nextcloud / server

lib/private/Authentication/TwoFactorAuth/MandatoryTwoFactor.php

Indentation +67 added lines, -67 removed lines

@@ -30,82 +30,82 @@
 use OCP\IUser;
 
 class MandatoryTwoFactor {
-	/** @var IConfig */
-	private $config;
+    /** @var IConfig */
+    private $config;
 
-	/** @var IGroupManager */
-	private $groupManager;
+    /** @var IGroupManager */
+    private $groupManager;
 
-	public function __construct(IConfig $config, IGroupManager $groupManager) {
-		$this->config = $config;
-		$this->groupManager = $groupManager;
-	}
+    public function __construct(IConfig $config, IGroupManager $groupManager) {
+        $this->config = $config;
+        $this->groupManager = $groupManager;
+    }
 
-	/**
-	 * Get the state of enforced two-factor auth
-	 */
-	public function getState(): EnforcementState {
-		return new EnforcementState(
-			$this->config->getSystemValue('twofactor_enforced', 'false') === 'true',
-			$this->config->getSystemValue('twofactor_enforced_groups', []),
-			$this->config->getSystemValue('twofactor_enforced_excluded_groups', [])
-		);
-	}
+    /**
+     * Get the state of enforced two-factor auth
+     */
+    public function getState(): EnforcementState {
+        return new EnforcementState(
+            $this->config->getSystemValue('twofactor_enforced', 'false') === 'true',
+            $this->config->getSystemValue('twofactor_enforced_groups', []),
+            $this->config->getSystemValue('twofactor_enforced_excluded_groups', [])
+        );
+    }
 
-	/**
-	 * Set the state of enforced two-factor auth
-	 */
-	public function setState(EnforcementState $state) {
-		$this->config->setSystemValue('twofactor_enforced', $state->isEnforced() ? 'true' : 'false');
-		$this->config->setSystemValue('twofactor_enforced_groups', $state->getEnforcedGroups());
-		$this->config->setSystemValue('twofactor_enforced_excluded_groups', $state->getExcludedGroups());
-	}
+    /**
+     * Set the state of enforced two-factor auth
+     */
+    public function setState(EnforcementState $state) {
+        $this->config->setSystemValue('twofactor_enforced', $state->isEnforced() ? 'true' : 'false');
+        $this->config->setSystemValue('twofactor_enforced_groups', $state->getEnforcedGroups());
+        $this->config->setSystemValue('twofactor_enforced_excluded_groups', $state->getExcludedGroups());
+    }
 
-	/**
-	 * Check if two-factor auth is enforced for a specific user
-	 *
-	 * The admin(s) can enforce two-factor auth system-wide, for certain groups only
-	 * and also have the option to exclude users of certain groups. This method will
-	 * check their membership of those groups.
-	 *
-	 * @param IUser $user
-	 *
-	 * @return bool
-	 */
-	public function isEnforcedFor(IUser $user): bool {
-		$state = $this->getState();
-		if (!$state->isEnforced()) {
-			return false;
-		}
-		$uid = $user->getUID();
+    /**
+     * Check if two-factor auth is enforced for a specific user
+     *
+     * The admin(s) can enforce two-factor auth system-wide, for certain groups only
+     * and also have the option to exclude users of certain groups. This method will
+     * check their membership of those groups.
+     *
+     * @param IUser $user
+     *
+     * @return bool
+     */
+    public function isEnforcedFor(IUser $user): bool {
+        $state = $this->getState();
+        if (!$state->isEnforced()) {
+            return false;
+        }
+        $uid = $user->getUID();
 
-		/*
+        /*
 		 * If there is a list of enforced groups, we only enforce 2FA for members of those groups.
 		 * For all the other users it is not enforced (overruling the excluded groups list).
 		 */
-		if (!empty($state->getEnforcedGroups())) {
-			foreach ($state->getEnforcedGroups() as $group) {
-				if ($this->groupManager->isInGroup($uid, $group)) {
-					return true;
-				}
-			}
-			// Not a member of any of these groups -> no 2FA enforced
-			return false;
-		}
+        if (!empty($state->getEnforcedGroups())) {
+            foreach ($state->getEnforcedGroups() as $group) {
+                if ($this->groupManager->isInGroup($uid, $group)) {
+                    return true;
+                }
+            }
+            // Not a member of any of these groups -> no 2FA enforced
+            return false;
+        }
 
