prosody
48121960983e
util/sasl.lua

Find changesets by keywords by author, files, the commit message, revision number or hash, or revset expression.

Software / code / prosody

Annotate

util/sasl.lua @ 12472:48121960983e

mod_s2s: Recognise and report errors with CA or intermediate certs Should be invoked for cases such as when the Let's Encrypt intermediate certificate expired not too long ago.
author Kim Alvefur <zash@zash.se>
date Mon, 25 Apr 2022 14:36:56 +0200
parent 12387:05c250fa335a
child 12911:ab1164eda011
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
896
2c0b9e3c11c3 0.3->0.4
Matthew Wild <mwild1@gmail.com>
parents: 801
diff changeset
1 -- sasl.lua v0.4
2923
b7049746bd29 Update copyright headers for 2010
Matthew Wild <mwild1@gmail.com>
parents: 2873
diff changeset
2 -- Copyright (C) 2008-2010 Tobias Markmann
1585
edc066730d11 Switch to using a more generic credentials_callback/handler for SASL auth.
nick@lupine.me.uk
parents: 1518
diff changeset
3 --
519
cccd610a0ef9 Insert copyright/license headers
Matthew Wild <mwild1@gmail.com>
parents: 508
diff changeset
4 -- All rights reserved.
1585
edc066730d11 Switch to using a more generic credentials_callback/handler for SASL auth.
nick@lupine.me.uk
parents: 1518
diff changeset
5 --
519
cccd610a0ef9 Insert copyright/license headers
Matthew Wild <mwild1@gmail.com>
parents: 508
diff changeset
6 -- Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
1585
edc066730d11 Switch to using a more generic credentials_callback/handler for SASL auth.
nick@lupine.me.uk
parents: 1518
diff changeset
7 --
519
cccd610a0ef9 Insert copyright/license headers
Matthew Wild <mwild1@gmail.com>
parents: 508
diff changeset
8 -- * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
cccd610a0ef9 Insert copyright/license headers
Matthew Wild <mwild1@gmail.com>
parents: 508
diff changeset
9 -- * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
cccd610a0ef9 Insert copyright/license headers
Matthew Wild <mwild1@gmail.com>
parents: 508
diff changeset
10 -- * Neither the name of Tobias Markmann nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
1585
edc066730d11 Switch to using a more generic credentials_callback/handler for SASL auth.
nick@lupine.me.uk
parents: 1518
diff changeset
11 --
519
cccd610a0ef9 Insert copyright/license headers
Matthew Wild <mwild1@gmail.com>
parents: 508
diff changeset
12 -- THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
cccd610a0ef9 Insert copyright/license headers
Matthew Wild <mwild1@gmail.com>
parents: 508
diff changeset
13
15
c0d754774db2 adding SASL lib with PLAIN support, not tested yet
Tobias Markmann <tm@ayena.de>
parents:
diff changeset
14
2176
aaf2b2df61f7 Mostly making the code run; includes fixing typos and so on.
Tobias Markmann <tm@ayena.de>
parents: 2175
diff changeset
15 local pairs, ipairs = pairs, ipairs;
3441
d4f89802cf1e util.sasl, util.sasl_cyrus: Removed a ton of unused variables.
Waqas Hussain <waqas20@gmail.com>
parents: 3427
diff changeset
16 local t_insert = table.insert;
276
30893439d5d1 Some early attempts on DIGEST-MD5.
Tobias Markmann <tm@ayena.de>
parents: 50
diff changeset
17 local type = type
2175
3ca8755581a1 Initial commit of the SASL redesign.
Tobias Markmann <tm@ayena.de>
parents: 1585
diff changeset
18 local setmetatable = setmetatable;
3ca8755581a1 Initial commit of the SASL redesign.
Tobias Markmann <tm@ayena.de>
parents: 1585
diff changeset
19 local assert = assert;
2187
f0a85d11823e Getting PLAIN mechanism work with the new API.
Tobias Markmann <tm@ayena.de>
parents: 2186
diff changeset
20 local require = require;
276
30893439d5d1 Some early attempts on DIGEST-MD5.
