X-Git-Url: https://gerrit.automotivelinux.org/gerrit/gitweb?a=blobdiff_plain;f=src%2Fsession.c;h=131d80c173fa6ae16d9a661a5d189df5913d3e11;hb=acdf592fee6d7f1970e42e31c23c2a88196051aa;hp=3494dadb38d157d2032eb594b93b461497751d7c;hpb=a644a48c2dfdc4ba5129aa3b85a21aadc429f65d;p=src%2Fapp-framework-binder.git diff --git a/src/session.c b/src/session.c index 3494dadb..131d80c1 100644 --- a/src/session.c +++ b/src/session.c @@ -14,10 +14,10 @@ * * You should have received a copy of the GNU General Public License * along with this program. If not, see . - * - * Reference: - * https://github.com/json-c/json-c/blob/master/linkhash.c - * https://github.com/json-c/json-c/blob/master/linkhash.h + * + * Reference: + * http://stackoverflow.com/questions/25971505/how-to-delete-element-from-hsearch + * */ @@ -27,55 +27,360 @@ #include #include #include +#include +#include -#define AFB_SESSION_JTYPE "AFB_session" -#define AFB_SESSION_JLIST "AFB_sessions" -#define AFB_SESSION_JINFO "AFB_infos" +// Session UUID are store in a simple array [for 10 sessions this should be enough] +static struct { + pthread_mutex_t mutex; // declare a mutex to protect hash table + AFB_clientCtx **store; // sessions store + int count; // current number of sessions + int max; +} sessions; -#define AFB_CURRENT_SESSION "active-session" // file link name within sndcard dir -#define AFB_DEFAULT_SESSION "current-session" // should be in sync with UI +static const char key_uuid[] = "uuid"; +static const char key_token[] = "token"; +// Free context [XXXX Should be protected again memory abort XXXX] +static void ctxUuidFreeCB (AFB_clientCtx *client) +{ -static struct lh_table *clientCtxs=NULL; // let's use JsonObject Hashtable to Store Sessions + AFB_plugin **plugins = client->plugins; + AFB_freeCtxCB freeCtxCB; + int idx; + // If application add a handle let's free it now + if (client->contexts != NULL) { -// verify we can read/write in session dir -PUBLIC AFB_error sessionCheckdir (AFB_session *session) { + // Free client handle with a standard Free function, with app callback or ignore it + for (idx=0; client->plugins[idx] != NULL; idx ++) { + if (client->contexts[idx] != NULL) { + freeCtxCB = client->plugins[idx]->freeCtxCB; + if (freeCtxCB == NULL) + free (client->contexts[idx]); + else if (freeCtxCB != (void*)-1) + freeCtxCB(client->contexts[idx], plugins[idx]->handle, client->uuid); + } + } + } +} - int err; +// Create a new store in RAM, not that is too small it will be automatically extended +void ctxStoreInit (int nbSession) +{ - // in case session dir would not exist create one - if (verbose) fprintf (stderr, "AFB:notice checking session dir [%s]\n", session->config->sessiondir); - mkdir(session->config->sessiondir, S_IRWXU | S_IRWXG | S_IROTH | S_IXOTH); + // let's create as store as hashtable does not have any + sessions.store = calloc (1 + (unsigned)nbSession, sizeof(AFB_clientCtx)); + sessions.max = nbSession; +} - // change for session directory - err = chdir(session->config->sessiondir); - if (err) { - fprintf(stderr,"AFB: Fail to chdir to %s error=%s\n", session->config->sessiondir, strerror(err)); - return err; - } +static AFB_clientCtx *ctxStoreSearch (const char* uuid) +{ + int idx; + AFB_clientCtx *client; - // verify we can write session in directory - json_object *dummy= json_object_new_object(); - json_object_object_add (dummy, "checked" , json_object_new_int (getppid())); - err = json_object_to_file ("./AFB-probe.json", dummy); - if (err < 0) return err; + if (uuid == NULL) + return NULL; - return AFB_SUCCESS; + pthread_mutex_lock(&sessions.mutex); + + for (idx=0; idx < sessions.max; idx++) { + if (sessions.store[idx] && (0 == strcmp (uuid, sessions.store[idx]->uuid))) break; + } + + if (idx == sessions.max) client=NULL; + else client= sessions.store[idx]; + pthread_mutex_unlock(&sessions.mutex); + + return client; +} + +static AFB_error ctxStoreDel (AFB_clientCtx *client) +{ + int idx; + int status; + + if (client == NULL) + return