3 * StatusNet, the distributed open-source microblogging tool
9 * LICENCE: This program is free software: you can redistribute it and/or modify
10 * it under the terms of the GNU Affero General Public License as published by
11 * the Free Software Foundation, either version 3 of the License, or
12 * (at your option) any later version.
14 * This program is distributed in the hope that it will be useful,
15 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 * GNU Affero General Public License for more details.
19 * You should have received a copy of the GNU Affero General Public License
20 * along with this program. If not, see <http://www.gnu.org/licenses/>.
24 * @author Evan Prodromou <evan@status.net>
25 * @copyright 2008-2009 StatusNet, Inc.
26 * @license http://www.fsf.org/licensing/licenses/agpl-3.0.html GNU Affero General Public License version 3.0
27 * @link http://status.net/
30 if (!defined('STATUSNET') && !defined('LACONICA')) {
34 require_once INSTALLDIR.'/lib/accountsettingsaction.php';
35 require_once INSTALLDIR.'/plugins/OpenID/openid.php';
40 * Lets users add, edit and delete OpenIDs from their account
44 * @author Evan Prodromou <evan@status.net>
45 * @license http://www.fsf.org/licensing/licenses/agpl-3.0.html GNU Affero General Public License version 3.0
46 * @link http://status.net/
49 class OpenidsettingsAction extends AccountSettingsAction
54 * @return string Page title
59 return _m('OpenID settings');
63 * Instructions for use
65 * @return string Instructions for use
68 function getInstructions()
70 return _m('[OpenID](%%doc.openid%%) lets you log into many sites' .
71 ' with the same user account.'.
72 ' Manage your associated OpenIDs from here.');
75 function showScripts()
77 parent::showScripts();
78 $this->autofocus('openid_url');
82 * Show the form for OpenID management
84 * We have one form with a few different submit buttons to do different things.
89 function showContent()
91 $user = common_current_user();
93 $this->elementStart('form', array('method' => 'post',
94 'id' => 'form_settings_openid_add',
95 'class' => 'form_settings',
97 common_local_url('openidsettings')));
98 $this->elementStart('fieldset', array('id' => 'settings_openid_add'));
99 $this->element('legend', null, _m('Add OpenID'));
100 $this->hidden('token', common_session_token());
101 $this->element('p', 'form_guide',
102 _m('If you want to add an OpenID to your account, ' .
103 'enter it in the box below and click "Add".'));
104 $this->elementStart('ul', 'form_data');
105 $this->elementStart('li');
106 $this->element('label', array('for' => 'openid_url'),
108 $this->element('input', array('name' => 'openid_url',
110 'id' => 'openid_url'));
111 $this->elementEnd('li');
112 $this->elementEnd('ul');
113 $this->element('input', array('type' => 'submit',
114 'id' => 'settings_openid_add_action-submit',
117 'value' => _m('Add')));
118 $this->elementEnd('fieldset');
119 $this->elementEnd('form');
121 $oid = new User_openid();
123 $oid->user_id = $user->id;
129 $this->element('h2', null, _m('Remove OpenID'));
131 if ($cnt == 1 && !$user->password) {
133 $this->element('p', 'form_guide',
134 _m('Removing your only OpenID '.
135 'would make it impossible to log in! ' .
136 'If you need to remove it, '.
137 'add another OpenID first.'));
140 $this->elementStart('p');
141 $this->element('a', array('href' => $oid->canonical),
143 $this->elementEnd('p');
148 $this->element('p', 'form_guide',
149 _m('You can remove an OpenID from your account '.