Tobias Markmann <tm@ayena.de>
parents: 50
diff changeset
21
6777
5de6b93d0190 util.*: Remove use of module() function, make all module functions local and return them in a table at the end
Kim Alvefur <zash@zash.se>
parents: 6036
diff changeset
22 local _ENV = nil;
8555
4f0f5b49bb03 vairious: Add annotation when an empty environment is set [luacheck]
Kim Alvefur <zash@zash.se>
parents: 8382
diff changeset
23 -- luacheck: std none
38
Matthew Wild <mwild1@gmail.com>
parents: 32
diff changeset
24
2177
8505e1da5408 Adding some docu.
Tobias Markmann <tm@ayena.de>
parents: 2176
diff changeset
25 --[[
8505e1da5408 Adding some docu.
Tobias Markmann <tm@ayena.de>
parents: 2176
diff changeset
26 Authentication Backend Prototypes:
1585
edc066730d11 Switch to using a more generic credentials_callback/handler for SASL auth.
nick@lupine.me.uk
parents: 1518
diff changeset
27
2188
1fd38975addd Add support for plain profile in digest-md5 implementation.
Tobias Markmann <tm@ayena.de>
parents: 2187
diff changeset
28 state = false : disabled
1fd38975addd Add support for plain profile in digest-md5 implementation.
Tobias Markmann <tm@ayena.de>
parents: 2187
diff changeset
29 state = true : enabled
11727
f3aee8a825cc Fix various spelling errors (thanks codespell)
Kim Alvefur <zash@zash.se>
parents: 10723
diff changeset
30 state = nil : non-existent
5829
40c16475194e Check whether we support the proposed channel binding type.
Tobias Markmann <tm@ayena.de>
parents: 3550
diff changeset
31
40c16475194e Check whether we support the proposed channel binding type.
Tobias Markmann <tm@ayena.de>
parents: 3550
diff changeset
32 Channel Binding:
40c16475194e Check whether we support the proposed channel binding type.
Tobias Markmann <tm@ayena.de>
parents: 3550
diff changeset
33
40c16475194e Check whether we support the proposed channel binding type.
Tobias Markmann <tm@ayena.de>
parents: 3550
diff changeset
34 To enable support of channel binding in some mechanisms you need to provide appropriate callbacks in a table
40c16475194e Check whether we support the proposed channel binding type.
Tobias Markmann <tm@ayena.de>
parents: 3550
diff changeset
35 at profile.cb.
40c16475194e Check whether we support the proposed channel binding type.
Tobias Markmann <tm@ayena.de>
parents: 3550
diff changeset
36
40c16475194e Check whether we support the proposed channel binding type.
Tobias Markmann <tm@ayena.de>
parents: 3550
diff changeset
37 Example:
40c16475194e Check whether we support the proposed channel binding type.
Tobias Markmann <tm@ayena.de>
parents: 3550
diff changeset
38 profile.cb["tls-unique"] = function(self)
40c16475194e Check whether we support the proposed channel binding type.
Tobias Markmann <tm@ayena.de>
parents: 3550
diff changeset
39 return self.user
40c16475194e Check whether we support the proposed channel binding type.
Tobias Markmann <tm@ayena.de>
parents: 3550
diff changeset
40 end
40c16475194e Check whether we support the proposed channel binding type.
Tobias Markmann <tm@ayena.de>
parents: 3550
diff changeset
41
2177
8505e1da5408 Adding some docu.
Tobias Markmann <tm@ayena.de>
parents: 2176
diff changeset
42 ]]
1585
edc066730d11 Switch to using a more generic credentials_callback/handler for SASL auth.
nick@lupine.me.uk
parents: 1518
diff changeset
43
2176
aaf2b2df61f7 Mostly making the code run; includes fixing typos and so on.
Tobias Markmann <tm@ayena.de>
parents: 2175
diff changeset
44 local method = {};
aaf2b2df61f7 Mostly making the code run; includes fixing typos and so on.
