includes/context/RequestContext.php

   1 <?php
   2 /**
   3  * This program is free software; you can redistribute it and/or modify
   4  * it under the terms of the GNU General Public License as published by
   5  * the Free Software Foundation; either version 2 of the License, or
   6  * (at your option) any later version.
   7  *
   8  * This program is distributed in the hope that it will be useful,
   9  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  10  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  11  * GNU General Public License for more details.
  12  *
  13  * You should have received a copy of the GNU General Public License along
  14  * with this program; if not, write to the Free Software Foundation, Inc.,
  15  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
  16  * http://www.gnu.org/copyleft/gpl.html
  17  *
  18  * @since 1.18
  19  *
  20  * @author Alexandre Emsenhuber
  21  * @author Daniel Friesen
  22  * @file
  23  */
  24
  25 use Liuggio\StatsdClient\Factory\StatsdDataFactory;
  26 use MediaWiki\Logger\LoggerFactory;
  27 use MediaWiki\MediaWikiServices;
  28 use Wikimedia\ScopedCallback;
  29
  30 /**
  31  * Group all the pieces relevant to the context of a request into one instance
  32  */
  33 class RequestContext implements IContextSource, MutableContext {
  34         /**
  35          * @var WebRequest
  36          */
  37         private $request;
  38
  39         /**
  40          * @var Title
  41          */
  42         private $title;
  43
  44         /**
  45          * @var WikiPage
  46          */
  47         private $wikipage;
  48
  49         /**
  50          * @var OutputPage
  51          */
  52         private $output;
  53
  54         /**
  55          * @var User
  56          */
  57         private $user;
  58
  59         /**
  60          * @var Language
  61          */
  62         private $lang;
  63
  64         /**
  65          * @var Skin
  66          */
  67         private $skin;
  68
  69         /**
  70          * @var Timing
  71          */
  72         private $timing;
  73
  74         /**
  75          * @var Config
  76          */
  77         private $config;
  78
  79         /**
  80          * @var RequestContext
  81          */
  82         private static $instance = null;
  83
  84         /**
  85          * Set the Config object
  86          *
  87          * @param Config $c
  88          */
  89         public function setConfig( Config $c ) {
  90                 $this->config = $c;
  91         }
  92
  93         /**
  94          * Get the Config object
  95          *
  96          * @return Config
  97          */
  98         public function getConfig() {
  99                 if ( $this->config === null ) {
 100                         // @todo In the future, we could move this to WebStart.php so
 101                         // the Config object is ready for when initialization happens
 102                         $this->config = MediaWikiServices::getInstance()->getMainConfig();
 103                 }
 104
 105                 return $this->config;
 106         }
 107
 108         /**
 109          * Set the WebRequest object
 110          *
 111          * @param WebRequest $r
 112          */
 113         public function setRequest( WebRequest $r ) {
 114                 $this->request = $r;
 115         }
 116
 117         /**
 118          * Get the WebRequest object
 119          *
 120          * @return WebRequest
 121          */
 122         public function getRequest() {
 123                 if ( $this->request === null ) {
 124                         global $wgCommandLineMode;
 125                         // create the WebRequest object on the fly
 126                         if ( $wgCommandLineMode ) {
 127                                 $this->request = new FauxRequest( [] );
 128                         } else {
 129                                 $this->request = new WebRequest();
 130                         }
 131                 }
 132
 133                 return $this->request;
 134         }
 135
 136         /**
 137          * Get the Stats object
 138          *
 139          * @deprecated since 1.27 use a StatsdDataFactory from MediaWikiServices (preferably injected)
 140          *
 141          * @return IBufferingStatsdDataFactory
 142          */
 143         public function getStats() {
 144                 return MediaWikiServices::getInstance()->getStatsdDataFactory();
 145         }
 146
 147         /**
 148          * Get the timing object
 149          *
 150          * @return Timing
 151          */
 152         public function getTiming() {
 153                 if ( $this->timing === null ) {
 154                         $this->timing = new Timing( [
 155                                 'logger' => LoggerFactory::getInstance( 'Timing' )
 156                         ] );
 157                 }
 158                 return $this->timing;
 159         }
 160
 161         /**
 162          * Set the Title object
 163          *
 164          * @param Title|null $title
 165          */
 166         public function setTitle( Title $title = null ) {
 167                 $this->title = $title;
 168                 // Erase the WikiPage so a new one with the new title gets created.
