/extensions/AjaxLogin/ApiAjaxLogin.php

<?php
/**
 * API module for AjaxLogin extension
 *
 * @file
 * @ingroup API
 * @author Inez Korczyński <korczynski@gmail.com>
 */

if ( !defined( 'MEDIAWIKI' ) ) {
	die( "This is not a valid entry point.\n" );
}

class ApiAjaxLogin extends ApiBase {
	public function __construct( $main, $action ) {
		parent::__construct( $main, $action, 'wp' );
	}

	public function execute() {
		wfSetupSession();
		$Name = $Password = $Remember = $Loginattempt = $Mailmypassword = $Token = null;
		extract( $this->extractRequestParams() );

		if ( !empty( $Loginattempt ) ) {
			// Login attempt
			$params = new FauxRequest(
				array(
					'wpName' => $Name,
					'wpPassword' => $Password,
					'wpRemember' => $Remember,
					'wpLoginattempt' => $Loginattempt,
					'wpLoginToken' => $Token,
				)
			);

			$result = array();
			$loginForm = new LoginForm( $params );
			switch( $loginForm->authenticateUserData() ) {
				case LoginForm::RESET_PASS:
					$result['result'] = 'Reset';
					break;
				case LoginForm::SUCCESS:
					global $wgUser, $wgCookiePrefix;

					$wgUser->setOption( 'rememberpassword', $Remember ? 1 : 0 );
					$wgUser->setCookies();

					$result['result'] = 'Success';
					$result['lguserid'] = intval( $wgUser->getId() );
					$result['lgusername'] = $wgUser->getName();
					$result['lgtoken'] = $wgUser->getToken();
					$result['cookieprefix'] = $wgCookiePrefix;
					$result['sessionid'] = session_id();
					break;
				case LoginForm::NEED_TOKEN:
					$result['result'] = 'NeedToken';
					$result['token'] = $loginForm->getLoginToken();
					$result['cookieprefix'] = $wgCookiePrefix;
					$result['sessionid'] = session_id();
					break;
				case LoginForm::WRONG_TOKEN:
					$result['result'] = 'WrongToken';
					break;
				case LoginForm::NO_NAME:
					$result['result'] = 'NoName';
					$result['text'] = wfMsg( 'noname' );
					break;
				case LoginForm::ILLEGAL:
					$result['result'] = 'Illegal';
					$result['text'] = wfMsg( 'noname' );
					break;
				case LoginForm::WRONG_PLUGIN_PASS:
					$result['result'] = 'WrongPluginPass';
					$result['text'] = wfMsg( 'wrongpassword' );
					break;
				case LoginForm::NOT_EXISTS:
					$result['result'] = 'NotExists';
					$result['text'] = wfMsg( 'al-nosuchuser', htmlspecialchars( $Name ) );
					break;
				case LoginForm::RESET_PASS:
				case LoginForm::WRONG_PASS:
					$result['result'] = 'WrongPass';
					$result['text'] = wfMsg( 'wrongpassword' );
					break;
				case LoginForm::EMPTY_PASS:
					$result['result'] = 'EmptyPass';
					$result['text'] = wfMsg( 'wrongpasswordempty' );
					break;
				case LoginForm::CREATE_BLOCKED:
					$result['result'] = 'CreateBlocked';
					$result['text'] = wfMsg( 'al-createblocked' );
					break;
				case LoginForm::THROTTLED:
					global $wgPasswordAttemptThrottle, $wgLang;
					$result['result'] = 'Throttled';
					$result['text'] = wfMsgExt( 'al-throttled', 'parsemag', $wgLang->formatNum( intval( $wgPasswordAttemptThrottle['seconds'] ) ) );
					break;
				case LoginForm::USER_BLOCKED:
					$result['result'] = 'Blocked';
					break;
				default:
					ApiBase::dieDebug( __METHOD__, 'Unhandled case value' );
			}
			$dbw = wfGetDB( DB_MASTER );
			$dbw->commit();

			$this->getResult()->addValue( null, 'ajaxlogin', $result );
		} elseif ( !empty( $Mailmypassword ) ) {
			// Remind password attempt
			$params = new FauxRequest(
				array(
					'wpName' => $Name
				)
			);
			$result = array();
			$loginForm = new LoginForm( $params );
			global $wgUser, $wgAuth;
			if ( !$wgAuth->allowPasswordChange() ) {
				$result['result'] = 'resetpass_forbidden';
				$result['text'] = wfMsg( 'resetpass_forbidden' );
			} elseif ( $wgUser->isBlocked() ) {
				$result['result'] = 'blocked-mailpassword';
				$result['text'] = wfMsg( 'blocked-mailpassword' );
			} elseif ( '' == $loginForm->mName ) {
				$result['result'] = 'noname';
				$result['text'] = wfMsg( 'noname' );
			} else {
				$u = User::newFromName( $loginForm->mName );
				if ( is_null( $u ) ) {
					$result['result'] = 'noname';
					$result['text'] = wfMsg( 'noname' );
				} elseif ( 0 == $u->getID() ) {
					$result['result'] = 'nosuchuser';
					$result['text'] = wfMsg( 'al-nosuchuser', $u->getName() );
				} elseif ( $u->isPasswordReminderThrottled() ) {
					global $wgPasswordReminderResendTime;
					$result['result'] = 'throttled-mailpassword';
					$result['text'] = wfMsg( 'throttled-mailpassword', round( $wgPasswordReminderResendTime, 3 ) );
				} else {
					$res = $loginForm->mailPasswordInternal( $u, true );
					if ( WikiError::isError( $res ) ) {
						$result['result'] = 'mailerror';
						$result['text'] = wfMsg( 'mailerror', $res->getMessage() );
					} else {
						$result['result'] = 'OK';
						$result['text'] = wfMsg( 'passwordsent', $u->getName() );
					}
				}
			}
			$dbw = wfGetDB( DB_MASTER );
			$dbw->commit();

			$this->getResult()->addValue( null, 'ajaxlogin', $result );
		}
	}

	public function getAllowedParams() {
		return array(
			'Name' => null,
			'Password' => null,
			'Remember' => null,
			'Loginattempt' => null,
			'Mailmypassword' => null,
			'Token' => null
		);
	}

	public function getVersion() {
		return __CLASS__ . ': $Id$';
	}
}