Merge remote-tracking branch 'origin/6.0'

[GitHub/WoltLab/WCF.git] / wcfsetup / install / files / lib / action / GoogleAuthAction.class.php

diff --git a/wcfsetup/install/files/lib/action/GoogleAuthAction.class.php b/wcfsetup/install/files/lib/action/GoogleAuthAction.class.php
index 993233506d799d224b3aa9e6a57c47272866f2b3..ba8bd180dd0257f22f8abc37ae3585693a27daa5 100644 (file)
--- a/wcfsetup/install/files/lib/action/GoogleAuthAction.class.php
+++ b/wcfsetup/install/files/lib/action/GoogleAuthAction.class.php
@@ -3,17 +3,8 @@
 namespace wcf\action;
 
 use GuzzleHttp\Psr7\Request;
-use Laminas\Diactoros\Response\RedirectResponse;
-use Psr\Http\Message\ResponseInterface;
-use wcf\data\user\User;
-use wcf\form\AccountManagementForm;
-use wcf\form\RegisterForm;
-use wcf\system\event\EventHandler;
-use wcf\system\exception\NamedUserException;
 use wcf\system\request\LinkHandler;
-use wcf\system\user\authentication\event\UserLoggedIn;
 use wcf\system\user\authentication\oauth\User as OauthUser;
-use wcf\system\WCF;
 use wcf\util\JSON;
 use wcf\util\StringUtil;
 
@@ -24,22 +15,16 @@ use wcf\util\StringUtil;
  * @copyright   2001-2021 WoltLab GmbH
  * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
  */
-final class GoogleAuthAction extends AbstractOauth2Action
+final class GoogleAuthAction extends AbstractOauth2AuthAction
 {
-    /**
-     * @inheritDoc
-     */
-    public $neededModules = ['GOOGLE_PUBLIC_KEY', 'GOOGLE_PRIVATE_KEY'];
+    const AVAILABLE_DURING_OFFLINE_MODE = true;
 
-    /**
-     * @var array
-     */
-    private $configuration;
+    private array $configuration;
 
     /**
      * Returns Google's OpenID Connect configuration.
      */
-    private function getConfiguration()
+    private function getConfiguration(): array
     {
         if (!isset($this->configuration)) {
             $request = new Request('GET', 'https://accounts.google.com/.well-known/openid-configuration');
@@ -51,65 +36,49 @@ final class GoogleAuthAction extends AbstractOauth2Action
         return $this->configuration;
     }
 
-    /**
-     * @inheritDoc
-     */
+    #[\Override]
     protected function getTokenEndpoint(): string
     {
         return $this->getConfiguration()['token_endpoint'];
     }
 
-    /**
-     * @inheritDoc
-     */
+    #[\Override]
     protected function getClientId(): string
     {
         return StringUtil::trim(GOOGLE_PUBLIC_KEY);
     }
 
-    /**
-     * @inheritDoc
-     */
+    #[\Override]
     protected function getClientSecret(): string
     {
         return StringUtil::trim(GOOGLE_PRIVATE_KEY);
     }
 
-    /**
-     * @inheritDoc
-     */
+    #[\Override]
     protected function getScope(): string
     {
         return 'profile openid email';
     }
 
-    /**
-     * @inheritDoc
-     */
+    #[\Override]
     protected function getAuthorizeUrl(): string
     {
         return $this->getConfiguration()['authorization_endpoint'];
     }
 
-    /**
-     * @inheritDoc
-     */
+    #[\Override]
     protected function getCallbackUrl(): string
     {
         return LinkHandler::getInstance()->getControllerLink(self::class);
     }
 
-    /**
-     * @inheritDoc
-     */
+    #[\Override]
     protected function supportsState(): bool
     {
         return true;
     }
 
-    /**
-     * @inheritDoc
-     */
+    #[\Override]
     protected function getUser(array $accessToken): OauthUser
     {
         $request = new Request('GET', $this->getConfiguration()['userinfo_endpoint'], [
@@ -129,69 +98,9 @@ final class GoogleAuthAction extends AbstractOauth2Action
         return new OauthUser($parsed);
     }
 
-    /**
-     * @inheritDoc
-     */
-    protected function processUser(OauthUser $oauthUser): ResponseInterface
+    #[\Override]
+    protected function getProviderName(): string
     {
-        $user = User::getUserByAuthData('google:' . $oauthUser->getId());
-
-        if ($user->userID) {
-            if (WCF::getUser()->userID) {
-                // This account belongs to an existing user, but we are already logged in.
-                // This can't be handled.
-
-                throw new NamedUserException(
-                    WCF::getLanguage()->getDynamicVariable('wcf.user.3rdparty.google.connect.error.inuse')
-                );
-            } else {
-                // This account belongs to an existing user, we are not logged in.
-                // Perform the login.
-
-                WCF::getSession()->changeUser($user);
-                WCF::getSession()->update();
-                EventHandler::getInstance()->fire(
-                    new UserLoggedIn($user)
-                );
-
-                return new RedirectResponse(
-                    LinkHandler::getInstance()->getLink()
-                );
-            }
-        } else {
-            WCF::getSession()->register('__3rdPartyProvider', 'google');
-
-            if (WCF::getUser()->userID) {
-                // This account does not belong to anyone and we are already logged in.
-                // Thus we want to connect this account.
-
-                WCF::getSession()->register('__oauthUser', $oauthUser);
-
-                return new RedirectResponse(
-                    LinkHandler::getInstance()->getControllerLink(
-                        AccountManagementForm::class,
-                        [],
-                        '#3rdParty'
-                    )
-                );
-            } else {
-                // This account does not belong to anyone and we are not logged in.
-                // Thus we want to connect this account to a newly registered user.
-
-                WCF::getSession()->register('__oauthUser', $oauthUser);
-                WCF::getSession()->register('__username', $oauthUser->getUsername());
-                WCF::getSession()->register('__email', $oauthUser->getEmail());
-
-                // We assume that bots won't register an external account first, so
-                // we skip the captcha.
-                WCF::getSession()->register('noRegistrationCaptcha', true);
-
-                WCF::getSession()->update();
-
-                return new RedirectResponse(
-                    LinkHandler::getInstance()->getControllerLink(RegisterForm::class)
-                );
-            }
-        }
+        return 'google';
     }
 }