| OLD | NEW |
| (Empty) |
| 1 /* | |
| 2 * Copyright 2004 The WebRTC Project Authors. All rights reserved. | |
| 3 * | |
| 4 * Use of this source code is governed by a BSD-style license | |
| 5 * that can be found in the LICENSE file in the root of the source | |
| 6 * tree. An additional intellectual property rights grant can be found | |
| 7 * in the file PATENTS. All contributing project authors may | |
| 8 * be found in the AUTHORS file in the root of the source tree. | |
| 9 */ | |
| 10 | |
| 11 #include "webrtc/libjingle/xmpp/xmppauth.h" | |
| 12 | |
| 13 #include <algorithm> | |
| 14 | |
| 15 #include "webrtc/libjingle/xmpp/constants.h" | |
| 16 #include "webrtc/libjingle/xmpp/saslcookiemechanism.h" | |
| 17 #include "webrtc/libjingle/xmpp/saslplainmechanism.h" | |
| 18 | |
| 19 XmppAuth::XmppAuth() : done_(false) { | |
| 20 } | |
| 21 | |
| 22 XmppAuth::~XmppAuth() { | |
| 23 } | |
| 24 | |
| 25 void XmppAuth::StartPreXmppAuth(const buzz::Jid& jid, | |
| 26 const rtc::SocketAddress& server, | |
| 27 const rtc::CryptString& pass, | |
| 28 const std::string& auth_mechanism, | |
| 29 const std::string& auth_token) { | |
| 30 jid_ = jid; | |
| 31 passwd_ = pass; | |
| 32 auth_mechanism_ = auth_mechanism; | |
| 33 auth_token_ = auth_token; | |
| 34 done_ = true; | |
| 35 | |
| 36 SignalAuthDone(); | |
| 37 } | |
| 38 | |
| 39 static bool contains(const std::vector<std::string>& strings, | |
| 40 const std::string& string) { | |
| 41 return std::find(strings.begin(), strings.end(), string) != strings.end(); | |
| 42 } | |
| 43 | |
| 44 std::string XmppAuth::ChooseBestSaslMechanism( | |
| 45 const std::vector<std::string>& mechanisms, | |
| 46 bool encrypted) { | |
| 47 // First try Oauth2. | |
| 48 if (GetAuthMechanism() == buzz::AUTH_MECHANISM_OAUTH2 && | |
| 49 contains(mechanisms, buzz::AUTH_MECHANISM_OAUTH2)) { | |
| 50 return buzz::AUTH_MECHANISM_OAUTH2; | |
| 51 } | |
| 52 | |
| 53 // A token is the weakest auth - 15s, service-limited, so prefer it. | |
| 54 if (GetAuthMechanism() == buzz::AUTH_MECHANISM_GOOGLE_TOKEN && | |
| 55 contains(mechanisms, buzz::AUTH_MECHANISM_GOOGLE_TOKEN)) { | |
| 56 return buzz::AUTH_MECHANISM_GOOGLE_TOKEN; | |
| 57 } | |
| 58 | |
| 59 // A cookie is the next weakest - 14 days. | |
| 60 if (GetAuthMechanism() == buzz::AUTH_MECHANISM_GOOGLE_COOKIE && | |
| 61 contains(mechanisms, buzz::AUTH_MECHANISM_GOOGLE_COOKIE)) { | |
| 62 return buzz::AUTH_MECHANISM_GOOGLE_COOKIE; | |
| 63 } | |
| 64 | |
| 65 // As a last resort, use plain authentication. | |
| 66 if (contains(mechanisms, buzz::AUTH_MECHANISM_PLAIN)) { | |
| 67 return buzz::AUTH_MECHANISM_PLAIN; | |
| 68 } | |
| 69 | |
| 70 // No good mechanism found | |
| 71 return ""; | |
| 72 } | |
| 73 | |
| 74 buzz::SaslMechanism* XmppAuth::CreateSaslMechanism( | |
| 75 const std::string& mechanism) { | |
| 76 if (mechanism == buzz::AUTH_MECHANISM_OAUTH2) { | |
| 77 return new buzz::SaslCookieMechanism( | |
| 78 mechanism, jid_.Str(), auth_token_, "oauth2"); | |
| 79 } else if (mechanism == buzz::AUTH_MECHANISM_GOOGLE_TOKEN) { | |
| 80 return new buzz::SaslCookieMechanism(mechanism, jid_.Str(), auth_token_); | |
| 81 // } else if (mechanism == buzz::AUTH_MECHANISM_GOOGLE_COOKIE) { | |
| 82 // return new buzz::SaslCookieMechanism(mechanism, jid.Str(), sid_); | |
| 83 } else if (mechanism == buzz::AUTH_MECHANISM_PLAIN) { | |
| 84 return new buzz::SaslPlainMechanism(jid_, passwd_); | |
| 85 } else { | |
| 86 return NULL; | |
| 87 } | |
| 88 } | |
| OLD | NEW |