Page Menu
Home
c4science
Search
Configure Global Search
Log In
Files
F85810423
PhabricatorOAuthDefaultRegistrationController.php
No One
Temporary
Actions
Download File
Edit File
Delete File
View Transforms
Subscribe
Mute Notifications
Award Token
Subscribers
None
File Metadata
Details
File Info
Storage
Attached
Created
Wed, Oct 2, 06:42
Size
7 KB
Mime Type
text/x-php
Expires
Fri, Oct 4, 06:42 (2 d)
Engine
blob
Format
Raw Data
Handle
21248983
Attached To
rPH Phabricator
PhabricatorOAuthDefaultRegistrationController.php
View Options
<?php
/*
* Copyright 2012 Facebook, Inc.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
final
class
PhabricatorOAuthDefaultRegistrationController
extends
PhabricatorOAuthRegistrationController
{
public
function
processRequest
()
{
$provider
=
$this
->
getOAuthProvider
();
$oauth_info
=
$this
->
getOAuthInfo
();
$request
=
$this
->
getRequest
();
$errors
=
array
();
$e_username
=
true
;
$e_email
=
true
;
$e_realname
=
true
;
$user
=
new
PhabricatorUser
();
$user
->
setUsername
(
$provider
->
retrieveUserAccountName
());
$user
->
setRealName
(
$provider
->
retrieveUserRealName
());
$new_email
=
$provider
->
retrieveUserEmail
();
if
(
$new_email
)
{
// If the user's OAuth provider account has an email address but the
// email address domain is not allowed by the Phabricator configuration,
// we just pretend the provider did not supply an address.
//
// For instance, if the user uses Google OAuth and their Google address
// is "joe@personal.com" but Phabricator is configured to require users
// use "@company.com" addresses, we show a prompt below and tell the user
// to provide their "@company.com" address. They can still use the OAuth
// account to login, they just need to associate their account with an
// allowed address.
//
// If the OAuth address is fine, we just use it and don't prompt the user.
if
(!
PhabricatorUserEmail
::
isAllowedAddress
(
$new_email
))
{
$new_email
=
null
;
}
}
$show_email_input
=
(
$new_email
===
null
);
if
(
$request
->
isFormPost
())
{
$user
->
setUsername
(
$request
->
getStr
(
'username'
));
$username
=
$user
->
getUsername
();
if
(!
strlen
(
$user
->
getUsername
()))
{
$e_username
=
'Required'
;
$errors
[]
=
'Username is required.'
;
}
else
if
(!
PhabricatorUser
::
validateUsername
(
$username
))
{
$e_username
=
'Invalid'
;
$errors
[]
=
'Username must consist of only numbers and letters.'
;
}
else
{
$e_username
=
null
;
}
if
(!
$new_email
)
{
$new_email
=
trim
(
$request
->
getStr
(
'email'
));
if
(!
$new_email
)
{
$e_email
=
'Required'
;
$errors
[]
=
'Email is required.'
;
}
else
{
$e_email
=
null
;
}
}
if
(
$new_email
)
{
$email_ok
=
PhabricatorUserEmail
::
isAllowedAddress
(
$new_email
);
if
(!
$email_ok
)
{
$e_email
=
'Invalid'
;
$errors
[]
=
PhabricatorUserEmail
::
describeAllowedAddresses
();
}
}
if
(!
strlen
(
$user
->
getRealName
()))
{
$user
->
setRealName
(
$request
->
getStr
(
'realname'
));
if
(!
strlen
(
$user
->
getRealName
()))
{
$e_realname
=
'Required'
;
$errors
[]
=
'Real name is required.'
;
}
else
{
$e_realname
=
null
;
}
}
if
(!
$errors
)
{
$image
=
$provider
->
retrieveUserProfileImage
();
if
(
$image
)
{
$file
=
PhabricatorFile
::
newFromFileData
(
$image
,
array
(
'name'
=>
$provider
->
getProviderKey
().
