summaryrefslogtreecommitdiff
path: root/src/modules
diff options
context:
space:
mode:
authordanieldg <danieldg@e03df62e-2008-0410-955e-edbf42e46eb7>2010-02-09 02:22:36 +0000
committerdanieldg <danieldg@e03df62e-2008-0410-955e-edbf42e46eb7>2010-02-09 02:22:36 +0000
commit252821272458714000f772a03770e56bc6ebf4bb (patch)
tree6e389a16f7943811b0f904a148cae50b92dd4088 /src/modules
parentaab7998583ca16590a32c7bdb80955a18b090700 (diff)
Add authorization cache module
git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12405 e03df62e-2008-0410-955e-edbf42e46eb7
Diffstat (limited to 'src/modules')
-rw-r--r--src/modules/account.h2
-rw-r--r--src/modules/m_authcache.cpp114
2 files changed, 115 insertions, 1 deletions
diff --git a/src/modules/account.h b/src/modules/account.h
index 88b86f8e2..8f4631cc8 100644
--- a/src/modules/account.h
+++ b/src/modules/account.h
@@ -30,7 +30,7 @@ class AccountEvent : public Event
typedef StringExtItem AccountExtItem;
-inline const AccountExtItem* GetAccountExtItem()
+inline AccountExtItem* GetAccountExtItem()
{
return static_cast<AccountExtItem*>(ServerInstance->Extensions.GetItem("accountname"));
}
diff --git a/src/modules/m_authcache.cpp b/src/modules/m_authcache.cpp
new file mode 100644
index 000000000..c87938f85
--- /dev/null
+++ b/src/modules/m_authcache.cpp
@@ -0,0 +1,114 @@
+/* +------------------------------------+
+ * | Inspire Internet Relay Chat Daemon |
+ * +------------------------------------+
+ *
+ * InspIRCd: (C) 2002-2010 InspIRCd Development Team
+ * See: http://wiki.inspircd.org/Credits
+ *
+ * This program is free but copyrighted software; see
+ * the file COPYING for details.
+ *
+ * ---------------------------------------------------
+ */
+
+#include "inspircd.h"
+#include "account.h"
+#include "ssl.h"
+
+// Password description - method, authdata
+typedef std::pair<std::string, std::string> passdesc;
+typedef std::multimap<std::string,passdesc> AuthMap;
+
+class ModuleAuthCache : public Module
+{
+ AuthMap usernames;
+
+ public:
+ ModuleAuthCache()
+ {
+ }
+
+ void init()
+ {
+ Implementation eventlist[] = { I_OnCheckReady, I_OnDecodeMetaData, I_OnSyncNetwork };
+ ServerInstance->Modules->Attach(eventlist, this, 3);
+ }
+
+ void OnSyncNetwork(Module* proto, void* opaque)
+ {
+ for(AuthMap::iterator it = usernames.begin(); it != usernames.end(); it++)
+ proto->ProtoSendMetaData(opaque, NULL, "authcache", it->second.first +
+ " " + it->first + " " + it->second.second);
+ }
+
+ void OnDecodeMetaData(Extensible* dest, const std::string& name, const std::string& value)
+ {
+ if (dest || name != "authcache")
+ return;
+ irc::spacesepstream splitter(value);
+ std::string method, id, data;
+ splitter.GetToken(method);
+ splitter.GetToken(id);
+ data = splitter.GetRemaining();
+
+ std::pair<AuthMap::iterator, AuthMap::iterator> it = usernames.equal_range(id);
+ while (it.first != it.second)
+ {
+ if (it.first->second.first == method)
+ {
+ usernames.erase(it.first);
+ break;
+ }
+ it.first++;
+ }
+
+ if (!data.empty())
+ {
+ usernames.insert(std::make_pair(id, std::make_pair(method, data)));
+ }
+ }
+
+ ModResult OnCheckReady(LocalUser* user)
+ {
+ std::string login;
+
+ std::pair<AuthMap::iterator, AuthMap::iterator> it = usernames.equal_range(user->nick);
+ while (it.first != it.second)
+ {
+ if (!ServerInstance->PassCompare(user, it.first->second.second, user->password, it.first->second.first))
+ login = user->nick;
+ it.first++;
+ }
+
+ SocketCertificateRequest req(&user->eh, this);
+ req.Send();
+ if (req.cert)
+ {
+ it = usernames.equal_range(req.cert->GetFingerprint());
+ while (it.first != it.second)
+ {
+ if (it.first->second.first == "sslfp")
+ login = it.first->second.second;
+ it.first++;
+ }
+ }
+
+ if (!login.empty())
+ {
+ AccountExtItem* ext = GetAccountExtItem();
+ if (ext)
+ {
+ ext->set(user, login);
+ AccountEvent(this, user, login).Send();
+ }
+ }
+ return MOD_RES_PASSTHRU;
+ }
+
+ Version GetVersion()
+ {
+ return Version("Provides an authorization cache for user accounts", VF_OPTCOMMON | VF_VENDOR);
+ }
+};
+
+MODULE_INIT(ModuleAuthCache)