summaryrefslogtreecommitdiffabout
path: root/lib
authorMichael Krelin <hacker@klever.net>2007-08-09 00:01:12 (UTC)
committer Michael Krelin <hacker@klever.net>2007-08-09 00:01:12 (UTC)
commit94e566c912f97b4c9e47353e10e86649ee8060a4 (patch) (unidiff)
treea11910bf677723a7eabccad161ec0b85426293ff /lib
parent4696aae9da3500f600cedd482501a89d41fd27ec (diff)
downloadlibopkele-94e566c912f97b4c9e47353e10e86649ee8060a4.zip
libopkele-94e566c912f97b4c9e47353e10e86649ee8060a4.tar.gz
libopkele-94e566c912f97b4c9e47353e10e86649ee8060a4.tar.bz2
make canonicalize follow redirects
- renamed old consumer_t::canonicalize to consumer_t::normalize - made the real canonicalize virtual to allow caching layer
Diffstat (limited to 'lib') (more/less context) (ignore whitespace changes)
-rw-r--r--lib/consumer.cc26
1 files changed, 25 insertions, 1 deletions
diff --git a/lib/consumer.cc b/lib/consumer.cc
index 282f0cc..dd8e150 100644
--- a/lib/consumer.cc
+++ b/lib/consumer.cc
@@ -57,289 +57,313 @@ namespace opkele {
57 } 57 }
58 58
59 assoc_t consumer_t::associate(const string& server) { 59 assoc_t consumer_t::associate(const string& server) {
60 util::dh_t dh = DH_new(); 60 util::dh_t dh = DH_new();
61 if(!dh) 61 if(!dh)
62 throw exception_openssl(OPKELE_CP_ "failed to DH_new()"); 62 throw exception_openssl(OPKELE_CP_ "failed to DH_new()");
63 dh->p = util::dec_to_bignum(data::_default_p); 63 dh->p = util::dec_to_bignum(data::_default_p);
64 dh->g = util::dec_to_bignum(data::_default_g); 64 dh->g = util::dec_to_bignum(data::_default_g);
65 if(!DH_generate_key(dh)) 65 if(!DH_generate_key(dh))
66 throw exception_openssl(OPKELE_CP_ "failed to DH_generate_key()"); 66 throw exception_openssl(OPKELE_CP_ "failed to DH_generate_key()");
67 string request = 67 string request =
68 "openid.mode=associate" 68 "openid.mode=associate"
69 "&openid.assoc_type=HMAC-SHA1" 69 "&openid.assoc_type=HMAC-SHA1"
70 "&openid.session_type=DH-SHA1" 70 "&openid.session_type=DH-SHA1"
71 "&openid.dh_consumer_public="; 71 "&openid.dh_consumer_public=";
72 request += util::url_encode(util::bignum_to_base64(dh->pub_key)); 72 request += util::url_encode(util::bignum_to_base64(dh->pub_key));
73 curl_t curl = curl_easy_init(); 73 curl_t curl = curl_easy_init();
74 if(!curl) 74 if(!curl)
75 throw exception_curl(OPKELE_CP_ "failed to curl_easy_init()"); 75 throw exception_curl(OPKELE_CP_ "failed to curl_easy_init()");
76 string response; 76 string response;
77 CURLcode r; 77 CURLcode r;
78 (r=curl_misc_sets(curl)) 78 (r=curl_misc_sets(curl))
79 || (r=curl_easy_setopt(curl,CURLOPT_URL,server.c_str())) 79 || (r=curl_easy_setopt(curl,CURLOPT_URL,server.c_str()))
80 || (r=curl_easy_setopt(curl,CURLOPT_POST,1)) 80 || (r=curl_easy_setopt(curl,CURLOPT_POST,1))
81 || (r=curl_easy_setopt(curl,CURLOPT_POSTFIELDS,request.data())) 81 || (r=curl_easy_setopt(curl,CURLOPT_POSTFIELDS,request.data()))
82 || (r=curl_easy_setopt(curl,CURLOPT_POSTFIELDSIZE,request.length())) 82 || (r=curl_easy_setopt(curl,CURLOPT_POSTFIELDSIZE,request.length()))
83 || (r=curl_easy_setopt(curl,CURLOPT_WRITEFUNCTION,_curl_tostring)) 83 || (r=curl_easy_setopt(curl,CURLOPT_WRITEFUNCTION,_curl_tostring))
84 || (r=curl_easy_setopt(curl,CURLOPT_WRITEDATA,&response)) 84 || (r=curl_easy_setopt(curl,CURLOPT_WRITEDATA,&response))
85 ; 85 ;
86 if(r) 86 if(r)
87 throw exception_curl(OPKELE_CP_ "failed to curl_easy_setopt()",r); 87 throw exception_curl(OPKELE_CP_ "failed to curl_easy_setopt()",r);