 169                 $this->wikipage = null;
 170         }
 171
 172         /**
 173          * Get the Title object
 174          *
 175          * @return Title|null
 176          */
 177         public function getTitle() {
 178                 if ( $this->title === null ) {
 179                         global $wgTitle; # fallback to $wg till we can improve this
 180                         $this->title = $wgTitle;
 181                         wfDebugLog(
 182                                 'GlobalTitleFail',
 183                                 __METHOD__ . ' called by ' . wfGetAllCallers( 5 ) . ' with no title set.'
 184                         );
 185                 }
 186
 187                 return $this->title;
 188         }
 189
 190         /**
 191          * Check, if a Title object is set
 192          *
 193          * @since 1.25
 194          * @return bool
 195          */
 196         public function hasTitle() {
 197                 return $this->title !== null;
 198         }
 199
 200         /**
 201          * Check whether a WikiPage object can be get with getWikiPage().
 202          * Callers should expect that an exception is thrown from getWikiPage()
 203          * if this method returns false.
 204          *
 205          * @since 1.19
 206          * @return bool
 207          */
 208         public function canUseWikiPage() {
 209                 if ( $this->wikipage ) {
 210                         // If there's a WikiPage object set, we can for sure get it
 211                         return true;
 212                 }
 213                 // Only pages with legitimate titles can have WikiPages.
 214                 // That usually means pages in non-virtual namespaces.
 215                 $title = $this->getTitle();
 216                 return $title ? $title->canExist() : false;
 217         }
 218
 219         /**
 220          * Set the WikiPage object
 221          *
 222          * @since 1.19
 223          * @param WikiPage $p
 224          */
 225         public function setWikiPage( WikiPage $p ) {
 226                 $pageTitle = $p->getTitle();
 227                 if ( !$this->hasTitle() || !$pageTitle->equals( $this->getTitle() ) ) {
 228                         $this->setTitle( $pageTitle );
 229                 }
 230                 // Defer this to the end since setTitle sets it to null.
 231                 $this->wikipage = $p;
 232         }
 233
 234         /**
 235          * Get the WikiPage object.
 236          * May throw an exception if there's no Title object set or the Title object
 237          * belongs to a special namespace that doesn't have WikiPage, so use first
 238          * canUseWikiPage() to check whether this method can be called safely.
 239          *
 240          * @since 1.19
 241          * @throws MWException
 242          * @return WikiPage
 243          */
 244         public function getWikiPage() {
 245                 if ( $this->wikipage === null ) {
 246                         $title = $this->getTitle();
 247                         if ( $title === null ) {
 248                                 throw new MWException( __METHOD__ . ' called without Title object set' );
 249                         }
 250                         $this->wikipage = WikiPage::factory( $title );
 251                 }
 252
 253                 return $this->wikipage;
 254         }
 255
 256         /**
 257          * @param OutputPage $o
 258          */
 259         public function setOutput( OutputPage $o ) {
 260                 $this->output = $o;
 261         }
 262
 263         /**
 264          * Get the OutputPage object
 265          *
 266          * @return OutputPage
 267          */
 268         public function getOutput() {
 269                 if ( $this->output === null ) {
 270                         $this->output = new OutputPage( $this );
 271                 }
 272
 273                 return $this->output;
 274         }
 275
 276         /**
 277          * Set the User object
 278          *
 279          * @param User $u
 280          */
 281         public function setUser( User $u ) {
 282                 $this->user = $u;
 283         }
 284
 285         /**
 286          * Get the User object
 287          *
 288          * @return User
 289          */
 290         public function getUser() {
 291                 if ( $this->user === null ) {
 292                         $this->user = User::newFromSession( $this->getRequest() );
 293                 }
 294
 295                 return $this->user;
 296         }
 297
 298         /**
 299          * Accepts a language code and ensures it's sane. Outputs a cleaned up language
 300          * code and replaces with $wgLanguageCode if not sane.
