PhabricatorMultiFactorSettingsPanel.php
bb20c136513cmaster

PhabricatorMultiFactorSettingsPanel.php
View Options

			<?php

			final class PhabricatorMultiFactorSettingsPanel
			extends PhabricatorSettingsPanel {

			private $isEnrollment;

			public function getPanelKey() {
			return 'multifactor';
			}

			public function getPanelName() {
			return pht('Multi-Factor Auth');
			}

			public function getPanelMenuIcon() {
			return 'fa-lock';
			}

			public function getPanelGroupKey() {
			return PhabricatorSettingsAuthenticationPanelGroup::PANELGROUPKEY;
			}

			public function isMultiFactorEnrollmentPanel() {
			return true;
			}

			public function setIsEnrollment($is_enrollment) {
			$this->isEnrollment = $is_enrollment;
			return $this;
			}

			public function getIsEnrollment() {
			return $this->isEnrollment;
			}

			public function processRequest(AphrontRequest $request) {
			if ($request->getExists('new') \|\| $request->getExists('providerPHID')) {
			return $this->processNew($request);
			}

			if ($request->getExists('edit')) {
			return $this->processEdit($request);
			}

			if ($request->getExists('delete')) {
			return $this->processDelete($request);
			}

			$user = $this->getUser();
			$viewer = $request->getUser();

			$factors = id(new PhabricatorAuthFactorConfigQuery())
			->setViewer($viewer)
			->withUserPHIDs(array($user->getPHID()))
			->setOrderVector(array('-id'))
			->execute();

			$rows = array();
			$rowc = array();

			$highlight_id = $request->getInt('id');
			foreach ($factors as $factor) {
			$provider = $factor->getFactorProvider();

			if ($factor->getID() == $highlight_id) {
			$rowc[] = 'highlighted';
			} else {
			$rowc[] = null;
			}

			$rows[] = array(
			javelin_tag(
			'a',
			array(
			'href' => $this->getPanelURI('?edit='.$factor->getID()),
			'sigil' => 'workflow',
			),
			$factor->getFactorName()),
			$provider->getDisplayName(),
			phabricator_datetime($factor->getDateCreated(), $viewer),
			javelin_tag(
			'a',
			array(
			'href' => $this->getPanelURI('?delete='.$factor->getID()),
			'sigil' => 'workflow',
			'class' => 'small button button-grey',
			),
			pht('Remove')),
			);
			}

			$table = new AphrontTableView($rows);
			$table->setNoDataString(
			pht("You haven't added any authentication factors to your account yet."));
			$table->setHeaders(
			array(
			pht('Name'),
			pht('Type'),
			pht('Created'),
			'',
			));
			$table->setColumnClasses(
			array(
			'wide pri',
			'',
			'right',
			'action',
			));
			$table->setRowClasses($rowc);
			$table->setDeviceVisibility(
			array(
			true,
			false,
			false,
			true,
			));

			$help_uri = PhabricatorEnv::getDoclink(
			'User Guide: Multi-Factor Authentication');

			$buttons = array();

			// If we're enrolling a new account in MFA, provide a small visual hint
			// that this is the button they want to click.
			if ($this->getIsEnrollment()) {
			$add_color = PHUIButtonView::BLUE;
			} else {
			$add_color = PHUIButtonView::GREY;
			}

			$buttons[] = id(new PHUIButtonView())
			->setTag('a')
			->setIcon('fa-plus')
			->setText(pht('Add Auth Factor'))
			->setHref($this->getPanelURI('?new=true'))
			->setWorkflow(true)
			->setColor($add_color);

			$buttons[] = id(new PHUIButtonView())
			->setTag('a')
			->setIcon('fa-book')
			->setText(pht('Help'))
			->setHref($help_uri)
			->setColor(PHUIButtonView::GREY);

			return $this->newBox(pht('Authentication Factors'), $table, $buttons);
			}

			private function processNew(AphrontRequest $request) {
			$viewer = $request->getUser();
			$user = $this->getUser();

			$cancel_uri = $this->getPanelURI();

			// Check that we have providers before we send the user through the MFA
			// gate, so you don't authenticate and then immediately get roadblocked.
			$providers = id(new PhabricatorAuthFactorProviderQuery())
			->setViewer($viewer)
			->withStatuses(array(PhabricatorAuthFactorProvider::STATUS_ACTIVE))
			->execute();
			if (!$providers) {
			return $this->newDialog()
			->setTitle(pht('No MFA Providers'))
			->appendParagraph(
			pht(
			'There are no active MFA providers. At least one active provider '.
			'must be available to add new MFA factors.'))
			->addCancelButton($cancel_uri);
			}
			$providers = mpull($providers, null, 'getPHID');
			$proivders = msortv($providers, 'newSortVector');

			$token = id(new PhabricatorAuthSessionEngine())->requireHighSecuritySession(
			$viewer,
			$request,
			$cancel_uri);

			$selected_phid = $request->getStr('providerPHID');
			if (empty($providers[$selected_phid])) {
			$selected_provider = null;
			} else {
			$selected_provider = $providers[$selected_phid];

			// Only let the user continue creating a factor for a given provider if
			// they actually pass the provider's checks.
			$selected_factor = $selected_provider->getFactor();
			if (!$selected_factor->canCreateNewConfiguration($viewer)) {
			$selected_provider = null;
			}
			}

			if (!$selected_provider) {
			$menu = id(new PHUIObjectItemListView())
			->setViewer($viewer)
			->setBig(true)
			->setFlush(true);

			foreach ($providers as $provider_phid => $provider) {
			$provider_uri = id(new PhutilURI($this->getPanelURI()))
			->setQueryParam('providerPHID', $provider_phid);

