Merge branch 'feature/empty-jwt-warning' into develop

Author: LinneyS

CHANGELOG.md

@@ -9,6 +9,7 @@ This plugin is developed and maintained at https://github.com/ONLYOFFICE/onlyoff
 - editor URL generation for documents with viewable extensions
 - plugin description and useful links in admin settings
 - hide a JWT secret from display
+- show warning popup when jwt secret is empty
 
 ## 1.5.0
 ## Added

lang/english.php

@@ -45,3 +45,5 @@
 $strings['UserVoiceDescription'] = 'Collaborate on documents, spreadsheets, presentations, and forms within the Chamilo structure using ONLYOFFICE Docs.';
 $strings['LearnMore'] = 'Learn more';
 $strings['SuggestFeature'] = 'Suggest a feature';
+$strings['EmptyJwtWarning'] = 'To ensure the security of important parameters in ONLYOFFICE Docs requests, please set a Secret Key on the Settings page.
+To learn more, <a target="_blank" style="text-decoration:underline;" href="https://api.onlyoffice.com/docs/docs-api/get-started/how-it-works/security/">click here</a>.';

lib/onlyofficeSettingsFormBuilder.php

@@ -113,6 +113,9 @@ public static function validateSettingsForm(OnlyofficeAppsettings $settingsManag
                 if (!empty($error)) {
                     $errorMsg = $plugin->get_lang('connectionError').'('.$error.')'.(!empty($version) ? '(Version '.$version.')' : '');
                     self::displayError($errorMsg);
+                } else if (empty($settingsManager->getJwtKey())) {
+                    $message = Display::return_message($plugin->get_lang('EmptyJwtWarning'), 'warning', false);
+                    Display::addFlash($message);
                 }
             }
         }