Software /
code /
verse
Comparison
plugins/proxy65.lua @ 56:014bdb4154e9
verse.plugins.proxy65: XEP-0065 plugin for file transfer through a proxy
author | Matthew Wild <mwild1@gmail.com> |
---|---|
date | Thu, 06 May 2010 10:34:27 +0100 |
child | 103:6cc0ca4aa664 |
comparison
equal
deleted
inserted
replaced
55:163beb198646 | 56:014bdb4154e9 |
---|---|
1 local events = require "util.events"; | |
2 local uuid = require "util.uuid"; | |
3 local sha1 = require "util.sha1"; | |
4 | |
5 local proxy65_mt = {}; | |
6 proxy65_mt.__index = proxy65_mt; | |
7 | |
8 local xmlns_bytestreams = "http://jabber.org/protocol/bytestreams"; | |
9 | |
10 local negotiate_socks5; | |
11 | |
12 function verse.plugins.proxy65(stream) | |
13 stream.proxy65 = setmetatable({ stream = stream }, proxy65_mt); | |
14 stream:hook("disco-result", function (result) | |
15 -- Fill list with available proxies | |
16 end); | |
17 stream:hook("iq/"..xmlns_bytestreams, function (request) | |
18 local conn = verse.new(nil, { | |
19 initiator_jid = request.attr.from, | |
20 streamhosts = {}, | |
21 current_host = 0; | |
22 }); | |
23 | |
24 -- Parse hosts from request | |
25 for tag in request.tags[1]:childtags() do | |
26 if tag.name == "streamhost" then | |
27 table.insert(conn.streamhosts, tag.attr); | |
28 end | |
29 end | |
30 | |
31 --Attempt to connect to the next host | |
32 local function attempt_next_streamhost() | |
33 -- First connect, or the last connect failed | |
34 if conn.current_host < #conn.streamhosts then | |
35 conn.current_host = conn.current_host + 1; | |
36 conn:connect( | |
37 conn.streamhosts[conn.current_host].host, | |
38 conn.streamhosts[conn.current_host].port | |
39 ); | |
40 negotiate_socks5(stream, conn, request.tags[1].attr.sid, request.attr.from, stream.jid); | |
41 return true; -- Halt processing of disconnected event | |
42 end | |
43 -- All streamhosts tried, none successful | |
44 conn:unhook("disconnected", attempt_next_streamhost); | |
45 stream:send(verse.error_reply(request, "cancel", "item-not-found")); | |
46 -- Let disconnected event fall through to user handlers... | |
47 end | |
48 | |
49 function conn:accept() | |
50 conn:hook("disconnected", attempt_next_streamhost, 100); | |
51 -- When this event fires, we're connected to a streamhost | |
52 conn:hook("connected", function () | |
53 conn:unhook("disconnected", attempt_next_streamhost); | |
54 -- Send XMPP success notification | |
55 local reply = verse.reply(request) | |
56 :tag("query", request.tags[1].attr) | |
57 :tag("streamhost-used", { jid = conn.streamhosts[conn.current_host].jid }); | |
58 stream:send(reply); | |
59 end, 100); | |
60 attempt_next_streamhost(); | |
61 end | |
62 function conn:refuse() | |
63 -- FIXME: XMPP refused reply | |
64 end | |
65 stream:event("proxy65/request", conn); | |
66 end); | |
67 end | |
68 | |
69 function proxy65_mt:new(target_jid, proxies) | |
70 local conn = verse.new(nil, { | |
71 target_jid = target_jid; | |
72 bytestream_sid = uuid.generate(); | |
73 }); | |
74 | |
75 local request = verse.iq{type="set", to = target_jid} | |
76 :tag("query", { xmlns = xmlns_bytestreams, mode = "tcp", sid = conn.bytestream_sid }); | |
77 for _, proxy in ipairs(proxies or self.proxies) do | |
78 request:tag("streamhost", proxy):up(); | |
79 end | |
80 | |
81 | |
82 self.stream:send_iq(request, function (reply) | |
83 if reply.attr.type == "error" then | |
84 local type, condition, text = reply:get_error(); | |
85 conn:event("connection-failed", { conn = conn, type = type, condition = condition, text = text }); | |
86 else | |
87 -- Target connected to streamhost, connect ourselves | |
88 local streamhost_used = reply.tags[1]:get_child("streamhost-used"); | |
89 if not streamhost_used then | |
90 --FIXME: Emit error | |
91 end | |
92 conn.streamhost_jid = streamhost_used.attr.jid; | |
93 local host, port; | |
94 for _, proxy in ipairs(proxies or self.proxies) do | |
95 if proxy.jid == conn.streamhost_jid then | |
96 host, port = proxy.host, proxy.port; | |
97 break; | |
98 end | |
99 end | |
100 if not (host and port) then | |
101 --FIXME: Emit error | |
102 end | |
103 | |
104 conn:connect(host, port); | |
105 | |
106 local function handle_proxy_connected() | |
107 conn:unhook("connected", handle_proxy_connected); | |
108 -- Both of us connected, tell proxy to activate connection | |
109 local request = verse.iq{to = conn.streamhost_jid, type="set"} | |
110 :tag("query", { xmlns = xmlns_bytestreams, sid = conn.bytestream_sid }) | |
111 :tag("activate"):text(target_jid); | |
112 self.stream:send_iq(request, function (reply) | |
113 if reply.attr.type == "result" then | |
114 -- Connection activated, ready to use | |
115 conn:event("connected", conn); | |
116 else | |
117 --FIXME: Emit error | |
118 end | |
119 end); | |
120 return true; | |
121 end | |
122 conn:hook("connected", handle_proxy_connected, 100); | |
123 | |
124 negotiate_socks5(self.stream, conn, conn.bytestream_sid, self.stream.jid, target_jid); | |
125 end | |
126 end); | |
127 return conn; | |
128 end | |
129 | |
130 function negotiate_socks5(stream, conn, sid, requester_jid, target_jid) | |
131 local hash = sha1.sha1(sid..requester_jid..target_jid); | |
132 local function suppress_connected() | |
133 conn:unhook("connected", suppress_connected); | |
134 return true; | |
135 end | |
136 local function receive_connection_response(data) | |
137 conn:unhook("incoming-raw", receive_connection_response); | |
138 | |
139 if data:sub(1, 2) ~= "\005\000" then | |
140 return conn:event("error", "connection-failure"); | |
141 end | |
142 conn:event("connected"); | |
143 return true; | |
144 end | |
145 local function receive_auth_response(data) | |
146 conn:unhook("incoming-raw", receive_auth_response); | |
147 if data ~= "\005\000" then -- SOCKSv5; "NO AUTHENTICATION" | |
148 -- Server is not SOCKSv5, or does not allow no auth | |
149 local err = "version-mismatch"; | |
150 if data:sub(1,1) == "\005" then | |
151 err = "authentication-failure"; | |
152 end | |
153 return conn:event("error", err); | |
154 end | |
155 -- Request SOCKS5 connection | |
156 conn:send(string.char(0x05, 0x01, 0x00, 0x03, #hash)..hash.."\0\0"); --FIXME: Move to "connected"? | |
157 conn:hook("incoming-raw", receive_connection_response, 100); | |
158 return true; | |
159 end | |
160 conn:hook("connected", suppress_connected, 200); | |
161 conn:hook("incoming-raw", receive_auth_response, 100); | |
162 conn:send("\005\001\000"); -- SOCKSv5; 1 mechanism; "NO AUTHENTICATION" | |
163 end |