User:Justarandomamerican/globalUserLock.js: Difference between revisions

  * Usage: Add to your common.js or Special:MyPage/common.js

  *  mw.loader.load('https://your-wiki/path/to/globalUserLock.js');

  *  - centralauth (lock accounts)

  *  - checktoken / tokens           (CSRF)

  * Author: AI

  * License: Public domain

const TOOL_ID      = 'global-user-lock-tool';

const TOOL_TITLE   = 'Global User Lock Tool';

// ── Styles ─────────────────────────────────────────────────────────────────

mw.util.addCSS( `

#${ TOOL_ID } {

font-family: inherit;

margin: 1.5em auto;

border: 1px solid #a2a9b1;

background: #f8f9fa;

#${ TOOL_ID } .gul-header {

background: #36c;

color: #fff;

padding: 10px 16px;

display: flex;

align-items: center;

gap: 8px;

#${ TOOL_ID } .gul-header svg {

#${ TOOL_ID } .gul-status.error  { background: #fee7e6; border: 1px solid #d73333; display: block; }

#${ TOOL_ID } .gul-results-table tr:nth-child(even) td { background: #f8f9fa; }

#${ TOOL_ID } .badge-locked  { background: #d5fdf4; color: #14866d; }

` );

// ── Build UI ───────────────────────────────────────────────────────────────

function buildUI() {

const $container = $( '<div>' ).attr( 'id', TOOL_ID );

// Header

$container.append( `

<div class="gul-header">

<svg width="18" height="18" viewBox="0 0 20 20" fill="currentColor">

<path d="M10 2a4 4 0 0 1 4 4v1h1a2 2 0 0 1 2 2v7a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V9a2 2 0 0 1 2-2h1V6a4 4 0 0 1 4-4zm0 9a1.5 1.5 0 1 0 0 3 1.5 1.5 0 0 0 0-3zm0-7a2 2 0 0 0-2 2v1h4V6a2 2 0 0 0-2-2z"/>

</svg>

${ TOOL_TITLE }

</div>

// ── Search fieldset

<label style="margin-top:10px;" for="gul-from">

Start from username (optional, for pagination):

</label>

<input type="text" id="gul-from" placeholder="Leave blank to start from beginning" autocomplete="off" />

// ── Lock options fieldset

<textarea id="gul-reason" rows="2" placeholder="e.g. Cross-wiki spam; username policy violation"></textarea>

<label for="gul-hide" style="margin:0;">Hide username (sets <code>hidden</code> flag — requires suppressor right)</label>

<label for="gul-suppress" style="margin:0;">Suppress username (sets <code>suppressed</code> flag — requires suppressor right)</label>

<label for="gul-skip-locked" style="margin:0;">Skip accounts already globally locked</label>

// ── Actions

const $actions = $( '<div>' ).addClass( 'gul-actions' );

const $btnSearch = $( '<button>' ).addClass( 'gul-primary' ).attr( 'id', 'gul-btn-search' ).text( '🔍 Search Accounts' );

const $btnLock  = $( '<button>' ).addClass( 'gul-danger' ).attr( 'id', 'gul-btn-lock' ).text( '🔒 Lock Selected' ).prop( 'disabled', true );

const $btnClear  = $( '<button>' ).attr( 'id', 'gul-btn-clear' ).text( 'Clear' );

$actions.append( $btnSearch, $btnLock, $btnClear );

$body.append( $actions );

// Status

const $status = $( '<div>' ).addClass( 'gul-status' ).attr( 'id', 'gul-status' );

$body.append( $status );

// Progress bar

const $progress = $( '<div>' ).addClass( 'gul-progress' ).attr( 'id', 'gul-progress' );

$progress.append( $( '<div>' ).addClass( 'gul-progress-bar' ).attr( 'id', 'gul-progress-bar' ) );

$body.append( $progress );

// Results

const $resultsWrap = $( '<div>' ).addClass( 'gul-results-wrap' ).attr( 'id', 'gul-results-wrap' );

$container.append( $body );

return $container;

// ── Helpers ────────────────────────────────────────────────────────────────

const $s = $( '#gul-status' );

$s.removeClass( 'info success error warning' ).addClass( type ).html( msg );

$( '#gul-status' ).removeClass( 'info success error warning' ).hide().html( '' );

const $cell = $( `#gul-row-${ CSS.escape( username ) } .gul-status-cell` );

$cell.html( `<span class="badge badge-${ type }">${ text }</span>` );

const pct = total > 0 ? Math.round( ( done / total ) * 100 ) : 0;

url: API_ENDPOINT,

data: {

action: 'query',

meta:   'tokens',

type:   'csrf',

format: 'json'

}

* Fetch all global users whose name contains `query`.

* Uses globalallusers with a "from" trick:  we search from `aufrom`

* and filter client-side since the API doesn't support substring

* search — we iterate until names no longer contain the substring

* fetching batches and filtering.

