source: code/trunk/service.go@ 732

Last change on this file since 732 was 730, checked in by contact, 4 years ago

Add "sasl status" command

File size: 26.8 KB
Line 
1package soju
2
3import (
4 "context"
5 "crypto/sha1"
6 "crypto/sha256"
7 "crypto/sha512"
8 "encoding/hex"
9 "errors"
10 "flag"
11 "fmt"
12 "io/ioutil"
13 "sort"
14 "strconv"
15 "strings"
16 "time"
17 "unicode"
18
19 "golang.org/x/crypto/bcrypt"
20 "gopkg.in/irc.v3"
21)
22
23const serviceNick = "BouncerServ"
24const serviceNickCM = "bouncerserv"
25const serviceRealname = "soju bouncer service"
26
27// maxRSABits is the maximum number of RSA key bits used when generating a new
28// private key.
29const maxRSABits = 8192
30
31var servicePrefix = &irc.Prefix{
32 Name: serviceNick,
33 User: serviceNick,
34 Host: serviceNick,
35}
36
37type serviceCommandSet map[string]*serviceCommand
38
39type serviceCommand struct {
40 usage string
41 desc string
42 handle func(ctx context.Context, dc *downstreamConn, params []string) error
43 children serviceCommandSet
44 admin bool
45}
46
47func sendServiceNOTICE(dc *downstreamConn, text string) {
48 dc.SendMessage(&irc.Message{
49 Prefix: servicePrefix,
50 Command: "NOTICE",
51 Params: []string{dc.nick, text},
52 })
53}
54
55func sendServicePRIVMSG(dc *downstreamConn, text string) {
56 dc.SendMessage(&irc.Message{
57 Prefix: servicePrefix,
58 Command: "PRIVMSG",
59 Params: []string{dc.nick, text},
60 })
61}
62
63func splitWords(s string) ([]string, error) {
64 var words []string
65 var lastWord strings.Builder
66 escape := false
67 prev := ' '
68 wordDelim := ' '
69
70 for _, r := range s {
71 if escape {
72 // last char was a backslash, write the byte as-is.
73 lastWord.WriteRune(r)
74 escape = false
75 } else if r == '\\' {
76 escape = true
77 } else if wordDelim == ' ' && unicode.IsSpace(r) {
78 // end of last word
79 if !unicode.IsSpace(prev) {
80 words = append(words, lastWord.String())
81 lastWord.Reset()
82 }
83 } else if r == wordDelim {
84 // wordDelim is either " or ', switch back to
85 // space-delimited words.
86 wordDelim = ' '
87 } else if r == '"' || r == '\'' {
88 if wordDelim == ' ' {
89 // start of (double-)quoted word
90 wordDelim = r
91 } else {
92 // either wordDelim is " and r is ' or vice-versa
93 lastWord.WriteRune(r)
94 }
95 } else {
96 lastWord.WriteRune(r)
97 }
98
99 prev = r
100 }
101
102 if !unicode.IsSpace(prev) {
103 words = append(words, lastWord.String())
104 }
105
106 if wordDelim != ' ' {
107 return nil, fmt.Errorf("unterminated quoted string")
108 }
109 if escape {
110 return nil, fmt.Errorf("unterminated backslash sequence")
111 }
112
113 return words, nil
114}
115
116func handleServicePRIVMSG(ctx context.Context, dc *downstreamConn, text string) {
117 words, err := splitWords(text)
118 if err != nil {
119 sendServicePRIVMSG(dc, fmt.Sprintf(`error: failed to parse command: %v`, err))
120 return
121 }
122
123 cmd, params, err := serviceCommands.Get(words)
124 if err != nil {
125 sendServicePRIVMSG(dc, fmt.Sprintf(`error: %v (type "help" for a list of commands)`, err))
126 return
127 }
128 if cmd.admin && !dc.user.Admin {
129 sendServicePRIVMSG(dc, "error: you must be an admin to use this command")
130 return
131 }
132
133 if cmd.handle == nil {
134 if len(cmd.children) > 0 {
135 var l []string
136 appendServiceCommandSetHelp(cmd.children, words, dc.user.Admin, &l)
137 sendServicePRIVMSG(dc, "available commands: "+strings.Join(l, ", "))
138 } else {
139 // Pretend the command does not exist if it has neither children nor handler.
140 // This is obviously a bug but it is better to not die anyway.
