X-Git-Url: https://git.heureux-cyclage.org/?a=blobdiff_plain;f=includes%2Fapi%2FApiCheckToken.php;h=dfcbaf890e3f91e44420dadef88f07fe43de5b2e;hb=94ba53f67731b0553a6178841d9506e384f74496;hp=28c6ece7c09aca93a99a71ab9221503c3d0a2fc3;hpb=c6f49906d901c4421c51542ff8e6640218aa8df9;p=lhc%2Fweb%2Fwiklou.git diff --git a/includes/api/ApiCheckToken.php b/includes/api/ApiCheckToken.php index 28c6ece7c0..dfcbaf890e 100644 --- a/includes/api/ApiCheckToken.php +++ b/includes/api/ApiCheckToken.php @@ -32,21 +32,22 @@ class ApiCheckToken extends ApiBase { $params = $this->extractRequestParams(); $token = $params['token']; $maxage = $params['maxtokenage']; - $request = $this->getRequest(); $salts = ApiQueryTokens::getTokenTypeSalts(); - $salt = $salts[$params['type']]; $res = array(); - if ( $this->getUser()->matchEditToken( $token, $salt, $request, $maxage ) ) { + $tokenObj = ApiQueryTokens::getToken( + $this->getUser(), $this->getRequest()->getSession(), $salts[$params['type']] + ); + if ( $tokenObj->match( $token, $maxage ) ) { $res['result'] = 'valid'; - } elseif ( $maxage !== null && $this->getUser()->matchEditToken( $token, $salt, $request ) ) { + } elseif ( $maxage !== null && $tokenObj->match( $token ) ) { $res['result'] = 'expired'; } else { $res['result'] = 'invalid'; } - $ts = User::getEditTokenTimestamp( $token ); + $ts = MediaWiki\Session\Token::getTimestamp( $token ); if ( $ts !== null ) { $mwts = new MWTimestamp(); $mwts->timestamp->setTimestamp( $ts );