-		/**
-		 * If the user is member of an excluded group, 2FA won't be enforced.
-		 */
-		foreach ($state->getExcludedGroups() as $group) {
-			if ($this->groupManager->isInGroup($uid, $group)) {
-				return false;
-			}
-		}
+        /**
+         * If the user is member of an excluded group, 2FA won't be enforced.
+         */
+        foreach ($state->getExcludedGroups() as $group) {
+            if ($this->groupManager->isInGroup($uid, $group)) {
+                return false;
+            }
+        }
 
-		/**
-		 * No enforced groups configured and user not member of an excluded groups,
-		 * so 2FA is enforced.
-		 */
-		return true;
-	}
+        /**
+         * No enforced groups configured and user not member of an excluded groups,
+         * so 2FA is enforced.
+         */
+        return true;
+    }
 }

lib/private/Authentication/TwoFactorAuth/ProviderSet.php

Indentation +39 added lines, -39 removed lines

@@ -33,49 +33,49 @@
  * Contains all two-factor provider information for the two-factor login challenge
  */
 class ProviderSet {
-	/** @var IProvider */
-	private $providers;
+    /** @var IProvider */
+    private $providers;
 
-	/** @var bool */
-	private $providerMissing;
+    /** @var bool */
+    private $providerMissing;
 
-	/**
-	 * @param IProvider[] $providers
-	 * @param bool $providerMissing
-	 */
-	public function __construct(array $providers, bool $providerMissing) {
-		$this->providers = [];
-		foreach ($providers as $provider) {
-			$this->providers[$provider->getId()] = $provider;
-		}
-		$this->providerMissing = $providerMissing;
-	}
+    /**
+     * @param IProvider[] $providers
+     * @param bool $providerMissing
+     */
+    public function __construct(array $providers, bool $providerMissing) {
+        $this->providers = [];
+        foreach ($providers as $provider) {
+            $this->providers[$provider->getId()] = $provider;
+        }
+        $this->providerMissing = $providerMissing;
+    }
 
-	/**
-	 * @param string $providerId
-	 * @return IProvider|null
-	 */
-	public function getProvider(string $providerId) {
-		return $this->providers[$providerId] ?? null;
-	}
+    /**
+     * @param string $providerId
+     * @return IProvider|null
+     */
+    public function getProvider(string $providerId) {
+        return $this->providers[$providerId] ?? null;
+    }
 
-	/**
-	 * @return IProvider[]
-	 */
-	public function getProviders(): array {
-		return $this->providers;
-	}
+    /**
+     * @return IProvider[]
+     */
+    public function getProviders(): array {
+        return $this->providers;
+    }
 
-	/**
-	 * @return IProvider[]
-	 */
-	public function getPrimaryProviders(): array {
-		return array_filter($this->providers, function (IProvider $provider) {
-			return !($provider instanceof BackupCodesProvider);
-		});
-	}
+    /**
+     * @return IProvider[]
+     */
+    public function getPrimaryProviders(): array {
+        return array_filter($this->providers, function (IProvider $provider) {
+            return !($provider instanceof BackupCodesProvider);
+        });
+    }
 
-	public function isProviderMissing(): bool {
-		return $this->providerMissing;
-	}
+    public function isProviderMissing(): bool {
+        return $this->providerMissing;
+    }
 }

lib/private/Authentication/Events/ARemoteWipeEvent.php

Indentation +9 added lines, -9 removed lines

@@ -29,15 +29,15 @@
 use OCP\EventDispatcher\Event;
 
 abstract class ARemoteWipeEvent extends Event {
-	/** @var IToken */
-	private $token;
+    /** @var IToken */
+    private $token;
 