Tobias Markmann <tm@ayena.de>
parents: 2175
diff changeset
45 method.__index = method;
8382
e5d00bf4a4d5 util: Various minor changes to please [luacheck]
Kim Alvefur <zash@zash.se>
parents: 6777
diff changeset
46 local registered_mechanisms = {};
2175
3ca8755581a1 Initial commit of the SASL redesign.
Tobias Markmann <tm@ayena.de>
parents: 1585
diff changeset
47 local backend_mechanism = {};
5841
1b0c7e7c6be8 Only advertise mechanisms needing channel binding if a channel binding backend is avaliable.
Tobias Markmann <tm@ayena.de>
parents: 5831
diff changeset
48 local mechanism_channelbindings = {};
1585
edc066730d11 Switch to using a more generic credentials_callback/handler for SASL auth.
nick@lupine.me.uk
parents: 1518
diff changeset
49
12387
05c250fa335a Spelling: Fix various spelling mistakes (thanks timeless)
Kim Alvefur <zash@zash.se>
parents: 11727
diff changeset
50 -- register a new SASL mechanisms
6777
5de6b93d0190 util.*: Remove use of module() function, make all module functions local and return them in a table at the end
Kim Alvefur <zash@zash.se>
parents: 6036
diff changeset
51 local function registerMechanism(name, backends, f, cb_backends)
2175
3ca8755581a1 Initial commit of the SASL redesign.
Tobias Markmann <tm@ayena.de>
parents: 1585
diff changeset
52 assert(type(name) == "string", "Parameter name MUST be a string.");
3ca8755581a1 Initial commit of the SASL redesign.
Tobias Markmann <tm@ayena.de>
parents: 1585
diff changeset
53 assert(type(backends) == "string" or type(backends) == "table", "Parameter backends MUST be either a string or a table.");
3ca8755581a1 Initial commit of the SASL redesign.
Tobias Markmann <tm@ayena.de>
parents: 1585
diff changeset
54 assert(type(f) == "function", "Parameter f MUST be a function.");
5841
1b0c7e7c6be8 Only advertise mechanisms needing channel binding if a channel binding backend is avaliable.
Tobias Markmann <tm@ayena.de>
parents: 5831
diff changeset
55 if cb_backends then assert(type(cb_backends) == "table"); end
8382
e5d00bf4a4d5 util: Various minor changes to please [luacheck]
Kim Alvefur <zash@zash.se>
parents: 6777
diff changeset
56 registered_mechanisms[name] = f
5841
1b0c7e7c6be8 Only advertise mechanisms needing channel binding if a channel binding backend is avaliable.
Tobias Markmann <tm@ayena.de>
parents: 5831
diff changeset
57 if cb_backends then
1b0c7e7c6be8 Only advertise mechanisms needing channel binding if a channel binding backend is avaliable.
Tobias Markmann <tm@ayena.de>
parents: 5831
diff changeset
58 mechanism_channelbindings[name] = {};
1b0c7e7c6be8 Only advertise mechanisms needing channel binding if a channel binding backend is avaliable.
Tobias Markmann <tm@ayena.de>
parents: 5831
diff changeset
59 for _, cb_name in ipairs(cb_backends) do
1b0c7e7c6be8 Only advertise mechanisms needing channel binding if a channel binding backend is avaliable.
Tobias Markmann <tm@ayena.de>
parents: 5831
diff changeset
60 mechanism_channelbindings[name][cb_name] = true;
1b0c7e7c6be8 Only advertise mechanisms needing channel binding if a channel binding backend is avaliable.
Tobias Markmann <tm@ayena.de>
parents: 5831
diff changeset
61 end
1b0c7e7c6be8 Only advertise mechanisms needing channel binding if a channel binding backend is avaliable.
Tobias Markmann <tm@ayena.de>
parents: 5831
diff changeset
62 end
2176
aaf2b2df61f7 Mostly making the code run; includes fixing typos and so on.
Tobias Markmann <tm@ayena.de>
parents: 2175
diff changeset
63 for _, backend_name in ipairs(backends) do
aaf2b2df61f7 Mostly making the code run; includes fixing typos and so on.
Tobias Markmann <tm@ayena.de>
parents: 2175
diff changeset
64 if backend_mechanism[backend_name] == nil then backend_mechanism[backend_name] = {}; end
aaf2b2df61f7 Mostly making the code run; includes fixing typos and so on.