141 dc.logger.Printf("command without handler and subcommands invoked:", words[0])
142 sendServicePRIVMSG(dc, fmt.Sprintf("command %q not found", words[0]))
143 }
144 return
145 }
146
147 if err := cmd.handle(ctx, dc, params); err != nil {
148 sendServicePRIVMSG(dc, fmt.Sprintf("error: %v", err))
149 }
150}
151
152func (cmds serviceCommandSet) Get(params []string) (*serviceCommand, []string, error) {
153 if len(params) == 0 {
154 return nil, nil, fmt.Errorf("no command specified")
155 }
156
157 name := params[0]
158 params = params[1:]
159
160 cmd, ok := cmds[name]
161 if !ok {
162 for k := range cmds {
163 if !strings.HasPrefix(k, name) {
164 continue
165 }
166 if cmd != nil {
167 return nil, params, fmt.Errorf("command %q is ambiguous", name)
168 }
169 cmd = cmds[k]
170 }
171 }
172 if cmd == nil {
173 return nil, params, fmt.Errorf("command %q not found", name)
174 }
175
176 if len(params) == 0 || len(cmd.children) == 0 {
177 return cmd, params, nil
178 }
179 return cmd.children.Get(params)
180}
181
182func (cmds serviceCommandSet) Names() []string {
183 l := make([]string, 0, len(cmds))
184 for name := range cmds {
185 l = append(l, name)
186 }
187 sort.Strings(l)
188 return l
189}
190
191var serviceCommands serviceCommandSet
192
193func init() {
194 serviceCommands = serviceCommandSet{
195 "help": {
196 usage: "[command]",
197 desc: "print help message",
198 handle: handleServiceHelp,
199 },
200 "network": {
201 children: serviceCommandSet{
202 "create": {
203 usage: "-addr <addr> [-name name] [-username username] [-pass pass] [-realname realname] [-nick nick] [-enabled enabled] [-connect-command command]...",
204 desc: "add a new network",
205 handle: handleServiceNetworkCreate,
206 },
207 "status": {
208 desc: "show a list of saved networks and their current status",
209 handle: handleServiceNetworkStatus,
210 },
211 "update": {
212 usage: "<name> [-addr addr] [-name name] [-username username] [-pass pass] [-realname realname] [-nick nick] [-enabled enabled] [-connect-command command]...",
213 desc: "update a network",
214 handle: handleServiceNetworkUpdate,
215 },
216 "delete": {
217 usage: "<name>",
218 desc: "delete a network",
219 handle: handleServiceNetworkDelete,
220 },
221 "quote": {
222 usage: "<name> <command>",
223 desc: "send a raw line to a network",
224 handle: handleServiceNetworkQuote,
225 },
226 },
227 },
228 "certfp": {
229 children: serviceCommandSet{
230 "generate": {
231 usage: "[-key-type rsa|ecdsa|ed25519] [-bits N] <network name>",
232 desc: "generate a new self-signed certificate, defaults to using RSA-3072 key",
233 handle: handleServiceCertFPGenerate,
234 },
235 "fingerprint": {
236 usage: "<network name>",
237 desc: "show fingerprints of certificate associated with the network",
238 handle: handleServiceCertFPFingerprints,
239 },
240 },
241 },
242 "sasl": {
243 children: serviceCommandSet{
244 "status": {
245 usage: "<network name>",
246 desc: "show SASL status",
247 handle: handleServiceSaslStatus,
248 },
249 "set-plain": {
250 usage: "<network name> <username> <password>",
251 desc: "set SASL PLAIN credentials",
252 handle: handleServiceSASLSetPlain,
253 },
254 "reset": {
255 usage: "<network name>",
256 desc: "disable SASL authentication and remove stored credentials",
257 handle: handleServiceSASLReset,
258 },
259 },
260 },
261 "user": {
262 children: serviceCommandSet{
263 "create": {
264 usage: "-username <username> -password <password> [-realname <realname>] [-admin]",
265 desc: "create a new soju user",
266 handle: handleUserCreate,
267 admin: true,
268 },
269 "update": {
270 usage: "[-password <password>] [-realname <realname>]",
271 desc: "update the current user",
272 handle: handleUserUpdate,
273 },
274 "delete": {
275 usage: "<username>",
276 desc: "delete a user",
277 handle: handleUserDelete,
