Comparison

plugins/mod_user_account_management.lua @ 8484:f591855f060d

mod_register: Split into mod_register_ibr and mod_user_account_management (#723) - mod_register_ibr handles in-band registration - mod_user_account_management handles password change and user deletion
author Kim Alvefur <zash@zash.se>
date Sat, 07 Oct 2017 22:00:50 +0200
parent 8464:plugins/mod_register.lua@1a0b76b07b7a
child 10382:fcdc65bc6697
comparison
equal deleted inserted replaced
8483:6d47b74926dd 8484:f591855f060d
1 -- Prosody IM
2 -- Copyright (C) 2008-2010 Matthew Wild
3 -- Copyright (C) 2008-2010 Waqas Hussain
4 --
5 -- This project is MIT/X11 licensed. Please see the
6 -- COPYING file in the source package for more information.
7 --
8
9
10 local st = require "util.stanza";
11 local usermanager_set_password = require "core.usermanager".set_password;
12 local usermanager_delete_user = require "core.usermanager".delete_user;
13 local nodeprep = require "util.encodings".stringprep.nodeprep;
14 local jid_bare = require "util.jid".bare;
15
16 local compat = module:get_option_boolean("registration_compat", true);
17
18 module:add_feature("jabber:iq:register");
19
20 -- Password change and account deletion handler
21 local function handle_registration_stanza(event)
22 local session, stanza = event.origin, event.stanza;
23 local log = session.log or module._log;
24
25 local query = stanza.tags[1];
26 if stanza.attr.type == "get" then
27 local reply = st.reply(stanza);
28 reply:tag("query", {xmlns = "jabber:iq:register"})
29 :tag("registered"):up()
30 :tag("username"):text(session.username):up()
31 :tag("password"):up();
32 session.send(reply);
33 else -- stanza.attr.type == "set"
34 if query.tags[1] and query.tags[1].name == "remove" then
35 local username, host = session.username, session.host;
36
37 -- This one weird trick sends a reply to this stanza before the user is deleted
38 local old_session_close = session.close;
39 session.close = function(self, ...)
40 self.send(st.reply(stanza));
41 return old_session_close(self, ...);
42 end
43
44 local ok, err = usermanager_delete_user(username, host);
45
46 if not ok then
47 log("debug", "Removing user account %s@%s failed: %s", username, host, err);
48 session.close = old_session_close;
49 session.send(st.error_reply(stanza, "cancel", "service-unavailable", err));
50 return true;
51 end
52
53 log("info", "User removed their account: %s@%s", username, host);
54 module:fire_event("user-deregistered", { username = username, host = host, source = "mod_register", session = session });
55 else
56 local username = nodeprep(query:get_child_text("username"));
57 local password = query:get_child_text("password");
58 if username and password then
59 if username == session.username then
60 if usermanager_set_password(username, password, session.host, session.resource) then
61 session.send(st.reply(stanza));
62 else
63 -- TODO unable to write file, file may be locked, etc, what's the correct error?
64 session.send(st.error_reply(stanza, "wait", "internal-server-error"));
65 end
66 else
67 session.send(st.error_reply(stanza, "modify", "bad-request"));
68 end
69 else
70 session.send(st.error_reply(stanza, "modify", "bad-request"));
71 end
72 end
73 end
74 return true;
75 end
76
77 module:hook("iq/self/jabber:iq:register:query", handle_registration_stanza);
78 if compat then
79 module:hook("iq/host/jabber:iq:register:query", function (event)
80 local session, stanza = event.origin, event.stanza;
81 if session.type == "c2s" and jid_bare(stanza.attr.to) == session.host then
82 return handle_registration_stanza(event);
83 end
84 end);
85 end
86