File

+
−-- Prosody IM
+
−-- Copyright (C) 2008-2010 Matthew Wild
+
−-- Copyright (C) 2008-2010 Waqas Hussain
+
−--
+
−-- This project is MIT/X11 licensed. Please see the
+
−-- COPYING file in the source package for more information.
+
−--
+
−
+
−local usermanager = require "prosody.core.usermanager";
+
−local new_sasl = require "prosody.util.sasl".new;
+
−local saslprep = require "prosody.util.encodings".stringprep.saslprep;
+
−local secure_equals = require "prosody.util.hashes".equals;
+
−
+
−local log = module._log;
+
−local host = module.host;
+
−
+
−local accounts = module:open_store("accounts");
+
−
+
−-- define auth provider
+
−local provider = {};
+
−
+
−function provider.test_password(username, password)
+
−	log("debug", "test password for user '%s'", username);
+
−	local credentials = accounts:get(username) or {};
+
−	password = saslprep(password);
+
−	if not password then
+
−		return nil, "Password fails SASLprep.";
+
−	end
+
−
+
−	if secure_equals(password, saslprep(credentials.password)) then
+
−		return true;
+
−	else
+
−		return nil, "Auth failed. Invalid username or password.";
+
−	end
+
−end
+
−
+
−function provider.get_password(username)
+
−	log("debug", "get_password for username '%s'", username);
+
−	return (accounts:get(username) or {}).password;
+
−end
+
−
+
−function provider.set_password(username, password)
+
−	log("debug", "set_password for username '%s'", username);
+
−	password = saslprep(password);
+
−	if not password then
+
−		return nil, "Password fails SASLprep.";
+
−	end
+
−	local account = accounts:get(username);
+
−	if account then
+
−		account.password = password;
+
−		account.updated = os.time();
+
−		return accounts:set(username, account);
+
−	end
+
−	return nil, "Account not available.";
+
−end
+
−
+
−function provider.get_account_info(username)
+
−	local account = accounts:get(username);
+
−	if not account then return nil, "Account not available"; end
+
−	return {
+
−		created = account.created;
+
−		password_updated = account.updated;
+
−	};
+
−end
+
−
+
−function provider.user_exists(username)
+
−	local account = accounts:get(username);
+
−	if not account then
+
−		log("debug", "account not found for username '%s'", username);
+
−		return nil, "Auth failed. Invalid username";
+
−	end
+
−	return true;
+
−end
+
−
+
−function provider.users()
+
−	return accounts:users();
+
−end
+
−
+
−function provider.create_user(username, password)
+
−	local now = os.time();
+
−	if password == nil then
+
−		return accounts:set(username, { created = now, updated = now, disabled = true });
+
−	end
+
−	password = saslprep(password);
+
−	if not password then
+
−		return nil, "Password fails SASLprep.";
+
−	end
+
−	return accounts:set(username, {
+
−		password = password;
+
−		created = now, updated = now;
+
−	});
+
−end
+
−
+
−function provider.delete_user(username)
+
−	return accounts:set(username, nil);
+
−end
+
−
+
−function provider.get_sasl_handler()
+
−	local getpass_authentication_profile = {
+
−		plain = function(_, username, realm)
+
−			local password = usermanager.get_password(username, realm);
+
−			if not password then
+
−				return "", nil;
+
−			end
+
−			return password, true;
+
−		end
+
−	};
+
−	return new_sasl(host, getpass_authentication_profile);
+
−end
+
−
+
−module:provides("auth", provider);
+
−