]> jfr.im git - solanum.git/blob - authd/provider.h
Merge branch 'master' into authd-framework-2
[solanum.git] / authd / provider.h
1 /* authd/provider.h - authentication provider framework
2 * Copyright (c) 2016 Elizabeth Myers <elizabeth@interlinked.me>
3 *
4 * Permission to use, copy, modify, and/or distribute this software for any
5 * purpose with or without fee is hereby granted, provided that the above
6 * copyright notice and this permission notice is present in all copies.
7 *
8 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
9 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
10 * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
11 * DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT,
12 * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
13 * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
14 * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
15 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
16 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
17 * IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
18 * POSSIBILITY OF SUCH DAMAGE.
19 */
20
21 #ifndef __CHARYBDIS_AUTHD_PROVIDER_H__
22 #define __CHARYBDIS_AUTHD_PROVIDER_H__
23
24 #include "stdinc.h"
25 #include "rb_dictionary.h"
26
27 #define MAX_PROVIDERS 32 /* This should be enough */
28
29 /* Registered providers */
30 typedef enum
31 {
32 PROVIDER_RDNS,
33 PROVIDER_IDENT,
34 PROVIDER_BLACKLIST,
35 } provider_t;
36
37 typedef enum
38 {
39 L_DEBUG = 'D',
40 L_INFO = 'I',
41 L_WARN = 'W',
42 L_CRIT ='C',
43 } notice_level_t;
44
45 struct auth_client
46 {
47 uint16_t cid; /* Client ID */
48
49 char l_ip[HOSTIPLEN + 1]; /* Listener IP address */
50 uint16_t l_port; /* Listener port */
51 struct rb_sockaddr_storage l_addr; /* Listener address/port */
52
53 char c_ip[HOSTIPLEN + 1]; /* Client IP address */
54 uint16_t c_port; /* Client port */
55 struct rb_sockaddr_storage c_addr; /* Client address/port */
56
57 char hostname[HOSTLEN + 1]; /* Used for DNS lookup */
58 char username[USERLEN + 1]; /* Used for ident lookup */
59
60 uint32_t providers; /* Providers at work,
61 * none left when set to 0 */
62
63 void *data[MAX_PROVIDERS]; /* Provider-specific data slots */
64 };
65
66 typedef bool (*provider_init_t)(void);
67 typedef void (*provider_destroy_t)(void);
68
69 typedef bool (*provider_start_t)(struct auth_client *);
70 typedef void (*provider_cancel_t)(struct auth_client *);
71 typedef void (*provider_complete_t)(struct auth_client *, provider_t provider);
72
73 struct auth_provider
74 {
75 rb_dlink_node node;
76
77 provider_t id;
78
79 provider_init_t init; /* Initalise the provider */
80 provider_destroy_t destroy; /* Terminate the provider */
81
82 provider_start_t start; /* Perform authentication */
83 provider_cancel_t cancel; /* Authentication cancelled */
84 provider_complete_t completed; /* Callback for when other performers complete (think dependency chains) */
85 };
86
87 extern rb_dlink_list auth_providers;
88 extern rb_dictionary *auth_clients;
89
90 extern struct auth_provider rdns_provider;
91 extern struct auth_provider ident_provider;
92
93 void load_provider(struct auth_provider *provider);
94 void unload_provider(struct auth_provider *provider);
95
96 void init_providers(void);
97 void destroy_providers(void);
98 void cancel_providers(struct auth_client *auth);
99
100 void provider_done(struct auth_client *auth, provider_t id);
101 void accept_client(struct auth_client *auth, provider_t id);
102 void reject_client(struct auth_client *auth, provider_t id, const char *reason);
103
104 void notice_client(struct auth_client *auth, const char *fmt, ...);
105 void warn_opers(notice_level_t level, const char *fmt, ...);
106
107 void handle_new_connection(int parc, char *parv[]);
108
109 /* Provider is operating on this auth_client (set this if you have async work to do) */
110 static inline void set_provider(struct auth_client *auth, provider_t provider)
111 {
112 auth->providers |= (1 << provider);
113 }
114
115 /* Provider is no longer operating on this auth client (you should use provider_done) */
116 static inline void unset_provider(struct auth_client *auth, provider_t provider)
117 {
118 auth->providers &= ~(1 << provider);
119 }
120
121 /* Check if provider is operating on this auth client */
122 static inline bool is_provider(struct auth_client *auth, provider_t provider)
123 {
124 return auth->providers & (1 << provider);
125 }
126
127 #endif /* __CHARYBDIS_AUTHD_PROVIDER_H__ */