278 admin: true,
279 },
280 },
281 },
282 "channel": {
283 children: serviceCommandSet{
284 "status": {
285 usage: "[-network name]",
286 desc: "show a list of saved channels and their current status",
287 handle: handleServiceChannelStatus,
288 },
289 "update": {
290 usage: "<name> [-relay-detached <default|none|highlight|message>] [-reattach-on <default|none|highlight|message>] [-detach-after <duration>] [-detach-on <default|none|highlight|message>]",
291 desc: "update a channel",
292 handle: handleServiceChannelUpdate,
293 },
294 },
295 },
296 "server": {
297 children: serviceCommandSet{
298 "status": {
299 desc: "show server statistics",
300 handle: handleServiceServerStatus,
301 admin: true,
302 },
303 "notice": {
304 desc: "broadcast a notice to all connected bouncer users",
305 handle: handleServiceServerNotice,
306 admin: true,
307 },
308 },
309 admin: true,
310 },
311 }
312}
313
314func appendServiceCommandSetHelp(cmds serviceCommandSet, prefix []string, admin bool, l *[]string) {
315 for _, name := range cmds.Names() {
316 cmd := cmds[name]
317 if cmd.admin && !admin {
318 continue
319 }
320 words := append(prefix, name)
321 if len(cmd.children) == 0 {
322 s := strings.Join(words, " ")
323 *l = append(*l, s)
324 } else {
325 appendServiceCommandSetHelp(cmd.children, words, admin, l)
326 }
327 }
328}
329
330func handleServiceHelp(ctx context.Context, dc *downstreamConn, params []string) error {
331 if len(params) > 0 {
332 cmd, rest, err := serviceCommands.Get(params)
333 if err != nil {
334 return err
335 }
336 words := params[:len(params)-len(rest)]
337
338 if len(cmd.children) > 0 {
339 var l []string
340 appendServiceCommandSetHelp(cmd.children, words, dc.user.Admin, &l)
341 sendServicePRIVMSG(dc, "available commands: "+strings.Join(l, ", "))
342 } else {
343 text := strings.Join(words, " ")
344 if cmd.usage != "" {
345 text += " " + cmd.usage
346 }
347 text += ": " + cmd.desc
348
349 sendServicePRIVMSG(dc, text)
350 }
351 } else {
352 var l []string
353 appendServiceCommandSetHelp(serviceCommands, nil, dc.user.Admin, &l)
354 sendServicePRIVMSG(dc, "available commands: "+strings.Join(l, ", "))
355 }
356 return nil
357}
358
359func newFlagSet() *flag.FlagSet {
360 fs := flag.NewFlagSet("", flag.ContinueOnError)
361 fs.SetOutput(ioutil.Discard)
362 return fs
363}
364
365type stringSliceFlag []string
366
367func (v *stringSliceFlag) String() string {
368 return fmt.Sprint([]string(*v))
369}
370
371func (v *stringSliceFlag) Set(s string) error {
372 *v = append(*v, s)
373 return nil
374}
375
376// stringPtrFlag is a flag value populating a string pointer. This allows to
377// disambiguate between a flag that hasn't been set and a flag that has been
378// set to an empty string.
379type stringPtrFlag struct {
380 ptr **string
381}
382
383func (f stringPtrFlag) String() string {
384 if f.ptr == nil || *f.ptr == nil {
385 return ""
386 }
387 return **f.ptr
388}
389
390func (f stringPtrFlag) Set(s string) error {
391 *f.ptr = &s
392 return nil
393}
394
395type boolPtrFlag struct {
396 ptr **bool
397}
398
399func (f boolPtrFlag) String() string {
400 if f.ptr == nil || *f.ptr == nil {
401 return "<nil>"
402 }
403 return strconv.FormatBool(**f.ptr)
404}
405
406func (f boolPtrFlag) Set(s string) error {
407 v, err := strconv.ParseBool(s)
408 if err != nil {
409 return err
410 }
411 *f.ptr = &v
412 return nil
413}
414
415type networkFlagSet struct {
416 *flag.FlagSet
417 Addr, Name, Nick, Username, Pass, Realname *string
418 Enabled *bool
419 ConnectCommands []string
420}
421
422func newNetworkFlagSet() *networkFlagSet {
423 fs := &networkFlagSet{FlagSet: newFlagSet()}
424 fs.Var(stringPtrFlag{&fs.Addr}, "addr", "")
425 fs.Var(stringPtrFlag{&fs.Name}, "name", "")
426 fs.Var(stringPtrFlag{&fs.Nick}, "nick", "")