-	public function __construct(IToken $token) {
-		parent::__construct();
-		$this->token = $token;
-	}
+    public function __construct(IToken $token) {
+        parent::__construct();
+        $this->token = $token;
+    }
 
-	public function getToken(): IToken {
-		return $this->token;
-	}
+    public function getToken(): IToken {
+        return $this->token;
+    }
 }

lib/private/Authentication/Listeners/UserLoggedInListener.php

Indentation +24 added lines, -24 removed lines

@@ -35,28 +35,28 @@
  * @template-implements IEventListener<\OCP\User\Events\PostLoginEvent>
  */
 class UserLoggedInListener implements IEventListener {
-	/** @var Manager */
-	private $manager;
-
-	public function __construct(Manager $manager) {
-		$this->manager = $manager;
-	}
-
-	public function handle(Event $event): void {
-		if (!($event instanceof PostLoginEvent)) {
-			return;
-		}
-
-		// prevent setting an empty pw as result of pw-less-login
-		if ($event->getPassword() === '') {
-			return;
-		}
-
-		// If this is already a token login there is nothing to do
-		if ($event->isTokenLogin()) {
-			return;
-		}
-
-		$this->manager->updatePasswords($event->getUser()->getUID(), $event->getPassword());
-	}
+    /** @var Manager */
+    private $manager;
+
+    public function __construct(Manager $manager) {
+        $this->manager = $manager;
+    }
+
+    public function handle(Event $event): void {
+        if (!($event instanceof PostLoginEvent)) {
+            return;
+        }
+
+        // prevent setting an empty pw as result of pw-less-login
+        if ($event->getPassword() === '') {
+            return;
+        }
+
+        // If this is already a token login there is nothing to do
+        if ($event->isTokenLogin()) {
+            return;
+        }
+
+        $this->manager->updatePasswords($event->getUser()->getUID(), $event->getPassword());
+    }
 }

lib/private/Authentication/Listeners/UserDeletedStoreCleanupListener.php

Indentation +11 added lines, -11 removed lines

@@ -34,18 +34,18 @@
  * @template-implements IEventListener<\OCP\User\Events\UserDeletedEvent>
  */
 class UserDeletedStoreCleanupListener implements IEventListener {
-	/** @var Registry */
-	private $registry;
+    /** @var Registry */
+    private $registry;
 
-	public function __construct(Registry $registry) {
-		$this->registry = $registry;
-	}
+    public function __construct(Registry $registry) {
+        $this->registry = $registry;
+    }
 
-	public function handle(Event $event): void {
-		if (!($event instanceof UserDeletedEvent)) {
-			return;
-		}
+    public function handle(Event $event): void {
+        if (!($event instanceof UserDeletedEvent)) {
+            return;
+        }
 
-		$this->registry->deleteUserData($event->getUser());
-	}
+        $this->registry->deleteUserData($event->getUser());
+    }
 }

lib/private/Authentication/Login/WebAuthnLoginCommand.php

Indentation +13 added lines, -13 removed lines

@@ -28,20 +28,20 @@
 use OCP\IUserManager;
 
 class WebAuthnLoginCommand extends ALoginCommand {
-	/** @var IUserManager */
-	private $userManager;
+    /** @var IUserManager */
+    private $userManager;
 
-	public function __construct(IUserManager $userManager) {
-		$this->userManager = $userManager;
-	}
+    public function __construct(IUserManager $userManager) {
+        $this->userManager = $userManager;
+    }
 
-	public function process(LoginData $loginData): LoginResult {
-		$user = $this->userManager->get($loginData->getUsername());
-		$loginData->setUser($user);
-		if ($user === null) {
-			$loginData->setUser(false);
-		}
+    public function process(LoginData $loginData): LoginResult {
+        $user = $this->userManager->get($loginData->getUsername());
+        $loginData->setUser($user);
+        if ($user === null) {
+            $loginData->setUser(false);
+        }
 
