1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
|
########################################################################
# File name: sasl.py
# This file is part of: aioxmpp
#
# LICENSE
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU Lesser General Public License as
# published by the Free Software Foundation, either version 3 of the
# License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
# Lesser General Public License for more details.
#
# You should have received a copy of the GNU Lesser General Public
# License along with this program. If not, see
# <http://www.gnu.org/licenses/>.
#
########################################################################
"""
:mod:`~aioxmpp.sasl` -- SASL helpers
####################################
This module is used to implement SASL in :mod:`aioxmpp.security_layer`. It
provides a state machine for use by the different SASL mechanisms and
implementations of some SASL mechansims.
It provides an XMPP adaptor for :mod:`aiosasl`.
.. autoclass:: SASLXMPPInterface
The XSOs for SASL authentication can be found in :mod:`aioxmpp.nonza`.
"""
import asyncio
import logging
import aiosasl
from . import protocol, nonza
logger = logging.getLogger(__name__)
class SASLXMPPInterface(aiosasl.SASLInterface):
def __init__(self, xmlstream):
super().__init__()
self.xmlstream = xmlstream
self.timeout = None
async def _send_sasl_node_and_wait_for(self, node):
node = await protocol.send_and_wait_for(
self.xmlstream,
[node],
[
nonza.SASLChallenge,
nonza.SASLFailure,
nonza.SASLSuccess
],
timeout=self.timeout
)
state = node.TAG[1]
if state == "failure":
xmpp_error = node.condition[1]
text = node.text
raise aiosasl.SASLFailure(xmpp_error, text=text)
if hasattr(node, "payload"):
payload = node.payload
else:
payload = None
return state, payload
async def initiate(self, mechanism, payload=None):
with self.xmlstream.mute():
return await self._send_sasl_node_and_wait_for(
nonza.SASLAuth(mechanism=mechanism,
payload=payload))
async def respond(self, payload):
with self.xmlstream.mute():
return await self._send_sasl_node_and_wait_for(
nonza.SASLResponse(payload=payload)
)
async def abort(self):
try:
next_state, payload = await self._send_sasl_node_and_wait_for(
nonza.SASLAbort()
)
except aiosasl.SASLFailure as err:
self._state = "failure"
if err.opaque_error != "aborted":
raise
return "failure", None
else:
raise aiosasl.SASLFailure(
"aborted",
text="unexpected non-failure after abort: "
"{}".format(self._state)
)
|
