Add authorization cache module

git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12405 e03df62e-2008-0410-955e-edbf42e46eb7

diff --git a/src/modules/account.h b/src/modules/account.h
index 88b86f8e254f1e07e584470ccebc708fd5dd66ec..8f4631cc8d41dff2dfadca3c68937e2c49e43dfe 100644 (file)
--- a/src/modules/account.h
+++ b/src/modules/account.h
@@ -30,7 +30,7 @@ class AccountEvent : public Event
 
 typedef StringExtItem AccountExtItem;
 
-inline const AccountExtItem* GetAccountExtItem()
+inline AccountExtItem* GetAccountExtItem()
 {
        return static_cast<AccountExtItem*>(ServerInstance->Extensions.GetItem("accountname"));
 }

diff --git a/src/modules/m_authcache.cpp b/src/modules/m_authcache.cpp
new file mode 100644 (file)
index 0000000..c87938f
--- /dev/null
+++ b/src/modules/m_authcache.cpp
@@ -0,0 +1,114 @@
+/*       +------------------------------------+
+ *       | Inspire Internet Relay Chat Daemon |
+ *       +------------------------------------+
+ *
+ *  InspIRCd: (C) 2002-2010 InspIRCd Development Team
+ * See: http://wiki.inspircd.org/Credits
+ *
+ * This program is free but copyrighted software; see
+ *            the file COPYING for details.
+ *
+ * ---------------------------------------------------
+ */
+
+#include "inspircd.h"
+#include "account.h"
+#include "ssl.h"
+
+// Password description - method, authdata
+typedef std::pair<std::string, std::string> passdesc;
+typedef std::multimap<std::string,passdesc> AuthMap;
+
+class ModuleAuthCache : public Module
+{
+       AuthMap usernames;
+
+ public:
+       ModuleAuthCache()
+       {
+       }
+
+       void init()
+       {
+               Implementation eventlist[] = { I_OnCheckReady, I_OnDecodeMetaData, I_OnSyncNetwork };
+               ServerInstance->Modules->Attach(eventlist, this, 3);
+       }
+
+       void OnSyncNetwork(Module* proto, void* opaque)
+       {
+               for(AuthMap::iterator it = usernames.begin(); it != usernames.end(); it++)
+                       proto->ProtoSendMetaData(opaque, NULL, "authcache", it->second.first +
+                               " " + it->first + " " + it->second.second);
+       }
+
+       void OnDecodeMetaData(Extensible* dest, const std::string& name, const std::string& value)
+       {
+               if (dest || name != "authcache")
+                       return;
+               irc::spacesepstream splitter(value);
+               std::string method, id, data;
+               splitter.GetToken(method);
+               splitter.GetToken(id);
+               data = splitter.GetRemaining();
+
+               std::pair<AuthMap::iterator, AuthMap::iterator> it = usernames.equal_range(id);
+               while (it.first != it.second)
+               {
+                       if (it.first->second.first == method)
+                       {
+                               usernames.erase(it.first);
+                               break;
+                       }
+                       it.first++;
+               }
+
+               if (!data.empty())
+               {
+                       usernames.insert(std::make_pair(id, std::make_pair(method, data)));
+               }
+       }
+
+       ModResult OnCheckReady(LocalUser* user)
+       {
+               std::string login;
+
+               std::pair<AuthMap::iterator, AuthMap::iterator> it = usernames.equal_range(user->nick);
+               while (it.first != it.second)
+               {
+                       if (!ServerInstance->PassCompare(user, it.first->second.second, user->password, it.first->second.first))
+                               login = user->nick;
+                       it.first++;
+               }
+
+               SocketCertificateRequest req(&user->eh, this);
+               req.Send();
+               if (req.cert)
+               {
+                       it = usernames.equal_range(req.cert->GetFingerprint());
+                       while (it.first != it.second)
+                       {
+                               if (it.first->second.first == "sslfp")
+                                       login = it.first->second.second;
+                               it.first++;
+                       }
+               }
+
+               if (!login.empty())
+               {
+                       AccountExtItem* ext = GetAccountExtItem();
+                       if (ext)
+                       {
+                               ext->set(user, login);
+                               AccountEvent(this, user, login).Send();
+                       }
+               }
+               return MOD_RES_PASSTHRU;
+       }
+
+       Version GetVersion()
+       {
+               return Version("Provides an authorization cache for user accounts", VF_OPTCOMMON | VF_VENDOR);
+       }
+};
+
+MODULE_INIT(ModuleAuthCache)