forked from GNUsocial/gnu-social
de55d8f83b
lib/plugin.php now has a parent onAutoload function that finds most common
files that are used in plugins (actions, dataobjects, forms, libs etc.) if
they are put in the standardised directories ('actions', 'classes', 'forms',
'lib' and perhaps some others in the future).
387 lines
15 KiB
PHP
387 lines
15 KiB
PHP
<?php
|
|
/**
|
|
* StatusNet, the distributed open-source microblogging tool
|
|
*
|
|
* Settings for OpenID
|
|
*
|
|
* PHP version 5
|
|
*
|
|
* LICENCE: This program is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU Affero General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU Affero General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Affero General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*
|
|
* @category Settings
|
|
* @package StatusNet
|
|
* @author Evan Prodromou <evan@status.net>
|
|
* @copyright 2008-2009 StatusNet, Inc.
|
|
* @license http://www.fsf.org/licensing/licenses/agpl-3.0.html GNU Affero General Public License version 3.0
|
|
* @link http://status.net/
|
|
*/
|
|
|
|
if (!defined('STATUSNET')) {
|
|
exit(1);
|
|
}
|
|
|
|
require_once INSTALLDIR.'/plugins/OpenID/openid.php';
|
|
|
|
/**
|
|
* Settings for OpenID
|
|
*
|
|
* Lets users add, edit and delete OpenIDs from their account
|
|
*
|
|
* @category Settings
|
|
* @package StatusNet
|
|
* @author Evan Prodromou <evan@status.net>
|
|
* @license http://www.fsf.org/licensing/licenses/agpl-3.0.html GNU Affero General Public License version 3.0
|
|
* @link http://status.net/
|
|
*/
|
|
class OpenidsettingsAction extends SettingsAction
|
|
{
|
|
/**
|
|
* Title of the page
|
|
*
|
|
* @return string Page title
|
|
*/
|
|
function title()
|
|
{
|
|
// TRANS: Title of OpenID settings page for a user.
|
|
return _m('TITLE','OpenID settings');
|
|
}
|
|
|
|
/**
|
|
* Instructions for use
|
|
*
|
|
* @return string Instructions for use
|
|
*/
|
|
function getInstructions()
|
|
{
|
|
// TRANS: Form instructions for OpenID settings.
|
|
// TRANS: This message contains Markdown links in the form [description](link).
|
|
return _m('[OpenID](%%doc.openid%%) lets you log into many sites ' .
|
|
'with the same user account. '.
|
|
'Manage your associated OpenIDs from here.');
|
|
}
|
|
|
|
function showScripts()
|
|
{
|
|
parent::showScripts();
|
|
$this->autofocus('openid_url');
|
|
}
|
|
|
|
/**
|
|
* Show the form for OpenID management
|
|
*
|
|
* We have one form with a few different submit buttons to do different things.
|
|
*
|
|
* @return void
|
|
*/
|
|
function showContent()
|
|
{
|
|
$user = common_current_user();
|
|
|
|
if (!common_config('openid', 'trusted_provider')) {
|
|
$this->elementStart('form', array('method' => 'post',
|
|
'id' => 'form_settings_openid_add',
|
|
'class' => 'form_settings',
|
|
'action' =>
|
|
common_local_url('openidsettings')));
|
|
$this->elementStart('fieldset', array('id' => 'settings_openid_add'));
|
|
|
|
// TRANS: Fieldset legend.
|
|
$this->element('legend', null, _m('LEGEND','Add OpenID'));
|
|
$this->hidden('token', common_session_token());
|
|
$this->element('p', 'form_guide',
|
|
// TRANS: Form guide.
|
|
_m('If you want to add an OpenID to your account, ' .
|
|
'enter it in the box below and click "Add".'));
|
|
$this->elementStart('ul', 'form_data');
|
|
$this->elementStart('li');
|
|
$this->element('label', array('for' => 'openid_url'),
|
|
// TRANS: Field label.
|
|
_m('OpenID URL'));
|
|
$this->element('input', array('name' => 'openid_url',
|
|
'type' => 'text',
|
|
'id' => 'openid_url'));
|
|
$this->elementEnd('li');
|
|
$this->elementEnd('ul');
|
|
$this->element('input', array('type' => 'submit',
|
|
'id' => 'settings_openid_add_action-submit',
|
|
'name' => 'add',
|
|
'class' => 'submit',
|
|
// TRANS: Button text for adding an OpenID URL.
|
|
'value' => _m('BUTTON','Add')));
|
|
$this->elementEnd('fieldset');
|
|
$this->elementEnd('form');
|
|
}
|
|
$oid = new User_openid();
|
|
|
|
$oid->user_id = $user->id;
|
|
|
|
$cnt = $oid->find();
|
|
|
|
if ($cnt > 0) {
|
|
// TRANS: Header on OpenID settings page.
|
|
$this->element('h2', null, _m('HEADER','Remove OpenID'));
|
|
|
|
if ($cnt == 1 && !$user->password) {
|
|
|
|
$this->element('p', 'form_guide',
|
|
// TRANS: Form guide.
