login/server.c

Go to the documentation of this file.

/* server.c --- Non-standard SASL mechanism LOGIN, server side.
 * Copyright (C) 2002-2025 Simon Josefsson
 *
 * This file is part of GNU SASL Library.
 *
 * GNU SASL Library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public License
 * as published by the Free Software Foundation; either version 2.1 of
 * the License, or (at your option) any later version.
 *
 * GNU SASL Library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with GNU SASL Library; if not, see
 * <https://www.gnu.org/licenses/>.
 *
 */
 
#include <config.h>
 
/* Get malloc, free. */
#include <stdlib.h>
 
/* Get strdup, strlen. */
#include <string.h>
 
/* Get specification. */
#include "login.h"
 
struct _Gsasl_login_server_state
{
  int step;
  char *username;
  char *password;
};
 
#define CHALLENGE_USERNAME "User Name"
#define CHALLENGE_PASSWORD "Password"
 
int
_gsasl_login_server_start (Gsasl_session *sctx _GL_UNUSED, void **mech_data)
{
  struct _Gsasl_login_server_state *state;
 
  state = calloc (1, sizeof (*state));
  if (state == NULL)
    return GSASL_MALLOC_ERROR;
 
  *mech_data = state;
 
  return GSASL_OK;
}
 
int
_gsasl_login_server_step (Gsasl_session *sctx,
                          void *mech_data,
                          const char *input, size_t input_len,
                          char **output, size_t *output_len)
{
  struct _Gsasl_login_server_state *state = mech_data;
  int res;
 
  switch (state->step)
    {
    case 0:
      *output = strdup (CHALLENGE_USERNAME);
      if (!*output)
        return GSASL_MALLOC_ERROR;
      *output_len = strlen (CHALLENGE_USERNAME);
 
      state->step++;
      res = GSASL_NEEDS_MORE;
      break;
 
    case 1:
      if (input_len == 0)
        return GSASL_MECHANISM_PARSE_ERROR;
 
      state->username = strndup (input, input_len);
      if (state->username == NULL)
        return GSASL_MALLOC_ERROR;
 
      if (input_len != strlen (state->username))
        return GSASL_MECHANISM_PARSE_ERROR;
 
      *output = strdup (CHALLENGE_PASSWORD);
      if (!*output)
        return GSASL_MALLOC_ERROR;
      *output_len = strlen (CHALLENGE_PASSWORD);
 
      state->step++;
      res = GSASL_NEEDS_MORE;
      break;
 
    case 2:
      if (input_len == 0)
        return GSASL_MECHANISM_PARSE_ERROR;
 
      state->password = strndup (input, input_len);
      if (state->password == NULL)
        return GSASL_MALLOC_ERROR;
 
      if (input_len != strlen (state->password))
        return GSASL_MECHANISM_PARSE_ERROR;
 
      res = gsasl_property_set (sctx, GSASL_AUTHID, state->username);
      if (res != GSASL_OK)
        return res;
      res = gsasl_property_set (sctx, GSASL_PASSWORD, state->password);
      if (res != GSASL_OK)
        return res;
 
      res = gsasl_callback (NULL, sctx, GSASL_VALIDATE_SIMPLE);
      if (res == GSASL_NO_CALLBACK)
        {
          const char *key;
 
          gsasl_property_free (sctx, GSASL_AUTHZID);
          gsasl_property_free (sctx, GSASL_PASSWORD);
 
          key = gsasl_property_get (sctx, GSASL_PASSWORD);
 
          if (key && strlen (state->password) == strlen (key) &&
              strcmp (state->password, key) == 0)
            res = GSASL_OK;
          else
            res = GSASL_AUTHENTICATION_ERROR;
        }
 
      *output_len = 0;
      *output = NULL;
      state->step++;
      break;
 
    default:
      res = GSASL_MECHANISM_CALLED_TOO_MANY_TIMES;
      break;
    }
 
  return res;
}
 
void
_gsasl_login_server_finish (Gsasl_session *sctx _GL_UNUSED, void *mech_data)
{
  struct _Gsasl_login_server_state *state = mech_data;
 
  if (!state)
    return;
 
  free (state->username);
  free (state->password);
  free (state);
}