gistfile1.txt

local log                       = require "util.logger".init("auth_exoplay");
local nodeprep                  = require "util.encodings".stringprep.nodeprep;
local resolve_relative_path     = require "core.configmanager".resolve_relative_path;
local http                      = require "socket.http"

local tokens                    = module:shared("oauth/usertokens")

local host                      = module:get_option("oauth_host",               nil);
local client_id                 = module:get_option("oauth_client_id",          nil);
local client_secret             = module:get_option("oauth_client_secret",      nil);

local provider = {
        name = "oauth"
};

function provider.test_password(username, password)
        log("debug", "User '%s' logging in via oauth.", username)
        b, c, h = http.request {
                method = "POST",
                url = "http://"..host.."/oauth/authorize?response_type=token&client_id="..client_id.."&client_secret="..client_secret,
                source = "username: "..username.."\n".."password: "..password
        }

        if c == 200 then
                tokens[username]=b
                return true
        end
        log("debug", "User '%s' failed to login via oauth.", username)
        return false
end

function provider.user_exists(username)
        log("debug", "Checking to see if user '%s' exists in oauth .", username)
        b, c, h = http.request {
                method = "POST",
                url = "http://"..host.."/oauth/authorize?response_type=token&client_id="..client_id.."&client_secret="..client_secret,
                source = "username: "..username
        }
        if c == 404 then
                log("debug", "User '%s' does not exist in oauth.", username)
                return false
        end
        return true
end

function provider.get_sasl_handler()
        local profile = {
                plain_test = function(sasl, username, password, realm)
                        local prepped_username = nodeprep(username);
                        if not prepped_username then
                                log("debug", "NODEprep failed on username: %s", username);
                                return "", nil;
                        end
                        return provider.test_password(prepped_username, password), true;
                end
        };
        return new_sasl(module.host, profile);
end

function provider.get_password(username)                return nil, "Getting password is not supported. Pleasae see http://exoplay.net for details." end
function provider.set_password(username, password)      return nil, "Setting password is not supported. Pleasae see http://exoplay.net for details." end
function provider.create_user(username, password)       return nil, "Registering users is not supported. Please see http://exoplay.net for details." end

module:add_item("auth-provider", provider);