233 lines
8.0 KiB
C#
233 lines
8.0 KiB
C#
|
/*
|
||
|
|
* Copyright (c) Contributors, http://opensimulator.org/
|
||
|
|
* See CONTRIBUTORS.TXT for a full list of copyright holders.
|
||
|
|
*
|
||
|
|
* Redistribution and use in source and binary forms, with or without
|
||
|
|
* modification, are permitted provided that the following conditions are met:
|
||
|
|
* * Redistributions of source code must retain the above copyright
|
||
|
|
* notice, this list of conditions and the following disclaimer.
|
||
|
|
* * Redistributions in binary form must reproduce the above copyright
|
||
|
|
* notice, this list of conditions and the following disclaimer in the
|
||
|
|
* documentation and/or other materials provided with the distribution.
|
||
|
|
* * Neither the name of the OpenSimulator Project nor the
|
||
|
|
* names of its contributors may be used to endorse or promote products
|
||
|
|
* derived from this software without specific prior written permission.
|
||
|
|
*
|
||
|
|
* THIS SOFTWARE IS PROVIDED BY THE DEVELOPERS ``AS IS'' AND ANY
|
||
|
|
* EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
|
||
|
|
* WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
|
||
|
|
* DISCLAIMED. IN NO EVENT SHALL THE CONTRIBUTORS BE LIABLE FOR ANY
|
||
|
|
* DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
|
||
|
|
* (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
|
||
|
|
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
|
||
|
|
* ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
|
||
|
|
* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
|
||
|
|
* SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||
|
|
*/
|
||
|
|
|
||
|
|
using log4net;
|
||
|
|
using System;
|
||
|
|
using System.Collections.Generic;
|
||
|
|
using System.IO;
|
||
|
|
using System.Reflection;
|
||
|
|
using Nini.Config;
|
||
|
|
using OpenSim.Framework;
|
||
|
|
using OpenSim.Framework.ServiceAuth;
|
||
|
|
using OpenSim.Services.Interfaces;
|
||
|
|
using OpenSim.Server.Base;
|
||
|
|
using OpenMetaverse;
|
||
|
|
|
||
|
|
namespace OpenSim.Services.Connectors
|
||
|
|
{
|
||
|
|
public class AuthenticationServicesConnector : BaseServiceConnector, IAuthenticationService
|
||
|
|
{
|
||
|
|
private static readonly ILog m_log =
|
||
|
|
LogManager.GetLogger(
|
||
|
|
MethodBase.GetCurrentMethod().DeclaringType);
|
||
|
|
|
||
|
|
private List<String> m_authServers = new List<String>();
|
||
|
|
|
||
|
|
public AuthenticationServicesConnector()
|
||
|
|
{
|
||
|
|
}
|
||
|
|
|
||
|
|
public AuthenticationServicesConnector(string serverURI)
|
||
|
|
{
|
||
|
|
m_authServers.Add(serverURI.TrimEnd('/'));
|
||
|
|
}
|
||
|
|
|
||
|
|
public AuthenticationServicesConnector(IConfigSource source)
|
||
|
|
: base(source, "AuthenticationService")
|
||
|
|
{
|
||
|
|
Initialise(source);
|
||
|
|
}
|
||
|
|
|
||
|
|
public virtual void Initialise(IConfigSource source)
|
||
|
|
{
|
||
|
|
IConfig assetConfig = source.Configs["AuthenticationService"];
|
||
|
|
if (assetConfig == null)
|
||
|
|
{
|
||
|
|
m_log.Error("[AUTH CONNECTOR]: AuthenticationService missing from OpenSim.ini");
|
||
|
|
throw new Exception("Authentication connector init error");
|
||
|
|
}
|
||
|
|
|
||
|
|
string serviceURI = assetConfig.GetString("AuthenticationServerURI",
|
||
|
|
String.Empty);
|
||
|
|
|
||
|
|
if (serviceURI == String.Empty)
|
||
|
|
{
|
||
|
|
m_log.Error("[AUTH CONNECTOR]: No Server URI named in section AuthenticationService");
|
||
|
|
throw new Exception("Authentication connector init error");
|
||
|
|
}
|
||
|
|
|
||
|
|
m_authServers.AddRange(serviceURI.Split(';'));
|
||
|
|
|
||
|
|
base.Initialise(source, "AuthenticationService");
|
||
|
|
}
|
||
|
|
|
||
|
|
public string Authenticate(UUID principalID, string password, int lifetime, out UUID realID)
|
||
|
|
{
|
||
|
|
realID = UUID.Zero;
|
||
|
|
|
||
|
|
foreach (String serverURL in m_authServers)
|
||
|
|
{
|
||
|
|
String result = Authenticate(serverURL, principalID, password, lifetime, out realID);
|
||
|
|
|
||
|
|
if (result != String.Empty)
|
||
|
|
return result;
|
||
|
|
}
|
||
|
|
|
||
|
|
return String.Empty;
|
||
|
|
}
|
||
|
|
|
||
|
|
public string Authenticate(String m_ServerURI, UUID principalID, string password, int lifetime, out UUID realID)
