager;
-	}
-
-	public function handle(Event $event): void {
-		if (!($event instanceof PostLoginEvent)) {
-			return;
-		}
-
-		// prevent setting an empty pw as result of pw-less-login
-		if ($event->getPassword() === '') {
-			return;
-		}
-
-		// If this is already a token login there is nothing to do
-		if ($event->isTokenLogin()) {
-			return;
-		}
-
-		$this->manager->updatePasswords($event->getUser()->getUID(), $event->getPassword());
-	}
+    /** @var Manager */
+    private $manager;
+
+    public function __construct(Manager $manager) {
+        $this->manager = $manager;
+    }
+
+    public function handle(Event $event): void {
+        if (!($event instanceof PostLoginEvent)) {
+            return;
+        }
+
+        // prevent setting an empty pw as result of pw-less-login
+        if ($event->getPassword() === '') {
+            return;
+        }
+
+        // If this is already a token login there is nothing to do
+        if ($event->isTokenLogin()) {
+            return;
+        }
+
+        $this->manager->updatePasswords($event->getUser()->getUID(), $event->getPassword());
+    }
 }

lib/private/Authentication/Listeners/UserDeletedStoreCleanupListener.php

Indentation +11 added lines, -11 removed lines

@@ -34,18 +34,18 @@
  * @template-implements IEventListener<\OCP\User\Events\UserDeletedEvent>
  */
 class UserDeletedStoreCleanupListener implements IEventListener {
-	/** @var Registry */
-	private $registry;
+    /** @var Registry */
+    private $registry;
 
-	public function __construct(Registry $registry) {
-		$this->registry = $registry;
-	}
+    public function __construct(Registry $registry) {
+        $this->registry = $registry;
+    }
 
-	public function handle(Event $event): void {
-		if (!($event instanceof UserDeletedEvent)) {
-			return;
-		}
+    public function handle(Event $event): void {
+        if (!($event instanceof UserDeletedEvent)) {
+            return;
+        }
 
-		$this->registry->deleteUserData($event->getUser());
-	}
+        $this->registry->deleteUserData($event->getUser());
+    }
 }

lib/private/Authentication/Login/WebAuthnLoginCommand.php

Indentation +13 added lines, -13 removed lines

@@ -28,20 +28,20 @@
 use OCP\IUserManager;
 
 class WebAuthnLoginCommand extends ALoginCommand {
-	/** @var IUserManager */
-	private $userManager;
+    /** @var IUserManager */
+    private $userManager;
 
-	public function __construct(IUserManager $userManager) {
-		$this->userManager = $userManager;
-	}
+    public function __construct(IUserManager $userManager) {
+        $this->userManager = $userManager;
+    }
 
-	public function process(LoginData $loginData): LoginResult {
-		$user = $this->userManager->get($loginData->getUsername());
-		$loginData->setUser($user);
-		if ($user === null) {
-			$loginData->setUser(false);
-		}
+    public function process(LoginData $loginData): LoginResult {
+        $user = $this->userManager->get($loginData->getUsername());
+        $loginData->setUser($user);
+        if ($user === null) {
+            $loginData->setUser(false);
+        }
 
-		return $this->processNextOrFinishSuccessfully($loginData);
-	}
+        return $this->processNextOrFinishSuccessfully($loginData);
+    }
 }

lib/private/Authentication/Login/ClearLostPasswordTokensCommand.php

Indentation +16 added lines, -16 removed lines

@@ -28,23 +28,23 @@
 use OCP\IConfig;
 
 class ClearLostPasswordTokensCommand extends ALoginCommand {
-	/** @var IConfig */
-	private $config;
+    /** @var IConfig */
+    private $config;
 
-	public function __construct(IConfig $config) {
-		$this->config = $config;
-	}
+    public function __construct(IConfig $config) {
+        $this->config = $config;
+    }
 
-	/**
-	 * User has successfully logged in, now remove the password reset link, when it is available
-	 */
-	public function process(LoginData $loginData): LoginResult {
-		$this->config->deleteUserValue(
-			$loginData->getUser()->getUID(),
-			'core',
-			'lostpassword'
-		);
+    /**
+     * User has successfully logged in, now remove the password reset link, when it is available
+     */
+    public function process(LoginData $loginData): LoginResult {
+        $this->config->deleteUserValue(
+            $loginData->getUser()->getUID(),
+            'core',
+            'lostpassword'
+        );
 
-		return $this->processNextOrFinishSuccessfully($loginData);
-	}
+        return $this->processNextOrFinishSuccessfully($loginData);
+    }
 }