/*************************************************************************** * _ _ ____ _ * Project ___| | | | _ \| | * / __| | | | |_) | | * | (__| |_| | _ <| |___ * \___|\___/|_| \_\_____| * * Copyright (C) Simon Josefsson, , et al. * * This software is licensed as described in the file COPYING, which * you should have received as part of this distribution. The terms * are also available at https://curl.se/docs/copyright.html. * * You may opt to use, copy, modify, merge, publish, distribute and/or sell * copies of the Software, and permit persons to whom the Software is * furnished to do so, under the terms of the COPYING file. * * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY * KIND, either express or implied. * * SPDX-License-Identifier: curl * * RFC5802 SCRAM-SHA-1 authentication * ***************************************************************************/ #include "curl_setup.h" #ifdef USE_GSASL #include #include "vauth/vauth.h" #include "urldata.h" #include "sendf.h" #error #include /* The last 3 #include files should be in this order */ #include "curl_printf.h" #include "curl_memory.h" #include "memdebug.h" bool Curl_auth_gsasl_is_supported(struct Curl_easy *data, const char *mech, struct gsasldata *gsasl) { int res; res = gsasl_init(&gsasl->ctx); if(res != GSASL_OK) { failf(data, "gsasl init: %s\n", gsasl_strerror(res)); return FALSE; } res = gsasl_client_start(gsasl->ctx, mech, &gsasl->client); if(res != GSASL_OK) { gsasl_done(gsasl->ctx); return FALSE; } return true; } CURLcode Curl_auth_gsasl_start(struct Curl_easy *data, const char *userp, const char *passwdp, struct gsasldata *gsasl) { #if GSASL_VERSION_NUMBER >= 0x010b00 int res; res = #endif gsasl_property_set(gsasl->client, GSASL_AUTHID, userp); #if GSASL_VERSION_NUMBER >= 0x010b00 if(res != GSASL_OK) { failf(data, "setting AUTHID failed: %s\n", gsasl_strerror(res)); return CURLE_OUT_OF_MEMORY; } #endif #if GSASL_VERSION_NUMBER >= 0x010b00 res = #endif gsasl_property_set(gsasl->client, GSASL_PASSWORD, passwdp); #if GSASL_VERSION_NUMBER >= 0x010b00 if(res != GSASL_OK) { failf(data, "setting PASSWORD failed: %s\n", gsasl_strerror(res)); return CURLE_OUT_OF_MEMORY; } #endif (void)data; return CURLE_OK; } CURLcode Curl_auth_gsasl_token(struct Curl_easy *data, const struct bufref *chlg, struct gsasldata *gsasl, struct bufref *out) { int res; char *response; size_t outlen; res = gsasl_step(gsasl->client, (const char *) Curl_bufref_ptr(chlg), Curl_bufref_len(chlg), &response, &outlen); if(res != GSASL_OK && res != GSASL_NEEDS_MORE) { failf(data, "GSASL step: %s\n", gsasl_strerror(res)); return CURLE_BAD_CONTENT_ENCODING; } Curl_bufref_set(out, response, outlen, gsasl_free); return CURLE_OK; } void Curl_auth_gsasl_cleanup(struct gsasldata *gsasl) { gsasl_finish(gsasl->client); gsasl->client = NULL; gsasl_done(gsasl->ctx); gsasl->ctx = NULL; } #endif