427 fs.Var(stringPtrFlag{&fs.Username}, "username", "")
428 fs.Var(stringPtrFlag{&fs.Pass}, "pass", "")
429 fs.Var(stringPtrFlag{&fs.Realname}, "realname", "")
430 fs.Var(boolPtrFlag{&fs.Enabled}, "enabled", "")
431 fs.Var((*stringSliceFlag)(&fs.ConnectCommands), "connect-command", "")
432 return fs
433}
434
435func (fs *networkFlagSet) update(network *Network) error {
436 if fs.Addr != nil {
437 if addrParts := strings.SplitN(*fs.Addr, "://", 2); len(addrParts) == 2 {
438 scheme := addrParts[0]
439 switch scheme {
440 case "ircs", "irc+insecure", "unix":
441 default:
442 return fmt.Errorf("unknown scheme %q (supported schemes: ircs, irc+insecure, unix)", scheme)
443 }
444 }
445 network.Addr = *fs.Addr
446 }
447 if fs.Name != nil {
448 network.Name = *fs.Name
449 }
450 if fs.Nick != nil {
451 network.Nick = *fs.Nick
452 }
453 if fs.Username != nil {
454 network.Username = *fs.Username
455 }
456 if fs.Pass != nil {
457 network.Pass = *fs.Pass
458 }
459 if fs.Realname != nil {
460 network.Realname = *fs.Realname
461 }
462 if fs.Enabled != nil {
463 network.Enabled = *fs.Enabled
464 }
465 if fs.ConnectCommands != nil {
466 if len(fs.ConnectCommands) == 1 && fs.ConnectCommands[0] == "" {
467 network.ConnectCommands = nil
468 } else {
469 for _, command := range fs.ConnectCommands {
470 _, err := irc.ParseMessage(command)
471 if err != nil {
472 return fmt.Errorf("flag -connect-command must be a valid raw irc command string: %q: %v", command, err)
473 }
474 }
475 network.ConnectCommands = fs.ConnectCommands
476 }
477 }
478 return nil
479}
480
481func handleServiceNetworkCreate(ctx context.Context, dc *downstreamConn, params []string) error {
482 fs := newNetworkFlagSet()
483 if err := fs.Parse(params); err != nil {
484 return err
485 }
486 if fs.Addr == nil {
487 return fmt.Errorf("flag -addr is required")
488 }
489
490 record := &Network{
491 Addr: *fs.Addr,
492 Enabled: true,
493 }
494 if err := fs.update(record); err != nil {
495 return err
496 }
497
498 network, err := dc.user.createNetwork(ctx, record)
499 if err != nil {
500 return fmt.Errorf("could not create network: %v", err)
501 }
502
503 sendServicePRIVMSG(dc, fmt.Sprintf("created network %q", network.GetName()))
504 return nil
505}
506
507func handleServiceNetworkStatus(ctx context.Context, dc *downstreamConn, params []string) error {
508 n := 0
509 dc.user.forEachNetwork(func(net *network) {
510 var statuses []string
511 var details string
512 if uc := net.conn; uc != nil {
513 if dc.nick != uc.nick {
514 statuses = append(statuses, "connected as "+uc.nick)
515 } else {
516 statuses = append(statuses, "connected")
517 }
518 details = fmt.Sprintf("%v channels", uc.channels.Len())
519 } else if !net.Enabled {
520 statuses = append(statuses, "disabled")
521 } else {
522 statuses = append(statuses, "disconnected")
523 if net.lastError != nil {
524 details = net.lastError.Error()
525 }
526 }
527
528 if net == dc.network {
529 statuses = append(statuses, "current")
530 }
531
532 name := net.GetName()
533 if name != net.Addr {
534 name = fmt.Sprintf("%v (%v)", name, net.Addr)
535 }
536
537 s := fmt.Sprintf("%v [%v]", name, strings.Join(statuses, ", "))
538 if details != "" {
539 s += ": " + details
540 }
541 sendServicePRIVMSG(dc, s)
542
543 n++
544 })
545
546 if n == 0 {
547 sendServicePRIVMSG(dc, `No network configured, add one with "network create".`)
548 }
549
550 return nil
551}
552
553func handleServiceNetworkUpdate(ctx context.Context, dc *downstreamConn, params []string) error {
554 if len(params) < 1 {
555 return fmt.Errorf("expected at least one argument")
556 }
557
558 fs := newNetworkFlagSet()
559 if err := fs.Parse(params[1:]); err != nil {
560 return err
561 }
562
563 net := dc.user.getNetwork(params[0])
564 if net == nil {
565 return fmt.Errorf("unknown network %q", params[0])
566 }
567
