mirror of
https://github.com/WordPress/WordPress.git
synced 2026-06-19 07:37:07 +00:00
Weston Ruter
964bcaf172
Developed in https://github.com/WordPress/wordpress-develop/pull/10703 Follow-up to [61464], [61463], [61457], [61456], [61455], [61454], [61453], [61445], [61444], [61443], [61442], [61436], [61435], [61434], [61403], [61433], [61432], [61431], [61430], [61429], [61424], [61404], [61403]. Props soean, westonruter, mukesh27. See #58874. Fixes #64488. Built from https://develop.svn.wordpress.org/trunk@61470 git-svn-id: http://core.svn.wordpress.org/trunk@60782 1a063a9b-81f0-0310-95a4-ce76da25c4cd
131 lines
2.9 KiB
PHP
131 lines
2.9 KiB
PHP
<?php
|
|
/**
|
|
* Session API: WP_User_Meta_Session_Tokens class
|
|
*
|
|
* @package WordPress
|
|
* @subpackage Session
|
|
* @since 4.7.0
|
|
*/
|
|
|
|
/**
|
|
* Meta-based user sessions token manager.
|
|
*
|
|
* @since 4.0.0
|
|
*
|
|
* @see WP_Session_Tokens
|
|
*/
|
|
class WP_User_Meta_Session_Tokens extends WP_Session_Tokens {
|
|
|
|
/**
|
|
* Retrieves all sessions of the user.
|
|
*
|
|
* @since 4.0.0
|
|
*
|
|
* @return array Sessions of the user.
|
|
*/
|
|
protected function get_sessions() {
|
|
$sessions = get_user_meta( $this->user_id, 'session_tokens', true );
|
|
|
|
if ( ! is_array( $sessions ) ) {
|
|
return array();
|
|
}
|
|
|
|
$sessions = array_map( array( $this, 'prepare_session' ), $sessions );
|
|
return array_filter( $sessions, array( $this, 'is_still_valid' ) );
|
|
}
|
|
|
|
/**
|
|
* Converts an expiration to an array of session information.
|
|
*
|
|
* @since 4.0.0
|
|
*
|
|
* @param mixed $session Session or expiration.
|
|
* @return array Session.
|
|
*/
|
|
protected function prepare_session( $session ) {
|
|
if ( is_int( $session ) ) {
|
|
return array( 'expiration' => $session );
|
|
}
|
|
|
|
return $session;
|
|
}
|
|
|
|
/**
|
|
* Retrieves a session based on its verifier (token hash).
|
|
*
|
|
* @since 4.0.0
|
|
*
|
|
* @param string $verifier Verifier for the session to retrieve.
|
|
* @return array|null The session, or null if it does not exist
|
|
*/
|
|
protected function get_session( $verifier ) {
|
|
$sessions = $this->get_sessions();
|
|
return $sessions[ $verifier ] ?? null;
|
|
}
|
|
|
|
/**
|
|
* Updates a session based on its verifier (token hash).
|
|
*
|
|
* @since 4.0.0
|
|
*
|
|
* @param string $verifier Verifier for the session to update.
|
|
* @param array $session Optional. Session. Omitting this argument destroys the session.
|
|
*/
|
|
protected function update_session( $verifier, $session = null ) {
|
|
$sessions = $this->get_sessions();
|
|
|
|
if ( $session ) {
|
|
$sessions[ $verifier ] = $session;
|
|
} else {
|
|
unset( $sessions[ $verifier ] );
|
|
}
|
|
|
|
$this->update_sessions( $sessions );
|
|
}
|
|
|
|
/**
|
|
* Updates the user's sessions in the usermeta table.
|
|
*
|
|
* @since 4.0.0
|
|
*
|
|
* @param array $sessions Sessions.
|
|
*/
|
|
protected function update_sessions( $sessions ) {
|
|
if ( $sessions ) {
|
|
update_user_meta( $this->user_id, 'session_tokens', $sessions );
|
|
} else {
|
|
delete_user_meta( $this->user_id, 'session_tokens' );
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Destroys all sessions for this user, except the single session with the given verifier.
|
|
*
|
|
* @since 4.0.0
|
|
*
|
|
* @param string $verifier Verifier of the session to keep.
|
|
*/
|
|
protected function destroy_other_sessions( $verifier ) {
|
|
$session = $this->get_session( $verifier );
|
|
$this->update_sessions( array( $verifier => $session ) );
|
|
}
|
|
|
|
/**
|
|
* Destroys all session tokens for the user.
|
|
*
|
|
* @since 4.0.0
|
|
*/
|
|
protected function destroy_all_sessions() {
|
|
$this->update_sessions( array() );
|
|
}
|
|
|
|
/**
|
|
* Destroys all sessions for all users.
|
|
*
|
|
* @since 4.0.0
|
|
*/
|
|
public static function drop_sessions() {
|
|
delete_metadata( 'user', 0, 'session_tokens', false, true );
|
|
}
|
|
}
|