Tobias Markmann <tm@ayena.de>
parents: 2175
diff changeset
65 t_insert(backend_mechanism[backend_name], name);
aaf2b2df61f7 Mostly making the code run; includes fixing typos and so on.
Tobias Markmann <tm@ayena.de>
parents: 2175
diff changeset
66 end
15
c0d754774db2 adding SASL lib with PLAIN support, not tested yet
Tobias Markmann <tm@ayena.de>
parents:
diff changeset
67 end
1585
edc066730d11 Switch to using a more generic credentials_callback/handler for SASL auth.
nick@lupine.me.uk
parents: 1518
diff changeset
68
2175
3ca8755581a1 Initial commit of the SASL redesign.
Tobias Markmann <tm@ayena.de>
parents: 1585
diff changeset
69 -- create a new SASL object which can be used to authenticate clients
6777
5de6b93d0190 util.*: Remove use of module() function, make all module functions local and return them in a table at the end
Kim Alvefur <zash@zash.se>
parents: 6036
diff changeset
70 local function new(realm, profile)
3986
671a660b20f9 util.sasl: Cache the calculated mechanisms set for SASL profiles (profile.mechanisms table).
Waqas Hussain <waqas20@gmail.com>
parents: 3550
diff changeset
71 local mechanisms = profile.mechanisms;
671a660b20f9 util.sasl: Cache the calculated mechanisms set for SASL profiles (profile.mechanisms table).
Waqas Hussain <waqas20@gmail.com>
parents: 3550
diff changeset
72 if not mechanisms then
671a660b20f9 util.sasl: Cache the calculated mechanisms set for SASL profiles (profile.mechanisms table).
Waqas Hussain <waqas20@gmail.com>
parents: 3550
diff changeset
73 mechanisms = {};
8382
e5d00bf4a4d5 util: Various minor changes to please [luacheck]
Kim Alvefur <zash@zash.se>
parents: 6777
diff changeset
74 for backend in pairs(profile) do
3986
671a660b20f9 util.sasl: Cache the calculated mechanisms set for SASL profiles (profile.mechanisms table).
Waqas Hussain <waqas20@gmail.com>
parents: 3550
diff changeset
75 if backend_mechanism[backend] then
671a660b20f9 util.sasl: Cache the calculated mechanisms set for SASL profiles (profile.mechanisms table).
Waqas Hussain <waqas20@gmail.com>
parents: 3550
diff changeset
76 for _, mechanism in ipairs(backend_mechanism[backend]) do
671a660b20f9 util.sasl: Cache the calculated mechanisms set for SASL profiles (profile.mechanisms table).
Waqas Hussain <waqas20@gmail.com>
parents: 3550
diff changeset
77 mechanisms[mechanism] = true;
671a660b20f9 util.sasl: Cache the calculated mechanisms set for SASL profiles (profile.mechanisms table).
Waqas Hussain <waqas20@gmail.com>
parents: 3550
diff changeset
78 end
3549
395d5bb5266e util.sasl, util.sasl_cyrus: Load mechanisms list early rather than lazily, as they are always loaded anyway.
Waqas Hussain <waqas20@gmail.com>
parents: 3442
diff changeset
79 end
395d5bb5266e util.sasl, util.sasl_cyrus: Load mechanisms list early rather than lazily, as they are always loaded anyway.
Waqas Hussain <waqas20@gmail.com>
parents: 3442
diff changeset
80 end
3986
671a660b20f9 util.sasl: Cache the calculated mechanisms set for SASL profiles (profile.mechanisms table).
Waqas Hussain <waqas20@gmail.com>
parents: 3550
diff changeset
81 profile.mechanisms = mechanisms;
3549
395d5bb5266e util.sasl, util.sasl_cyrus: Load mechanisms list early rather than lazily, as they are always loaded anyway.
Waqas Hussain <waqas20@gmail.com>
parents: 3442
diff changeset
82 end
395d5bb5266e util.sasl, util.sasl_cyrus: Load mechanisms list early rather than lazily, as they are always loaded anyway.