568 record := net.Network // copy network record because we'll mutate it
569 if err := fs.update(&record); err != nil {
570 return err
571 }
572
573 network, err := dc.user.updateNetwork(ctx, &record)
574 if err != nil {
575 return fmt.Errorf("could not update network: %v", err)
576 }
577
578 sendServicePRIVMSG(dc, fmt.Sprintf("updated network %q", network.GetName()))
579 return nil
580}
581
582func handleServiceNetworkDelete(ctx context.Context, dc *downstreamConn, params []string) error {
583 if len(params) != 1 {
584 return fmt.Errorf("expected exactly one argument")
585 }
586
587 net := dc.user.getNetwork(params[0])
588 if net == nil {
589 return fmt.Errorf("unknown network %q", params[0])
590 }
591
592 if err := dc.user.deleteNetwork(ctx, net.ID); err != nil {
593 return err
594 }
595
596 sendServicePRIVMSG(dc, fmt.Sprintf("deleted network %q", net.GetName()))
597 return nil
598}
599
600func handleServiceNetworkQuote(ctx context.Context, dc *downstreamConn, params []string) error {
601 if len(params) != 2 {
602 return fmt.Errorf("expected exactly two arguments")
603 }
604
605 net := dc.user.getNetwork(params[0])
606 if net == nil {
607 return fmt.Errorf("unknown network %q", params[0])
608 }
609
610 uc := net.conn
611 if uc == nil {
612 return fmt.Errorf("network %q is not currently connected", params[0])
613 }
614
615 m, err := irc.ParseMessage(params[1])
616 if err != nil {
617 return fmt.Errorf("failed to parse command %q: %v", params[1], err)
618 }
619 uc.SendMessage(m)
620
621 sendServicePRIVMSG(dc, fmt.Sprintf("sent command to %q", net.GetName()))
622 return nil
623}
624
625func sendCertfpFingerprints(dc *downstreamConn, cert []byte) {
626 sha1Sum := sha1.Sum(cert)
627 sendServicePRIVMSG(dc, "SHA-1 fingerprint: "+hex.EncodeToString(sha1Sum[:]))
628 sha256Sum := sha256.Sum256(cert)
629 sendServicePRIVMSG(dc, "SHA-256 fingerprint: "+hex.EncodeToString(sha256Sum[:]))
630 sha512Sum := sha512.Sum512(cert)
631 sendServicePRIVMSG(dc, "SHA-512 fingerprint: "+hex.EncodeToString(sha512Sum[:]))
632}
633
634func handleServiceCertFPGenerate(ctx context.Context, dc *downstreamConn, params []string) error {
635 fs := newFlagSet()
636 keyType := fs.String("key-type", "rsa", "key type to generate (rsa, ecdsa, ed25519)")
637 bits := fs.Int("bits", 3072, "size of key to generate, meaningful only for RSA")
638
639 if err := fs.Parse(params); err != nil {
640 return err
641 }
642
643 if len(fs.Args()) != 1 {
644 return errors.New("exactly one argument is required")
645 }
646
647 net := dc.user.getNetwork(fs.Arg(0))
648 if net == nil {
649 return fmt.Errorf("unknown network %q", fs.Arg(0))
650 }
651
652 if *bits <= 0 || *bits > maxRSABits {
653 return fmt.Errorf("invalid value for -bits")
654 }
655
656 privKey, cert, err := generateCertFP(*keyType, *bits)
657 if err != nil {
658 return err
659 }
660
661 net.SASL.External.CertBlob = cert
662 net.SASL.External.PrivKeyBlob = privKey
663 net.SASL.Mechanism = "EXTERNAL"
664
665 if err := dc.srv.db.StoreNetwork(ctx, dc.user.ID, &net.Network); err != nil {
666 return err
667 }
668
669 sendServicePRIVMSG(dc, "certificate generated")
670 sendCertfpFingerprints(dc, cert)
671 return nil
672}
673
674func handleServiceCertFPFingerprints(ctx context.Context, dc *downstreamConn, params []string) error {
675 if len(params) != 1 {
676 return fmt.Errorf("expected exactly one argument")
677 }
678
679 net := dc.user.getNetwork(params[0])
680 if net == nil {
681 return fmt.Errorf("unknown network %q", params[0])
682 }
683
684 if net.SASL.Mechanism != "EXTERNAL" {
685 return fmt.Errorf("CertFP not set up")
686 }
687
688 sendCertfpFingerprints(dc, net.SASL.External.CertBlob)
689 return nil
690}
691
692func handleServiceSaslStatus(ctx context.Context, dc *downstreamConn, params []string) error {
693 if len(params) != 1 {
