/** * libtransport -- C++ library for easy XMPP Transports development * * Copyright (C) 2011, Jan Kaluza * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02111-1301 USA */ #include #include #include "Swiften/Swiften.h" #include "Swiften/Server/UserRegistry.h" #include "transport/userregistry.h" #include "log4cxx/logger.h" using namespace log4cxx; namespace Transport { static LoggerPtr logger = Logger::getLogger("UserRegistry"); UserRegistry::UserRegistry(Config *cfg) { config = cfg; } UserRegistry::~UserRegistry() { } void UserRegistry::isValidUserPassword(const Swift::JID& user, Swift::ServerFromClientSession *session, const Swift::SafeByteArray& password) { if (!CONFIG_STRING(config, "service.admin_username").empty() && user.getNode() == CONFIG_STRING(config, "service.admin_username")) { if (Swift::safeByteArrayToString(password) == CONFIG_STRING(config, "service.admin_password")) { session->handlePasswordValid(); } else { session->handlePasswordInvalid(); } return; } std::string key = user.toBare().toString(); // Users try to connect twice if (users.find(key) != users.end()) { // Kill the first session if the second password is same if (Swift::safeByteArrayToString(password) == users[key].password) { LOG4CXX_INFO(logger, key << ": Removing previous session and making this one active"); Swift::ServerFromClientSession *tmp = users[key].session; users[key].session = session; tmp->handlePasswordInvalid(); } else { LOG4CXX_INFO(logger, key << ": Possible break-in attemp (user logged as different one with bad password)"); session->handlePasswordInvalid(); return; } } LOG4CXX_INFO(logger, key << ": Connecting this user to find if password is valid"); users[key].password = Swift::safeByteArrayToString(password); users[key].session = session; onConnectUser(user); return; } void UserRegistry::stopLogin(const Swift::JID& user, Swift::ServerFromClientSession *session) { std::string key = user.toBare().toString(); if (users.find(key) != users.end()) { if (users[key].session == session) { LOG4CXX_INFO(logger, key << ": Stopping login process (user probably disconnected while logging in)"); users.erase(key); } else { LOG4CXX_WARN(logger, key << ": Stopping login process (user probably disconnected while logging in), but this is not active session"); } } else { LOG4CXX_WARN(logger, key << ": Stopping login process (user probably disconnected while logging in) for invalid user"); } onDisconnectUser(user); } void UserRegistry::onPasswordValid(const Swift::JID &user) { std::string key = user.toBare().toString(); if (users.find(key) != users.end()) { LOG4CXX_INFO(logger, key << ": Password is valid"); users[key].session->handlePasswordValid(); users.erase(key); } else { LOG4CXX_INFO(logger, key << ": onPasswordValid called for invalid user"); } } void UserRegistry::onPasswordInvalid(const Swift::JID &user) { std::string key = user.toBare().toString(); if (users.find(key) != users.end()) { LOG4CXX_INFO(logger, key << ": Password is invalid"); users[key].session->handlePasswordInvalid(); users.erase(key); } else { LOG4CXX_INFO(logger, key << ": onPasswordInvalid called for invalid user"); } } const std::string &UserRegistry::getUserPassword(const std::string &barejid) { return users[barejid].password; } }