'-profile.jpg'
,
'authorPHID'
=>
$user
->
getPHID
(),
));
$user
->
setProfileImagePHID
(
$file
->
getPHID
());
}
try
{
// NOTE: We don't verify OAuth email addresses by default because
// OAuth providers might associate email addresses with accounts that
// haven't actually verified they own them. We could selectively
// auto-verify some providers that we trust here, but the stakes for
// verifying an email address are high because having a corporate
// address at a company is sometimes the key to the castle.
$email_obj
=
id
(
new
PhabricatorUserEmail
())
->
setAddress
(
$new_email
)
->
setIsVerified
(
0
);
id
(
new
PhabricatorUserEditor
())
->
setActor
(
$user
)
->
createNewUser
(
$user
,
$email_obj
);
$oauth_info
->
setUserID
(
$user
->
getID
());
$oauth_info
->
save
();
$session_key
=
$user
->
establishSession
(
'web'
);
$request
->
setCookie
(
'phusr'
,
$user
->
getUsername
());
$request
->
setCookie
(
'phsid'
,
$session_key
);
$email_obj
->
sendVerificationEmail
(
$user
);
return
id
(
new
AphrontRedirectResponse
())->
setURI
(
'/'
);
}
catch
(
AphrontQueryDuplicateKeyException
$exception
)
{
$same_username
=
id
(
new
PhabricatorUser
())->
loadOneWhere
(
'userName = %s'
,
$user
->
getUserName
());
$same_email
=
id
(
new
PhabricatorUserEmail
())->
loadOneWhere
(
'address = %s'
,
$new_email
);
if
(
$same_username
)
{
$e_username
=
'Duplicate'
;
$errors
[]
=
'That username or email is not unique.'
;
}
else
if
(
$same_email
)
{
$e_email
=
'Duplicate'
;
$errors
[]
=
'That email is not unique.'
;
}
else
{
throw
$exception
;
}
}
}
}
$error_view
=
null
;
if
(
$errors
)
{
$error_view
=
new
AphrontErrorView
();
$error_view
->
setTitle
(
'Registration Failed'
);
$error_view
->
setErrors
(
$errors
);
}
// Strip the URI down to the path, because otherwise we'll trigger
// external CSRF protection (by having a protocol in the form "action")
// and generate a form with no CSRF token.
$action_uri
=
new
PhutilURI
(
$provider
->
getRedirectURI
());
$action_path
=
$action_uri
->
getPath
();
$form
=
new
AphrontFormView
();
$form
->
addHiddenInput
(
'confirm_token'
,
$provider
->
getAccessToken
())
->
addHiddenInput
(
'expires'
,
$oauth_info
->
getTokenExpires
())
->
addHiddenInput
(
'state'
,
$this
->
getOAuthState
())
->
setUser
(
$request
->
getUser
())
->
setAction
(
$action_path
)
->
appendChild
(
id
(
new
AphrontFormTextControl
())
->
setLabel
(
'Username'
)
->
setName
(
'username'
)
->
setValue
(
$user
->
getUsername
())
->
setError
(
$e_username
));
if
(
$show_email_input
)
{
$form
->
appendChild
(
id
(
new
AphrontFormTextControl
())
->
setLabel
(
'Email'
)
->
setName
(
'email'
)
->
setValue
(
$request
->
getStr
(
'email'
))
->
setCaption
(
PhabricatorUserEmail
::
describeAllowedAddresses
())
->
setError
(
$e_email
));
}
if
(
$provider
->
retrieveUserRealName
()
===
null
)
{
$form
->
appendChild
(
id
(
new
AphrontFormTextControl
())
->
setLabel
(
'Real Name'
)
->
setName
(
'realname'
)
->
setValue
(
$request
->
getStr
(
'realname'
))
->
setError
(
$e_realname
));
}
$form
->
appendChild
(
id
(
new
AphrontFormSubmitControl
())
->
setValue
(
'Create Account'
));
$panel
=
new
AphrontPanelView
();
$panel
->
setHeader
(
'Create New Account'
);
$panel
->
setWidth
(
AphrontPanelView
::
WIDTH_FORM
);
$panel
->
appendChild
(
$form
);
return
$this
->
buildStandardPageResponse
(
array
(
$error_view
,
$panel
,
),
array
(
'title'
=>
'Create New Account'
,
));
}
}
Event Timeline
Log In to Comment