694 return fmt.Errorf("expected exactly one argument")
695 }
696
697 net := dc.user.getNetwork(params[0])
698 if net == nil {
699 return fmt.Errorf("unknown network %q", params[0])
700 }
701
702 switch net.SASL.Mechanism {
703 case "PLAIN":
704 sendServicePRIVMSG(dc, fmt.Sprintf("SASL PLAIN enabled with username %q", net.SASL.Plain.Username))
705 case "EXTERNAL":
706 sendServicePRIVMSG(dc, "SASL EXTERNAL (CertFP) enabled")
707 case "":
708 sendServicePRIVMSG(dc, "SASL is disabled")
709 }
710
711 if uc := net.conn; uc != nil {
712 if uc.account != "" {
713 sendServicePRIVMSG(dc, fmt.Sprintf("Authenticated on upstream network with account %q", uc.account))
714 } else {
715 sendServicePRIVMSG(dc, "Unauthenticated on upstream network")
716 }
717 } else {
718 sendServicePRIVMSG(dc, "Disconnected from upstream network")
719 }
720
721 return nil
722}
723
724func handleServiceSASLSetPlain(ctx context.Context, dc *downstreamConn, params []string) error {
725 if len(params) != 3 {
726 return fmt.Errorf("expected exactly 3 arguments")
727 }
728
729 net := dc.user.getNetwork(params[0])
730 if net == nil {
731 return fmt.Errorf("unknown network %q", params[0])
732 }
733
734 net.SASL.Plain.Username = params[1]
735 net.SASL.Plain.Password = params[2]
736 net.SASL.Mechanism = "PLAIN"
737
738 if err := dc.srv.db.StoreNetwork(ctx, dc.user.ID, &net.Network); err != nil {
739 return err
740 }
741
742 sendServicePRIVMSG(dc, "credentials saved")
743 return nil
744}
745
746func handleServiceSASLReset(ctx context.Context, dc *downstreamConn, params []string) error {
747 if len(params) != 1 {
748 return fmt.Errorf("expected exactly one argument")
749 }
750
751 net := dc.user.getNetwork(params[0])
752 if net == nil {
753 return fmt.Errorf("unknown network %q", params[0])
754 }
755
756 net.SASL.Plain.Username = ""
757 net.SASL.Plain.Password = ""
758 net.SASL.External.CertBlob = nil
759 net.SASL.External.PrivKeyBlob = nil
760 net.SASL.Mechanism = ""
761
762 if err := dc.srv.db.StoreNetwork(ctx, dc.user.ID, &net.Network); err != nil {
763 return err
764 }
765
766 sendServicePRIVMSG(dc, "credentials reset")
767 return nil
768}
769
770func handleUserCreate(ctx context.Context, dc *downstreamConn, params []string) error {
771 fs := newFlagSet()
772 username := fs.String("username", "", "")
773 password := fs.String("password", "", "")
774 realname := fs.String("realname", "", "")
775 admin := fs.Bool("admin", false, "")
776
777 if err := fs.Parse(params); err != nil {
778 return err
779 }
780 if *username == "" {
781 return fmt.Errorf("flag -username is required")
782 }
783 if *password == "" {
784 return fmt.Errorf("flag -password is required")
785 }
786
787 hashed, err := bcrypt.GenerateFromPassword([]byte(*password), bcrypt.DefaultCost)
788 if err != nil {
789 return fmt.Errorf("failed to hash password: %v", err)
790 }
791
792 user := &User{
793 Username: *username,
794 Password: string(hashed),
795 Realname: *realname,
796 Admin: *admin,
797 }
798 if _, err := dc.srv.createUser(ctx, user); err != nil {
799 return fmt.Errorf("could not create user: %v", err)
800 }
801
802 sendServicePRIVMSG(dc, fmt.Sprintf("created user %q", *username))
803 return nil
804}
805
806func popArg(params []string) (string, []string) {
807 if len(params) > 0 && !strings.HasPrefix(params[0], "-") {
808 return params[0], params[1:]
809 }
810 return "", params
811}
812
813func handleUserUpdate(ctx context.Context, dc *downstreamConn, params []string) error {
814 var password, realname *string
815 var admin *bool
816 fs := newFlagSet()
817 fs.Var(stringPtrFlag{&password}, "password", "")
818 fs.Var(stringPtrFlag{&realname}, "realname", "")
819 fs.Var(boolPtrFlag{&admin}, "admin", "")
820
821 username, params := popArg(params)
822 if err := fs.Parse(params); err != nil {
823 return err
824 }
