1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
|
using Xmpp.Core;
namespace Xmpp.PlainSasl {
private const string NS_URI = "urn:ietf:params:xml:ns:xmpp-sasl";
public class Module : XmppStreamNegotiationModule {
public static ModuleIdentity<Module> IDENTITY = new ModuleIdentity<Module>(NS_URI, "plain_module");
private const string MECHANISM = "PLAIN";
public string name { get; set; }
public string password { get; set; }
public bool use_full_name = false;
public signal void received_auth_failure(XmppStream stream, StanzaNode node);
public Module(string name, string password) {
this.name = name;
this.password = password;
}
public override void attach(XmppStream stream) {
stream.received_features_node.connect(this.received_features_node);
stream.received_nonza.connect(this.received_nonza);
}
public override void detach(XmppStream stream) {
stream.received_features_node.disconnect(this.received_features_node);
stream.received_nonza.disconnect(this.received_nonza);
}
public void received_nonza(XmppStream stream, StanzaNode node) {
if (node.ns_uri == NS_URI) {
if (node.name == "success") {
stream.require_setup();
stream.get_flag(Flag.IDENTITY).finished = true;
} else if (node.name == "failure") {
stream.remove_flag(stream.get_flag(Flag.IDENTITY));
received_auth_failure(stream, node);
}
}
}
public void received_features_node(XmppStream stream) {
if (stream.has_flag(Flag.IDENTITY)) return;
if (stream.is_setup_needed()) return;
if (!stream.has_flag(Tls.Flag.IDENTITY) || !stream.get_flag(Tls.Flag.IDENTITY).finished) return;
var mechanisms = stream.features.get_subnode("mechanisms", NS_URI);
if (mechanisms != null) {
bool supportsPlain = false;
foreach (var mechanism in mechanisms.sub_nodes) {
if (mechanism.name != "mechanism" || mechanism.ns_uri != NS_URI) continue;
var text = mechanism.get_subnode("#text");
if (text != null && text.val == MECHANISM) {
supportsPlain = true;
}
}
if (!supportsPlain) {
stderr.printf("Server at %s does not support %s auth, use full-features Sasl implementation!\n", stream.remote_name, MECHANISM);
return;
}
if (!name.contains("@")) {
name = "%s@%s".printf(name, stream.remote_name);
}
if (!use_full_name && name.contains("@")) {
var split = name.split("@");
if (split[1] == stream.remote_name) {
name = split[0];
} else {
use_full_name = true;
}
}
var name = this.name;
if (!use_full_name && name.contains("@")) {
var split = name.split("@");
if (split[1] == stream.remote_name) {
name = split[0];
}
}
stream.write(new StanzaNode.build("auth", NS_URI).add_self_xmlns()
.put_attribute("mechanism", MECHANISM)
.put_node(new StanzaNode.text(Base64.encode(get_plain_bytes(name, password)))));
var flag = new Flag();
flag.mechanism = MECHANISM;
flag.name = name;
stream.add_flag(flag);
}
}
private static uchar[] get_plain_bytes(string name_s, string password_s) {
var name = name_s.to_utf8();
var password = password_s.to_utf8();
uchar[] res = new uchar[name.length + password.length + 2];
res[0] = 0;
res[name.length + 1] = 0;
for(int i = 0; i < name.length; i++) { res[i + 1] = (uchar) name[i]; }
for(int i = 0; i < password.length; i++) { res[i + name.length + 2] = (uchar) password[i]; }
return res;
}
public override bool mandatory_outstanding(XmppStream stream) {
return !stream.has_flag(Flag.IDENTITY) || !stream.get_flag(Flag.IDENTITY).finished;
}
public override bool negotiation_active(XmppStream stream) {
return stream.has_flag(Flag.IDENTITY) && !stream.get_flag(Flag.IDENTITY).finished;
}
public override string get_ns() { return NS_URI; }
public override string get_id() { return IDENTITY.id; }
}
public class Flag : XmppStreamFlag {
public static FlagIdentity<Flag> IDENTITY = new FlagIdentity<Flag>(NS_URI, "sasl");
public string mechanism;
public string name;
public bool finished = false;
public override string get_ns() { return NS_URI; }
public override string get_id() { return IDENTITY.id; }
}
}
|