*

* Note: The CentralAuth API exposes `list=globalallusers` which

* supports `agufrom` and `aguto` but not substring; we therefore

* page through results and filter locally.

* @return {jQuery.Promise<Array>}

const deferred = $.Deferred();

const results   = [];

const queryLc   = query.toLowerCase();

let  continueToken = fromUser || undefined;

let  done      = false;

let  page     = 0;

if ( done || results.length >= MAX_ACCOUNTS ) {

action:   'query',

list:     'globalallusers',

agulimit: '500',

aguprop:   'lockinfo|registration',

format:   'json'

if ( continueToken ) {

params.agufrom = continueToken;

`Searched ${ page * 500 } usernames, found ${ results.length } match(es) so far…`,

if ( data.continue && data.continue.agufrom ) {

continueToken = data.continue.agufrom;

const params = {

 

const stateStr = Object.entries( states )

.map( ( [ k, v ] ) => `${ k }=${ v }` )

data:   params

const $wrap = $( '#gul-results-wrap' );

$wrap.empty();

$wrap.append( '<p><em>No matching accounts found.</em></p>' );

$wrap.addClass( 'visible' );

// Select-all row

const $selRow = $( '<div>' ).addClass( 'gul-select-all-row' );

const $selAll = $( '<input type="checkbox" id="gul-select-all">' ).prop( 'checked', true );

$selAll,

$( '<label>' ).attr( 'for', 'gul-select-all' ).css( 'margin', '0' ).text( 'Select / deselect all' ),

$( '<span>' ).addClass( 'gul-count' ).text( `${ users.length } account(s) found` )

const $row     = $( '<tr>' ).attr( 'id', rowId );

 

.val( u.name )

.prop( 'checked', true );

$( '<td>' ).append( $cb ),

$( '<td>' ).text( u.name ),

$( '<td style="text-align:center;">' ).html(

? '<span class="badge badge-locked">Locked</span>'

: '<span class="badge badge-pending">Active</span>'

.html( '<span class="badge badge-pending">Pending</span>' )

$table.append( $tbody );

$wrap.append( $table );

$wrap.addClass( 'visible' );

 

$( '#gul-select-all' ).on( 'change', function () {

$( '.gul-user-cb' ).prop( 'checked', this.checked );

} );

// ── Main logic ─────────────────────────────────────────────────────────────

$( '#gul-btn-lock' ).prop( 'disabled', true );

$( '#gul-results-wrap' ).removeClass( 'visible' ).empty();

$( '#gul-progress' ).removeClass( 'visible' );

`Found <strong>${ users.length }</strong> account(s) matching "<strong>${ mw.html.escape( query ) }</strong>".` +

( users.length >= MAX_ACCOUNTS ? ` (Results capped at ${ MAX_ACCOUNTS }.)` : '' ),

setStatus( `No accounts found matching "${ mw.html.escape( query ) }".`, 'warning' );

setStatus( 'Search failed: ' + mw.html.escape( err ), 'error' );

const reason   = $( '#gul-reason' ).val().trim();

const hide     = $( '#gul-hide' ).prop( 'checked' );

const suppress = $( '#gul-suppress' ).prop( 'checked' );

$( '.gul-user-cb:checked' ).each( function () {

selected.push( $( this ).val() );

} );

`You are about to globally lock ${ selected.length } account(s).\n\n` +

`Reason: ${ reason }\n` +

) ) {

return;

}

setStatus( `Locking ${ selected.length } account(s)…`, 'info' );

let done   = 0;

let locked = 0;

let skipped = 0;

let failed = 0;

function processNext( index ) {

if ( index >= selected.length ) {

`Done. <strong>${ locked }</strong> locked, ` +

`<strong>${ skipped }</strong> skipped, ` +

`<strong>${ failed }</strong> failed.`,

 

// Add summary row

const $existing = $( '#gul-lock-summary' );

if ( $existing.length ) $existing.remove();

$( '<div>' ).attr( 'id', 'gul-lock-summary' ).addClass( 'gul-summary' ).html(

`<strong>Summary:</strong> ${ locked } locked · ${ skipped } skipped · ${ failed } failed`

const username = selected[ index ];

const $row    = $( `#gul-row-${ CSS.escape( username ) }` );

const isLocked = $row.find( 'td:nth-child(4)' ).text().trim() === 'Locked';

if ( skipLocked && isLocked ) {

skipped++;

done++;

processNext( index + 1 );

if ( data.centralauth && data.centralauth.status === 'ok' ) {

} else if ( data.error ) {

setBadge( username, 'failed', 'Error: ' + mw.html.escape( data.error.info || data.error.code ) );

setStatus(

`Processing ${ done } / ${ selected.length }…`,

'info'

);

// Small delay to be polite to the API

setTimeout( function () {

processNext( index + 1 );

}, 300 );

setStatus( 'Failed to obtain CSRF token. Are you logged in with sufficient rights?', 'error' );