2 local st = require "util.stanza";
3 local send = require "core.sessionmanager".send_to_session;
4 local sm_bind_resource = require "core.sessionmanager".bind_resource;
6 local usermanager_validate_credentials = require "core.usermanager".validate_credentials;
7 local t_concat, t_insert = table.concat, table.insert;
8 local tostring = tostring;
10 local log = require "util.logger".init("mod_saslauth");
12 local xmlns_sasl ='urn:ietf:params:xml:ns:xmpp-sasl';
13 local xmlns_bind ='urn:ietf:params:xml:ns:xmpp-bind';
14 local xmlns_stanzas ='urn:ietf:params:xml:ns:xmpp-stanzas';
16 local new_connhandler = require "net.connhandlers".new;
17 local new_sasl = require "util.sasl".new;
19 add_handler("c2s_unauthed", "auth", xmlns_sasl,
20 function (session, stanza)
21 if not session.sasl_handler then
22 session.sasl_handler = new_sasl(stanza.attr.mechanism,
23 function (username, password)
25 require "core.usermanager"
26 if usermanager_validate_credentials(session.host, username, password) then
33 local success, err = sessionmanager.make_authenticated(session, username);
35 sessionmanager.destroy_session(session);
38 session.sasl_handler = nil;
39 session:reset_stream();
43 log("debug", "SASL failure, reason: %s", reason);
47 log("debug", "SASL writes: %s", tostring(stanza));
48 send(session, stanza);
51 session.sasl_handler:feed(stanza);
53 error("Client tried to negotiate SASL again", 0);
58 add_event_hook("stream-features",
59 function (session, features)
60 if not session.username then
61 t_insert(features, "<mechanisms xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>");
62 t_insert(features, "<mechanism>PLAIN</mechanism>");
63 t_insert(features, "</mechanisms>");
65 t_insert(features, "<bind xmlns='urn:ietf:params:xml:ns:xmpp-bind'><required/></bind>");
66 t_insert(features, "<session xmlns='urn:ietf:params:xml:ns:xmpp-session'/>");
68 --send [[<register xmlns="http://jabber.org/features/iq-register"/> ]]
71 add_iq_handler("c2s", "urn:ietf:params:xml:ns:xmpp-bind",
72 function (session, stanza)
73 log("debug", "Client tried to bind to a resource");
75 if stanza.attr.type == "set" then
76 local bind = stanza.tags[1];
78 if bind and bind.attr.xmlns == xmlns_bind then
79 resource = bind:child_with_name("resource");
81 resource = resource[1];
85 local success, err = sm_bind_resource(session, resource);
87 local reply = st.reply(stanza);
88 reply.attr.type = "error";
89 if err == "conflict" then
90 reply:tag("error", { type = "modify" })
91 :tag("conflict", { xmlns = xmlns_stanzas });
92 elseif err == "constraint" then
93 reply:tag("error", { type = "cancel" })
94 :tag("resource-constraint", { xmlns = xmlns_stanzas });
95 elseif err == "auth" then
96 reply:tag("error", { type = "cancel" })
97 :tag("not-allowed", { xmlns = xmlns_stanzas });
101 local reply = st.reply(stanza);
102 reply:tag("bind", { xmlns = xmlns_bind})
103 :tag("jid"):text(session.full_jid);
104 send(session, reply);
108 add_iq_handler("c2s", "urn:ietf:params:xml:ns:xmpp-session",
109 function (session, stanza)
110 log("debug", "Client tried to bind to a resource");
111 send(session, st.reply(stanza));