 301          * @param string $code Language code
 302          * @return string
 303          */
 304         public static function sanitizeLangCode( $code ) {
 305                 global $wgLanguageCode;
 306
 307                 // BCP 47 - letter case MUST NOT carry meaning
 308                 $code = strtolower( $code );
 309
 310                 # Validate $code
 311                 if ( !$code || !Language::isValidCode( $code ) || $code === 'qqq' ) {
 312                         wfDebug( "Invalid user language code\n" );
 313                         $code = $wgLanguageCode;
 314                 }
 315
 316                 return $code;
 317         }
 318
 319         /**
 320          * Set the Language object
 321          *
 322          * @param Language|string $l Language instance or language code
 323          * @throws MWException
 324          * @since 1.19
 325          */
 326         public function setLanguage( $l ) {
 327                 if ( $l instanceof Language ) {
 328                         $this->lang = $l;
 329                 } elseif ( is_string( $l ) ) {
 330                         $l = self::sanitizeLangCode( $l );
 331                         $obj = Language::factory( $l );
 332                         $this->lang = $obj;
 333                 } else {
 334                         throw new MWException( __METHOD__ . " was passed an invalid type of data." );
 335                 }
 336         }
 337
 338         /**
 339          * Get the Language object.
 340          * Initialization of user or request objects can depend on this.
 341          * @return Language
 342          * @throws Exception
 343          * @since 1.19
 344          */
 345         public function getLanguage() {
 346                 if ( isset( $this->recursion ) ) {
 347                         trigger_error( "Recursion detected in " . __METHOD__, E_USER_WARNING );
 348                         $e = new Exception;
 349                         wfDebugLog( 'recursion-guard', "Recursion detected:\n" . $e->getTraceAsString() );
 350
 351                         $code = $this->getConfig()->get( 'LanguageCode' ) ?: 'en';
 352                         $this->lang = Language::factory( $code );
 353                 } elseif ( $this->lang === null ) {
 354                         $this->recursion = true;
 355
 356                         global $wgContLang;
 357
 358                         try {
 359                                 $request = $this->getRequest();
 360                                 $user = $this->getUser();
 361
 362                                 $code = $request->getVal( 'uselang', 'user' );
 363                                 if ( $code === 'user' ) {
 364                                         $code = $user->getOption( 'language' );
 365                                 }
 366                                 $code = self::sanitizeLangCode( $code );
 367
 368                                 Hooks::run( 'UserGetLanguageObject', [ $user, &$code, $this ] );
 369
 370                                 if ( $code === $this->getConfig()->get( 'LanguageCode' ) ) {
 371                                         $this->lang = $wgContLang;
 372                                 } else {
 373                                         $obj = Language::factory( $code );
 374                                         $this->lang = $obj;
 375                                 }
 376
 377                                 unset( $this->recursion );
 378                         }
 379                         catch ( Exception $ex ) {
 380                                 unset( $this->recursion );
 381                                 throw $ex;
 382                         }
 383                 }
 384
 385                 return $this->lang;
 386         }
 387
 388         /**
 389          * Set the Skin object
 390          *
 391          * @param Skin $s
 392          */
 393         public function setSkin( Skin $s ) {
 394                 $this->skin = clone $s;
 395                 $this->skin->setContext( $this );
 396         }
 397
 398         /**
 399          * Get the Skin object
 400          *
 401          * @return Skin
 402          */
 403         public function getSkin() {
 404                 if ( $this->skin === null ) {
 405                         $skin = null;
 406                         Hooks::run( 'RequestContextCreateSkin', [ $this, &$skin ] );
 407                         $factory = SkinFactory::getDefaultInstance();
 408
 409                         // If the hook worked try to set a skin from it
 410                         if ( $skin instanceof Skin ) {
 411                                 $this->skin = $skin;
 412                         } elseif ( is_string( $skin ) ) {
 413                                 // Normalize the key, just in case the hook did something weird.
 414                                 $normalized = Skin::normalizeKey( $skin );
 415                                 $this->skin = $factory->makeSkin( $normalized );
 416                         }
 417
 418                         // If this is still null (the hook didn't run or didn't work)
 419                         // then go through the normal processing to load a skin
 420                         if ( $this->skin === null ) {
 421                                 if ( !in_array( 'skin', $this->getConfig()->get( 'HiddenPrefs' ) ) ) {
 422                                         # get the user skin
 423                                         $userSkin = $this->getUser()->getOption( 'skin' );
 424                                         $userSkin = $this->getRequest()->getVal( 'useskin', $userSkin );
 425                                 } else {
 426                                         # if we're not allowing users to override, then use the default
 427                                         $userSkin = $this->getConfig()->get( 'DefaultSkin' );
 428                                 }
 429
 430                                 // Normalize the key in case the user is passing gibberish
 431                                 // or has old preferences (T71566).
