Add my version of the Prosody mod_auth_custom_http module.

2 files changed, 94 insertions, 0 deletions

diff --git a/src/mod_auth_custom_http_onefang/README.markdown b/src/mod_auth_custom_http_onefang/README.markdown
new file mode 100644
index 0000000..ab79bf5
--- /dev/null
+++ b/src/mod_auth_custom_http_onefang/README.markdown
@@ -0,0 +1,32 @@
+---
+summary: HTTP Authentication using custom JSON protocol
+...
+
+Introduction
+============
+
+To authenticate users, this module does a `POST` request to a configured
+URL with a JSON payload. It is not async so requests block the server
+until answered.
+
+Configuration
+=============
+
+``` lua
+VirtualHost "example.com"
+authentication = "custom_http"
+auth_custom_http = {
+  post_url = "http://api.example.com/auth";
+}
+```
+
+Protocol
+========
+
+The JSON payload consists of an object with `username` and `password`
+members:
+
+    {"username":"john","password":"secr1t"}
+
+The module expects the response body to be exactly `true` if the
+username and password are correct.
diff --git a/src/mod_auth_custom_http_onefang/mod_auth_custom_http_onefang.lua b/src/mod_auth_custom_http_onefang/mod_auth_custom_http_onefang.lua
new file mode 100644
index 0000000..3d7c130
--- /dev/null
+++ b/src/mod_auth_custom_http_onefang/mod_auth_custom_http_onefang.lua
@@ -0,0 +1,62 @@
+-- Prosody IM
+-- Copyright (C) 2008-2010 Waqas Hussain
+--
+-- This project is MIT/X11 licensed. Please see the
+-- COPYING file in the source package for more information.
+--
+
+local new_sasl = require "util.sasl".new;
+local json = require "util.json";
+prosody.unlock_globals();
+local http = require "socket.http";
+local https = require "ssl.https";
+prosody.lock_globals();
+
+local options = module:get_option("auth_custom_http");
+local post_url = options and options.post_url;
+assert(post_url, "No HTTP POST URL provided");
+
+local provider = { name = "custom_http_onefang" };
+
+function provider.test_password(username, password)
+        return nil, "Not supported"
+end
+
+function provider.get_password(username)
+        return nil, "Not supported"
+end
+
+function provider.set_password(username, password)
+        return nil, "Not supported"
+end
+
+function provider.user_exists(username)
+        return true;
+end
+
+function provider.create_user(username, password)
+        return nil, "Not supported"
+end
+
+function provider.delete_user(username)
+        return nil, "Not supported"
+end
+
+function provider.get_sasl_handler()
+        local getpass_authentication_profile = {
+                plain_test = function(sasl, username, password, realm)
+                        local postdata = json.encode({ username = username, password = password });
+                        local result = "";
+                        if string.lower(post_url:sub(1, 5)) == "https" then
+                                result = https.request(post_url, postdata);
+                        else
+                                result = http.request(post_url, postdata);
+                        end
+                        return result == "true", true;
+                end,
+        };
+        return new_sasl(module.host, getpass_authentication_profile);
+end
+
+
+module:provides("auth", provider);