150 'by clicking the button marked "Remove".'));
153 while ($oid->fetch()) {
154 $this->elementStart('form',
155 array('method' => 'POST',
156 'id' => 'form_settings_openid_delete' . $idx,
157 'class' => 'form_settings',
159 common_local_url('openidsettings')));
160 $this->elementStart('fieldset');
161 $this->hidden('token', common_session_token());
162 $this->element('a', array('href' => $oid->canonical),
164 $this->element('input', array('type' => 'hidden',
165 'id' => 'openid_url'.$idx,
166 'name' => 'openid_url',
167 'value' => $oid->canonical));
168 $this->element('input', array('type' => 'submit',
169 'id' => 'remove'.$idx,
171 'class' => 'submit remove',
172 'value' => _m('Remove')));
173 $this->elementEnd('fieldset');
174 $this->elementEnd('form');
180 $this->elementStart('form', array('method' => 'post',
181 'id' => 'form_settings_openid_trustroots',
182 'class' => 'form_settings',
184 common_local_url('openidsettings')));
185 $this->elementStart('fieldset', array('id' => 'settings_openid_trustroots'));
186 $this->element('legend', null, _m('OpenID Trusted Sites'));
187 $this->hidden('token', common_session_token());
188 $this->element('p', 'form_guide',
189 _m('The following sites are allowed to access your ' .
190 'identity and log you in. You can remove a site from ' .
191 'this list to deny it access to your OpenID.'));
192 $this->elementStart('ul', 'form_data');
193 $user_openid_trustroot = new User_openid_trustroot();
194 $user_openid_trustroot->user_id=$user->id;
195 if($user_openid_trustroot->find()) {
196 while($user_openid_trustroot->fetch()) {
197 $this->elementStart('li');
198 $this->element('input', array('name' => 'openid_trustroot[]',
199 'type' => 'checkbox',
200 'class' => 'checkbox',
201 'value' => $user_openid_trustroot->trustroot,
202 'id' => 'openid_trustroot_' . crc32($user_openid_trustroot->trustroot)));
203 $this->element('label', array('class'=>'checkbox', 'for' => 'openid_trustroot_' . crc32($user_openid_trustroot->trustroot)),
204 $user_openid_trustroot->trustroot);
205 $this->elementEnd('li');
208 $this->elementEnd('ul');
209 $this->element('input', array('type' => 'submit',
210 'id' => 'settings_openid_trustroots_action-submit',
211 'name' => 'remove_trustroots',
213 'value' => _m('Remove')));
214 $this->elementEnd('fieldset');
215 $this->elementEnd('form');
219 * Handle a POST request
221 * Muxes to different sub-functions based on which button was pushed
226 function handlePost()
229 $token = $this->trimmed('token');
230 if (!$token || $token != common_session_token()) {
231 $this->showForm(_m('There was a problem with your session token. '.
232 'Try again, please.'));
236 if ($this->arg('add')) {
237 $result = oid_authenticate($this->trimmed('openid_url'),
239 if (is_string($result)) { // error message
240 $this->showForm($result);
242 } else if ($this->arg('remove')) {
243 $this->removeOpenid();
244 } else if($this->arg('remove_trustroots')) {
245 $this->removeTrustroots();
247 $this->showForm(_m('Something weird happened.'));
252 * Handles a request to remove OpenID trustroots from the user's account
254 * Validates input and, if everything is OK, deletes the trustroots.
255 * Reloads the form with a success or error notification.
260 function removeTrustroots()
262 $user = common_current_user();
263 $trustroots = $this->arg('openid_trustroot');
265 foreach($trustroots as $trustroot) {
266 $user_openid_trustroot = User_openid_trustroot::pkeyGet(
267 array('user_id'=>$user->id, 'trustroot'=>$trustroot));
268 if($user_openid_trustroot) {
269 $user_openid_trustroot->delete();
271 $this->showForm(_m('No such OpenID trustroot.'));
275 $this->showForm(_m('Trustroots removed'), true);
283 * Handles a request to remove an OpenID from the user's account
285 * Validates input and, if everything is OK, deletes the OpenID.
286 * Reloads the form with a success or error notification.
291 function removeOpenid()
293 $openid_url = $this->trimmed('openid_url');
295 $oid = User_openid::staticGet('canonical', $openid_url);
298 $this->showForm(_m('No such OpenID.'));
301 $cur = common_current_user();
302 if (!$cur || $oid->user_id != $cur->id) {
303 $this->showForm(_m('That OpenID does not belong to you.'));
307 $this->showForm(_m('OpenID removed.'), true);