1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
|
<?php
/**
* Matomo - free/libre analytics platform
*
* @link https://matomo.org
* @license https://www.gnu.org/licenses/gpl-3.0.html GPL v3 or later
*/
namespace Piwik\Plugins\TwoFactorAuth;
use Piwik\Common;
use Piwik\Exception\NotYetInstalledException;
use Piwik\Piwik;
use Piwik\Session\SessionFingerprint;
use Exception;
use Piwik\SettingsPiwik;
class Validator
{
/**
* @var TwoFactorAuthentication
*/
private $twoFa;
public function __construct(TwoFactorAuthentication $twoFactorAuthentication)
{
$this->twoFa = $twoFactorAuthentication;
}
public function canUseTwoFa()
{
if (Common::isPhpCliMode() && (!defined('PIWIK_TEST_MODE') || !PIWIK_TEST_MODE)) {
// eg when archiving or executing other commands
return false;
}
if (!SettingsPiwik::isMatomoInstalled()) {
return false;
}
return !Piwik::isUserIsAnonymous();
}
public function checkCanUseTwoFa()
{
Piwik::checkUserIsNotAnonymous();
if (!SettingsPiwik::isMatomoInstalled()) {
throw new NotYetInstalledException('Matomo is not set up yet');
}
}
public function check2FaIsRequired()
{
if (!$this->twoFa->isUserRequiredToHaveTwoFactorEnabled()) {
throw new Exception('not available');
}
}
public function check2FaEnabled()
{
if (!TwoFactorAuthentication::isUserUsingTwoFactorAuthentication(Piwik::getCurrentUserLogin())) {
throw new Exception('not available');
}
}
public function check2FaNotEnabled()
{
if (TwoFactorAuthentication::isUserUsingTwoFactorAuthentication(Piwik::getCurrentUserLogin())) {
throw new Exception('not available');
}
}
public function checkVerified2FA()
{
$sessionFingerprint = $this->getSessionFingerPrint();
if (!$sessionFingerprint->hasVerifiedTwoFactor()) {
throw new Exception('not available');
}
}
public function checkNotVerified2FAYet()
{
$sessionFingerprint = $this->getSessionFingerPrint();
if ($sessionFingerprint->hasVerifiedTwoFactor()) {
throw new Exception('not available');
}
}
private function getSessionFingerPrint()
{
return new SessionFingerprint();
}
}
|