 432                                 $normalized = Skin::normalizeKey( $userSkin );
 433
 434                                 // Skin::normalizeKey will also validate it, so
 435                                 // this won't throw an exception
 436                                 $this->skin = $factory->makeSkin( $normalized );
 437                         }
 438
 439                         // After all that set a context on whatever skin got created
 440                         $this->skin->setContext( $this );
 441                 }
 442
 443                 return $this->skin;
 444         }
 445
 446         /** Helpful methods **/
 447
 448         /**
 449          * Get a Message object with context set
 450          * Parameters are the same as wfMessage()
 451          *
 452          * @param string|string[]|MessageSpecifier $key Message key, or array of keys,
 453          *   or a MessageSpecifier.
 454          * @param mixed ...
 455          * @return Message
 456          */
 457         public function msg( $key ) {
 458                 $args = func_get_args();
 459
 460                 return call_user_func_array( 'wfMessage', $args )->setContext( $this );
 461         }
 462
 463         /** Static methods **/
 464
 465         /**
 466          * Get the RequestContext object associated with the main request
 467          *
 468          * @return RequestContext
 469          */
 470         public static function getMain() {
 471                 if ( self::$instance === null ) {
 472                         self::$instance = new self;
 473                 }
 474
 475                 return self::$instance;
 476         }
 477
 478         /**
 479          * Get the RequestContext object associated with the main request
 480          * and gives a warning to the log, to find places, where a context maybe is missing.
 481          *
 482          * @param string $func
 483          * @return RequestContext
 484          * @since 1.24
 485          */
 486         public static function getMainAndWarn( $func = __METHOD__ ) {
 487                 wfDebug( $func . ' called without context. ' .
 488                         "Using RequestContext::getMain() for sanity\n" );
 489
 490                 return self::getMain();
 491         }
 492
 493         /**
 494          * Resets singleton returned by getMain(). Should be called only from unit tests.
 495          */
 496         public static function resetMain() {
 497                 if ( !( defined( 'MW_PHPUNIT_TEST' ) || defined( 'MW_PARSER_TEST' ) ) ) {
 498                         throw new MWException( __METHOD__ . '() should be called only from unit tests!' );
 499                 }
 500                 self::$instance = null;
 501         }
 502
 503         /**
 504          * Export the resolved user IP, HTTP headers, user ID, and session ID.
 505          * The result will be reasonably sized to allow for serialization.
 506          *
 507          * @return array
 508          * @since 1.21
 509          */
 510         public function exportSession() {
 511                 $session = MediaWiki\Session\SessionManager::getGlobalSession();
 512                 return [
 513                         'ip' => $this->getRequest()->getIP(),
 514                         'headers' => $this->getRequest()->getAllHeaders(),
 515                         'sessionId' => $session->isPersistent() ? $session->getId() : '',
 516                         'userId' => $this->getUser()->getId()
 517                 ];
 518         }
 519
 520         /**
 521          * Import an client IP address, HTTP headers, user ID, and session ID
 522          *
 523          * This sets the current session, $wgUser, and $wgRequest from $params.
 524          * Once the return value falls out of scope, the old context is restored.
 525          * This method should only be called in contexts where there is no session
 526          * ID or end user receiving the response (CLI or HTTP job runners). This
 527          * is partly enforced, and is done so to avoid leaking cookies if certain
 528          * error conditions arise.
 529          *
 530          * This is useful when background scripts inherit context when acting on
 531          * behalf of a user. In general the 'sessionId' parameter should be set
 532          * to an empty string unless session importing is *truly* needed. This
 533          * feature is somewhat deprecated.
 534          *
 535          * @note suhosin.session.encrypt may interfere with this method.
 536          *
 537          * @param array $params Result of RequestContext::exportSession()
 538          * @return ScopedCallback
 539          * @throws MWException
 540          * @since 1.21
 541          */
 542         public static function importScopedSession( array $params ) {
 543                 if ( strlen( $params['sessionId'] ) &&
 544                         MediaWiki\Session\SessionManager::getGlobalSession()->isPersistent()
 545                 ) {
 546                         // Sanity check to avoid sending random cookies for the wrong users.
 547                         // This method should only called by CLI scripts or by HTTP job runners.
