snac.c 2.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150
  1. /* snac - A simple, minimalistic ActivityPub instance */
  2. /* copyright (c) 2022 - 2023 grunfink / MIT license */
  3. #define XS_IMPLEMENTATION
  4. #include "xs.h"
  5. #include "xs_io.h"
  6. #include "xs_encdec.h"
  7. #include "xs_json.h"
  8. #include "xs_curl.h"
  9. #include "xs_openssl.h"
  10. #include "xs_socket.h"
  11. #include "xs_httpd.h"
  12. #include "xs_mime.h"
  13. #include "xs_regex.h"
  14. #include "xs_set.h"
  15. #include "xs_time.h"
  16. #include "xs_glob.h"
  17. #include "snac.h"
  18. #include <sys/time.h>
  19. #include <sys/stat.h>
  20. d_char *srv_basedir = NULL;
  21. d_char *srv_config = NULL;
  22. d_char *srv_baseurl = NULL;
  23. int srv_running = 0;
  24. int dbglevel = 0;
  25. int mkdirx(const char *pathname)
  26. /* creates a directory with special permissions */
  27. {
  28. int ret;
  29. if ((ret = mkdir(pathname, DIR_PERM)) != -1)
  30. ret = chmod(pathname, DIR_PERM);
  31. return ret;
  32. }
  33. int valid_status(int status)
  34. /* is this HTTP status valid? */
  35. {
  36. return status >= 200 && status <= 299;
  37. }
  38. d_char *tid(int offset)
  39. /* returns a time-based Id */
  40. {
  41. struct timeval tv;
  42. gettimeofday(&tv, NULL);
  43. return xs_fmt("%10d.%06d", tv.tv_sec + offset, tv.tv_usec);
  44. }
  45. double ftime(void)
  46. /* returns the UNIX time as a float */
  47. {
  48. xs *ntid = tid(0);
  49. return atof(ntid);
  50. }
  51. int validate_uid(const char *uid)
  52. /* returns if uid is a valid identifier */
  53. {
  54. while (*uid) {
  55. if (!(isalnum(*uid) || *uid == '_'))
  56. return 0;
  57. uid++;
  58. }
  59. return 1;
  60. }
  61. void srv_debug(int level, d_char *str)
  62. /* logs a debug message */
  63. {
  64. if (xs_str_in(str, srv_basedir) != -1) {
  65. /* replace basedir with ~ */
  66. str = xs_replace_i(str, srv_basedir, "~");
  67. }
  68. if (dbglevel >= level) {
  69. xs *tm = xs_str_localtime(0, "%H:%M:%S");
  70. fprintf(stderr, "%s %s\n", tm, str);
  71. }
  72. xs_free(str);
  73. }
  74. void snac_debug(snac *snac, int level, d_char *str)
  75. /* prints a user debugging information */
  76. {
  77. xs *o_str = str;
  78. d_char *msg = xs_fmt("[%s] %s", snac->uid, o_str);
  79. if (xs_str_in(msg, snac->basedir) != -1) {
  80. /* replace long basedir references with ~ */
  81. msg = xs_replace_i(msg, snac->basedir, "~");
  82. }
  83. srv_debug(level, msg);
  84. }
  85. d_char *hash_password(const char *uid, const char *passwd, const char *nonce)
  86. /* hashes a password */
  87. {
  88. xs *d_nonce = NULL;
  89. xs *combi;
  90. xs *hash;
  91. if (nonce == NULL) {
  92. d_nonce = xs_fmt("%08x", arc4random());
  93. nonce = d_nonce;
  94. }
  95. combi = xs_fmt("%s:%s:%s", nonce, uid, passwd);
  96. hash = xs_sha1_hex(combi, strlen(combi));
  97. return xs_fmt("%s:%s", nonce, hash);
  98. }
  99. int check_password(const char *uid, const char *passwd, const char *hash)
  100. /* checks a password */
  101. {
  102. int ret = 0;
  103. xs *spl = xs_split_n(hash, ":", 1);
  104. if (xs_list_len(spl) == 2) {
  105. xs *n_hash = hash_password(uid, passwd, xs_list_get(spl, 0));
  106. ret = (strcmp(hash, n_hash) == 0);
  107. }
  108. return ret;
  109. }