Software /
code /
prosody
File
plugins/mod_legacyauth.lua @ 1842:8337c0d4aee4
util.pposix: Compatibility with Solaris systems (thanks Filip)
author | Matthew Wild <mwild1@gmail.com> |
---|---|
date | Tue, 29 Sep 2009 14:22:02 +0100 |
parent | 1833:5408d5100bd0 |
child | 1836:f4c88dd32724 |
line wrap: on
line source
-- Prosody IM -- Copyright (C) 2008-2009 Matthew Wild -- Copyright (C) 2008-2009 Waqas Hussain -- -- This project is MIT/X11 licensed. Please see the -- COPYING file in the source package for more information. -- local st = require "util.stanza"; local t_concat = table.concat; local config = require "core.configmanager"; local secure_auth_only = config.get(module:get_host(), "core", "require_encryption"); local sessionmanager = require "core.sessionmanager"; local usermanager = require "core.usermanager"; local nodeprep = require "util.encodings".stringprep.nodeprep; local resourceprep = require "util.encodings".stringprep.resourceprep; module:add_feature("jabber:iq:auth"); module:add_event_hook("stream-features", function (session, features) if secure_auth_only and not session.secure then -- Sorry, not offering to insecure streams! return; elseif not session.username then features:tag("auth", {xmlns='http://jabber.org/features/iq-auth'}):up(); end end); module:add_iq_handler("c2s_unauthed", "jabber:iq:auth", function (session, stanza) if secure_auth_only and not session.secure then session.send(st.error_reply(stanza, "modify", "not-acceptable", "Encryption (SSL or TLS) is required to connect to this server")); return true; end local username = stanza.tags[1]:child_with_name("username"); local password = stanza.tags[1]:child_with_name("password"); local resource = stanza.tags[1]:child_with_name("resource"); if not (username and password and resource) then local reply = st.reply(stanza); session.send(reply:query("jabber:iq:auth") :tag("username"):up() :tag("password"):up() :tag("resource"):up()); return true; else username, password, resource = t_concat(username), t_concat(password), t_concat(resource); username = nodeprep(username); resource = resourceprep(resource) local reply = st.reply(stanza); require "core.usermanager" if username and resource and usermanager.validate_credentials(session.host, username, password) then -- Authentication successful! local success, err = sessionmanager.make_authenticated(session, username); if success then local err_type, err_msg; success, err_type, err, err_msg = sessionmanager.bind_resource(session, resource); if not success then session.send(st.error_reply(stanza, err_type, err, err_msg)); session.username, session.type = nil, "c2s_unauthed"; -- FIXME should this be placed in sessionmanager? return true; elseif resource ~= session.resource then -- server changed resource, not supported by legacy auth session.send(st.error_reply(stanza, "cancel", "conflict", "The requested resource could not be assigned to this session.")); session:close(); -- FIXME undo resource bind and auth instead of closing the session? return true; end end session.send(st.reply(stanza)); return true; else local reply = st.reply(stanza); reply.attr.type = "error"; reply:tag("error", { code = "401", type = "auth" }) :tag("not-authorized", { xmlns = "urn:ietf:params:xml:ns:xmpp-stanzas" }); session.send(reply); return true; end end end);