Waqas Hussain <waqas20@gmail.com>
parents: 3442
diff changeset
83 return setmetatable({ profile = profile, realm = realm, mechs = mechanisms }, method);
2201
49e4838f9755 Enable restriction of supported mechanisms in the SASL library.
Tobias Markmann <tm@ayena.de>
parents: 2198
diff changeset
84 end
1585
edc066730d11 Switch to using a more generic credentials_callback/handler for SASL auth.
nick@lupine.me.uk
parents: 1518
diff changeset
85
5831
aa4bdabd3c0f util.sasl: New method to add channel binding handler to a SASL instance.
Tobias Markmann <tm@ayena.de>
parents: 5829
diff changeset
86 -- add a channel binding handler
aa4bdabd3c0f util.sasl: New method to add channel binding handler to a SASL instance.
Tobias Markmann <tm@ayena.de>
parents: 5829
diff changeset
87 function method:add_cb_handler(name, f)
aa4bdabd3c0f util.sasl: New method to add channel binding handler to a SASL instance.
Tobias Markmann <tm@ayena.de>
parents: 5829
diff changeset
88 if type(self.profile.cb) ~= "table" then
aa4bdabd3c0f util.sasl: New method to add channel binding handler to a SASL instance.
Tobias Markmann <tm@ayena.de>
parents: 5829
diff changeset
89 self.profile.cb = {};
aa4bdabd3c0f util.sasl: New method to add channel binding handler to a SASL instance.
Tobias Markmann <tm@ayena.de>
parents: 5829
diff changeset
90 end
aa4bdabd3c0f util.sasl: New method to add channel binding handler to a SASL instance.
Tobias Markmann <tm@ayena.de>
parents: 5829
diff changeset
91 self.profile.cb[name] = f;
aa4bdabd3c0f util.sasl: New method to add channel binding handler to a SASL instance.
Tobias Markmann <tm@ayena.de>
parents: 5829
diff changeset
92 return self;
aa4bdabd3c0f util.sasl: New method to add channel binding handler to a SASL instance.
Tobias Markmann <tm@ayena.de>
parents: 5829
diff changeset
93 end
aa4bdabd3c0f util.sasl: New method to add channel binding handler to a SASL instance.
Tobias Markmann <tm@ayena.de>
parents: 5829
diff changeset
94
3427
046a8cf304dd util.sasl: Removed method:forbidden() and its side effects.
Waqas Hussain <waqas20@gmail.com>
parents: 3373
diff changeset
95 -- get a fresh clone with the same realm and profile
2241
ac3bd7c42c8b util.sasl: Adding clean_clone() method.
Tobias Markmann <tm@ayena.de>
parents: 2212
diff changeset
96 function method:clean_clone()
3427
046a8cf304dd util.sasl: Removed method:forbidden() and its side effects.
Waqas Hussain <waqas20@gmail.com>
parents: 3373
diff changeset
97 return new(self.realm, self.profile)
276
30893439d5d1 Some early attempts on DIGEST-MD5.
Tobias Markmann <tm@ayena.de>
parents: 50
diff changeset
98 end
30893439d5d1 Some early attempts on DIGEST-MD5.
Tobias Markmann <tm@ayena.de>
parents: 50
diff changeset
99
12387
05c250fa335a Spelling: Fix various spelling mistakes (thanks timeless)
Kim Alvefur <zash@zash.se>
parents: 11727
diff changeset
100 -- get a list of possible SASL mechanisms to use
2175
3ca8755581a1 Initial commit of the SASL redesign.
Tobias Markmann <tm@ayena.de>
parents: 1585
diff changeset
101 function method:mechanisms()
5841
1b0c7e7c6be8 Only advertise mechanisms needing channel binding if a channel binding backend is avaliable.
Tobias Markmann <tm@ayena.de>
parents: 5831
diff changeset
102 local current_mechs = {};
1b0c7e7c6be8 Only advertise mechanisms needing channel binding if a channel binding backend is avaliable.
