prosody-modules
e3248d025d34
mod_sasl2_sm/mod_sasl2_sm.lua

Find changesets by keywords by author, files, the commit message, revision number or hash, or revset expression.

Software / code / prosody-modules

Comparison

mod_sasl2_sm/mod_sasl2_sm.lua @ 5026:e3248d025d34

mod_sasl2_sm: Experimental mod_isr alternative
author Matthew Wild <mwild1@gmail.com>
date Mon, 29 Aug 2022 17:12:16 +0100
child 5027:8b9ab351dd78
comparison
equal deleted inserted replaced
5025:fd154db7c8fc 5026:e3248d025d34
1 local st = require "util.stanza";
2
3 local mod_smacks = module:depends("smacks");
4
5 local xmlns_sasl2 = "urn:xmpp:sasl:1";
6 local xmlns_sm = "urn:xmpp:sm:3";
7
8 module:hook("stream-features", function (event)
9 if event.origin.type ~= "c2s_unauthed" then return; end
10 local features = event.features;
11 local inline = features:get_child("inline", xmlns_sasl2);
12 if not inline then
13 inline = st.stanza("inline", { xmlns = xmlns_sasl2 });
14 features:add_child(inline);
15 end
16 inline:tag("sm", { xmlns = xmlns_sm }):up();
17 end);
18
19 module:hook_tag(xmlns_sasl2, "authenticate", function (session, auth)
20 -- Cache action for future processing (after auth success)
21 session.sasl2_sm_action = auth:get_child_with_namespace(xmlns_sm);
22 end, 100);
23
24 module:hook("sasl2/c2s/success", function (event)
25 local session = event.session;
26 local sm_action = session.sasl2_sm_action;
27 if not sm_action then return; end
28 session.sasl2_sm_action = nil;
29 local sm_result;
30 if sm_action.name == "resume" then
31 local resumed, err = mod_smacks.do_resume(session, sm_action);
32 if not resumed then
33 local h = err.context and err.context.h;
34 sm_result = st.stanza("failed", { xmlns = xmlns_sm, h = h and ("%d"):format(h) or nil })
35 :add_error(err);
36 else
37 event.session = resumed.session; -- Update to resumed session
38 event.sasl2_sm_finish = resumed.finish; -- To be called after sending final SASL response
39 sm_result = st.stanza("resumed", { xmlns = xmlns_sm,
40 h = ("%d"):format(event.session.handled_stanza_count);
41 previd = resumed.id; });
42 end
43 elseif sm_action.name == "enable" then
44 local enabled, err = mod_smacks.do_enable(session, sm_action);
45 if not enabled then
46 sm_result = st.stanza("failed", { xmlns = xmlns_sm })
47 :add_error(err);
48 else
49 event.sasl2_sm_finish = enabled.finish; -- To be called after sending final SASL response
50 sm_result = st.stanze("enabled", {
51 xmlns = xmlns_sm;
52 id = enabled.id;
53 resume = enabled.id and "1" or nil;
54 max = enabled.resume_max;
55 });
56 end
57 end
58 if sm_result then
59 event.success:add_child(sm_result);
60 end
61 end, 100);
62
63 module:hook("sasl2/c2s/success", function (event)
64 -- The authenticate response has already been sent at this point
65 local finish = event.sasl2_sm_finish;
66 if finish then
67 finish(); -- Finish resume and sync stanzas
68 end
69 end, -1100);
70
71 module:hook("sasl2/c2s/failure", function (event)
72 event.session.sasl2_sm_action = nil;
73 end);
74