MirrorHub/construct
0
0
Fork 0
mirror of https://github.com/matrix-construct/construct synced 2024-12-29 00:44:17 +01:00
Code Issues Releases Wiki Activity

ircd: Use db based access_token query for auth.

Browse source
This commit is contained in:
Jason Volk 2017-09-16 15:22:54 -07:00
parent e427caf544
commit 469d286175
1 changed files with 18 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

21
ircd/resource.cc
View file

@ -108,15 +108,30 @@ noexcept
namespace ircd {
const m::room accounts
{
m::id::room{"!accounts:cdc.z"}
};
static void
authenticate(client &client,
resource::method &method,
resource::request &request)
try
{
const auto &access_token(request.query.at("access_token"));
const auto it(resource::tokens.find(access_token));
if(it == end(resource::tokens))
const auto &access_token
{
request.query.at("access_token")
};
// Sets up the query to find the access_token in the accounts room
const m::events::where::equal query
{
{ "type", "ircd.access_token" },
{ "state_key", access_token }
};
if(!accounts.any(query))
throw m::error
{
// When credentials are required but missing or invalid, the HTTP call will return with