Tobias Markmann <tm@ayena.de>
parents: 5831
diff changeset
103 for mech, _ in pairs(self.mechs) do
6036
f9e108f7db21 util.sasl: Fix logic for when mechanisms with channel binding support are offered
Kim Alvefur <zash@zash.se>
parents: 5863
diff changeset
104 if mechanism_channelbindings[mech] then
f9e108f7db21 util.sasl: Fix logic for when mechanisms with channel binding support are offered
Kim Alvefur <zash@zash.se>
parents: 5863
diff changeset
105 if self.profile.cb then
f9e108f7db21 util.sasl: Fix logic for when mechanisms with channel binding support are offered
Kim Alvefur <zash@zash.se>
parents: 5863
diff changeset
106 local ok = false;
f9e108f7db21 util.sasl: Fix logic for when mechanisms with channel binding support are offered
Kim Alvefur <zash@zash.se>
parents: 5863
diff changeset
107 for cb_name, _ in pairs(self.profile.cb) do
f9e108f7db21 util.sasl: Fix logic for when mechanisms with channel binding support are offered
Kim Alvefur <zash@zash.se>
parents: 5863
diff changeset
108 if mechanism_channelbindings[mech][cb_name] then
f9e108f7db21 util.sasl: Fix logic for when mechanisms with channel binding support are offered
Kim Alvefur <zash@zash.se>
parents: 5863
diff changeset
109 ok = true;
f9e108f7db21 util.sasl: Fix logic for when mechanisms with channel binding support are offered
Kim Alvefur <zash@zash.se>
parents: 5863
diff changeset
110 end
5841
1b0c7e7c6be8 Only advertise mechanisms needing channel binding if a channel binding backend is avaliable.
Tobias Markmann <tm@ayena.de>
parents: 5831
diff changeset
111 end
6036
f9e108f7db21 util.sasl: Fix logic for when mechanisms with channel binding support are offered
Kim Alvefur <zash@zash.se>
parents: 5863
diff changeset
112 if ok == true then current_mechs[mech] = true; end
5841
1b0c7e7c6be8 Only advertise mechanisms needing channel binding if a channel binding backend is avaliable.
Tobias Markmann <tm@ayena.de>
parents: 5831
diff changeset
113 end
1b0c7e7c6be8 Only advertise mechanisms needing channel binding if a channel binding backend is avaliable.
Tobias Markmann <tm@ayena.de>
parents: 5831
diff changeset
114 else
1b0c7e7c6be8 Only advertise mechanisms needing channel binding if a channel binding backend is avaliable.
Tobias Markmann <tm@ayena.de>
parents: 5831
diff changeset
115 current_mechs[mech] = true;
1b0c7e7c6be8 Only advertise mechanisms needing channel binding if a channel binding backend is avaliable.
Tobias Markmann <tm@ayena.de>
parents: 5831
diff changeset
116 end
1b0c7e7c6be8 Only advertise mechanisms needing channel binding if a channel binding backend is avaliable.
Tobias Markmann <tm@ayena.de>
parents: 5831
diff changeset
117 end
1b0c7e7c6be8 Only advertise mechanisms needing channel binding if a channel binding backend is avaliable.
Tobias Markmann <tm@ayena.de>
parents: 5831
diff changeset
118 return current_mechs;
276
30893439d5d1 Some early attempts on DIGEST-MD5.
Tobias Markmann <tm@ayena.de>
parents: 50
diff changeset
119 end
30893439d5d1 Some early attempts on DIGEST-MD5.
Tobias Markmann <tm@ayena.de>
parents: 50
diff changeset
120
2175
3ca8755581a1 Initial commit of the SASL redesign.
Tobias Markmann <tm@ayena.de>
parents: 1585
diff changeset
121 -- select a mechanism to use
2176
aaf2b2df61f7 Mostly making the code run; includes fixing typos and so on.
Tobias Markmann <tm@ayena.de>
parents: 2175
diff changeset
122 function method:select(mechanism)
3550
5e5d136d9de0 util.sasl, util.sasl_cyrus: Mechanism selection cleaned up to be more consistent.
Waqas Hussain <waqas20@gmail.com>
parents: 3549
diff changeset
123 if not self.selected and self.mechs[mechanism] then
5e5d136d9de0 util.sasl, util.sasl_cyrus: Mechanism selection cleaned up to be more consistent.