 548                         throw new MWException( "Sessions can only be imported when none is active." );
 549                 } elseif ( !IP::isValid( $params['ip'] ) ) {
 550                         throw new MWException( "Invalid client IP address '{$params['ip']}'." );
 551                 }
 552
 553                 if ( $params['userId'] ) { // logged-in user
 554                         $user = User::newFromId( $params['userId'] );
 555                         $user->load();
 556                         if ( !$user->getId() ) {
 557                                 throw new MWException( "No user with ID '{$params['userId']}'." );
 558                         }
 559                 } else { // anon user
 560                         $user = User::newFromName( $params['ip'], false );
 561                 }
 562
 563                 $importSessionFunc = function ( User $user, array $params ) {
 564                         global $wgRequest, $wgUser;
 565
 566                         $context = RequestContext::getMain();
 567
 568                         // Commit and close any current session
 569                         if ( MediaWiki\Session\PHPSessionHandler::isEnabled() ) {
 570                                 session_write_close(); // persist
 571                                 session_id( '' ); // detach
 572                                 $_SESSION = []; // clear in-memory array
 573                         }
 574
 575                         // Get new session, if applicable
 576                         $session = null;
 577                         if ( strlen( $params['sessionId'] ) ) { // don't make a new random ID
 578                                 $manager = MediaWiki\Session\SessionManager::singleton();
 579                                 $session = $manager->getSessionById( $params['sessionId'], true )
 580                                         ?: $manager->getEmptySession();
 581                         }
 582
 583                         // Remove any user IP or agent information, and attach the request
 584                         // with the new session.
 585                         $context->setRequest( new FauxRequest( [], false, $session ) );
 586                         $wgRequest = $context->getRequest(); // b/c
 587
 588                         // Now that all private information is detached from the user, it should
 589                         // be safe to load the new user. If errors occur or an exception is thrown
 590                         // and caught (leaving the main context in a mixed state), there is no risk
 591                         // of the User object being attached to the wrong IP, headers, or session.
 592                         $context->setUser( $user );
 593                         $wgUser = $context->getUser(); // b/c
 594                         if ( $session && MediaWiki\Session\PHPSessionHandler::isEnabled() ) {
 595                                 session_id( $session->getId() );
 596                                 MediaWiki\quietCall( 'session_start' );
 597                         }
 598                         $request = new FauxRequest( [], false, $session );
 599                         $request->setIP( $params['ip'] );
 600                         foreach ( $params['headers'] as $name => $value ) {
 601                                 $request->setHeader( $name, $value );
 602                         }
 603                         // Set the current context to use the new WebRequest
 604                         $context->setRequest( $request );
 605                         $wgRequest = $context->getRequest(); // b/c
 606                 };
 607
 608                 // Stash the old session and load in the new one
 609                 $oUser = self::getMain()->getUser();
 610                 $oParams = self::getMain()->exportSession();
 611                 $oRequest = self::getMain()->getRequest();
 612                 $importSessionFunc( $user, $params );
 613
 614                 // Set callback to save and close the new session and reload the old one
 615                 return new ScopedCallback(
 616                         function () use ( $importSessionFunc, $oUser, $oParams, $oRequest ) {
 617                                 global $wgRequest;
 618                                 $importSessionFunc( $oUser, $oParams );
 619                                 // Restore the exact previous Request object (instead of leaving FauxRequest)
 620                                 RequestContext::getMain()->setRequest( $oRequest );
 621                                 $wgRequest = RequestContext::getMain()->getRequest(); // b/c
 622                         }
 623                 );
 624         }
 625
 626         /**
 627          * Create a new extraneous context. The context is filled with information
 628          * external to the current session.
 629          * - Title is specified by argument
 630          * - Request is a FauxRequest, or a FauxRequest can be specified by argument
 631          * - User is an anonymous user, for separation IPv4 localhost is used
 632          * - Language will be based on the anonymous user and request, may be content
 633          *   language or a uselang param in the fauxrequest data may change the lang
 634          * - Skin will be based on the anonymous user, should be the wiki's default skin
 635          *
 636          * @param Title $title Title to use for the extraneous request
 637          * @param WebRequest|array $request A WebRequest or data to use for a FauxRequest
 638          * @return RequestContext
 639          */
 640         public static function newExtraneousContext( Title $title, $request = [] ) {
 641                 $context = new self;
 642                 $context->setTitle( $title );
 643                 if ( $request instanceof WebRequest ) {
 644                         $context->setRequest( $request );
 645                 } else {
 646                         $context->setRequest( new FauxRequest( $request ) );
 647                 }
 648                 $context->user = User::newFromName( '127.0.0.1', false );
 649
 650                 return $context;
 651         }
 652 }