123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162 |
- /*
- * ws protocol handler plugin for "generic sessions"
- *
- * Copyright (C) 2010-2016 Andy Green <andy@warmcat.com>
- *
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the GNU Lesser General Public
- * License as published by the Free Software Foundation:
- * version 2.1 of the License.
- *
- * This library is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
- * General Public License for more details.
- *
- * You should have received a copy of the GNU General Public
- * License along with this library; if not, write to the Free Software
- * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
- * MA 02110-1301 USA
- */
- #define LWS_DLL
- #define LWS_INTERNAL
- #include "../lib/libwebsockets.h"
- #include <sqlite3.h>
- #include <string.h>
- #define LWSGS_VERIFIED_ACCEPTED 100
- enum {
- FGS_USERNAME,
- FGS_PASSWORD,
- FGS_PASSWORD2,
- FGS_EMAIL,
- FGS_REGISTER,
- FGS_GOOD,
- FGS_BAD,
- FGS_REG_GOOD,
- FGS_REG_BAD,
- FGS_ADMIN,
- FGS_FORGOT,
- FGS_FORGOT_GOOD,
- FGS_FORGOT_BAD,
- FGS_FORGOT_POST_GOOD,
- FGS_FORGOT_POST_BAD,
- FGS_CHANGE,
- FGS_CURPW,
- FGS_DELETE,
- };
- struct lwsgs_user {
- char username[32];
- char ip[16];
- lwsgw_hash pwhash;
- lwsgw_hash pwsalt;
- lwsgw_hash token;
- time_t created;
- time_t last_forgot_validated;
- char email[100];
- int verified;
- };
- struct per_vhost_data__gs {
- struct lws_email email;
- struct lwsgs_user u;
- struct lws_context *context;
- char session_db[256];
- char admin_user[32];
- char confounder[32];
- char email_contact_person[128];
- char email_title[128];
- char email_template[128];
- char email_confirm_url[128];
- lwsgw_hash admin_password_sha1;
- sqlite3 *pdb;
- int timeout_idle_secs;
- int timeout_absolute_secs;
- int timeout_anon_absolute_secs;
- int timeout_email_secs;
- time_t last_session_expire;
- char email_inited;
- };
- struct per_session_data__gs {
- struct lws_spa *spa;
- lwsgw_hash login_session;
- lwsgw_hash delete_session;
- unsigned int login_expires;
- char onward[256];
- char result[500 + LWS_PRE];
- char urldec[500 + LWS_PRE];
- int result_len;
- char ip[46];
- struct lws_process_html_state phs;
- int spos;
- unsigned int logging_out:1;
- };
- /* utils.c */
- int
- lwsgs_lookup_callback_user(void *priv, int cols, char **col_val,
- char **col_name);
- void
- lwsgw_cookie_from_session(lwsgw_hash *sid, time_t expires, char **p, char *end);
- int
- lwsgs_get_sid_from_wsi(struct lws *wsi, lwsgw_hash *sid);
- int
- lwsgs_lookup_session(struct per_vhost_data__gs *vhd,
- const lwsgw_hash *sid, char *username, int len);
- int
- lwsgs_get_auth_level(struct per_vhost_data__gs *vhd,
- const char *username);
- int
- lwsgs_check_credentials(struct per_vhost_data__gs *vhd,
- const char *username, const char *password);
- void
- sha1_to_lwsgw_hash(unsigned char *hash, lwsgw_hash *shash);
- unsigned int
- lwsgs_now_secs(void);
- int
- lwsgw_check_admin(struct per_vhost_data__gs *vhd,
- const char *username, const char *password);
- int
- lwsgs_hash_password(struct per_vhost_data__gs *vhd,
- const char *password, struct lwsgs_user *u);
- int
- lwsgs_new_session_id(struct per_vhost_data__gs *vhd,
- lwsgw_hash *sid, const char *username, int exp);
- int
- lwsgs_lookup_user(struct per_vhost_data__gs *vhd,
- const char *username, struct lwsgs_user *u);
- int
- lwsgw_update_session(struct per_vhost_data__gs *vhd,
- lwsgw_hash *hash, const char *user);
- int
- lwsgw_expire_old_sessions(struct per_vhost_data__gs *vhd);
- /* handlers.c */
- int
- lwsgs_handler_confirm(struct per_vhost_data__gs *vhd, struct lws *wsi,
- struct per_session_data__gs *pss);
- int
- lwsgs_handler_forgot(struct per_vhost_data__gs *vhd, struct lws *wsi,
- struct per_session_data__gs *pss);
- int
- lwsgs_handler_check(struct per_vhost_data__gs *vhd, struct lws *wsi,
- struct per_session_data__gs *pss);
- int
- lwsgs_handler_change_password(struct per_vhost_data__gs *vhd, struct lws *wsi,
- struct per_session_data__gs *pss);
- int
- lwsgs_handler_forgot_pw_form(struct per_vhost_data__gs *vhd, struct lws *wsi,
- struct per_session_data__gs *pss);
- int
- lwsgs_handler_register_form(struct per_vhost_data__gs *vhd, struct lws *wsi,
- struct per_session_data__gs *pss);
|