1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
|
<?php
/**
* Copyright © 2016 Wikimedia Foundation and contributors
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License along
* with this program; if not, write to the Free Software Foundation, Inc.,
* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
* http://www.gnu.org/copyleft/gpl.html
*
* @file
*/
use MediaWiki\Auth\AuthManager;
use MediaWiki\Auth\AuthenticationResponse;
/**
* Link an account with AuthManager
*
* @ingroup API
*/
class ApiLinkAccount extends ApiBase {
public function __construct( ApiMain $main, $action ) {
parent::__construct( $main, $action, 'link' );
}
public function getFinalDescription() {
// A bit of a hack to append 'api-help-authmanager-general-usage'
$msgs = parent::getFinalDescription();
$msgs[] = ApiBase::makeMessage( 'api-help-authmanager-general-usage', $this->getContext(), [
$this->getModulePrefix(),
$this->getModuleName(),
$this->getModulePath(),
AuthManager::ACTION_LINK,
self::needsToken(),
] );
return $msgs;
}
public function execute() {
if ( !$this->getUser()->isLoggedIn() ) {
$this->dieWithError( 'apierror-mustbeloggedin-linkaccounts', 'notloggedin' );
}
$params = $this->extractRequestParams();
$this->requireAtLeastOneParameter( $params, 'continue', 'returnurl' );
if ( $params['returnurl'] !== null ) {
$bits = wfParseUrl( $params['returnurl'] );
if ( !$bits || $bits['scheme'] === '' ) {
$encParamName = $this->encodeParamName( 'returnurl' );
$this->dieWithError(
[ 'apierror-badurl', $encParamName, wfEscapeWikiText( $params['returnurl'] ) ],
"badurl_{$encParamName}"
);
}
}
$helper = new ApiAuthManagerHelper( $this );
$manager = AuthManager::singleton();
// Check security-sensitive operation status
$helper->securitySensitiveOperation( 'LinkAccounts' );
// Make sure it's possible to link accounts
if ( !$manager->canLinkAccounts() ) {
$this->getResult()->addValue( null, 'linkaccount', $helper->formatAuthenticationResponse(
AuthenticationResponse::newFail( $this->msg( 'userlogin-cannot-' . AuthManager::ACTION_LINK ) )
) );
return;
}
// Perform the link step
if ( $params['continue'] ) {
$reqs = $helper->loadAuthenticationRequests( AuthManager::ACTION_LINK_CONTINUE );
$res = $manager->continueAccountLink( $reqs );
} else {
$reqs = $helper->loadAuthenticationRequests( AuthManager::ACTION_LINK );
$res = $manager->beginAccountLink( $this->getUser(), $reqs, $params['returnurl'] );
}
$this->getResult()->addValue( null, 'linkaccount',
$helper->formatAuthenticationResponse( $res ) );
}
public function isReadMode() {
return false;
}
public function isWriteMode() {
return true;
}
public function needsToken() {
return 'csrf';
}
public function getAllowedParams() {
return ApiAuthManagerHelper::getStandardParams( AuthManager::ACTION_LINK,
'requests', 'messageformat', 'mergerequestfields', 'returnurl', 'continue'
);
}
public function dynamicParameterDocumentation() {
return [ 'api-help-authmanagerhelper-additional-params', AuthManager::ACTION_LINK ];
}
protected function getExamplesMessages() {
return [
'action=linkaccount&provider=Example&linkreturnurl=http://example.org/&linktoken=123ABC'
=> 'apihelp-linkaccount-example-link',
];
}
public function getHelpUrls() {
return 'https://www.mediawiki.org/wiki/Special:MyLanguage/API:Linkaccount';
}
}
|
