class-duouniversal-utilities.php

<?php
/**
 * Utility functions
 *
 * Provides a number of commonly-used utility functions for used
 * throughout the plugin.
 *
 * @link https://duo.com/docs/wordpress
 *
 * @package Duo Universal
 * @since 1.0.0
 */

namespace Duo\DuoUniversalWordpress;

if ( ! defined( 'ABSPATH' ) ) {
	exit; // Exit if accessed directly.
}

class DuoUniversal_Utilities {

	function xmlrpc_enabled() {
		return defined( 'XMLRPC_REQUEST' ) && XMLRPC_REQUEST;
	}

	function duo_get_roles() {
		global $wp_roles;
		// $wp_roles may not be initially set if WordPress < 3.3
		$roles = isset( $wp_roles ) ? $wp_roles : \WP_Roles();
		return $roles;
	}

	function duo_auth_enabled() {
		if ( $this->xmlrpc_enabled() ) {
			$this->duo_debug_log( 'Found an XMLRPC request. XMLRPC is allowed for this site. Skipping second factor' );
			return false; // allows the XML-RPC protocol for remote publishing.
		}

		if ( $this->duo_get_option( 'duoup_client_id', '' ) === '' || $this->duo_get_option( 'duoup_client_secret', '' ) === ''
			|| $this->duo_get_option( 'duoup_api_host', '' ) === ''
		) {
			return false;
		}
		return true;
	}

	function duo_role_require_mfa( $user ) {
		$wp_roles  = $this->duo_get_roles();
		$all_roles = array();
		foreach ( $wp_roles->get_names() as $k => $r ) {
			$all_roles[ $k ] = $r;
		}

		$duoup_roles = $this->duo_get_option( 'duoup_roles', $all_roles );

		/*
		 * WordPress < 3.3 does not include the roles by default
		 * Create a User object to get roles info
		 * Don't use get_user_by()
		 */
		if ( empty( $user->roles ) ) {
			$user = $this->new_WP_User( 0, $user->user_login );
		}

		/*
		 * Mainly a workaround for multisite login:
		 * if a user logs in to a site different from the one
		 * they are a member of, login will work however
		 * it appears as if the user has no roles during authentication
		 * "fail closed" in this case and require duo auth
		 */
		if ( empty( $user->roles ) ) {
			return true;
		}

		foreach ( $user->roles as $role ) {
			if ( array_key_exists( $role, $duoup_roles ) ) {
				return true;
			}
		}
		return false;
	}

	function duo_get_uri() {
		return \sanitize_url( \wp_unslash( $_SERVER['REQUEST_URI'] ) );
	}

	function duo_get_option( $key, $default_value = '' ) {
		if ( \is_multisite() ) {
			return \get_site_option( $key, $default_value );
		} else {
			return \get_option( $key, $default_value );
		}
	}

	function duo_debug_log( $message ) {
		if ( defined('WP_DEBUG') && true == WP_DEBUG ) {
			error_log( 'Duo debug: ' . $message );
		}
	}

	function new_WP_User( $id, $name = '', $site_id = '' ) {
		return new \WP_User( $id, $name, $site_id );
	}

	function new_WP_Error( $code, $message = '', $data = '' ) {
		return new \WP_Error( $code, $message, $data );
	}
}