05c9ea5c1d
* sleekxmpp no longer spawns threads for callback handlers -- there are now two threads: one for handlers and one for reading. callback handlers can get results from the read queue directly with the "wait" handler which is used in .send() for the reply catching argument.
81 lines
2.9 KiB
Python
81 lines
2.9 KiB
Python
"""
|
|
SleekXMPP: The Sleek XMPP Library
|
|
Copyright (C) 2007 Nathanael C. Fritz
|
|
This file is part of SleekXMPP.
|
|
|
|
SleekXMPP is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; either version 2 of the License, or
|
|
(at your option) any later version.
|
|
|
|
SleekXMPP is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with SleekXMPP; if not, write to the Free Software
|
|
Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
|
"""
|
|
from __future__ import with_statement
|
|
from xml.etree import cElementTree as ET
|
|
import logging
|
|
import hashlib
|
|
from . import base
|
|
|
|
|
|
class xep_0078(base.base_plugin):
|
|
"""
|
|
XEP-0078 NON-SASL Authentication
|
|
"""
|
|
def plugin_init(self):
|
|
self.description = "Non-SASL Authentication (broken)"
|
|
self.xep = "0078"
|
|
self.xmpp.add_start_handler(self.check_stream)
|
|
#disabling until I fix conflict with PLAIN
|
|
#self.xmpp.registerFeature("<auth xmlns='http://jabber.org/features/iq-auth'/>", self.auth)
|
|
self.streamid = ''
|
|
|
|
def check_stream(self, xml):
|
|
self.streamid = xml.attrib['id']
|
|
if xml.get('version', '0') != '1.0':
|
|
self.auth()
|
|
|
|
def auth(self, xml=None):
|
|
logging.debug("Starting jabber:iq:auth Authentication")
|
|
auth_request = self.xmpp.makeIqGet()
|
|
auth_request_query = ET.Element('{jabber:iq:auth}query')
|
|
auth_request.attrib['to'] = self.xmpp.server
|
|
username = ET.Element('username')
|
|
username.text = self.xmpp.username
|
|
auth_request_query.append(username)
|
|
auth_request.append(auth_request_query)
|
|
result = self.xmpp.send(auth_request, self.xmpp.makeIqResult(self.xmpp.id))
|
|
rquery = result.find('{jabber:iq:auth}query')
|
|
attempt = self.xmpp.makeIqSet()
|
|
query = ET.Element('{jabber:iq:auth}query')
|
|
resource = ET.Element('resource')
|
|
resource.text = self.xmpp.resource
|
|
query.append(username)
|
|
query.append(resource)
|
|
if rquery.find('{jabber:iq:auth}digest') is None:
|
|
logging.warning("Authenticating via jabber:iq:auth Plain.")
|
|
password = ET.Element('password')
|
|
password.text = self.xmpp.password
|
|
query.append(password)
|
|
else:
|
|
logging.debug("Authenticating via jabber:iq:auth Digest")
|
|
digest = ET.Element('digest')
|
|
digest.text = hashlib.sha1(b"%s%s" % (self.streamid, self.xmpp.password)).hexdigest()
|
|
query.append(digest)
|
|
attempt.append(query)
|
|
result = self.xmpp.send(attempt, self.xmpp.makeIq(self.xmpp.id))
|
|
if result.attrib['type'] == 'result':
|
|
with self.xmpp.lock:
|
|
self.xmpp.authenticated = True
|
|
self.xmpp.sessionstarted = True
|
|
self.xmpp.event("session_start")
|
|
else:
|
|
logging.info("Authentication failed")
|
|
self.xmpp.disconnect()
|
|
self.xmpp.event("failed_auth")
|