ResetPasswordSecondaryAuthenticationProvider::continueSecondaryAuthentication() - Code Metrics - wikimedia/mediawiki - Measure and Improve Code Quality continuously with Scrutinizer

continueSecondaryAuthentication() A
last analyzed 2016-11-13 17:42 UTC

↳ Parent: ResetPasswordSecondaryAuthenticationProvider

Complexity

Conditions	1
Paths	1

Size

Total Lines	3
Code Lines	2

Duplication

Lines	0
Ratio	0 %

Importance

Changes

Metric	Value
cc	1
eloc	2
nc	1
nop	2
dl	0
loc	3
rs	10
c	0
b	0
f	0

<?php
/**
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License along
 * with this program; if not, write to the Free Software Foundation, Inc.,
 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
 * http://www.gnu.org/copyleft/gpl.html
 *
 * @file
 * @ingroup Auth
 */

namespace MediaWiki\Auth;

/**
 * Reset the local password, if signalled via $this->manager->setAuthenticationSessionData()
 *
 * The authentication data key is 'reset-pass'; the data is an object with the
 * following properties:
 * - msg: Message object to display to the user
 * - hard: Boolean, if true the reset cannot be skipped.
 * - req: Optional PasswordAuthenticationRequest to use to actually reset the
 *   password. Won't be displayed to the user.
 *
 * @ingroup Auth
 * @since 1.27
 */
class ResetPasswordSecondaryAuthenticationProvider extends AbstractSecondaryAuthenticationProvider {

	public function getAuthenticationRequests( $action, array $options ) {
		return [];
	}

	public function beginSecondaryAuthentication( $user, array $reqs ) {
		return $this->tryReset( $user, $reqs );
	}

	public function continueSecondaryAuthentication( $user, array $reqs ) {
		return $this->tryReset( $user, $reqs );
	}

	public function beginSecondaryAccountCreation( $user, $creator, array $reqs ) {
		return $this->tryReset( $user, $reqs );
	}

	public function continueSecondaryAccountCreation( $user, $creator, array $reqs ) {
		return $this->tryReset( $user, $reqs );
	}

	/**
	 * Try to reset the password
	 * @param \User $user
	 * @param AuthenticationRequest[] $reqs
	 * @return AuthenticationResponse
	 */
	protected function tryReset( \User $user, array $reqs ) {
		$data = $this->manager->getAuthenticationSessionData( 'reset-pass' );
		if ( !$data ) {
			return AuthenticationResponse::newAbstain();
		}

		if ( is_array( $data ) ) {
			$data = (object)$data;
		}
		if ( !is_object( $data ) ) {
			throw new \UnexpectedValueException( 'reset-pass is not valid' );
		}

		if ( !isset( $data->msg ) ) {
			throw new \UnexpectedValueException( 'reset-pass msg is missing' );
		} elseif ( !$data->msg instanceof \Message ) {
			throw new \UnexpectedValueException( 'reset-pass msg is not valid' );
		} elseif ( !isset( $data->hard ) ) {
			throw new \UnexpectedValueException( 'reset-pass hard is missing' );
		} elseif ( isset( $data->req ) && (
			!$data->req instanceof PasswordAuthenticationRequest ||
			!array_key_exists( 'retype', $data->req->getFieldInfo() )
		) ) {
			throw new \UnexpectedValueException( 'reset-pass req is not valid' );
		}

		if ( !$data->hard ) {
			$req = ButtonAuthenticationRequest::getRequestByName( $reqs, 'skipReset' );
			if ( $req ) {
				$this->manager->removeAuthenticationSessionData( 'reset-pass' );
				return AuthenticationResponse::newPass();
			}
		}

		$needReq = isset( $data->req ) ? $data->req : new PasswordAuthenticationRequest();
		if ( !$needReq->action ) {
''   == false // true
''   == null  // true
'ab' == false // false
'ab' == null  // false