Waqas Hussain <waqas20@gmail.com>
parents: 3549
diff changeset
124 self.selected = mechanism;
5e5d136d9de0 util.sasl, util.sasl_cyrus: Mechanism selection cleaned up to be more consistent.
Waqas Hussain <waqas20@gmail.com>
parents: 3549
diff changeset
125 return true;
2185
e92339c48ee6 Fail if mechanism has already been selected.
Tobias Markmann <tm@ayena.de>
parents: 2184
diff changeset
126 end
799
b7ea802f3527 Adding inital support for ANONYMOUS mechanism in SASL.
Tobias Markmann <tm@ayena.de>
parents: 760
diff changeset
127 end
b7ea802f3527 Adding inital support for ANONYMOUS mechanism in SASL.
Tobias Markmann <tm@ayena.de>
parents: 760
diff changeset
128
2176
aaf2b2df61f7 Mostly making the code run; includes fixing typos and so on.
Tobias Markmann <tm@ayena.de>
parents: 2175
diff changeset
129 -- feed new messages to process into the library
aaf2b2df61f7 Mostly making the code run; includes fixing typos and so on.
Tobias Markmann <tm@ayena.de>
parents: 2175
diff changeset
130 function method:process(message)
2188
1fd38975addd Add support for plain profile in digest-md5 implementation.
Tobias Markmann <tm@ayena.de>
parents: 2187
diff changeset
131 --if message == "" or message == nil then return "failure", "malformed-request" end
8382
e5d00bf4a4d5 util: Various minor changes to please [luacheck]
Kim Alvefur <zash@zash.se>
parents: 6777
diff changeset
132 return registered_mechanisms[self.selected](self, message);
15
c0d754774db2 adding SASL lib with PLAIN support, not tested yet
Tobias Markmann <tm@ayena.de>
parents:
diff changeset
133 end
799
b7ea802f3527 Adding inital support for ANONYMOUS mechanism in SASL.
Tobias Markmann <tm@ayena.de>
parents: 760
diff changeset
134
2186
1112871916eb Move each mechanism in an own file.
Tobias Markmann <tm@ayena.de>
parents: 2185
diff changeset
135 -- load the mechanisms
3442
8cfacc41099e util.sasl: Simplified some code a bit.
Waqas Hussain <waqas20@gmail.com>
parents: 3441
diff changeset
136 require "util.sasl.plain" .init(registerMechanism);
8cfacc41099e util.sasl: Simplified some code a bit.
Waqas Hussain <waqas20@gmail.com>
parents: 3441
diff changeset
137 require "util.sasl.anonymous" .init(registerMechanism);
8cfacc41099e util.sasl: Simplified some code a bit.
Waqas Hussain <waqas20@gmail.com>
parents: 3441
diff changeset
138 require "util.sasl.scram" .init(registerMechanism);
5687
e879b53e9df8 util.sasl.external: Add SASL EXTERNAL mechanism
Kim Alvefur <zash@zash.se>
parents: 4933
diff changeset
139 require "util.sasl.external" .init(registerMechanism);
15
c0d754774db2 adding SASL lib with PLAIN support, not tested yet
Tobias Markmann <tm@ayena.de>
parents:
diff changeset
140
6777
5de6b93d0190 util.*: Remove use of module() function, make all module functions local and return them in a table at the end
Kim Alvefur <zash@zash.se>
parents: 6036
diff changeset
141 return {
5de6b93d0190 util.*: Remove use of module() function, make all module functions local and return them in a table at the end
Kim Alvefur <zash@zash.se>
parents: 6036
diff changeset
142 registerMechanism = registerMechanism;
5de6b93d0190 util.*: Remove use of module() function, make all module functions local and return them in a table at the end
Kim Alvefur <zash@zash.se>
parents: 6036
diff changeset
143 new = new;
5de6b93d0190 util.*: Remove use of module() function, make all module functions local and return them in a table at the end
Kim Alvefur <zash@zash.se>
parents: 6036
diff changeset
144 };