123 lines
3.0 KiB
Lua
123 lines
3.0 KiB
Lua
-- Prosody IM
|
|
-- Copyright (C) 2008-2013 Matthew Wild
|
|
-- Copyright (C) 2008-2013 Waqas Hussain
|
|
-- Copyright (C) 2014 Kim Alvefur
|
|
--
|
|
-- This project is MIT/X11 licensed. Please see the
|
|
-- COPYING file in the source package for more information.
|
|
--
|
|
|
|
local new_sasl = require "util.sasl".new;
|
|
local base64 = require "util.encodings".base64.encode;
|
|
local have_async, async = pcall(require, "util.async");
|
|
local http = require "net.http";
|
|
|
|
if not have_async then
|
|
error("Your version of Prosody does not support async and is incompatible");
|
|
end
|
|
|
|
local host = module.host;
|
|
|
|
local api_base = module:get_option_string("http_auth_url", ""):gsub("$host", host);
|
|
if api_base == "" then error("http_auth_url required") end
|
|
api_base = api_base:gsub("/$", "");
|
|
|
|
local auth_creds = module:get_option_string("http_auth_credentials");
|
|
|
|
local method_types = {
|
|
-- Unlisted methods default to GET
|
|
register = "POST";
|
|
set_password = "POST";
|
|
remove_user = "POST";
|
|
};
|
|
|
|
local provider = {};
|
|
|
|
local function make_request(method_name, params)
|
|
local wait, done = async.waiter();
|
|
|
|
local method_type = method_types[method_name] or "GET";
|
|
|
|
params.server = params.server or host;
|
|
local encoded_params = http.formencode(params);
|
|
|
|
local url;
|
|
local ex = {
|
|
method = method_type;
|
|
headers = { Authorization = auth_creds and ("Basic "..base64(auth_creds)) or nil; };
|
|
}
|
|
if method_type == "POST" then
|
|
url = api_base.."/"..method_name;
|
|
ex.headers["Content-Type"] = "application/x-www-form-urlencoded";
|
|
ex.body = encoded_params;
|
|
else
|
|
url = api_base.."/"..method_name.."?"..encoded_params;
|
|
end
|
|
|
|
local content, code;
|
|
local function cb(content_, code_)
|
|
content, code = content_, code_;
|
|
done();
|
|
end
|
|
http.request(url, ex, cb);
|
|
wait();
|
|
return code, content;
|
|
end
|
|
|
|
function provider.test_password(username, password)
|
|
local code, body = make_request("check_password", { user = username, pass = password });
|
|
if code == 200 and body == "true" then
|
|
return true;
|
|
end
|
|
return false;
|
|
end
|
|
|
|
function provider.users()
|
|
return function()
|
|
return nil;
|
|
end
|
|
end
|
|
|
|
function provider.set_password(username, password)
|
|
local code = make_request("set_password", { user = username, pass = password });
|
|
if code == 200 or code == 201 or code == 204 then
|
|
return true;
|
|
end
|
|
return false;
|
|
end
|
|
|
|
function provider.user_exists(username)
|
|
local code, body = make_request("user_exists", { user = username });
|
|
if code == 200 and body == "true" then
|
|
return true;
|
|
end
|
|
return false;
|
|
end
|
|
|
|
function provider.create_user(username, password)
|
|
local code = make_request("register", { user = username, pass = password });
|
|
if code == 201 then
|
|
return true;
|
|
end
|
|
return false;
|
|
end
|
|
|
|
function provider.delete_user(username)
|
|
local code = make_request("remove_user", { user = username });
|
|
if code == 200 or code == 201 or code == 204 then
|
|
return true;
|
|
end
|
|
return false;
|
|
end
|
|
|
|
function provider.get_sasl_handler()
|
|
return new_sasl(host, {
|
|
--luacheck: ignore 212/sasl 212/realm
|
|
plain_test = function(sasl, username, password, realm)
|
|
return provider.test_password(username, password), true;
|
|
end;
|
|
});
|
|
end
|
|
|
|
module:provides("auth", provider);
|