			$factor = $provider->getFactor();
			$is_enabled = $factor->canCreateNewConfiguration($viewer);

			$item = id(new PHUIObjectItemView())
			->setHeader($provider->getDisplayName())
			->setImageIcon($provider->newIconView())
			->addAttribute($provider->getDisplayDescription());

			if ($is_enabled) {
			$item
			->setHref($provider_uri)
			->setClickable(true);
			} else {
			$item->setDisabled(true);
			}

			$create_description = $factor->getConfigurationCreateDescription(
			$viewer);
			if ($create_description) {
			$item->appendChild($create_description);
			}

			$menu->addItem($item);
			}

			return $this->newDialog()
			->setTitle(pht('Choose Factor Type'))
			->appendChild($menu)
			->addCancelButton($cancel_uri);
			}

			$form = id(new AphrontFormView())
			->setViewer($viewer);

			$config = $selected_provider->processAddFactorForm(
			$form,
			$request,
			$user);

			if ($config) {
			$config->save();

			$log = PhabricatorUserLog::initializeNewLog(
			$viewer,
			$user->getPHID(),
			PhabricatorUserLog::ACTION_MULTI_ADD);
			$log->save();

			$user->updateMultiFactorEnrollment();

			// Terminate other sessions so they must log in and survive the
			// multi-factor auth check.

			id(new PhabricatorAuthSessionEngine())->terminateLoginSessions(
			$user,
			new PhutilOpaqueEnvelope(
			$request->getCookie(PhabricatorCookies::COOKIE_SESSION)));

			return id(new AphrontRedirectResponse())
			->setURI($this->getPanelURI('?id='.$config->getID()));
			}

			return $this->newDialog()
			->addHiddenInput('providerPHID', $selected_provider->getPHID())
			->setWidth(AphrontDialogView::WIDTH_FORM)
			->setTitle(pht('Add Authentication Factor'))
			->appendChild($form->buildLayoutView())
			->addSubmitButton(pht('Continue'))
			->addCancelButton($cancel_uri);
			}

			private function processEdit(AphrontRequest $request) {
			$viewer = $request->getUser();
			$user = $this->getUser();

			$factor = id(new PhabricatorAuthFactorConfig())->loadOneWhere(
			'id = %d AND userPHID = %s',
			$request->getInt('edit'),
			$user->getPHID());
			if (!$factor) {
			return new Aphront404Response();
			}

			$e_name = true;
			$errors = array();
			if ($request->isFormPost()) {
			$name = $request->getStr('name');
			if (!strlen($name)) {
			$e_name = pht('Required');
			$errors[] = pht(
			'Authentication factors must have a name to identify them.');
			}

			if (!$errors) {
			$factor->setFactorName($name);
			$factor->save();

			$user->updateMultiFactorEnrollment();

			return id(new AphrontRedirectResponse())
			->setURI($this->getPanelURI('?id='.$factor->getID()));
			}
			} else {
			$name = $factor->getFactorName();
			}

			$form = id(new AphrontFormView())
			->setUser($viewer)
			->appendChild(
			id(new AphrontFormTextControl())
			->setName('name')
			->setLabel(pht('Name'))
			->setValue($name)
			->setError($e_name));

			$dialog = id(new AphrontDialogView())
			->setUser($viewer)
			->addHiddenInput('edit', $factor->getID())
			->setTitle(pht('Edit Authentication Factor'))
			->setErrors($errors)
			->appendChild($form->buildLayoutView())
			->addSubmitButton(pht('Save'))
			->addCancelButton($this->getPanelURI());

			return id(new AphrontDialogResponse())
			->setDialog($dialog);
			}

			private function processDelete(AphrontRequest $request) {
			$viewer = $request->getUser();
			$user = $this->getUser();

			$token = id(new PhabricatorAuthSessionEngine())->requireHighSecuritySession(
			$viewer,
			$request,
			$this->getPanelURI());

			$factor = id(new PhabricatorAuthFactorConfig())->loadOneWhere(
			'id = %d AND userPHID = %s',
			$request->getInt('delete'),
			$user->getPHID());
			if (!$factor) {
			return new Aphront404Response();
			}

			if ($request->isFormPost()) {
			$factor->delete();

			$log = PhabricatorUserLog::initializeNewLog(
			$viewer,
			$user->getPHID(),
			PhabricatorUserLog::ACTION_MULTI_REMOVE);
			$log->save();

			$user->updateMultiFactorEnrollment();

			return id(new AphrontRedirectResponse())
			->setURI($this->getPanelURI());
			}

			$dialog = id(new AphrontDialogView())
			->setUser($viewer)
			->addHiddenInput('delete', $factor->getID())
			->setTitle(pht('Delete Authentication Factor'))
			->appendParagraph(
			pht(
			'Really remove the authentication factor %s from your account?',
			phutil_tag('strong', array(), $factor->getFactorName())))
			->addSubmitButton(pht('Remove Factor'))
			->addCancelButton($this->getPanelURI());

			return id(new AphrontDialogResponse())
			->setDialog($dialog);
			}


			}

Owner Packages

No Owners

phorge/src/applications/settings/panel/PhabricatorMultiFactorSettingsPanel.phpbb20c136513cmaster

PhabricatorMultiFactorSettingsPanel.phpView Options

Owner Packages

phorge/src/applications/settings/panel/PhabricatorMultiFactorSettingsPanel.php
bb20c136513cmaster

PhabricatorMultiFactorSettingsPanel.php
View Options