|
137
|
1
|
|
|
2 local st = require "util.stanza";
|
|
|
3 local jid_bare = require "util.jid".bare;
|
|
|
4
|
|
|
5 -- advertise disco features
|
|
|
6 module:add_feature("urn:xmpp:sift:1");
|
|
|
7
|
|
|
8 -- supported features
|
|
|
9 module:add_feature("urn:xmpp:sift:stanzas:iq");
|
|
|
10 module:add_feature("urn:xmpp:sift:stanzas:message");
|
|
|
11 module:add_feature("urn:xmpp:sift:stanzas:presence");
|
|
|
12 module:add_feature("urn:xmpp:sift:recipients:all");
|
|
|
13 module:add_feature("urn:xmpp:sift:senders:all");
|
|
|
14
|
|
|
15 -- allowed values of 'sender' and 'recipient' attributes
|
|
|
16 local senders = {
|
|
|
17 ["all"] = true;
|
|
|
18 ["local"] = true;
|
|
|
19 ["others"] = true;
|
|
|
20 ["remote"] = true;
|
|
|
21 ["self"] = true;
|
|
|
22 };
|
|
|
23 local recipients = {
|
|
|
24 ["all"] = true;
|
|
|
25 ["bare"] = true;
|
|
|
26 ["full"] = true;
|
|
|
27 };
|
|
|
28
|
|
|
29 -- this function converts a <message/>, <presence/> or <iq/> element in
|
|
|
30 -- the SIFT namespace into a hashtable, for easy lookup
|
|
|
31 local function to_hashtable(element)
|
|
|
32 if element ~= nil then
|
|
|
33 local hash = {};
|
|
|
34 -- make sure the sender and recipient attributes has a valid value
|
|
|
35 hash.sender = element.attr.sender or "all";
|
|
|
36 if not senders[hash.sender] then return false; end -- bad value, returning false
|
|
|
37 hash.recipient = element.attr.recipient or "all";
|
|
|
38 if not recipients[hash.recipient] then return false; end -- bad value, returning false
|
|
|
39 -- next we loop over all <allow/> elements
|
|
|
40 for _, tag in ipairs(element) do
|
|
|
41 if tag.name == "allow" and tag.attr.xmlns == "urn:xmpp:sift:1" then
|
|
|
42 -- make sure the element is valid
|
|
|
43 if not tag.attr.name or not tag.attr.ns then return false; end -- missing required attributes, returning false
|
|
|
44 hash[tag.attr.ns.."|"..tag.attr.name] = true;
|
|
|
45 hash.allowed = true; -- just a flag indicating we have some elements allowed
|
|
|
46 end
|
|
|
47 end
|
|
|
48 return hash;
|
|
|
49 end
|
|
|
50 end
|
|
|
51
|
|
|
52 local data = {}; -- table with all our data
|
|
|
53
|
|
|
54 -- handle SIFT set
|
|
|
55 module:hook("iq/self/urn:xmpp:sift:1:sift", function(event)
|
|
|
56 local origin, stanza = event.origin, event.stanza;
|
|
|
57 if stanza.attr.type == "set" then
|
|
|
58 local sifttag = stanza.tags[1]; -- <sift/>
|
|
|
59
|
|
|
60 -- first, get the elements we are interested in
|
|
|
61 local message = sifttag:get_child("message");
|
|
|
62 local presence = sifttag:get_child("presence");
|
|
|
63 local iq = sifttag:get_child("iq");
|
|
|
64
|
|
|
65 -- for quick lookup, convert the elements into hashtables
|
|
|
66 message = to_hashtable(message);
|
|
|
67 presence = to_hashtable(presence);
|
|
|
68 iq = to_hashtable(iq);
|
|
|
69
|
|
|
70 -- make sure elements were valid
|
|
|
71 if message == false or presence == false or iq == false then
|
|
|
72 origin.send(st.error_reply(stanza, "modify", "bad-request"));
|
|
|
73 return true;
|
|
|
74 end
|
|
|
75
|
|
|
76 local existing = data[origin.full_jid] or {}; -- get existing data, if any
|
|
|
77 data[origin.full_jid] = { presence = presence, message = message, iq = iq }; -- store new data
|
|
|
78
|
|
|
79 origin.send(st.reply(stanza)); -- send back IQ result
|
|
|
80
|
|
|
81 if not existing.presence and not origin.presence and presence then
|
|
|
82 -- TODO send probes
|
|
|
83 end
|
|
|
84 return true;
|
|
|
85 end
|
|
|
86 end);
|
|
|
87
|
|
|
88 -- handle user disconnect
|
|
|
89 module:hook("resource-unbind", function(event)
|
|
|
90 data[event.origin.full_jid] = nil; -- discard data
|
|
|
91 end);
|
|
|
92
|
|
|
93 -- IQ handler
|
|
|
94 module:hook("iq/full", function(event)
|
|
|
95 local origin, stanza = event.origin, event.stanza;
|
|
|
96 local siftdata = data[stanza.attr.to];
|
|
|
