aboutsummaryrefslogtreecommitdiff
path: root/src/cyrsasl_oauth.erl
diff options
context:
space:
mode:
Diffstat (limited to 'src/cyrsasl_oauth.erl')
-rw-r--r--src/cyrsasl_oauth.erl104
1 files changed, 0 insertions, 104 deletions
diff --git a/src/cyrsasl_oauth.erl b/src/cyrsasl_oauth.erl
deleted file mode 100644
index 5520451cb..000000000
--- a/src/cyrsasl_oauth.erl
+++ /dev/null
@@ -1,104 +0,0 @@
-%%%----------------------------------------------------------------------
-%%% File : cyrsasl_oauth.erl
-%%% Author : Alexey Shchepin <alexey@process-one.net>
-%%% Purpose : X-OAUTH2 SASL mechanism
-%%% Created : 17 Sep 2015 by Alexey Shchepin <alexey@process-one.net>
-%%%
-%%%
-%%% ejabberd, Copyright (C) 2002-2018 ProcessOne
-%%%
-%%% This program is free software; you can redistribute it and/or
-%%% modify it under the terms of the GNU General Public License as
-%%% published by the Free Software Foundation; either version 2 of the
-%%% License, or (at your option) any later version.
-%%%
-%%% This program is distributed in the hope that it will be useful,
-%%% but WITHOUT ANY WARRANTY; without even the implied warranty of
-%%% MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
-%%% General Public License for more details.
-%%%
-%%% You should have received a copy of the GNU General Public License along
-%%% with this program; if not, write to the Free Software Foundation, Inc.,
-%%% 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
-%%%
-%%%----------------------------------------------------------------------
-
--module(cyrsasl_oauth).
-
--author('alexey@process-one.net').
-
--export([start/1, stop/0, mech_new/4, mech_step/2, parse/1, format_error/1]).
-
--behaviour(cyrsasl).
-
--record(state, {host}).
--type error_reason() :: parser_failed | not_authorized.
--export_type([error_reason/0]).
-
-start(_Opts) ->
- cyrsasl:register_mechanism(<<"X-OAUTH2">>, ?MODULE, plain).
-
-stop() -> ok.
-
--spec format_error(error_reason()) -> {atom(), binary()}.
-format_error(parser_failed) ->
- {'bad-protocol', <<"Response decoding failed">>};
-format_error(not_authorized) ->
- {'not-authorized', <<"Invalid token">>}.
-
-mech_new(Host, _GetPassword, _CheckPassword, _CheckPasswordDigest) ->
- {ok, #state{host = Host}}.
-
-mech_step(State, ClientIn) ->
- case prepare(ClientIn) of
- [AuthzId, User, Token] ->
- case ejabberd_oauth:check_token(
- User, State#state.host, [<<"sasl_auth">>], Token) of
- true ->
- {ok,
- [{username, User}, {authzid, AuthzId},
- {auth_module, ejabberd_oauth}]};
- _ ->
- {error, not_authorized, User}
- end;
- _ -> {error, parser_failed}
- end.
-
-prepare(ClientIn) ->
- case parse(ClientIn) of
- [<<"">>, UserMaybeDomain, Token] ->
- case parse_domain(UserMaybeDomain) of
- %% <NUL>login@domain<NUL>pwd
- [User, _Domain] -> [User, User, Token];
- %% <NUL>login<NUL>pwd
- [User] -> [User, User, Token]
- end;
- %% login@domain<NUL>login<NUL>pwd
- [AuthzId, User, Token] ->
- case parse_domain(AuthzId) of
- %% login@domain<NUL>login<NUL>pwd
- [AuthzUser, _Domain] -> [AuthzUser, User, Token];
- %% login<NUL>login<NUL>pwd
- [AuthzUser] -> [AuthzUser, User, Token]
- end;
- _ -> error
- end.
-
-parse(S) -> parse1(binary_to_list(S), "", []).
-
-parse1([0 | Cs], S, T) ->
- parse1(Cs, "", [list_to_binary(lists:reverse(S)) | T]);
-parse1([C | Cs], S, T) -> parse1(Cs, [C | S], T);
-%parse1([], [], T) ->
-% lists:reverse(T);
-parse1([], S, T) ->
- lists:reverse([list_to_binary(lists:reverse(S)) | T]).
-
-parse_domain(S) -> parse_domain1(binary_to_list(S), "", []).
-
-parse_domain1([$@ | Cs], S, T) ->
- parse_domain1(Cs, "", [list_to_binary(lists:reverse(S)) | T]);
-parse_domain1([C | Cs], S, T) ->
- parse_domain1(Cs, [C | S], T);
-parse_domain1([], S, T) ->
- lists:reverse([list_to_binary(lists:reverse(S)) | T]).