AFB_FAIL; + + pthread_mutex_lock(&sessions.mutex); + + for (idx=0; idx < sessions.max; idx++) { + if (sessions.store[idx] && (0 == strcmp (client->uuid, sessions.store[idx]->uuid))) break; + } + + if (idx == sessions.max) + status = AFB_FAIL; + else { + sessions.count--; + ctxUuidFreeCB (sessions.store[idx]); + sessions.store[idx]=NULL; + status = AFB_SUCCESS; + } + + pthread_mutex_unlock(&sessions.mutex); + return status; +} + +static AFB_error ctxStoreAdd (AFB_clientCtx *client) +{ + int idx; + int status; + if (client == NULL) + return AFB_FAIL; + + //fprintf (stderr, "ctxStoreAdd request uuid=%s count=%d\n", client->uuid, sessions.count); + + pthread_mutex_lock(&sessions.mutex); + + for (idx=0; idx < sessions.max; idx++) { + if (NULL == sessions.store[idx]) break; + } + + if (idx == sessions.max) status=AFB_FAIL; + else { + status=AFB_SUCCESS; + sessions.count ++; + sessions.store[idx]= client; + } + + pthread_mutex_unlock(&sessions.mutex); + return status; } -// let's return only sessions files -STATIC int fileSelect (const struct dirent *entry) { +// Check if context timeout or not +static int ctxStoreToOld (AFB_clientCtx *ctx, int timeout) +{ + int res; + time_t now = time(NULL); + res = (ctx->timeStamp + timeout) <= now; + return res; +} + +// Loop on every entry and remove old context sessions.hash +void ctxStoreGarbage (const int timeout) +{ + AFB_clientCtx *ctx; + long idx; + + // Loop on Sessions Table and remove anything that is older than timeout + for (idx=0; idx < sessions.max; idx++) { + ctx=sessions.store[idx]; + if ((ctx != NULL) && (ctxStoreToOld(ctx, timeout))) { + ctxStoreDel (ctx); + } + } +} + +// This function will return exiting client context or newly created client context +AFB_clientCtx *ctxClientGet (AFB_request *request, int idx) +{ + AFB_clientCtx *clientCtx=NULL; + const char *uuid; + uuid_t newuuid; + + if (request->config->token == NULL) return NULL; + + // Check if client as a context or not inside the URL + uuid = MHD_lookup_connection_value(request->connection, MHD_GET_ARGUMENT_KIND, key_uuid); + + // if UUID in query we're restfull with no cookies otherwise check for cookie + if (uuid != NULL) + request->restfull = TRUE; + else { + char cookie[64]; + request->restfull = FALSE; + snprintf(cookie, sizeof cookie, "%s-%d", COOKIE_NAME, request->config->httpdPort); + uuid = MHD_lookup_connection_value (request->connection, MHD_COOKIE_KIND, cookie); + }; + + // Warning when no cookie defined MHD_lookup_connection_value may return something !!! + if ((uuid != NULL) && (strnlen (uuid, 10) >= 10)) { + // search if client context exist and it not timeout let's use it + clientCtx = ctxStoreSearch (uuid); + + if (clientCtx) { + if (ctxStoreToOld (clientCtx, request->config->cntxTimeout)) { + // this session is too old let's delete it + ctxStoreDel (clientCtx); + clientCtx = NULL; + } else { + request->context=clientCtx->contexts[idx]; + request->handle = clientCtx->plugins[idx]->handle; + request->uuid= uuid; + return clientCtx; + } + } + } + + // we have no session let's create one otherwise let's clean any exiting values + if (clientCtx == NULL) { + clientCtx = calloc(1, sizeof(AFB_clientCtx)); // init NULL clientContext + clientCtx->contexts = calloc (1, (unsigned)request->config->pluginCount * (sizeof (void*))); + clientCtx->plugins = request->plugins; + } + + uuid_generate(newuuid); // create a new UUID + uuid_unparse_lower(newuuid, clientCtx->uuid); + + // if table is full at 50% let's clean it up + if(sessions.count > (sessions.max / 2)) ctxStoreGarbage(request->config->cntxTimeout); + + // finally add uuid into hashtable + if (AFB_SUCCESS != ctxStoreAdd (clientCtx)) { + free (clientCtx); + return NULL; + } + + // if (verbose) fprintf (stderr, "ctxClientGet New uuid=[%s] token=[%s] timestamp=%d\n", clientCtx->uuid, clientCtx->token, clientCtx->timeStamp); + request->context = clientCtx->contexts[idx]; + request->handle = clientCtx->plugins[idx]->handle; + request->uuid=clientCtx->uuid; + return