mirrors/prosody
1
0
Fork 0
mirror of https://github.com/bjc/prosody.git synced 2025-04-04 05:37:39 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

mod_external_services: Prepare to allow more credential algorithms

Browse source 
Not sure what algorithms might fit here. Separation makes some sense.

This is also a preparation for having a callback. (See next commit)
This commit is contained in:
Kim Alvefur 2020-07-25 12:09:19 +02:00
parent 6dfae9bbfa
commit 0b65dea7c0
1 changed files with 25 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

38
plugins/mod_external_services.lua
View file

@ -14,6 +14,27 @@ local configured_services = module:get_option_array("external_services", {});
local access = module:get_option_set("external_service_access", {});
-- https://tools.ietf.org/html/draft-uberti-behave-turn-rest-00
local function behave_turn_rest_credentials(srv, item, secret)
local ttl = default_ttl;
if type(item.ttl) == "number" then
ttl = item.ttl;
end
local expires = srv.expires or os.time() + ttl;
local username;
if type(item.username) == "string" then
username = string.format("%d:%s", expires, item.username);
else
username = string.format("%d", expires);
end
srv.username = username;
srv.password = base64.encode(hashes.hmac_sha1(secret, srv.username));
end
local algorithms = {
turn = behave_turn_rest_credentials;
}
-- filter config into well-defined service records
local function prepare(item)
if type(item) ~= "table" then
@ -63,24 +84,15 @@ local function prepare(item)
srv.expires = os.time() + item.ttl;
end
if (item.secret == true and default_secret) or type(item.secret) == "string" then
local ttl = default_ttl;
if type(item.ttl) == "number" then
ttl = item.ttl;
end
local expires = os.time() + ttl;
local secret_cb = algorithms[item.algorithm] or algorithms[srv.type];
local secret = item.secret;
if secret == true then
secret = default_secret;
end
local username;
if type(item.username) == "string" then
username = string.format("%d:%s", expires, item.username);
else
username = string.format("%d", expires);
if secret_cb then
secret_cb(srv, item, secret);
srv.restricted = true;
end
srv.username = username;
srv.password = base64.encode(hashes.hmac_sha1(secret, srv.username));
srv.restricted = true;
end
return srv;
end