// It is often better to use strict comparison
'' === false // false
'' === null  // false
			$needReq->action = AuthManager::ACTION_CHANGE;
		}
		$needReq->required = $data->hard ? AuthenticationRequest::REQUIRED
			: AuthenticationRequest::OPTIONAL;
		$needReqs = [ $needReq ];
		if ( !$data->hard ) {
			$needReqs[] = new ButtonAuthenticationRequest(
				'skipReset',
				wfMessage( 'authprovider-resetpass-skip-label' ),
				wfMessage( 'authprovider-resetpass-skip-help' )
			);
		}

		$req = AuthenticationRequest::getRequestByClass( $reqs, get_class( $needReq ) );
		if ( !$req || !array_key_exists( 'retype', $req->getFieldInfo() ) ) {
			return AuthenticationResponse::newUI( $needReqs, $data->msg, 'warning' );
		}

		if ( $req->password !== $req->retype ) {

			return AuthenticationResponse::newUI( $needReqs, new \Message( 'badretype' ), 'error' );
		}

		$req->username = $user->getName();
		$status = $this->manager->allowsAuthenticationDataChange( $req );
		if ( !$status->isGood() ) {
			return AuthenticationResponse::newUI( $needReqs, $status->getMessage(), 'error' );
		}
		$this->manager->changeAuthenticationData( $req );

		$this->manager->removeAuthenticationSessionData( 'reset-pass' );
		return AuthenticationResponse::newPass();
	}
}


