Use MSC2778 instead of shared secret for bridge bot login

This commit is contained in:
Tulir Asokan 2020-10-16 16:52:37 +03:00
parent 0329dd5e62
commit ead8a869c8
3 changed files with 19 additions and 11 deletions

View file

@ -19,9 +19,6 @@
package main package main
import ( import (
"crypto/hmac"
"crypto/sha512"
"encoding/hex"
"fmt" "fmt"
"runtime/debug" "runtime/debug"
"time" "time"
@ -87,7 +84,6 @@ func (helper *CryptoHelper) Init() error {
helper.mach = crypto.NewOlmMachine(helper.client, logger, helper.store, stateStore) helper.mach = crypto.NewOlmMachine(helper.client, logger, helper.store, stateStore)
helper.mach.AllowKeyShare = helper.allowKeyShare helper.mach.AllowKeyShare = helper.allowKeyShare
helper.client.Logger = logger.int.Sub("Bot")
helper.client.Syncer = &cryptoSyncer{helper.mach} helper.client.Syncer = &cryptoSyncer{helper.mach}
helper.client.Store = &cryptoClientStore{helper.store} helper.client.Store = &cryptoClientStore{helper.store}
@ -123,22 +119,32 @@ func (helper *CryptoHelper) loginBot() (*mautrix.Client, error) {
if len(deviceID) > 0 { if len(deviceID) > 0 {
helper.log.Debugln("Found existing device ID for bot in database:", deviceID) helper.log.Debugln("Found existing device ID for bot in database:", deviceID)
} }
mac := hmac.New(sha512.New, []byte(helper.bridge.Config.Bridge.LoginSharedSecret))
mac.Write([]byte(helper.bridge.AS.BotMXID()))
client, err := mautrix.NewClient(helper.bridge.AS.HomeserverURL, "", "") client, err := mautrix.NewClient(helper.bridge.AS.HomeserverURL, "", "")
if err != nil { if err != nil {
return nil, err return nil, fmt.Errorf("failed to initialize client: %w", err)
} }
client.Logger = helper.baseLog.Sub("Bot")
flows, err := client.GetLoginFlows()
if err != nil {
return nil, fmt.Errorf("failed to get supported login flows: %w", err)
}
if !flows.HasFlow(mautrix.AuthTypeAppservice) {
// TODO after synapse 1.22, turn this into an error
helper.log.Warnln("Encryption enabled in config, but homeserver does not advertise appservice login")
//return nil, fmt.Errorf("homeserver does not support appservice login")
}
// We set the API token to the AS token here to authenticate the appservice login
// It'll get overridden after the login
client.AccessToken = helper.bridge.AS.Registration.AppToken
resp, err := client.Login(&mautrix.ReqLogin{ resp, err := client.Login(&mautrix.ReqLogin{
Type: mautrix.AuthTypePassword, Type: mautrix.AuthTypeAppservice,
Identifier: mautrix.UserIdentifier{Type: mautrix.IdentifierTypeUser, User: string(helper.bridge.AS.BotMXID())}, Identifier: mautrix.UserIdentifier{Type: mautrix.IdentifierTypeUser, User: string(helper.bridge.AS.BotMXID())},
Password: hex.EncodeToString(mac.Sum(nil)),
DeviceID: deviceID, DeviceID: deviceID,
InitialDeviceDisplayName: "WhatsApp Bridge", InitialDeviceDisplayName: "WhatsApp Bridge",
StoreCredentials: true, StoreCredentials: true,
}) })
if err != nil { if err != nil {
return nil, err return nil, fmt.Errorf("failed to log in as bridge bot: %w", err)
} }
if len(deviceID) == 0 { if len(deviceID) == 0 {
helper.store.DeviceID = resp.DeviceID helper.store.DeviceID = resp.DeviceID

2
go.mod
View file

@ -13,7 +13,7 @@ require (
gopkg.in/yaml.v2 v2.3.0 gopkg.in/yaml.v2 v2.3.0
maunium.net/go/mauflag v1.0.0 maunium.net/go/mauflag v1.0.0
maunium.net/go/maulogger/v2 v2.1.1 maunium.net/go/maulogger/v2 v2.1.1
maunium.net/go/mautrix v0.7.12 maunium.net/go/mautrix v0.7.13
) )
replace github.com/Rhymen/go-whatsapp => github.com/tulir/go-whatsapp v0.3.10 replace github.com/Rhymen/go-whatsapp => github.com/tulir/go-whatsapp v0.3.10

2
go.sum
View file

@ -189,3 +189,5 @@ maunium.net/go/mautrix v0.7.11 h1:3MdKRs8Dt1H8PvKH/6ES1AdooJngBVEGAwLLeVTnouk=
maunium.net/go/mautrix v0.7.11/go.mod h1:FpsAvwNdG3Zeup7Y2Nlv81Lk0h6iVRPoIy6D7g/7YCE= maunium.net/go/mautrix v0.7.11/go.mod h1:FpsAvwNdG3Zeup7Y2Nlv81Lk0h6iVRPoIy6D7g/7YCE=
maunium.net/go/mautrix v0.7.12 h1:kJN5ErlzGAQdNMv58Rv4GATkLlb4OJ3l0IOwxFovlVc= maunium.net/go/mautrix v0.7.12 h1:kJN5ErlzGAQdNMv58Rv4GATkLlb4OJ3l0IOwxFovlVc=
maunium.net/go/mautrix v0.7.12/go.mod h1:Jn0ijwXwMFvJFIN9IljirIVKpZQbZP/Dk7pdX2qDmXk= maunium.net/go/mautrix v0.7.12/go.mod h1:Jn0ijwXwMFvJFIN9IljirIVKpZQbZP/Dk7pdX2qDmXk=
maunium.net/go/mautrix v0.7.13 h1:qfnvLxvQafvLgHbdZF/+9qs9gyArYf8fUnzfQbjgQaU=
maunium.net/go/mautrix v0.7.13/go.mod h1:Jn0ijwXwMFvJFIN9IljirIVKpZQbZP/Dk7pdX2qDmXk=