clientCtx; +} + +// Sample Generic Ping Debug API +AFB_error ctxTokenCheck (AFB_clientCtx *clientCtx, AFB_request *request) +{ + const char *token; + + if (clientCtx->contexts == NULL) + return AFB_EMPTY; + + // this time have to extract token from query list + token = MHD_lookup_connection_value(request->connection, MHD_GET_ARGUMENT_KIND, key_token); + + // if not token is providing we refuse the exchange + if ((token == NULL) || (clientCtx->token == NULL)) + return AFB_FALSE; + + // compare current token with previous one + if ((0 == strcmp (token, clientCtx->token)) && (!ctxStoreToOld (clientCtx, request->config->cntxTimeout))) { + return AFB_SUCCESS; + } + + // Token is not valid let move level of assurance to zero and free attached client handle + return AFB_FAIL; +} + +// Free Client Session Context +AFB_error ctxTokenReset (AFB_clientCtx *clientCtx, AFB_request *request) +{ + if (clientCtx == NULL) + return AFB_EMPTY; + //if (verbose) fprintf (stderr, "ctxClientReset New uuid=[%s] token=[%s] timestamp=%d\n", clientCtx->uuid, clientCtx->token, clientCtx->timeStamp); + + // Search for an existing client with the same UUID + clientCtx = ctxStoreSearch (clientCtx->uuid); + if (clientCtx == NULL) + return AFB_FALSE; + + // Remove client from table + ctxStoreDel (clientCtx); + + return AFB_SUCCESS; +} + +// generate a new token +AFB_error ctxTokenCreate (AFB_clientCtx *clientCtx, AFB_request *request) +{ + uuid_t newuuid; + const char *token; + + if (clientCtx == NULL) + return AFB_EMPTY; + + // if config->token!="" then verify that we have the right initial share secret + if (request->config->token[0] != '\0') { + + // check for initial token secret and return if not presented + token = MHD_lookup_connection_value(request->connection, MHD_GET_ARGUMENT_KIND, key_token); + if (token == NULL) + return AFB_UNAUTH; + + // verify that it fits with initial tokens fit + if (strcmp(request->config->token, token)) + return AFB_UNAUTH; + } + + // create a UUID as token value + uuid_generate(newuuid); + uuid_unparse_lower(newuuid, clientCtx->token); + + // keep track of time for session timeout and further clean up + clientCtx->timeStamp=time(NULL); + + // Token is also store in context but it might be convenient for plugin to access it directly + return AFB_SUCCESS; +} + + +// generate a new token and update client context +AFB_error ctxTokenRefresh (AFB_clientCtx *clientCtx, AFB_request *request) +{ + uuid_t newuuid; + + if (clientCtx == NULL) + return AFB_EMPTY; + + // Check if the old token is valid + if (ctxTokenCheck (clientCtx, request) != AFB_SUCCESS) + return AFB_FAIL; + + // Old token was valid let's regenerate a new one + uuid_generate(newuuid); // create a new UUID + uuid_unparse_lower(newuuid, clientCtx->token); + + // keep track of time for session timeout and further clean up + clientCtx->timeStamp=time(NULL); + + return AFB_SUCCESS; +} + + + + + + + + + + + + + + + + + + + + + + + +#if defined(ALLOWS_SESSION_FILES) + +#define AFB_SESSION_JTYPE "AFB_session" +#define AFB_SESSION_JLIST "AFB_sessions.hash" +#define AFB_SESSION_JINFO "AFB_infos" + + +#define AFB_CURRENT_SESSION "active-session" // file link name within sndcard dir +#define AFB_DEFAULT_SESSION "current-session" // should be in sync with UI + +// let's return only sessions.hash files +static int fileSelect (const struct dirent *entry) { return (strstr (entry->d_name, ".afb") != NULL); } -STATIC json_object *checkCardDirExit (AFB_session *session, AFB_request *request ) { +static json_object *checkCardDirExit (AFB_session *session, AFB_request *request ) { int sessionDir, cardDir; // card name should be more than 3 character long !!!! - if (strlen (request->plugin) < 3) { - return (jsonNewMessage (AFB_FAIL,"Fail invalid plugin=%s", request->plugin)); + if (strlen (request->prefix) < 3) { + return (jsonNewMessage (AFB_FAIL,"Fail invalid plugin=%s", request->prefix)); } // open session directory @@ -85,25 +390,67 @@ STATIC json_object *checkCardDirExit (AFB_session *session, AFB_request *reques } // create session sndcard directory if it does not exit - cardDir = openat (sessionDir, request->plugin, O_DIRECTORY); + cardDir = openat (sessionDir, request->prefix, O_DIRECTORY); if (cardDir < 0) { - cardDir = mkdirat (sessionDir, request->plugin, O_RDWR | S_IRWXU | S_IRGRP); + cardDir = mkdirat (sessionDir, request->prefix, O_RDWR | S_IRWXU | S_IRGRP); if (cardDir < 0) { - return (jsonNewMessage (AFB_FAIL,"Fail to create directory [%s/%s] error=%s", session->config->sessiondir, request->plugin, strerror(cardDir))); + return (jsonNewMessage (AFB_FAIL,"Fail to create directory [%s/%s] error=%s", session->config->sessiondir, request->prefix, strerror(cardDir))); } } close (sessionDir); return NULL; } +// Create a link toward last used sessionname within sndcard directory +static void makeSessionLink (const char *cardname, const char *sessionname) { + char linkname [256], filename [256]; + int err; + // create a link to keep track of last uploaded sessionname for this card + strncpy (filename, sessionname, sizeof(filename)); + strncat (filename, ".afb", sizeof(filename)); + + strncpy (linkname, cardname, sizeof(linkname)); + strncat (linkname, "/", sizeof(filename)); + strncat (linkname, AFB_CURRENT_SESSION, sizeof(linkname)); + strncat (linkname, ".afb", sizeof(filename)); + unlink (linkname); // remove previous link if any + err = symlink (filename, linkname); + if (err < 0) fprintf (stderr, "Fail to create link %s->%s error=%s\n", linkname, filename, strerror(errno)); +} + +// verify we can read/write in session dir +AFB_error sessionCheckdir (AFB_session *session) { + + int err; + + // in case session dir would not exist create one + if (verbose) fprintf (stderr, "AFB:notice checking session dir [%s]\n", session->config->sessiondir); + mkdir(session->config->sessiondir, S_IRWXU | S_IRWXG | S_IROTH | S_IXOTH); + + // change for session directory + err = chdir(session->config->sessiondir); + if (err) { + fprintf(stderr,"AFB: Fail to chdir to %s error=%s\n", session->config->sessiondir, strerror(err)); + return err; + } + + // verify we can write session in directory + json_object *dummy= json_object_new_object(); + json_object_object_add (dummy, "checked" , json_object_new_int (getppid())); + err = json_object_to_file ("./AFB-probe.json", dummy); + if (err < 0) return err; + + return AFB_SUCCESS; +} + // create a session in current directory -PUBLIC json_object *sessionList (AFB_session *session, AFB_request *request) { +json_object *sessionList (AFB_session *session, AFB_request *request) { json_object *sessionsJ, *ajgResponse; struct stat fstat; struct dirent **namelist; int count, sessionDir; - // if directory for card's sessions does not exist create it + // if directory for card's sessions.hash does not exist create it ajgResponse = checkCardDirExit (session, request); if (ajgResponse != NULL) return ajgResponse; @@ -113,13 +460,13 @@ PUBLIC json_object *sessionList (AFB_session *session, AFB_request *request) { return (jsonNewMessage (AFB_FAIL,"Fail to open directory [%s] error=%s", session->config->sessiondir, strerror(sessionDir))); } - count = scandirat (sessionDir, request->plugin, &namelist, fileSelect, alphasort); + count = scandirat (sessionDir, request->prefix, &namelist, fileSelect, alphasort); close (sessionDir); if (count < 0) { - return (jsonNewMessage (AFB_FAIL,"Fail to scan sessions directory [%s/%s] error=%s", session->config->sessiondir, request->plugin, strerror(sessionDir))); + return (jsonNewMessage (AFB_FAIL,"Fail to scan sessions.hash directory [%s/%s] error=%s", session->config->sessiondir, request->prefix, strerror(sessionDir))); } - if (count == 0) return (jsonNewMessage (AFB_EMPTY,"[%s] no session at [%s]", request->plugin, session->config->sessiondir)); + if (count == 0) return (jsonNewMessage (AFB_EMPTY,"[%s] no session at [%s]", request->prefix, session->config->sessiondir)); // loop on each session file, retrieve its date and push it into json response object