81 lines
2.9 KiB
Python
81 lines
2.9 KiB
Python
"""
|
|
SleekXMPP: The Sleek XMPP Library
|
|
Copyright (C) 2007 Nathanael C. Fritz
|
|
This file is part of SleekXMPP.
|
|
|
|
SleekXMPP is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; either version 2 of the License, or
|
|
(at your option) any later version.
|
|
|
|
SleekXMPP is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with SleekXMPP; if not, write to the Free Software
|
|
Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
|
"""
|
|
from __future__ import with_statement
|
|
from xml.etree import cElementTree as ET
|
|
import logging
|
|
import sha
|
|
import base
|
|
|
|
|
|
class xep_0078(base.base_plugin):
|
|
"""
|
|
XEP-0078 NON-SASL Authentication
|
|
"""
|
|
def plugin_init(self):
|
|
self.description = "Non-SASL Authentication (broken)"
|
|
self.xep = "0078"
|
|
self.xmpp.add_start_handler(self.check_stream)
|
|
#disabling until I fix conflict with PLAIN
|
|
#self.xmpp.registerFeature("<auth xmlns='http://jabber.org/features/iq-auth'/>", self.auth)
|
|
self.streamid = ''
|
|
|
|
def check_stream(self, xml):
|
|
self.streamid = xml.attrib['id']
|
|
if xml.get('version', '0') != '1.0':
|
|
self.auth()
|
|
|
|
def auth(self, xml=None):
|
|
logging.debug("Starting jabber:iq:auth Authentication")
|
|
auth_request = self.xmpp.makeIqGet()
|
|
auth_request_query = ET.Element('{jabber:iq:auth}query')
|
|
auth_request.attrib['to'] = self.xmpp.server
|
|
username = ET.Element('username')
|
|
username.text = self.xmpp.username
|
|
auth_request_query.append(username)
|
|
auth_request.append(auth_request_query)
|
|
result = self.xmpp.send(auth_request, self.xmpp.makeIqResult(self.xmpp.id))
|
|
rquery = result.find('{jabber:iq:auth}query')
|
|
attempt = self.xmpp.makeIqSet()
|
|
query = ET.Element('{jabber:iq:auth}query')
|
|
resource = ET.Element('resource')
|
|
resource.text = self.xmpp.resource
|
|
query.append(username)
|
|
query.append(resource)
|
|
if rquery.find('{jabber:iq:auth}digest') is None:
|
|
logging.warning("Authenticating via jabber:iq:auth Plain.")
|
|
password = ET.Element('password')
|
|
password.text = self.xmpp.password
|
|
query.append(password)
|
|
else:
|
|
logging.debug("Authenticating via jabber:iq:auth Digest")
|
|
digest = ET.Element('digest')
|
|
digest.text = sha.sha("%s%s" % (self.streamid, self.xmpp.password)).hexdigest()
|
|
query.append(digest)
|
|
attempt.append(query)
|
|
result = self.xmpp.send(attempt, self.xmpp.makeIq(self.xmpp.id))
|
|
if result.attrib['type'] == 'result':
|
|
with self.xmpp.lock:
|
|
self.xmpp.authenticated = True
|
|
self.xmpp.sessionstarted = True
|
|
self.xmpp.event("session_start")
|
|
else:
|
|
logging.info("Authentication failed")
|
|
self.xmpp.disconnect()
|
|
self.xmpp.event("failed_auth")
|