torcwebsockettoken.cpp

Go to the documentation of this file.

/* Class TorcWebSocketToken
*
* This file is part of the Torc project.
*
* Copyright (C) Mark Kendall 2018
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301,
* USA.
*/

// Qt
#include <QUuid>
#include <QMutex>

// Torc
#include "torclogging.h"
#include "torccoreutils.h"
#include "torcwebsockettoken.h"

class WebSocketAuthentication
{
  public:
    WebSocketAuthentication()
      : m_timeStamp(0),
        m_host()
    {
    }
    WebSocketAuthentication(quint64 Timestamp, const QString &Host)
      : m_timeStamp(Timestamp),
        m_host(Host)
    {
    }

    quint64 m_timeStamp;
    QString m_host;
};

QString TorcWebSocketToken::GetWebSocketToken(const QString &Host, const QString &Current)
{
    static QMutex lock(QMutex::Recursive);
    static QMap<QString,WebSocketAuthentication> tokens;

    QMutexLocker locker(&lock);

    // always expire old tokens
    quint64 tooold = TorcCoreUtils::GetMicrosecondCount() - 10000000;
    QStringList old;
    QMap<QString,WebSocketAuthentication>::iterator it = tokens.begin();
    for ( ; it != tokens.end(); ++it)
        if (it.value().m_timeStamp < tooold)
            old.append(it.key());

    foreach (const QString &expire, old)
        tokens.remove(expire);

    // if a current token is supplied, validate it
    if (!Current.isEmpty())
    {
        if (tokens.contains(Current))
        {
            // validate the host
            if (tokens.value(Current).m_host == Host)
            {
                tokens.remove(Current);
                return Current;
            }
            tokens.remove(Current);
            LOG(VB_GENERAL, LOG_ERR, QStringLiteral("Host mismatch for websocket authentication"));
        }
        return QStringLiteral("ErroR");
    }

    // create new
    QString uuid = QUuid::createUuid().toString().mid(1, 36);
    tokens.insert(uuid, WebSocketAuthentication(TorcCoreUtils::GetMicrosecondCount(), Host));
    return uuid;
}