97 if siftdata and siftdata.iq then -- we seem to have an IQ filter
|
|
|
98 local tag = stanza.tags[1]; -- the IQ child
|
|
|
99 if not siftdata.iq[tag.attr.xmlns.."|"..tag.name] then
|
|
|
100 -- element not allowed; sending back generic error
|
|
|
101 origin.send(st.error_reply(stanza, "cancel", "service-unavailable"));
|
|
|
102 return true;
|
|
|
103 end
|
|
|
104 end
|
|
|
105 end, 50);
|
|
|
106
|
|
|
107 -- Message to full JID handler
|
|
|
108 module:hook("message/full", function(event)
|
|
|
109 local origin, stanza = event.origin, event.stanza;
|
|
|
110 local siftdata = data[stanza.attr.to];
|
|
|
111 if siftdata and siftdata.message then -- we seem to have an message filter
|
|
|
112 local allowed = false;
|
|
|
113 for _, childtag in ipairs(stanza.tags) do
|
|
|
114 if siftdata.message[(childtag.attr.xmlns or "jabber:client").."|"..childtag.name] then
|
|
|
115 allowed = true;
|
|
|
116 end
|
|
|
117 end
|
|
|
118 if not allowed then
|
|
|
119 -- element not allowed; sending back generic error
|
|
|
120 origin.send(st.error_reply(stanza, "cancel", "service-unavailable"));
|
|
|
121 -- FIXME maybe send to offline storage
|
|
|
122 return true;
|
|
|
123 end
|
|
|
124 end
|
|
|
125 end, 50);
|
|
|
126
|
|
|
127 -- Message to bare JID handler
|
|
|
128 module:hook("message/bare", function(event)
|
|
|
129 local origin, stanza = event.origin, event.stanza;
|
|
|
130 local user = bare_sessions[jid_bare(stanza.attr.to)];
|
|
|
131 local allowed = false;
|
|
|
132 for _, session in pairs(user or {}) do
|
|
|
133 local siftdata = data[session.full_jid];
|
|
|
134 if siftdata and siftdata.message then -- we seem to have an message filter
|
|
|
135 for _, childtag in ipairs(stanza.tags) do
|
|
|
136 if siftdata.message[(childtag.attr.xmlns or "jabber:client").."|"..childtag.name] then
|
|
|
137 allowed = true;
|
|
|
138 end
|
|
|
139 end
|
|
|
140 end
|
|
|
141 end
|
|
|
142 if not allowed then
|
|
|
143 -- element not allowed; sending back generic error
|
|
|
144 origin.send(st.error_reply(stanza, "cancel", "service-unavailable"));
|
|
|
145 -- FIXME maybe send to offline storage
|
|
|
146 return true;
|
|
|
147 end
|
|
|
148 end, 50);
|
|
|
149
|
|
|
150 -- Presence to full JID handler
|
|
|
151 module:hook("presence/full", function(event)
|
|
|
152 local origin, stanza = event.origin, event.stanza;
|
|
|
153 local siftdata = data[stanza.attr.to];
|
|
|
154 if siftdata and siftdata.presence then -- we seem to have an presence filter
|
|
|
155 local allowed = false;
|
|
|
156 for _, childtag in ipairs(stanza.tags) do
|
|
|
157 if siftdata.presence[(childtag.attr.xmlns or "jabber:client").."|"..childtag.name] then
|
|
|
158 allowed = true;
|
|
|
159 end
|
|
|
160 end
|
|
|
161 if not allowed then
|
|
|
162 -- element not allowed; sending back generic error
|
|
|
163 --origin.send(st.error_reply(stanza, "cancel", "service-unavailable"));
|
|
|
164 return true;
|
|
|
165 end
|
|
|
166 end
|
|
|
167 end, 50);
|
|
|
168
|
|
|
169 -- Presence to bare JID handler
|
|
|
170 module:hook("presence/bare", function(event)
|
|
|
171 local origin, stanza = event.origin, event.stanza;
|
|
|
172 local user = bare_sessions[jid_bare(stanza.attr.to)];
|
|
|
173 local allowed = false;
|
|
|
174 for _, session in pairs(user or {}) do
|
|
|
175 local siftdata = data[session.full_jid];
|
|
|
176 if siftdata and siftdata.presence then -- we seem to have an presence filter
|
|
|
177 for _, childtag in ipairs(stanza.tags) do
|
|
|
178 if siftdata.presence[(childtag.attr.xmlns or "jabber:client").."|"..childtag.name] then
|
|
|
179 allowed = true;
|
|
|
180 end
|
|
|
181 end
|
|
|
182 end
|
|
|
183 end
|
|
|
184 if not allowed then
|
|
|
185 -- element not allowed; sending back generic error
|
|
|
186 --origin.send(st.error_reply(stanza, "cancel", "service-unavailable"));
|
|
|
187 return true;
|
|
|
188 end
|
|
|
189 end, 50);
|
