move to emqtt/emq_auth_clientid plugin
This commit is contained in:
Feng Lee
parent
bf075a125b
commit
e85ad35d35
|
|
@ -1,123 +0,0 @@
|
|||
%%--------------------------------------------------------------------
|
||||
%% Copyright (c) 2012-2016 Feng Lee <feng@emqtt.io>.
|
||||
%%
|
||||
%% Licensed under the Apache License, Version 2.0 (the "License");
|
||||
%% you may not use this file except in compliance with the License.
|
||||
%% You may obtain a copy of the License at
|
||||
%%
|
||||
%% http://www.apache.org/licenses/LICENSE-2.0
|
||||
%%
|
||||
%% Unless required by applicable law or agreed to in writing, software
|
||||
%% distributed under the License is distributed on an "AS IS" BASIS,
|
||||
%% WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
%% See the License for the specific language governing permissions and
|
||||
%% limitations under the License.
|
||||
%%--------------------------------------------------------------------
|
||||
|
||||
-module(emqttd_auth_clientid).
|
||||
|
||||
-include("emqttd.hrl").
|
||||
|
||||
-export([add_clientid/1, add_clientid/2, lookup_clientid/1, remove_clientid/1,
|
||||
all_clientids/0]).
|
||||
|
||||
-behaviour(emqttd_auth_mod).
|
||||
|
||||
%% emqttd_auth_mod callbacks
|
||||
-export([init/1, check/3, description/0]).
|
||||
|
||||
-define(AUTH_CLIENTID_TAB, mqtt_auth_clientid).
|
||||
|
||||
-record(?AUTH_CLIENTID_TAB, {client_id, ipaddr, password}).
|
||||
|
||||
%%--------------------------------------------------------------------
|
||||
%% API
|
||||
%%--------------------------------------------------------------------
|
||||
|
||||
%% @doc Add clientid
|
||||
-spec(add_clientid(binary()) -> {atomic, ok} | {aborted, any()}).
|
||||
add_clientid(ClientId) when is_binary(ClientId) ->
|
||||
R = #mqtt_auth_clientid{client_id = ClientId},
|
||||
mnesia:transaction(fun mnesia:write/1, [R]).
|
||||
|
||||
%% @doc Add clientid with password
|
||||
-spec(add_clientid(binary(), binary()) -> {atomic, ok} | {aborted, any()}).
|
||||
add_clientid(ClientId, Password) ->
|
||||
R = #mqtt_auth_clientid{client_id = ClientId, password = Password},
|
||||
mnesia:transaction(fun mnesia:write/1, [R]).
|
||||
|
||||
%% @doc Lookup clientid
|
||||
-spec(lookup_clientid(binary()) -> list(#mqtt_auth_clientid{})).
|
||||
lookup_clientid(ClientId) ->
|
||||
mnesia:dirty_read(?AUTH_CLIENTID_TAB, ClientId).
|
||||
|
||||
%% @doc Lookup all clientids
|
||||
-spec(all_clientids() -> list(binary())).
|
||||
all_clientids() -> mnesia:dirty_all_keys(?AUTH_CLIENTID_TAB).
|
||||
|
||||
%% @doc Remove clientid
|
||||
-spec(remove_clientid(binary()) -> {atomic, ok} | {aborted, any()}).
|
||||
remove_clientid(ClientId) ->
|
||||
mnesia:transaction(fun mnesia:delete/1, [{?AUTH_CLIENTID_TAB, ClientId}]).
|
||||
|
||||
%%--------------------------------------------------------------------
|
||||
%% emqttd_auth_mod callbacks
|
||||
%%--------------------------------------------------------------------
|
||||
|
||||
init(Opts) ->
|
||||
mnesia:create_table(?AUTH_CLIENTID_TAB, [
|
||||
{ram_copies, [node()]},
|
||||
{attributes, record_info(fields, ?AUTH_CLIENTID_TAB)}]),
|
||||
mnesia:add_table_copy(?AUTH_CLIENTID_TAB, node(), ram_copies),
|
||||
Clients = load_client_from(proplists:get_value(config, Opts)),
|
||||
mnesia:transaction(fun() -> [mnesia:write(C) || C<- Clients] end),
|
||||
{ok, Opts}.
|
||||
|
||||
check(#mqtt_client{client_id = undefined}, _Password, _Opts) ->
|
||||
{error, clientid_undefined};
|
||||
check(#mqtt_client{client_id = ClientId, peername = {IpAddress, _}}, _Password, []) ->
|
||||
check_clientid_only(ClientId, IpAddress);
|
||||
check(#mqtt_client{client_id = ClientId, peername = {IpAddress, _}}, _Password, [{password, no}|_]) ->
|
||||
check_clientid_only(ClientId, IpAddress);
|
||||
check(_Client, undefined, [{password, yes}|_]) ->
|
||||
{error, password_undefined};
|
||||
check(#mqtt_client{client_id = ClientId}, Password, [{password, yes}|_]) ->
|
||||
case mnesia:dirty_read(?AUTH_CLIENTID_TAB, ClientId) of
|
||||
[] -> {error, clientid_not_found};
|
||||
[#?AUTH_CLIENTID_TAB{password = Password}] -> ok; %% TODO: plaintext??
|
||||
_ -> {error, password_error}
|
||||
end.
|
||||
|
||||
description() -> "ClientId authentication module".
|
||||
|
||||
%%--------------------------------------------------------------------
|
||||
%% Internal functions
|
||||
%%--------------------------------------------------------------------
|
||||
|
||||
load_client_from(undefined) ->
|
||||
ok;
|
||||
|
||||
load_client_from(File) ->
|
||||
{ok, Clients} = file:consult(File),
|
||||
[client(Client) || Client <- Clients].
|
||||
|
||||
client(ClientId) when is_list(ClientId) ->
|
||||
#mqtt_auth_clientid{client_id = list_to_binary(ClientId)};
|
||||
|
||||
client({ClientId, IpAddr}) when is_list(ClientId) ->
|
||||
#mqtt_auth_clientid{client_id = iolist_to_binary(ClientId),
|
||||
ipaddr = esockd_cidr:parse(IpAddr, true)}.
|
||||
|
||||
check_clientid_only(ClientId, IpAddr) ->
|
||||
case mnesia:dirty_read(?AUTH_CLIENTID_TAB, ClientId) of
|
||||
[] ->
|
||||
{error, clientid_not_found};
|
||||
[#?AUTH_CLIENTID_TAB{ipaddr = undefined}] ->
|
||||
ok;
|
||||
[#?AUTH_CLIENTID_TAB{ipaddr = CIDR}] ->
|
||||
case esockd_cidr:match(IpAddr, CIDR) of
|
||||
true -> ok;
|
||||
false -> {error, wrong_ipaddr}
|
||||
end
|
||||
end.
|
||||
|
||||
Loading…
Reference in New Issue