mirror of
https://github.com/curl/curl.git
synced 2025-04-18 16:30:45 +08:00
625f2c1644
by including headers using "../[header]" when done from C files in subdirectories, we do not need to specify the lib source dir as an include path and we reduce the risk of header name collisions with headers in the SDK using the same file names. Idea-by: Kai Pastor Ref: #16949 Closes #16991
128 lines
3.4 KiB
C
128 lines
3.4 KiB
C
/***************************************************************************
|
|
* _ _ ____ _
|
|
* Project ___| | | | _ \| |
|
|
* / __| | | | |_) | |
|
|
* | (__| |_| | _ <| |___
|
|
* \___|\___/|_| \_\_____|
|
|
*
|
|
* Copyright (C) Simon Josefsson, <simon@josefsson.org>, et al.
|
|
*
|
|
* This software is licensed as described in the file COPYING, which
|
|
* you should have received as part of this distribution. The terms
|
|
* are also available at https://curl.se/docs/copyright.html.
|
|
*
|
|
* You may opt to use, copy, modify, merge, publish, distribute and/or sell
|
|
* copies of the Software, and permit persons to whom the Software is
|
|
* furnished to do so, under the terms of the COPYING file.
|
|
*
|
|
* This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
|
|
* KIND, either express or implied.
|
|
*
|
|
* SPDX-License-Identifier: curl
|
|
*
|
|
* RFC5802 SCRAM-SHA-1 authentication
|
|
*
|
|
***************************************************************************/
|
|
|
|
#include "../curl_setup.h"
|
|
|
|
#ifdef USE_GSASL
|
|
|
|
#include <curl/curl.h>
|
|
|
|
#include "vauth.h"
|
|
#include "../urldata.h"
|
|
#include "../sendf.h"
|
|
|
|
#include <gsasl.h>
|
|
|
|
/* The last 3 #include files should be in this order */
|
|
#include "../curl_printf.h"
|
|
#include "../curl_memory.h"
|
|
#include "../memdebug.h"
|
|
|
|
bool Curl_auth_gsasl_is_supported(struct Curl_easy *data,
|
|
const char *mech,
|
|
struct gsasldata *gsasl)
|
|
{
|
|
int res;
|
|
|
|
res = gsasl_init(&gsasl->ctx);
|
|
if(res != GSASL_OK) {
|
|
failf(data, "gsasl init: %s\n", gsasl_strerror(res));
|
|
return FALSE;
|
|
}
|
|
|
|
res = gsasl_client_start(gsasl->ctx, mech, &gsasl->client);
|
|
if(res != GSASL_OK) {
|
|
gsasl_done(gsasl->ctx);
|
|
return FALSE;
|
|
}
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
CURLcode Curl_auth_gsasl_start(struct Curl_easy *data,
|
|
const char *userp,
|
|
const char *passwdp,
|
|
struct gsasldata *gsasl)
|
|
{
|
|
#if GSASL_VERSION_NUMBER >= 0x010b00
|
|
int res;
|
|
res =
|
|
#endif
|
|
gsasl_property_set(gsasl->client, GSASL_AUTHID, userp);
|
|
#if GSASL_VERSION_NUMBER >= 0x010b00
|
|
if(res != GSASL_OK) {
|
|
failf(data, "setting AUTHID failed: %s\n", gsasl_strerror(res));
|
|
return CURLE_OUT_OF_MEMORY;
|
|
}
|
|
#endif
|
|
|
|
#if GSASL_VERSION_NUMBER >= 0x010b00
|
|
res =
|
|
#endif
|
|
gsasl_property_set(gsasl->client, GSASL_PASSWORD, passwdp);
|
|
#if GSASL_VERSION_NUMBER >= 0x010b00
|
|
if(res != GSASL_OK) {
|
|
failf(data, "setting PASSWORD failed: %s\n", gsasl_strerror(res));
|
|
return CURLE_OUT_OF_MEMORY;
|
|
}
|
|
#endif
|
|
|
|
(void)data;
|
|
|
|
return CURLE_OK;
|
|
}
|
|
|
|
CURLcode Curl_auth_gsasl_token(struct Curl_easy *data,
|
|
const struct bufref *chlg,
|
|
struct gsasldata *gsasl,
|
|
struct bufref *out)
|
|
{
|
|
int res;
|
|
char *response;
|
|
size_t outlen;
|
|
|
|
res = gsasl_step(gsasl->client,
|
|
(const char *) Curl_bufref_ptr(chlg), Curl_bufref_len(chlg),
|
|
&response, &outlen);
|
|
if(res != GSASL_OK && res != GSASL_NEEDS_MORE) {
|
|
failf(data, "GSASL step: %s\n", gsasl_strerror(res));
|
|
return CURLE_BAD_CONTENT_ENCODING;
|
|
}
|
|
|
|
Curl_bufref_set(out, response, outlen, gsasl_free);
|
|
return CURLE_OK;
|
|
}
|
|
|
|
void Curl_auth_gsasl_cleanup(struct gsasldata *gsasl)
|
|
{
|
|
gsasl_finish(gsasl->client);
|
|
gsasl->client = NULL;
|
|
|
|
gsasl_done(gsasl->ctx);
|
|
gsasl->ctx = NULL;
|
|
}
|
|
#endif
|