0
0
Fork 0
mirror of https://github.com/matrix-construct/construct synced 2024-07-27 12:58:47 +02:00
construct/modules/client/login.cc

102 lines
2.4 KiB
C++

/*
* Copyright (C) 2017 Charybdis Development Team
* Copyright (C) 2017 Jason Volk <jason@zemos.net>
*
* Permission to use, copy, modify, and/or distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
* copyright notice and this permission notice is present in all copies.
*
* THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
* IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
* WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
* DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT,
* INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
* (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
* SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
* IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
* POSSIBILITY OF SUCH DAMAGE.
*/
using namespace ircd;
mods::sym_ref<db::handle> accounts_ref
{
"client_register",
"accounts"
};
resource login_resource
{
"/_matrix/client/r0/login",
"Authenticates the user by password, and issues an access token "
"they can use to authorize themself in subsequent requests. (3.2.2)"
};
resource::response
login(client &client, const resource::request &request)
try
{
const auto user
{
unquote(request.at("user"))
};
const auto password
{
request.at("password")
};
const auto type
{
unquote(request["type"])
};
if(!type.empty() && type != "m.login.password")
{
throw m::error
{
"M_UNSUPPORTED", "Login type is not supported."
};
}
db::handle &accounts(accounts_ref);
accounts(user, [&password](const json::doc &user)
{
if(user["password"] != password)
throw db::not_found();
});
const auto access_token(123456);
const auto home_server("cdc.z");
const auto device_id("ABCDEF");
return resource::response
{
client,
{
{ "user_id", user },
{ "access_token", access_token },
{ "home_server", home_server },
{ "device_id", device_id },
}
};
}
catch(const db::not_found &e)
{
throw m::error
{
http::FORBIDDEN, "M_FORBIDDEN", "Access denied."
};
}
resource::method post
{
login_resource, "POST", login
};
mapi::header IRCD_MODULE
{
"registers the resource 'client/login' to handle requests"
};