|
|
_m('Removing your only OpenID '.
|
|
'would make it impossible to log in! ' .
|
|
'If you need to remove it, '.
|
|
'add another OpenID first.'));
|
|
|
|
if ($oid->fetch()) {
|
|
$this->elementStart('p');
|
|
$this->element('a', array('href' => $oid->canonical),
|
|
$oid->display);
|
|
$this->elementEnd('p');
|
|
}
|
|
|
|
} else {
|
|
|
|
$this->element('p', 'form_guide',
|
|
// TRANS: Form guide.
|
|
_m('You can remove an OpenID from your account '.
|
|
'by clicking the button marked "Remove".'));
|
|
$idx = 0;
|
|
|
|
while ($oid->fetch()) {
|
|
$this->elementStart('form',
|
|
array('method' => 'POST',
|
|
'id' => 'form_settings_openid_delete' . $idx,
|
|
'class' => 'form_settings',
|
|
'action' =>
|
|
common_local_url('openidsettings')));
|
|
$this->elementStart('fieldset');
|
|
$this->hidden('token', common_session_token());
|
|
$this->element('a', array('href' => $oid->canonical),
|
|
$oid->display);
|
|
$this->element('input', array('type' => 'hidden',
|
|
'id' => 'openid_url'.$idx,
|
|
'name' => 'openid_url',
|
|
'value' => $oid->canonical));
|
|
$this->element('input', array('type' => 'submit',
|
|
'id' => 'remove'.$idx,
|
|
'name' => 'remove',
|
|
'class' => 'submit remove',
|
|
// TRANS: Button text to remove an OpenID.
|
|
'value' => _m('BUTTON','Remove')));
|
|
$this->elementEnd('fieldset');
|
|
$this->elementEnd('form');
|
|
$idx++;
|
|
}
|
|
}
|
|
}
|
|
|
|
$this->elementStart('form', array('method' => 'post',
|
|
'id' => 'form_settings_openid_trustroots',
|
|
'class' => 'form_settings',
|
|
'action' =>
|
|
common_local_url('openidsettings')));
|
|
$this->elementStart('fieldset', array('id' => 'settings_openid_trustroots'));
|
|
// TRANS: Fieldset legend.
|
|
$this->element('legend', null, _m('OpenID Trusted Sites'));
|
|
$this->hidden('token', common_session_token());
|
|
$this->element('p', 'form_guide',
|
|
// TRANS: Form guide.
|
|
_m('The following sites are allowed to access your ' .
|
|
'identity and log you in. You can remove a site from ' .
|
|
'this list to deny it access to your OpenID.'));
|
|
$this->elementStart('ul', 'form_data');
|
|
$user_openid_trustroot = new User_openid_trustroot();
|
|
$user_openid_trustroot->user_id=$user->id;
|
|
if($user_openid_trustroot->find()) {
|
|
while($user_openid_trustroot->fetch()) {
|
|
$this->elementStart('li');
|
|
$this->element('input', array('name' => 'openid_trustroot[]',
|
|
'type' => 'checkbox',
|
|
'class' => 'checkbox',
|
|
'value' => $user_openid_trustroot->trustroot,
|
|
'id' => 'openid_trustroot_' . crc32($user_openid_trustroot->trustroot)));
|
|
$this->element('label', array('class'=>'checkbox', 'for' => 'openid_trustroot_' . crc32($user_openid_trustroot->trustroot)),
|
|
$user_openid_trustroot->trustroot);
|
|
$this->elementEnd('li');
|
|
}
|
|
}
|
|
$this->elementEnd('ul');
|
|
$this->element('input', array('type' => 'submit',
|
|
'id' => 'settings_openid_trustroots_action-submit',
|
|
'name' => 'remove_trustroots',
|
|
'class' => 'submit',
|
|
// TRANS: Button text to remove an OpenID trustroot.
|
|
'value' => _m('BUTTON','Remove')));
|
|
$this->elementEnd('fieldset');
|
|
|
|
$prefs = User_openid_prefs::getKV('user_id', $user->id);
|
|
|
|
$this->elementStart('fieldset');
|
|
$this->element('legend', null, _m('LEGEND','Preferences'));
|
|
$this->elementStart('ul', 'form_data');
|
|
$this->checkBox('hide_profile_link', "Hide OpenID links from my profile", !empty($prefs) && $prefs->hide_profile_link);
|
|
$this->element('input', array('type' => 'submit',
|
|
'id' => 'settings_openid_prefs_save',
|
|
'name' => 'save_prefs',
|
|
'class' => 'submit',
|
|
// TRANS: Button text to save OpenID prefs
|
|
'value' => _m('BUTTON','Save')));
|
|
$this->elementEnd('ul');
|
|
$this->elementEnd('fieldset');
|
|
|
|
$this->elementEnd('form');
|
|
}
|
|
|
|
/**
|
|
* Handle a POST request
|
|
*
|
|
* Muxes to different sub-functions based on which button was pushed
|
|
*
|
|
* @return void
|
|
*/
|
|
function handlePost()
|
|
{
|
|
// CSRF protection
|
|
$token = $this->trimmed('token');
|
|
if (!$token || $token != common_session_token()) {
|
|
// TRANS: Client error displayed when the session token does not match or is not given.
