mirror of
https://github.com/matrix-org/dendrite
synced 2024-07-01 18:58:21 +02:00
9c77022513
* Make userapi responsible for checking access tokens There's still plenty of dependencies on account/device DBs, but this is a start. This is a breaking change as it adds a required config value `listen.user_api`. * Cleanup * Review comments and test fix
80 lines
2.2 KiB
Go
80 lines
2.2 KiB
Go
// Copyright 2017 Michael Telatysnki <7t3chguy@gmail.com>
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package routing
|
|
|
|
import (
|
|
"crypto/hmac"
|
|
"crypto/sha1"
|
|
"encoding/base64"
|
|
"fmt"
|
|
"net/http"
|
|
"time"
|
|
|
|
"github.com/matrix-org/dendrite/clientapi/jsonerror"
|
|
"github.com/matrix-org/dendrite/internal/config"
|
|
"github.com/matrix-org/dendrite/userapi/api"
|
|
"github.com/matrix-org/gomatrix"
|
|
"github.com/matrix-org/util"
|
|
)
|
|
|
|
// RequestTurnServer implements:
|
|
// GET /voip/turnServer
|
|
func RequestTurnServer(req *http.Request, device *api.Device, cfg *config.Dendrite) util.JSONResponse {
|
|
turnConfig := cfg.TURN
|
|
|
|
// TODO Guest Support
|
|
if len(turnConfig.URIs) == 0 || turnConfig.UserLifetime == "" {
|
|
return util.JSONResponse{
|
|
Code: http.StatusOK,
|
|
JSON: struct{}{},
|
|
}
|
|
}
|
|
|
|
// Duration checked at startup, err not possible
|
|
duration, _ := time.ParseDuration(turnConfig.UserLifetime)
|
|
|
|
resp := gomatrix.RespTurnServer{
|
|
URIs: turnConfig.URIs,
|
|
TTL: int(duration.Seconds()),
|
|
}
|
|
|
|
if turnConfig.SharedSecret != "" {
|
|
expiry := time.Now().Add(duration).Unix()
|
|
mac := hmac.New(sha1.New, []byte(turnConfig.SharedSecret))
|
|
_, err := mac.Write([]byte(resp.Username))
|
|
|
|
if err != nil {
|
|
util.GetLogger(req.Context()).WithError(err).Error("mac.Write failed")
|
|
return jsonerror.InternalServerError()
|
|
}
|
|
|
|
resp.Username = fmt.Sprintf("%d:%s", expiry, device.UserID)
|
|
resp.Password = base64.StdEncoding.EncodeToString(mac.Sum(nil))
|
|
} else if turnConfig.Username != "" && turnConfig.Password != "" {
|
|
resp.Username = turnConfig.Username
|
|
resp.Password = turnConfig.Password
|
|
} else {
|
|
return util.JSONResponse{
|
|
Code: http.StatusOK,
|
|
JSON: struct{}{},
|
|
}
|
|
}
|
|
|
|
return util.JSONResponse{
|
|
Code: http.StatusOK,
|
|
JSON: resp,
|
|
}
|
|
}
|