sessionsJ = json_object_new_array(); @@ -156,25 +503,8 @@ PUBLIC json_object *sessionList (AFB_session *session, AFB_request *request) { return (ajgResponse); } -// Create a link toward last used sessionname within sndcard directory -STATIC void makeSessionLink (const char *cardname, const char *sessionname) { - char linkname [256], filename [256]; - int err; - // create a link to keep track of last uploaded sessionname for this card - strncpy (filename, sessionname, sizeof(filename)); - strncat (filename, ".afb", sizeof(filename)); - - strncpy (linkname, cardname, sizeof(linkname)); - strncat (linkname, "/", sizeof(filename)); - strncat (linkname, AFB_CURRENT_SESSION, sizeof(linkname)); - strncat (linkname, ".afb", sizeof(filename)); - unlink (linkname); // remove previous link if any - err = symlink (filename, linkname); - if (err < 0) fprintf (stderr, "Fail to create link %s->%s error=%s\n", linkname, filename, strerror(errno)); -} - // Load Json session object from disk -PUBLIC json_object *sessionFromDisk (AFB_session *session, AFB_request *request, char *name) { +json_object *sessionFromDisk (AFB_session *session, AFB_request *request, char *name) { json_object *jsonSession, *jtype, *response; const char *ajglabel; char filename [256]; @@ -187,12 +517,12 @@ PUBLIC json_object *sessionFromDisk (AFB_session *session, AFB_request *request, // check for current session request defsession = (strcmp (name, AFB_DEFAULT_SESSION) ==0); - // if directory for card's sessions does not exist create it + // if directory for card's sessions.hash does not exist create it response = checkCardDirExit (session, request); if (response != NULL) return response; // add name and file extension to session name - strncpy (filename, request->plugin, sizeof(filename)); + strncpy (filename, request->prefix, sizeof(filename)); strncat (filename, "/", sizeof(filename)); if (defsession) strncat (filename, AFB_CURRENT_SESSION, sizeof(filename)-1); else strncat (filename, name, sizeof(filename)-1); @@ -217,13 +547,13 @@ PUBLIC json_object *sessionFromDisk (AFB_session *session, AFB_request *request, } // create a link to keep track of last uploaded session for this card - if (!defsession) makeSessionLink (request->plugin, name); + if (!defsession) makeSessionLink (request->prefix, name); return (jsonSession); } // push Json session object to disk -PUBLIC json_object * sessionToDisk (AFB_session *session, AFB_request *request, char *name, json_object *jsonSession) { +json_object * sessionToDisk (AFB_session *session, AFB_request *request, char *name, json_object *jsonSession) { char filename [256]; time_t rawtime; struct tm * timeinfo; @@ -236,12 +566,12 @@ PUBLIC json_object * sessionToDisk (AFB_session *session, AFB_request *request, // check for current session request defsession = (strcmp (name, AFB_DEFAULT_SESSION) ==0); - // if directory for card's sessions does not exist create it + // if directory for card's sessions.hash does not exist create it response = checkCardDirExit (session, request); if (response != NULL) return response; // add cardname and file extension to session name - strncpy (filename, request->plugin, sizeof(filename)); + strncpy (filename, request->prefix, sizeof(filename)); strncat (filename, "/", sizeof(filename)); if (defsession) strncat (filename, AFB_CURRENT_SESSION, sizeof(filename)-1); else strncat (filename, name, sizeof(filename)-1); @@ -264,13 +594,13 @@ PUBLIC json_object * sessionToDisk (AFB_session *session, AFB_request *request, // extract session info from args info = json_tokener_parse (request->post->data); if (!info) { - response = jsonNewMessage (AFB_FATAL,"sndcard=%s session=%s invalid json args=%s", request->plugin, name, request->post); + response = jsonNewMessage (AFB_FATAL,"sndcard=%s session=%s invalid json args=%s", request->prefix, name, request->post); goto OnErrorExit; } // info is a valid AFB_info type if (!json_object_object_get_ex (info, "jtype", &jtype)) { - response = jsonNewMessage (AFB_EMPTY,"sndcard=%s