|
||
|
|
{
|
||
|
|
realID = UUID.Zero;
|
||
|
|
|
||
|
|
return Authenticate(m_ServerURI, principalID, password, lifetime);
|
||
|
|
}
|
||
|
|
|
||
|
|
public string Authenticate(UUID principalID, string password, int lifetime)
|
||
|
|
{
|
||
|
|
foreach (String serverURL in m_authServers)
|
||
|
|
{
|
||
|
|
String result = Authenticate(serverURL, principalID, password, lifetime);
|
||
|
|
|
||
|
|
if (result != String.Empty)
|
||
|
|
return result;
|
||
|
|
}
|
||
|
|
|
||
|
|
return String.Empty;
|
||
|
|
}
|
||
|
|
|
||
|
|
public string Authenticate(String m_ServerURI, UUID principalID, string password, int lifetime)
|
||
|
|
{
|
||
|
|
Dictionary<string, object> sendData = new Dictionary<string, object>();
|
||
|
|
sendData["LIFETIME"] = lifetime.ToString();
|
||
|
|
sendData["PRINCIPAL"] = principalID.ToString();
|
||
|
|
sendData["PASSWORD"] = password;
|
||
|
|
|
||
|
|
sendData["METHOD"] = "authenticate";
|
||
|
|
|
||
|
|
string reply = SynchronousRestFormsRequester.MakeRequest("POST",
|
||
|
|
m_ServerURI + "/auth/plain",
|
||
|
|
ServerUtils.BuildQueryString(sendData), m_Auth);
|
||
|
|
|
||
|
|
Dictionary<string, object> replyData = ServerUtils.ParseXmlResponse(
|
||
|
|
reply);
|
||
|
|
|
||
|
|
if (replyData["Result"].ToString() != "Success")
|
||
|
|
return String.Empty;
|
||
|
|
|
||
|
|
return replyData["Token"].ToString();
|
||
|
|
}
|
||
|
|
|
||
|
|
public bool Verify(UUID principalID, string token, int lifetime)
|
||
|
|
{
|
||
|
|
foreach (String serverURL in m_authServers)
|
||
|
|
{
|
||
|
|
bool result = Verify(serverURL, principalID, token, lifetime);
|
||
|
|
|
||
|
|
if (result == true)
|
||
|
|
return result;
|
||
|
|
}
|
||
|
|
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
|
||
|
|
public bool Verify(String m_ServerURI, UUID principalID, string token, int lifetime)
|
||
|
|
{
|
||
|
|
// m_log.Error("[XXX]: Verify");
|
||
|
|
Dictionary<string, object> sendData = new Dictionary<string, object>();
|
||
|
|
sendData["LIFETIME"] = lifetime.ToString();
|
||
|
|
sendData["PRINCIPAL"] = principalID.ToString();
|
||
|
|
sendData["TOKEN"] = token;
|
||
|
|
|
||
|
|
sendData["METHOD"] = "verify";
|
||
|
|
|
||
|
|
string reply = SynchronousRestFormsRequester.MakeRequest("POST",
|
||
|
|
m_ServerURI + "/auth/plain",
|
||
|
|
ServerUtils.BuildQueryString(sendData), m_Auth);
|
||
|
|
|
||
|
|
Dictionary<string, object> replyData = ServerUtils.ParseXmlResponse(
|
||
|
|
reply);
|
||
|
|
|
||
|
|
if (replyData["Result"].ToString() != "Success")
|
||
|
|
return false;
|
||
|
|
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
|
||
|
|
public bool Release(UUID principalID, string token)
|
||
|
|
{
|
||
|
|
foreach (String serverURL in m_authServers)
|
||
|
|
{
|
||
|
|
bool result = Release(serverURL, principalID, token);
|
||
|
|
|
||
|
|
if (result == true)
|
||
|
|
return result;
|
||
|
|
}
|
||
|
|
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
|
||
|
|
public bool Release(String m_ServerURI, UUID principalID, string token)
|
||
|
|
{
|
||
|
|
Dictionary<string, object> sendData = new Dictionary<string, object>();
|
||
|
|
sendData["PRINCIPAL"] = principalID.ToString();
|
||
|
|
sendData["TOKEN"] = token;
|
||
|
|
|
||
|
|
sendData["METHOD"] = "release";
|
||
|
|
|
||
|
|
string reply = SynchronousRestFormsRequester.MakeRequest("POST",
|
||
|
|
m_ServerURI + "/auth/plain",
|
||
|
|
ServerUtils.BuildQueryString(sendData), m_Auth);
|
||
|
|
|
||
|
|
Dictionary<string, object> replyData = ServerUtils.ParseXmlResponse(reply);
|
||
|
|
|
||
|
|
if (replyData["Result"].ToString() != "Success")
|
||
|
|
return false;
|
||
|
|
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
|
||
|
|
public bool SetPassword(UUID principalID, string passwd)
|
||
|
|
{
|
||
|
|
// nope, we don't do this
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
|
||
|
|
public AuthInfo GetAuthInfo(UUID principalID)
|
||
|
|
{
|
||
|
|
// not done from remote simulators
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
|
||
|
|
public bool SetAuthInfo(AuthInfo info)
|
||
|
|
{
|
||
|
|
// not done from remote simulators
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|