summaryrefslogtreecommitdiffstats
blob: ace69b09f98da3582bbce420fa94971dc18c7af2 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
/*
 * Copyright (c) 2010 Remko Tronçon
 * Licensed under the GNU General Public License v3.
 * See Documentation/Licenses/GPLv3.txt for more information.
 */

#pragma once

#include <map>
#include <boost/optional.hpp>

#include <string>
#include <Swiften/Base/ByteArray.h>
#include <Swiften/SASL/ClientAuthenticator.h>
#include <Swiften/Base/API.h>

namespace Swift {
	class SWIFTEN_API SCRAMSHA1ClientAuthenticator : public ClientAuthenticator {
		public:
			SCRAMSHA1ClientAuthenticator(const std::string& nonce, bool useChannelBinding = false);

			void setTLSChannelBindingData(const ByteArray& channelBindingData);
			
			virtual boost::optional<SafeByteArray> getResponse() const;
			virtual bool setChallenge(const boost::optional<ByteArray>&);

		private:
			ByteArray getInitialBareClientMessage() const;
			ByteArray getGS2Header() const;
			ByteArray getFinalMessageWithoutProof() const;

			static std::map<char, std::string> parseMap(const std::string&);

		private:
			enum Step {
				Initial,
				Proof,
				Final
			} step;
			std::string clientnonce;
			ByteArray initialServerMessage;
			ByteArray serverNonce;
			ByteArray authMessage;
			ByteArray saltedPassword;
			ByteArray serverSignature;
			bool useChannelBinding;
			boost::optional<ByteArray> tlsChannelBindingData;
	};
}