mirror of
https://we.phorge.it/source/phorge.git
synced 2025-01-31 17:08:22 +01:00
77 lines
2.3 KiB
PHP
77 lines
2.3 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
final class PhabricatorHighSecurityRequestExceptionHandler
|
||
|
|
extends PhabricatorRequestExceptionHandler {
|
||
|
|
|
||
|
|
public function getRequestExceptionHandlerPriority() {
|
||
|
|
return 310000;
|
||
|
|
}
|
||
|
|
|
||
|
|
public function getRequestExceptionHandlerDescription() {
|
||
|
|
return pht(
|
||
|
|
'Handles high security exceptions which occur when a user needs '.
|
||
|
|
'to present MFA credentials to take an action.');
|
||
|
|
}
|
||
|
|
|
||
|
|
public function canHandleRequestException(
|
||
|
|
AphrontRequest $request,
|
||
|
|
Exception $ex) {
|
||
|
|
|
||
|
|
if (!$this->isPhabricatorSite($request)) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
|
||
|
|
return ($ex instanceof PhabricatorAuthHighSecurityRequiredException);
|
||
|
|
}
|
||
|
|
|
||
|
|
public function handleRequestException(
|
||
|
|
AphrontRequest $request,
|
||
|
|
Exception $ex) {
|
||
|
|
|
||
|
|
$viewer = $this->getViewer($request);
|
||
|
|
|
||
|
|
$form = id(new PhabricatorAuthSessionEngine())->renderHighSecurityForm(
|
||
|
|
$ex->getFactors(),
|
||
|
|
$ex->getFactorValidationResults(),
|
||
|
|
$viewer,
|
||
|
|
$request);
|
||
|
|
|
||
|
|
$dialog = id(new AphrontDialogView())
|
||
|
|
->setUser($viewer)
|
||
|
|
->setTitle(pht('Entering High Security'))
|
||
|
|
->setShortTitle(pht('Security Checkpoint'))
|
||
|
|
->setWidth(AphrontDialogView::WIDTH_FORM)
|
||
|
|
->addHiddenInput(AphrontRequest::TYPE_HISEC, true)
|
||
|
|
->setErrors(
|
||
|
|
array(
|
||
|
|
pht(
|
||
|
|
'You are taking an action which requires you to enter '.
|
||
|
|
'high security.'),
|
||
|
|
))
|
||
|
|
->appendParagraph(
|
||
|
|
pht(
|
||
|
|
'High security mode helps protect your account from security '.
|
||
|
|
'threats, like session theft or someone messing with your stuff '.
|
||
|
|
'while you\'re grabbing a coffee. To enter high security mode, '.
|
||
|
|
'confirm your credentials.'))
|
||
|
|
->appendChild($form->buildLayoutView())
|
||
|
|
->appendParagraph(
|
||
|
|
pht(
|
||
|
|
'Your account will remain in high security mode for a short '.
|
||
|
|
'period of time. When you are finished taking sensitive '.
|
||
|
|
'actions, you should leave high security.'))
|
||
|
|
->setSubmitURI($request->getPath())
|
||
|
|
->addCancelButton($ex->getCancelURI())
|
||
|
|
->addSubmitButton(pht('Enter High Security'));
|
||
|
|
|
||
|
|
$request_parameters = $request->getPassthroughRequestParameters(
|
||
|
|
$respect_quicksand = true);
|
||
|
|
foreach ($request_parameters as $key => $value) {
|
||
|
|
$dialog->addHiddenInput($key, $value);
|
||
|
|
}
|
||
|
|
|
||
|
|
return $dialog;
|
||
|
|
}
|
||
|
|
|
||
|
|
}
|