ApiTokens.php

Go to the documentation of this file.

<?php
class ApiTokens extends ApiBase {

        public function execute() {
                $params = $this->extractRequestParams();
                $res = array();

                $types = $this->getTokenTypes();
                foreach ( $params['type'] as $type ) {
                        $val = call_user_func( $types[$type], null, null );

                        if ( $val === false ) {
                                $this->setWarning( "Action '$type' is not allowed for the current user" );
                        } else {
                                $res[$type . 'token'] = $val;
                        }
                }

                $this->getResult()->addValue( null, $this->getModuleName(), $res );
        }

        private function getTokenTypes() {
                // If we're in JSON callback mode, no tokens can be obtained
                if ( !is_null( $this->getMain()->getRequest()->getVal( 'callback' ) ) ) {
                        return array();
                }

                static $types = null;
                if ( $types ) {
                        return $types;
                }
                wfProfileIn( __METHOD__ );
                $types = array( 'patrol' => array( 'ApiQueryRecentChanges', 'getPatrolToken' ) );
                $names = array( 'edit', 'delete', 'protect', 'move', 'block', 'unblock',
                        'email', 'import', 'watch', 'options' );
                foreach ( $names as $name ) {
                        $types[$name] = array( 'ApiQueryInfo', 'get' . ucfirst( $name ) . 'Token' );
                }
                wfRunHooks( 'ApiTokensGetTokenTypes', array( &$types ) );
                ksort( $types );
                wfProfileOut( __METHOD__ );
                return $types;
        }

        public function getAllowedParams() {
                return array(
                        'type' => array(
                                ApiBase::PARAM_DFLT => 'edit',
                                ApiBase::PARAM_ISMULTI => true,
                                ApiBase::PARAM_TYPE => array_keys( $this->getTokenTypes() ),
                        ),
                );
        }

        public function getResultProperties() {
                $props = array(
                        '' => array(),
                );

                self::addTokenProperties( $props, $this->getTokenTypes() );

                return $props;
        }

        public function getParamDescription() {
                return array(
                        'type' => 'Type of token(s) to request'
                );
        }

        public function getDescription() {
                return 'Gets tokens for data-modifying actions';
        }

        protected function getExamples() {
                return array(
                        'api.php?action=tokens' => 'Retrieve an edit token (the default)',
                        'api.php?action=tokens&type=email|move' => 'Retrieve an email token and a move token'
                );
        }
}