-		return $this->processNextOrFinishSuccessfully($loginData);
-	}
+        return $this->processNextOrFinishSuccessfully($loginData);
+    }
 }

lib/private/Authentication/Login/ClearLostPasswordTokensCommand.php

Indentation +16 added lines, -16 removed lines

@@ -28,23 +28,23 @@
 use OCP\IConfig;
 
 class ClearLostPasswordTokensCommand extends ALoginCommand {
-	/** @var IConfig */
-	private $config;
+    /** @var IConfig */
+    private $config;
 
-	public function __construct(IConfig $config) {
-		$this->config = $config;
-	}
+    public function __construct(IConfig $config) {
+        $this->config = $config;
+    }
 
-	/**
-	 * User has successfully logged in, now remove the password reset link, when it is available
-	 */
-	public function process(LoginData $loginData): LoginResult {
-		$this->config->deleteUserValue(
-			$loginData->getUser()->getUID(),
-			'core',
-			'lostpassword'
-		);
+    /**
+     * User has successfully logged in, now remove the password reset link, when it is available
+     */
+    public function process(LoginData $loginData): LoginResult {
+        $this->config->deleteUserValue(
+            $loginData->getUser()->getUID(),
+            'core',
+            'lostpassword'
+        );
 
-		return $this->processNextOrFinishSuccessfully($loginData);
-	}
+        return $this->processNextOrFinishSuccessfully($loginData);
+    }
 }

lib/private/Authentication/Login/CompleteLoginCommand.php

Indentation +15 added lines, -15 removed lines

@@ -28,22 +28,22 @@
 use OC\User\Session;
 
 class CompleteLoginCommand extends ALoginCommand {
-	/** @var Session */
-	private $userSession;
+    /** @var Session */
+    private $userSession;
 
-	public function __construct(Session $userSession) {
-		$this->userSession = $userSession;
-	}
+    public function __construct(Session $userSession) {
+        $this->userSession = $userSession;
+    }
 
-	public function process(LoginData $loginData): LoginResult {
-		$this->userSession->completeLogin(
-			$loginData->getUser(),
-			[
-				'loginName' => $loginData->getUsername(),
-				'password' => $loginData->getPassword(),
-			]
-		);
+    public function process(LoginData $loginData): LoginResult {
+        $this->userSession->completeLogin(
+            $loginData->getUser(),
+            [
+                'loginName' => $loginData->getUsername(),
+                'password' => $loginData->getPassword(),
+            ]
+        );
 
-		return $this->processNextOrFinishSuccessfully($loginData);
-	}
+        return $this->processNextOrFinishSuccessfully($loginData);
+    }
 }

lib/private/Authentication/Login/UidLoginCommand.php

Indentation +23 added lines, -23 removed lines

@@ -29,27 +29,27 @@
 use OCP\IUser;
 
 class UidLoginCommand extends ALoginCommand {
-	/** @var Manager */
-	private $userManager;
-
-	public function __construct(Manager $userManager) {
-		$this->userManager = $userManager;
-	}
-
-	/**
-	 * @param LoginData $loginData
-	 *
-	 * @return LoginResult
-	 */
-	public function process(LoginData $loginData): LoginResult {
-		/* @var $loginResult IUser */
-		$user = $this->userManager->checkPasswordNoLogging(
-			$loginData->getUsername(),
-			$loginData->getPassword()
-		);
-
-		$loginData->setUser($user);
-
-		return $this->processNextOrFinishSuccessfully($loginData);
-	}
+    /** @var Manager */
+    private $userManager;
+
+    public function __construct(Manager $userManager) {
+        $this->userManager = $userManager;
+    }
+
+    /**
+     * @param LoginData $loginData
+     *
+     * @return LoginResult
+     */
+    public function process(LoginData $loginData): LoginResult {
+        /* @var $loginResult IUser */
+        $user = $this->userManager->checkPasswordNoLogging(
+            $loginData->getUsername(),
+            $loginData->getPassword()
+        );
+
+        $loginData->setUser($user);
+
+        return $this->processNextOrFinishSuccessfully($loginData);
+    }
 }