|
|
$this->showForm(_m('There was a problem with your session token. '.
|
|
'Try again, please.'));
|
|
return;
|
|
}
|
|
|
|
if ($this->arg('add')) {
|
|
if (common_config('openid', 'trusted_provider')) {
|
|
// TRANS: Form validation error if no OpenID providers can be added.
|
|
$this->showForm(_m('Cannot add new providers.'));
|
|
} else {
|
|
$result = oid_authenticate($this->trimmed('openid_url'),
|
|
'finishaddopenid');
|
|
if (is_string($result)) { // error message
|
|
$this->showForm($result);
|
|
}
|
|
}
|
|
} else if ($this->arg('remove')) {
|
|
$this->removeOpenid();
|
|
} else if($this->arg('remove_trustroots')) {
|
|
$this->removeTrustroots();
|
|
} else if($this->arg('save_prefs')) {
|
|
$this->savePrefs();
|
|
} else {
|
|
// TRANS: Unexpected form validation error.
|
|
$this->showForm(_m('Something weird happened.'));
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Handles a request to remove OpenID trustroots from the user's account
|
|
*
|
|
* Validates input and, if everything is OK, deletes the trustroots.
|
|
* Reloads the form with a success or error notification.
|
|
*
|
|
* @return void
|
|
*/
|
|
function removeTrustroots()
|
|
{
|
|
$user = common_current_user();
|
|
$trustroots = $this->arg('openid_trustroot');
|
|
if($trustroots) {
|
|
foreach($trustroots as $trustroot) {
|
|
$user_openid_trustroot = User_openid_trustroot::pkeyGet(
|
|
array('user_id'=>$user->id, 'trustroot'=>$trustroot));
|
|
if($user_openid_trustroot) {
|
|
$user_openid_trustroot->delete();
|
|
} else {
|
|
// TRANS: Form validation error when trying to remove a non-existing trustroot.
|
|
$this->showForm(_m('No such OpenID trustroot.'));
|
|
return;
|
|
}
|
|
}
|
|
// TRANS: Success message after removing trustroots.
|
|
$this->showForm(_m('Trustroots removed.'), true);
|
|
} else {
|
|
$this->showForm();
|
|
}
|
|
return;
|
|
}
|
|
|
|
/**
|
|
* Handles a request to remove an OpenID from the user's account
|
|
*
|
|
* Validates input and, if everything is OK, deletes the OpenID.
|
|
* Reloads the form with a success or error notification.
|
|
*
|
|
* @return void
|
|
*/
|
|
function removeOpenid()
|
|
{
|
|
$openid_url = $this->trimmed('openid_url');
|
|
|
|
$oid = User_openid::getKV('canonical', $openid_url);
|
|
|
|
if (!$oid) {
|
|
// TRANS: Form validation error for a non-existing OpenID.
|
|
$this->showForm(_m('No such OpenID.'));
|
|
return;
|
|
}
|
|
$cur = common_current_user();
|
|
if (!$cur || $oid->user_id != $cur->id) {
|
|
// TRANS: Form validation error if OpenID is connected to another user.
|
|
$this->showForm(_m('That OpenID does not belong to you.'));
|
|
return;
|
|
}
|
|
$oid->delete();
|
|
// TRANS: Success message after removing an OpenID.
|
|
$this->showForm(_m('OpenID removed.'), true);
|
|
return;
|
|
}
|
|
|
|
/**
|
|
* Handles a request to save preferences
|
|
*
|
|
* Validates input and, if everything is OK, deletes the OpenID.
|
|
* Reloads the form with a success or error notification.
|
|
*
|
|
* @return void
|
|
*/
|
|
function savePrefs()
|
|
{
|
|
$cur = common_current_user();
|
|
|
|
if (empty($cur)) {
|
|
throw new ClientException(_("Not logged in."));
|
|
}
|
|
|
|
$orig = null;
|
|
$prefs = User_openid_prefs::getKV('user_id', $cur->id);
|
|
|
|
if (empty($prefs)) {
|
|
$prefs = new User_openid_prefs();
|
|
$prefs->user_id = $cur->id;
|
|
$prefs->created = common_sql_now();
|
|
} else {
|
|
$orig = clone($prefs);
|
|
}
|
|
|
|
$prefs->hide_profile_link = $this->boolean('hide_profile_link');
|
|
|
|
if (empty($orig)) {
|
|
$prefs->insert();
|
|
} else {
|
|
$prefs->update($orig);
|
|
}
|
|
|
|
$this->showForm(_m('OpenID preferences saved.'), true);
|
|
return;
|
|
}
|
|
}
|