franta-hg@101: /*
franta-hg@101:  *   SONEWS News Server
franta-hg@101:  *   see AUTHORS for the list of contributors
franta-hg@101:  *
franta-hg@101:  *   This program is free software: you can redistribute it and/or modify
franta-hg@101:  *   it under the terms of the GNU General Public License as published by
franta-hg@101:  *   the Free Software Foundation, either version 3 of the License, or
franta-hg@101:  *   (at your option) any later version.
franta-hg@101:  *
franta-hg@101:  *   This program is distributed in the hope that it will be useful,
franta-hg@101:  *   but WITHOUT ANY WARRANTY; without even the implied warranty of
franta-hg@101:  *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
franta-hg@101:  *   GNU General Public License for more details.
franta-hg@101:  *
franta-hg@101:  *   You should have received a copy of the GNU General Public License
franta-hg@101:  *   along with this program.  If not, see <http://www.gnu.org/licenses/>.
franta-hg@101:  */
franta-hg@101: package org.sonews.acl;
franta-hg@101: 
franta-hg@101: import java.io.IOException;
franta-hg@101: import java.util.Arrays;
franta-hg@101: import java.util.logging.Level;
franta-hg@101: import java.util.logging.Logger;
franta-hg@101: import java.util.regex.Matcher;
franta-hg@101: import java.util.regex.Pattern;
franta-hg@101: import org.sonews.daemon.NNTPConnection;
franta-hg@101: import org.sonews.daemon.command.Command;
franta-hg@101: import org.sonews.storage.StorageBackendException;
franta-hg@101: import org.sonews.storage.StorageManager;
franta-hg@101: 
franta-hg@101: /**
franta-hg@101:  *
franta-hg@101:  * @author František Kučera (frantovo.cz)
franta-hg@101:  */
franta-hg@112: public class AuthInfoCommand implements Command {
franta-hg@101: 
franta-hg@112: 	private static final Logger log = Logger.getLogger(AuthInfoCommand.class.getName());
franta-hg@101: 	private static String[] SUPPORTED_COMMANDS = {"AUTHINFO"};
franta-hg@101: 
franta-hg@101: 	@Override
franta-hg@101: 	public boolean hasFinished() {
franta-hg@101: 		return true;
franta-hg@101: 	}
franta-hg@101: 
franta-hg@101: 	@Override
franta-hg@101: 	public String impliedCapability() {
franta-hg@101: 		return "AUTHINFO";
franta-hg@101: 	}
franta-hg@101: 
franta-hg@101: 	@Override
franta-hg@101: 	public boolean isStateful() {
franta-hg@101: 		return false;
franta-hg@101: 	}
franta-hg@101: 
franta-hg@101: 	@Override
franta-hg@101: 	public String[] getSupportedCommandStrings() {
franta-hg@101: 		return SUPPORTED_COMMANDS;
franta-hg@101: 	}
franta-hg@101: 
franta-hg@101: 	@Override
franta-hg@101: 	public void processLine(NNTPConnection conn, String line, byte[] rawLine) throws IOException, StorageBackendException {
franta-hg@101: 		Pattern commandPattern = Pattern.compile("AUTHINFO (USER|PASS) (.*)", Pattern.CASE_INSENSITIVE);
franta-hg@101: 		Matcher commandMatcher = commandPattern.matcher(line);
franta-hg@101: 
franta-hg@101: 		if (commandMatcher.matches()) {
franta-hg@101: 
franta-hg@112: 			if (conn.getUser() != null && conn.getUser().isAuthenticated()) {
franta-hg@101: 				conn.println("502 Command unavailable (you are already authenticated)");
franta-hg@101: 			} else if ("USER".equalsIgnoreCase(commandMatcher.group(1))) {
franta-hg@112: 				conn.setUser(new User(commandMatcher.group(2)));
franta-hg@112: 				conn.println("381 Password required"); // ask user for his password
franta-hg@112: 				log.log(Level.FINE, "User ''{0}'' greets us. We are waiting for his password.", conn.getUser().getUserName());
franta-hg@101: 			} else if ("PASS".equalsIgnoreCase(commandMatcher.group(1))) {
franta-hg@112: 				if (conn.getUser() == null) {
franta-hg@101: 					conn.println("482 Authentication commands issued out of sequence");
franta-hg@101: 				} else {
franta-hg@101: 
franta-hg@101: 					char[] password = commandMatcher.group(2).toCharArray();
franta-hg@112: 					boolean goodPassword = StorageManager.current().authenticateUser(conn.getUser().getUserName(), password);
franta-hg@101: 					Arrays.fill(password, '*');
franta-hg@101: 					commandMatcher = null;
franta-hg@101: 
franta-hg@101: 					if (goodPassword) {
franta-hg@101: 						conn.println("281 Authentication accepted");
franta-hg@112: 						conn.getUser().setAuthenticated(true);
franta-hg@112: 						log.log(Level.INFO, "User ''{0}'' has been succesfully authenticated.", conn.getUser().getUserName());
franta-hg@101: 					} else {
franta-hg@112: 						log.log(Level.INFO, "User ''{0}'' has provided wrong password.", conn.getUser().getUserName());
franta-hg@112: 						conn.setUser(null);
franta-hg@101: 						conn.println("481 Authentication failed: wrong password");
franta-hg@101: 					}
franta-hg@101: 
franta-hg@101: 				}
franta-hg@101: 			} else {
franta-hg@101: 				// impossible, see commandPattern
franta-hg@101: 				conn.println("500 Unknown command");
franta-hg@101: 			}
franta-hg@101: 
franta-hg@101: 
franta-hg@101: 		} else {
franta-hg@101: 			conn.println("500 Unknown command, expecting AUTHINFO USER username or AUTHINFO PASS password ");
franta-hg@101: 		}
franta-hg@101: 	}
franta-hg@101: }