snac.c 2.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151
  1. /* snac - A simple, minimalistic ActivityPub instance */
  2. /* copyright (c) 2022 - 2023 grunfink / MIT license */
  3. #define XS_IMPLEMENTATION
  4. #include "xs.h"
  5. #include "xs_io.h"
  6. #include "xs_unicode.h"
  7. #include "xs_json.h"
  8. #include "xs_encdec.h"
  9. #include "xs_curl.h"
  10. #include "xs_openssl.h"
  11. #include "xs_socket.h"
  12. #include "xs_httpd.h"
  13. #include "xs_mime.h"
  14. #include "xs_regex.h"
  15. #include "xs_set.h"
  16. #include "xs_time.h"
  17. #include "xs_glob.h"
  18. #include "snac.h"
  19. #include <sys/time.h>
  20. #include <sys/stat.h>
  21. d_char *srv_basedir = NULL;
  22. d_char *srv_config = NULL;
  23. d_char *srv_baseurl = NULL;
  24. int srv_running = 0;
  25. int dbglevel = 0;
  26. int mkdirx(const char *pathname)
  27. /* creates a directory with special permissions */
  28. {
  29. int ret;
  30. if ((ret = mkdir(pathname, DIR_PERM)) != -1)
  31. ret = chmod(pathname, DIR_PERM);
  32. return ret;
  33. }
  34. int valid_status(int status)
  35. /* is this HTTP status valid? */
  36. {
  37. return status >= 200 && status <= 299;
  38. }
  39. d_char *tid(int offset)
  40. /* returns a time-based Id */
  41. {
  42. struct timeval tv;
  43. gettimeofday(&tv, NULL);
  44. return xs_fmt("%10d.%06d", tv.tv_sec + offset, tv.tv_usec);
  45. }
  46. double ftime(void)
  47. /* returns the UNIX time as a float */
  48. {
  49. xs *ntid = tid(0);
  50. return atof(ntid);
  51. }
  52. int validate_uid(const char *uid)
  53. /* returns if uid is a valid identifier */
  54. {
  55. while (*uid) {
  56. if (!(isalnum(*uid) || *uid == '_'))
  57. return 0;
  58. uid++;
  59. }
  60. return 1;
  61. }
  62. void srv_debug(int level, d_char *str)
  63. /* logs a debug message */
  64. {
  65. if (xs_str_in(str, srv_basedir) != -1) {
  66. /* replace basedir with ~ */
  67. str = xs_replace_i(str, srv_basedir, "~");
  68. }
  69. if (dbglevel >= level) {
  70. xs *tm = xs_str_localtime(0, "%H:%M:%S");
  71. fprintf(stderr, "%s %s\n", tm, str);
  72. }
  73. xs_free(str);
  74. }
  75. void snac_debug(snac *snac, int level, d_char *str)
  76. /* prints a user debugging information */
  77. {
  78. xs *o_str = str;
  79. d_char *msg = xs_fmt("[%s] %s", snac->uid, o_str);
  80. if (xs_str_in(msg, snac->basedir) != -1) {
  81. /* replace long basedir references with ~ */
  82. msg = xs_replace_i(msg, snac->basedir, "~");
  83. }
  84. srv_debug(level, msg);
  85. }
  86. d_char *hash_password(const char *uid, const char *passwd, const char *nonce)
  87. /* hashes a password */
  88. {
  89. xs *d_nonce = NULL;
  90. xs *combi;
  91. xs *hash;
  92. if (nonce == NULL) {
  93. d_nonce = xs_fmt("%08x", random());
  94. nonce = d_nonce;
  95. }
  96. combi = xs_fmt("%s:%s:%s", nonce, uid, passwd);
  97. hash = xs_sha1_hex(combi, strlen(combi));
  98. return xs_fmt("%s:%s", nonce, hash);
  99. }
  100. int check_password(const char *uid, const char *passwd, const char *hash)
  101. /* checks a password */
  102. {
  103. int ret = 0;
  104. xs *spl = xs_split_n(hash, ":", 1);
  105. if (xs_list_len(spl) == 2) {
  106. xs *n_hash = hash_password(uid, passwd, xs_list_get(spl, 0));
  107. ret = (strcmp(hash, n_hash) == 0);
  108. }
  109. return ret;
  110. }