session=%s No 'AFB_pluginT' args=%s", request->plugin, name, request->post); + response = jsonNewMessage (AFB_EMPTY,"sndcard=%s session=%s No 'AFB_pluginT' args=%s", request->prefix, name, request->post); goto OnErrorExit; } @@ -295,7 +625,7 @@ PUBLIC json_object * sessionToDisk (AFB_session *session, AFB_request *request, // create a link to keep track of last uploaded session for this card - if (!defsession) makeSessionLink (request->plugin, name); + if (!defsession) makeSessionLink (request->prefix, name); // we're donne let's return status message response = jsonNewMessage (AFB_SUCCESS,"Session= [%s] saved on disk", filename); @@ -306,225 +636,5 @@ OnErrorExit: json_object_put (jsonSession); return response; } - - -// Function to handle Cookies and Client session context it relies on json low level -// linked list functionalities https://github.com/json-c/json-c/blob/master/linkhash.c - -// Hash client UUID before storing in table -STATIC unsigned long ctxUuidHashCB (const void *k1) { - unsigned long hash; - - AFB_clientCtx *ctx = (AFB_clientCtx*) k1; - hash = lh_char_hash(ctx->uuid); - return (hash); -} - -// Compare client UUIDs within table -STATIC int ctxUuidCompCB (const void *k1, const void *k2) { - int res; - AFB_clientCtx *ctx1 = (AFB_clientCtx*) k1; - AFB_clientCtx *ctx2 = (AFB_clientCtx*) k2; - - res = lh_char_equal(ctx1->uuid, ctx2->uuid); - return (res); -} - -// Free context [XXXX Should be protected again memory abort XXXX] -STATIC void ctxUuidFreeCB (struct lh_entry *entry) { - AFB_clientCtx *client = (AFB_clientCtx*) entry->v; - - // If application add a handle let's free it now - if (client->ctx != NULL) { - - // Free client handle with a standard Free function, with app callback or ignore it - if (client->plugin->freeCtxCB == NULL) free (client->ctx); - else if (client->plugin->freeCtxCB != (void*)-1) client->plugin->freeCtxCB(client); - } - free ((void*)entry->v); -} - -// Create a new store in RAM, not that is too small it will be automatically extended -STATIC struct lh_table *ctxStoreCreate (int nbSession) { - lh_table *table; - - // function will exit process in case of error !!! - table=lh_table_new (nbSession, "CtxClient", ctxUuidFreeCB, ctxUuidHashCB, ctxUuidCompCB); - return (table); -} - -// Check if context timeout or not -STATIC int ctxStoreToOld (const void *k1, int timeout) { - int res; - AFB_clientCtx *ctx = (AFB_clientCtx*) k1; - - res = ((ctx->timeStamp + timeout) < time(NULL)); - return (res); -} - -// Loop on every entry and remove old context sessions -PUBLIC int ctxStoreGarbage (struct lh_table *lht, const int timeout) { - struct lh_entry *c; - - // Loop on every entry within table - for(c = lht->head; c != NULL; c = c->next) { - if(lht->free_fn) { - if(c->k == LH_EMPTY) return lht->count; - if(c->k != LH_FREED && ctxStoreToOld(c->v, timeout)) lh_table_delete_entry (lht, c); - } - } - - // return current size after cleanup - return (lht->count); -} - -// This function will return exiting client context or newly created client context -PUBLIC AFB_error ctxClientGet (AFB_request *request, AFB_plugin *plugin) { - static int cid=0; - AFB_clientCtx *clientCtx=NULL; - const char *uuid; - uuid_t newuuid; - int ret; - - if (request->config->token == NULL) return AFB_EMPTY; - - // if client session store is null create it - if (clientCtxs == NULL) { - clientCtxs= ctxStoreCreate(CTX_NBCLIENTS); - } - - // Check if client as a context or not inside the URL - uuid = MHD_lookup_connection_value(request->connection, MHD_GET_ARGUMENT_KIND, "uuid"); - - // if UUID in query we're restfull with no cookies otherwise check for cookie - if (uuid != NULL) request->restfull = TRUE; - else { - request->restfull = FALSE; - uuid = MHD_lookup_connection_value (request->connection, MHD_COOKIE_KIND, COOKIE_NAME); - }; - - - if (uuid != NULL) { - // search if client context exist and it not timeout let's use it - if ((lh_table_lookup_ex (clientCtxs, uuid, (void**) &clientCtx)) - && ! ctxStoreToOld (clientCtx, request->config->cntxTimeout)) { - request->client=clientCtx; - if (verbose) fprintf (stderr, "ctxClientGet Old uuid=[%s] token=[%s] timestamp=%d\n" - ,request->client->uuid, request->client->token, request->client->timeStamp); - return; - } - } - - - // we have no session let's create one otherwise let's clean any exiting values - if (clientCtx == NULL) clientCtx = calloc(1, sizeof(AFB_clientCtx)); // init NULL clientContext - uuid_generate(newuuid); // create a new UUID - uuid_unparse_lower(newuuid, clientCtx->uuid); - clientCtx->cid=cid++; // simple application uniqueID - clientCtx->plugin = plugin; // provide plugin callbacks a hook to plugin - - // if table is full at 50% let's clean it up - if(clientCtxs->count > (clientCtxs->size*0.5)) ctxStoreGarbage(clientCtxs, request->config->cntxTimeout); - - // finally add uuid into hashtable - ret=lh_table_insert (clientCtxs, (void*)clientCtx->uuid, clientCtx); - if (ret < 0) return (AFB_FAIL); - - if (verbose) fprintf (stderr, "ctxClientGet New uuid=[%s] token=[%s] timestamp=%d\n", clientCtx->uuid, clientCtx->token, clientCtx->timeStamp); - request->client = clientCtx; - - return (AFB_SUCCESS); -} - -// Sample Generic Ping Debug API -PUBLIC AFB_error ctxTokenCheck (AFB_request *request) { - const char *token; - - if (request->client == NULL) return AFB_EMPTY; - - // this time have to extract token from query list - token = MHD_lookup_connection_value(request->connection, MHD_GET_ARGUMENT_KIND, "token"); - - // if not token is providing we refuse the exchange - if ((token == NULL) || (request->client->token == NULL)) return (AFB_FALSE); - - // compare current token with previous one - if ((0 == strcmp (token, request->client->token)) && (!ctxStoreToOld (request->client, request->config->cntxTimeout))) { - return (AFB_SUCCESS); - } - - // Token is not valid let move level of assurance to zero and free attached client handle - return (AFB_FAIL); -} - -// Free Client Session Context -PUBLIC AFB_error ctxTokenReset (AFB_request *request) { - struct lh_entry* entry; - int ret; - - if (request->client == NULL) return AFB_EMPTY; - - entry = lh_table_lookup_entry (clientCtxs, request->client->uuid); - if (entry == NULL) return AFB_FALSE; - - lh_table_delete_entry (clientCtxs, entry); - - return (AFB_SUCCESS); -} - -// generate a new token -PUBLIC AFB_error ctxTokenCreate (AFB_request *request) { - int oldTnkValid; - const char *ornew; - uuid_t newuuid; - const char *token; - - if (request->client == NULL) return AFB_EMPTY; - - // if config->token!="" then verify that we have the right initial share secret - if (request->config->token[0] != '\0') { - - // check for initial token secret and return if not presented - token = MHD_lookup_connection_value(request->connection, MHD_GET_ARGUMENT_KIND, "token"); - if (token == NULL) return AFB_UNAUTH; - - // verify that presented initial tokens fit - if (strcmp(request->config->token, token)) return AFB_UNAUTH; - } - - - // create a UUID as token value - uuid_generate(newuuid); - uuid_unparse_lower(newuuid, request->client->token); - - // keep track of time for session timeout and further clean up - request->client->timeStamp=time(NULL); - - // Token is also store in context but it might be convenient for plugin to access it directly - return (AFB_SUCCESS); -} - - -// generate a new token and update client context -PUBLIC AFB_error ctxTokenRefresh (AFB_request *request) { - int oldTnkValid; - const char *oldornew; - uuid_t newuuid; - - if (request->client == NULL) return AFB_EMPTY; - - // Check if the old token is valid - oldTnkValid= ctxTokenCheck (request); - - // if token is not valid let check for query argument "oldornew" - if (!oldTnkValid) { - oldornew = MHD_lookup_connection_value(request->connection, MHD_GET_ARGUMENT_KIND, "oldornew"); - if (oldornew != NULL) oldTnkValid= TRUE; - } - - // No existing token and no request to create one - if (oldTnkValid != TRUE) return AFB_WARNING; - - return (ctxTokenCreate (request)); -} +#endif