/usr/share/gocode/src/github.com/ctdk/goiardi/authenticate_users.go is in golang-github-ctdk-goiardi-dev 0.11.2-2.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 | /* Authenticate_user functions */
/*
* Copyright (c) 2013-2016, Jeremy Bingham (<jeremy@goiardi.gl>)
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package main
import (
"encoding/json"
"fmt"
"github.com/ctdk/goiardi/config"
"github.com/ctdk/goiardi/user"
"net/http"
)
type authenticator struct {
Name, Password string
}
type authResponse struct {
Name string `json:"name"`
Verified bool `json:"verified"`
}
func authenticateUserHandler(w http.ResponseWriter, r *http.Request) {
w.Header().Set("Content-Type", "application/json")
dec := json.NewDecoder(r.Body)
dec.UseNumber()
authJSON := make(map[string]interface{})
if err := dec.Decode(&authJSON); err != nil {
jsonErrorReport(w, r, err.Error(), http.StatusBadRequest)
return
}
auth, authErr := validateJSON(authJSON)
if authErr != nil {
jsonErrorReport(w, r, authErr.Error(), http.StatusBadRequest)
return
}
resp := validateLogin(auth)
enc := json.NewEncoder(w)
if err := enc.Encode(resp); err != nil {
jsonErrorReport(w, r, err.Error(), http.StatusInternalServerError)
}
}
func validateLogin(auth *authenticator) authResponse {
// Check passwords and such later.
// Automatically validate if UseAuth is not on
var resp authResponse
resp.Name = auth.Name
if !config.Config.UseAuth {
resp.Verified = true
return resp
}
u, err := user.Get(auth.Name)
if err != nil {
resp.Verified = false
return resp
}
perr := u.CheckPasswd(auth.Password)
if perr != nil {
resp.Verified = false
} else {
resp.Verified = true
}
return resp
}
func validateJSON(authJSON map[string]interface{}) (*authenticator, error) {
auth := new(authenticator)
if name, ok := authJSON["name"]; ok {
switch name := name.(type) {
case string:
auth.Name = name
default:
err := fmt.Errorf("Field 'name' invalid")
return nil, err
}
} else {
err := fmt.Errorf("Field 'name' missing")
return nil, err
}
if passwd, ok := authJSON["password"]; ok {
switch passwd := passwd.(type) {
case string:
auth.Password = passwd
default:
err := fmt.Errorf("Field 'password' invalid")
return nil, err
}
} else {
err := fmt.Errorf("Field 'password' missing")
return nil, err
}
return auth, nil
}
|