825 if len(fs.Args()) > 0 {
826 return fmt.Errorf("unexpected argument")
827 }
828
829 var hashed *string
830 if password != nil {
831 hashedBytes, err := bcrypt.GenerateFromPassword([]byte(*password), bcrypt.DefaultCost)
832 if err != nil {
833 return fmt.Errorf("failed to hash password: %v", err)
834 }
835 hashedStr := string(hashedBytes)
836 hashed = &hashedStr
837 }
838
839 if username != "" && username != dc.user.Username {
840 if !dc.user.Admin {
841 return fmt.Errorf("you must be an admin to update other users")
842 }
843 if realname != nil {
844 return fmt.Errorf("cannot update -realname of other user")
845 }
846
847 u := dc.srv.getUser(username)
848 if u == nil {
849 return fmt.Errorf("unknown username %q", username)
850 }
851
852 done := make(chan error, 1)
853 event := eventUserUpdate{
854 password: hashed,
855 admin: admin,
856 done: done,
857 }
858 select {
859 case <-ctx.Done():
860 return ctx.Err()
861 case u.events <- event:
862 }
863 // TODO: send context to the other side
864 if err := <-done; err != nil {
865 return err
866 }
867
868 sendServicePRIVMSG(dc, fmt.Sprintf("updated user %q", username))
869 } else {
870 // copy the user record because we'll mutate it
871 record := dc.user.User
872
873 if hashed != nil {
874 record.Password = *hashed
875 }
876 if realname != nil {
877 record.Realname = *realname
878 }
879 if admin != nil {
880 return fmt.Errorf("cannot update -admin of own user")
881 }
882
883 if err := dc.user.updateUser(ctx, &record); err != nil {
884 return err
885 }
886
887 sendServicePRIVMSG(dc, fmt.Sprintf("updated user %q", dc.user.Username))
888 }
889
890 return nil
891}
892
893func handleUserDelete(ctx context.Context, dc *downstreamConn, params []string) error {
894 if len(params) != 1 {
895 return fmt.Errorf("expected exactly one argument")
896 }
897 username := params[0]
898
899 u := dc.srv.getUser(username)
900 if u == nil {
901 return fmt.Errorf("unknown username %q", username)
902 }
903
904 u.stop()
905
906 if err := dc.srv.db.DeleteUser(ctx, u.ID); err != nil {
907 return fmt.Errorf("failed to delete user: %v", err)
908 }
909
910 sendServicePRIVMSG(dc, fmt.Sprintf("deleted user %q", username))
911 return nil
912}
913
914func handleServiceChannelStatus(ctx context.Context, dc *downstreamConn, params []string) error {
915 var defaultNetworkName string
916 if dc.network != nil {
917 defaultNetworkName = dc.network.GetName()
918 }
919
920 fs := newFlagSet()
921 networkName := fs.String("network", defaultNetworkName, "")
922
923 if err := fs.Parse(params); err != nil {
924 return err
925 }
926
927 n := 0
928
929 sendNetwork := func(net *network) {
930 var channels []*Channel
931 for _, entry := range net.channels.innerMap {
932 channels = append(channels, entry.value.(*Channel))
933 }
934
935 sort.Slice(channels, func(i, j int) bool {
936 return strings.ReplaceAll(channels[i].Name, "#", "") <
937 strings.ReplaceAll(channels[j].Name, "#", "")
938 })
939
940 for _, ch := range channels {
941 var uch *upstreamChannel
942 if net.conn != nil {
943 uch = net.conn.channels.Value(ch.Name)
944 }
945
946 name := ch.Name
947 if *networkName == "" {
948 name += "/" + net.GetName()
949 }
950
951 var status string
952 if uch != nil {
953 status = "joined"
954 } else if net.conn != nil {
955 status = "parted"
956 } else {
957 status = "disconnected"
958 }
959
960 if ch.Detached {
961 status += ", detached"
962 }
963
964 s := fmt.Sprintf("%v [%v]", name, status)
965 sendServicePRIVMSG(dc, s)
966
967 n++
968 }
969 }
970
971 if *networkName == "" {
972 dc.user.forEachNetwork(sendNetwork)
973 } else {
974 net := dc.user.getNetwork(*networkName)
975 if net == nil {
976 return fmt.Errorf("unknown network %q", *networkName)
977 }
978 sendNetwork(net)
979 }
980
981 if n == 0 {
982 sendServicePRIVMSG(dc, "No channel configured.")