1			<?php
2			/**
3			* This program is free software; you can redistribute it and/or modify
4			* it under the terms of the GNU General Public License as published by
5			* the Free Software Foundation; either version 2 of the License, or
6			* (at your option) any later version.
7			*
8			* This program is distributed in the hope that it will be useful,
9			* but WITHOUT ANY WARRANTY; without even the implied warranty of
10			* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
11			* GNU General Public License for more details.
12			*
13			* You should have received a copy of the GNU General Public License along
14			* with this program; if not, write to the Free Software Foundation, Inc.,
15			* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
16			* http://www.gnu.org/copyleft/gpl.html
17			*
18			* @file
19			* @ingroup Auth
20			*/
21
22			namespace MediaWiki\Auth;
23
24			/**
25			* Reset the local password, if signalled via $this->manager->setAuthenticationSessionData()
26			*
27			* The authentication data key is 'reset-pass'; the data is an object with the
28			* following properties:
29			* - msg: Message object to display to the user
30			* - hard: Boolean, if true the reset cannot be skipped.
31			* - req: Optional PasswordAuthenticationRequest to use to actually reset the
32			* password. Won't be displayed to the user.
33			*
34			* @ingroup Auth
35			* @since 1.27
36			*/
37			class ResetPasswordSecondaryAuthenticationProvider extends AbstractSecondaryAuthenticationProvider {
38
39			public function getAuthenticationRequests( $action, array $options ) {
40			return [];
41			}
42
43			public function beginSecondaryAuthentication( $user, array $reqs ) {
44			return $this->tryReset( $user, $reqs );
45			}
46
47			public function continueSecondaryAuthentication( $user, array $reqs ) {
48			return $this->tryReset( $user, $reqs );
49			}
50
51			public function beginSecondaryAccountCreation( $user, $creator, array $reqs ) {
52			return $this->tryReset( $user, $reqs );
53			}
54
55			public function continueSecondaryAccountCreation( $user, $creator, array $reqs ) {
56			return $this->tryReset( $user, $reqs );
57			}
58
59			/**
60			* Try to reset the password
61			* @param \User $user
62			* @param AuthenticationRequest[] $reqs
63			* @return AuthenticationResponse
64			*/
65			protected function tryReset( \User $user, array $reqs ) {
66			$data = $this->manager->getAuthenticationSessionData( 'reset-pass' );
67			if ( !$data ) {
68			return AuthenticationResponse::newAbstain();
69			}
70
71			if ( is_array( $data ) ) {
72			$data = (object)$data;
73			}
74			if ( !is_object( $data ) ) {
75			throw new \UnexpectedValueException( 'reset-pass is not valid' );
76			}
77
78			if ( !isset( $data->msg ) ) {
79			throw new \UnexpectedValueException( 'reset-pass msg is missing' );
80			} elseif ( !$data->msg instanceof \Message ) {
81			throw new \UnexpectedValueException( 'reset-pass msg is not valid' );
82			} elseif ( !isset( $data->hard ) ) {
83			throw new \UnexpectedValueException( 'reset-pass hard is missing' );
84			} elseif ( isset( $data->req ) && (
85			!$data->req instanceof PasswordAuthenticationRequest \|\|
86			!array_key_exists( 'retype', $data->req->getFieldInfo() )
87			) ) {
88			throw new \UnexpectedValueException( 'reset-pass req is not valid' );
89			}
90
91			if ( !$data->hard ) {
92			$req = ButtonAuthenticationRequest::getRequestByName( $reqs, 'skipReset' );
93			if ( $req ) {
94			$this->manager->removeAuthenticationSessionData( 'reset-pass' );
95			return AuthenticationResponse::newPass();
96			}
97			}
98
99			$needReq = isset( $data->req ) ? $data->req : new PasswordAuthenticationRequest();
100			if ( !$needReq->action ) {
			0 ignored issues – show Bug Best Practice introduced 2016-06-06 18:04 UTC by Report Bug Copy Issue Report The expression `$needReq->action` of type `string\|null` is loosely compared to `false`; this is ambiguous if the string can be empty. You might want to explicitly use `=== null` instead. In PHP, under loose comparison (like `==`, or `!=`, or `switch` conditions), values of different types might be equal. For `string` values, the empty string `''` is a special case, in particular the following results might be unexpected: '' == false // true '' == null // true 'ab' == false // false 'ab' == null // false // It is often better to use strict comparison '' === false // false '' === null // false Loading history...
101			$needReq->action = AuthManager::ACTION_CHANGE;
102			}
103			$needReq->required = $data->hard ? AuthenticationRequest::REQUIRED
104			: AuthenticationRequest::OPTIONAL;
105			$needReqs = [ $needReq ];
106			if ( !$data->hard ) {
107			$needReqs[] = new ButtonAuthenticationRequest(
108			'skipReset',
109			wfMessage( 'authprovider-resetpass-skip-label' ),
110			wfMessage( 'authprovider-resetpass-skip-help' )
111			);
112			}
113
114			$req = AuthenticationRequest::getRequestByClass( $reqs, get_class( $needReq ) );
115			if ( !$req \|\| !array_key_exists( 'retype', $req->getFieldInfo() ) ) {
116			return AuthenticationResponse::newUI( $needReqs, $data->msg, 'warning' );
117			}
118
119			if ( $req->password !== $req->retype ) {
			0 ignored issues – show Bug introduced 2016-05-16 17:54 UTC by Report Bug Copy Issue Report The property `password` does not seem to exist in `MediaWiki\Auth\AuthenticationRequest`. An attempt at access to an undefined property has been detected. This may either be a typographical error or the property has been renamed but there are still references to its old name. If you really want to allow access to undefined properties, you can define magic methods to allow access. See the php core documentation on Overloading. Loading history... Bug introduced 2016-05-16 17:54 UTC by Report Bug Copy Issue Report The property `retype` does not seem to exist in `MediaWiki\Auth\AuthenticationRequest`. An attempt at access to an undefined property has been detected. This may either be a typographical error or the property has been renamed but there are still references to its old name. If you really want to allow access to undefined properties, you can define magic methods to allow access. See the php core documentation on Overloading. Loading history...
120			return AuthenticationResponse::newUI( $needReqs, new \Message( 'badretype' ), 'error' );
121			}
122
123			$req->username = $user->getName();
124			$status = $this->manager->allowsAuthenticationDataChange( $req );
125			if ( !$status->isGood() ) {
126			return AuthenticationResponse::newUI( $needReqs, $status->getMessage(), 'error' );
127			}
128			$this->manager->changeAuthenticationData( $req );
129
130			$this->manager->removeAuthenticationSessionData( 'reset-pass' );
131			return AuthenticationResponse::newPass();
132			}
133			}
134

wikimedia / mediawiki

continueSecondaryAuthentication() A last analyzed 2016-11-13 17:42 UTC

Complexity

Size

Duplication

Importance

Duplication Side-by-Side

Filter issues like

continueSecondaryAuthentication() A
last analyzed 2016-11-13 17:42 UTC