1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
|
-- ACF Authenticator - does validation and loads sub-authenticator to read/write database
-- We store the login info in the passwd table, "" field. It looks like
-- password:username:ROLE1[,ROLE2...]
module (..., package.seeall)
require("modelfunctions")
require("format")
require("md5")
-- This is the sub-authenticator
-- In the future, this will be set based upon configuration
-- This is a public variable to allow other controllers (ie tinydns) to do their own permissions
auth = require("authenticator-plaintext")
-- Publicly define the pre-defined tables
usertable = "passwd"
roletable = "roles"
-- This will hold the auth structure from the database
local authstruct
local load_database = function(self)
if not authstruct then
local authtable = auth.read_field(self, usertable, "") or {}
authstruct = {}
for i,value in ipairs(authtable) do
if value.id ~= "" then
local fields = {}
for x in string.gmatch(value.entry, "([^:]*):?") do
fields[#fields + 1] = x
end
local a = {}
a.userid = value.id
a.password = fields[1] or ""
a.username = fields[2] or ""
a.roles = fields[3] or ""
a.skin = fields[4] or ""
table.insert(authstruct, a)
end
end
end
end
local get_id = function(userid)
if authstruct ~= nil then
for x = 1,#authstruct do
if authstruct[x].userid == userid then
return authstruct[x]
end
end
end
return nil
end
local weak_password = function(password)
-- If password is too short, return false
if (#password < 4) then
return true, "Password is too short!"
end
if (tonumber(password)) then
return true, "Password can't contain only numbers!"
end
return false, nil
end
local write_settings = function(self, settings, id)
load_database()
id = id or get_id(settings.value.userid.value) or {}
-- Username, password, roles, skin are allowed to not exist, just leave the same
id.userid = settings.value.userid.value
if settings.value.username then id.username = settings.value.username.value end
if settings.value.password then id.password = md5.sumhexa(settings.value.password.value) end
if settings.value.roles then id.roles = table.concat(settings.value.roles.value, ",") end
if settings.value.skin then id.skin = settings.value.skin.value end
local success = auth.write_entry(self, usertable, "", id.userid, (id.password or "")..":"..(id.username or "")..":"..(id.roles or "")..":"..(id.skin or ""))
if success and self.sessiondata.userinfo.userid == id.userid then
self.sessiondata.userinfo = {}
for name,value in pairs(id) do
self.sessiondata.userinfo[name] = value
end
end
return success
end
-- validate the settings (ignore password if it's nil)
local validate_settings = function(settings)
-- Username, password, roles, and skin are allowed to not exist, just leave the same
-- Set errtxt when entering invalid values
if (#settings.value.userid.value == 0) then settings.value.userid.errtxt = "You need to enter a valid userid!" end
if string.find(settings.value.userid.value, "[^%w_]") then settings.value.userid.errtxt = "Can only contain letters, numbers, and '_'" end
if settings.value.username and string.find(settings.value.username.value, "%p") then settings.value.username.errtxt = "Cannot contain punctuation" end
if settings.value.password then
if (#settings.value.password.value == 0) then
settings.value.password.errtxt = "Password cannot be blank!"
elseif (not settings.value.password_confirm) or (settings.value.password.value ~= settings.value.password_confirm.value) then
settings.value.password.errtxt = "You entered wrong password/confirmation"
else
local weak_password_result, weak_password_errormessage = weak_password(settings.value.password.value)
if (weak_password_result) then settings.value.password.errtxt = weak_password_errormessage end
end
end
if settings.value.roles then modelfunctions.validatemulti(settings.value.roles) end
if settings.value.skin then modelfunctions.validateselect(settings.value.skin) end
-- Return false if any errormessages are set
for name,value in pairs(settings.value) do
if value.errtxt then
return false, settings
end
end
return true, settings
end
--- public methods
-- This function returns true or false, and
-- if false: the reason for failure
authenticate = function(self, userid, password)
local errtxt
if not userid or not password then
errtxt = "Invalid parameter"
else
load_database(self)
if not authstruct then
errtxt = "Could not load authentication database"
else
local id = get_id(userid)
if not id then
errtxt = "Userid not found"
elseif id.password ~= md5.sumhexa(password) then
errtxt = "Invalid password"
end
end
end
return (errtxt == nil), errtxt
end
-- This function returns the username, roles, ...
get_userinfo = function(self, userid)
load_database(self)
local result = {}
result.userid = cfe({ value=userid, label="User id" })
result.username = cfe({ label="Real name" })
local id = get_id(userid)
if id then
result.username.value = id.username
elseif userid then
result.userid.errtxt = "User does not exist"
end
result.password = cfe({ label="Password" })
result.password_confirm = cfe({ label="Password (confirm)" })
result.roles = get_userinfo_roles(self, userid)
result.skin = get_userinfo_skin(self, userid)
return cfe({ type="group", value=result, label="User Config" })
end
get_userinfo_roles = function(self, userid)
load_database(self)
local id = get_id(userid)
local roles = cfe({ type="multi", value={}, label="Roles", option={} })
if id then
for x in string.gmatch(id.roles or "", "([^,]+),?") do
roles.value[#roles.value + 1] = x
end
elseif userid then
roles.errtxt = "Could not load roles"
end
local rol = require("roles")
if rol then
local avail_roles = rol.list_all_roles(self)
for x,role in ipairs(avail_roles) do
if role==rol.guest_role then
table.remove(avail_roles,x)
break
end
end
roles.option = avail_roles
end
return roles
end
get_userinfo_skin = function(self, userid)
load_database(self)
local id = get_id(userid)
local skin = cfe({ type="select", value="", label="Skin", option={""} })
if id then
skin.value = id.skin or skin.value
elseif userid then
skins.errtxt = "Could not load skin"
end
-- Call into skins controller to get the list of skins
local contrl = self:new("acf-util/skins")
local skins = contrl:read()
contrl:destroy()
for i,s in ipairs(skins.value) do
skin.option[#skin.option + 1] = s.value
end
return skin
end
list_users = function (self)
load_database(self)
local output = {}
if authstruct then
for k,v in pairs(authstruct) do
table.insert(output,v.userid)
end
end
return output
end
-- For an existing user, change the settings that are non-nil
change_settings = function (self, settings)
local success, settings = validate_settings(settings)
-- Get the current user info
local id
if success then
load_database(self)
id = get_id(settings.value.userid.value)
if not id then
settings.value.userid.errtxt = "This userid does not exist!"
success = false
end
end
if success then
success = write_settings(self, settings, id)
end
if not success then
settings.errtxt = "Failed to save settings"
end
return settings
end
new_settings = function (self, settings)
local success, settings = validate_settings(settings)
if success then
load_database(self)
local id = get_id(settings.value.userid.value)
if id then
settings.value.userid.errtxt = "This userid already exists!"
success = false
end
end
if success then
success = write_settings(self, settings)
end
if not success then
settings.errtxt = "Failed to create new user"
end
return settings
end
delete_user = function (self, userid)
local cmdresult = "Failed to delete user"
if auth.delete_entry(self, usertable, "", userid) then
cmdresult = "User deleted"
end
return cfe({ value=cmdresult, label="Delete user result" })
end
|