983 }
984
985 return nil
986}
987
988type channelFlagSet struct {
989 *flag.FlagSet
990 RelayDetached, ReattachOn, DetachAfter, DetachOn *string
991}
992
993func newChannelFlagSet() *channelFlagSet {
994 fs := &channelFlagSet{FlagSet: newFlagSet()}
995 fs.Var(stringPtrFlag{&fs.RelayDetached}, "relay-detached", "")
996 fs.Var(stringPtrFlag{&fs.ReattachOn}, "reattach-on", "")
997 fs.Var(stringPtrFlag{&fs.DetachAfter}, "detach-after", "")
998 fs.Var(stringPtrFlag{&fs.DetachOn}, "detach-on", "")
999 return fs
1000}
1001
1002func (fs *channelFlagSet) update(channel *Channel) error {
1003 if fs.RelayDetached != nil {
1004 filter, err := parseFilter(*fs.RelayDetached)
1005 if err != nil {
1006 return err
1007 }
1008 channel.RelayDetached = filter
1009 }
1010 if fs.ReattachOn != nil {
1011 filter, err := parseFilter(*fs.ReattachOn)
1012 if err != nil {
1013 return err
1014 }
1015 channel.ReattachOn = filter
1016 }
1017 if fs.DetachAfter != nil {
1018 dur, err := time.ParseDuration(*fs.DetachAfter)
1019 if err != nil || dur < 0 {
1020 return fmt.Errorf("unknown duration for -detach-after %q (duration format: 0, 300s, 22h30m, ...)", *fs.DetachAfter)
1021 }
1022 channel.DetachAfter = dur
1023 }
1024 if fs.DetachOn != nil {
1025 filter, err := parseFilter(*fs.DetachOn)
1026 if err != nil {
1027 return err
1028 }
1029 channel.DetachOn = filter
1030 }
1031 return nil
1032}
1033
1034func handleServiceChannelUpdate(ctx context.Context, dc *downstreamConn, params []string) error {
1035 if len(params) < 1 {
1036 return fmt.Errorf("expected at least one argument")
1037 }
1038 name := params[0]
1039
1040 fs := newChannelFlagSet()
1041 if err := fs.Parse(params[1:]); err != nil {
1042 return err
1043 }
1044
1045 uc, upstreamName, err := dc.unmarshalEntity(name)
1046 if err != nil {
1047 return fmt.Errorf("unknown channel %q", name)
1048 }
1049
1050 ch := uc.network.channels.Value(upstreamName)
1051 if ch == nil {
1052 return fmt.Errorf("unknown channel %q", name)
1053 }
1054
1055 if err := fs.update(ch); err != nil {
1056 return err
1057 }
1058
1059 uc.updateChannelAutoDetach(upstreamName)
1060
1061 if err := dc.srv.db.StoreChannel(ctx, uc.network.ID, ch); err != nil {
1062 return fmt.Errorf("failed to update channel: %v", err)
1063 }
1064
1065 sendServicePRIVMSG(dc, fmt.Sprintf("updated channel %q", name))
1066 return nil
1067}
1068
1069func handleServiceServerStatus(ctx context.Context, dc *downstreamConn, params []string) error {
1070 dbStats, err := dc.user.srv.db.Stats(ctx)
1071 if err != nil {
1072 return err
1073 }
1074 serverStats := dc.user.srv.Stats()
1075 sendServicePRIVMSG(dc, fmt.Sprintf("%v/%v users, %v downstreams, %v upstreams, %v networks, %v channels", serverStats.Users, dbStats.Users, serverStats.Downstreams, serverStats.Upstreams, dbStats.Networks, dbStats.Channels))
1076 return nil
1077}
1078
1079func handleServiceServerNotice(ctx context.Context, dc *downstreamConn, params []string) error {
1080 if len(params) != 1 {
1081 return fmt.Errorf("expected exactly one argument")
1082 }
1083 text := params[0]
1084
1085 dc.logger.Printf("broadcasting bouncer-wide NOTICE: %v", text)
1086
1087 broadcastMsg := &irc.Message{
1088 Prefix: servicePrefix,
1089 Command: "NOTICE",
1090 Params: []string{"$" + dc.srv.Config().Hostname, text},
1091 }
1092 var err error
1093 dc.srv.forEachUser(func(u *user) {
1094 select {
1095 case <-ctx.Done():
1096 err = ctx.Err()
1097 case u.events <- eventBroadcast{broadcastMsg}:
1098 }
1099 })
1100 return err
1101}
Note: See TracBrowser for help on using the repository browser.