88 if(r=curl_easy_perform(curl)) 88 if(r=curl_easy_perform(curl))
89 throw exception_curl(OPKELE_CP_ "failed to curl_easy_perform()",r); 89 throw exception_curl(OPKELE_CP_ "failed to curl_easy_perform()",r);
90 params_t p; p.parse_keyvalues(response); 90 params_t p; p.parse_keyvalues(response);
91 if(p.has_param("assoc_type") && p.get_param("assoc_type")!="HMAC-SHA1") 91 if(p.has_param("assoc_type") && p.get_param("assoc_type")!="HMAC-SHA1")
92 throw bad_input(OPKELE_CP_ "unsupported assoc_type"); 92 throw bad_input(OPKELE_CP_ "unsupported assoc_type");
93 string st; 93 string st;
94 if(p.has_param("session_type")) st = p.get_param("session_type"); 94 if(p.has_param("session_type")) st = p.get_param("session_type");
95 if((!st.empty()) && st!="DH-SHA1") 95 if((!st.empty()) && st!="DH-SHA1")
96 throw bad_input(OPKELE_CP_ "unsupported session_type"); 96 throw bad_input(OPKELE_CP_ "unsupported session_type");
97 secret_t secret; 97 secret_t secret;
98 if(st.empty()) { 98 if(st.empty()) {
99 secret.from_base64(p.get_param("mac_key")); 99 secret.from_base64(p.get_param("mac_key"));
100 }else{ 100 }else{
101 util::bignum_t s_pub = util::base64_to_bignum(p.get_param("dh_server_public")); 101 util::bignum_t s_pub = util::base64_to_bignum(p.get_param("dh_server_public"));
102 vector<unsigned char> ck(DH_size(dh)+1); 102 vector<unsigned char> ck(DH_size(dh)+1);
103 unsigned char *ckptr = &(ck.front())+1; 103 unsigned char *ckptr = &(ck.front())+1;
104 int cklen = DH_compute_key(ckptr,s_pub,dh); 104 int cklen = DH_compute_key(ckptr,s_pub,dh);
105 if(cklen<0) 105 if(cklen<0)
106 throw exception_openssl(OPKELE_CP_ "failed to DH_compute_key()"); 106 throw exception_openssl(OPKELE_CP_ "failed to DH_compute_key()");
107 if(cklen && (*ckptr)&0x80) { 107 if(cklen && (*ckptr)&0x80) {
108 (*(--ckptr)) = 0; ++cklen; 108 (*(--ckptr)) = 0; ++cklen;
109 } 109 }
110 unsigned char key_sha1[SHA_DIGEST_LENGTH]; 110 unsigned char key_sha1[SHA_DIGEST_LENGTH];
111 SHA1(ckptr,cklen,key_sha1); 111 SHA1(ckptr,cklen,key_sha1);
112 secret.enxor_from_base64(key_sha1,p.get_param("enc_mac_key")); 112 secret.enxor_from_base64(key_sha1,p.get_param("enc_mac_key"));
113 } 113 }
114 int expires_in = 0; 114 int expires_in = 0;
115 if(p.has_param("expires_in")) { 115 if(p.has_param("expires_in")) {
116 expires_in = util::string_to_long(p.get_param("expires_in")); 116 expires_in = util::string_to_long(p.get_param("expires_in"));
117 }else if(p.has_param("issued") && p.has_param("expiry")) { 117 }else if(p.has_param("issued") && p.has_param("expiry")) {
118 expires_in = util::w3c_to_time(p.get_param("expiry"))-util::w3c_to_time(p.get_param("issued")); 118 expires_in = util::w3c_to_time(p.get_param("expiry"))-util::w3c_to_time(p.get_param("issued"));
119 }else 119 }else
120 throw bad_input(OPKELE_CP_ "no expiration information"); 120 throw bad_input(OPKELE_CP_ "no expiration information");
121 return store_assoc(server,p.get_param("assoc_handle"),secret,expires_in); 121 return store_assoc(server,p.get_param("assoc_handle"),secret,expires_in);
122 } 122 }
123 123
124 string consumer_t::checkid_immediate(const string& identity,const string& return_to,const string& trust_root,extension_t *ext) { 124 string consumer_t::checkid_immediate(const string& identity,const string& return_to,const string& trust_root,extension_t *ext) {
125 return checkid_(mode_checkid_immediate,identity,return_to,trust_root,ext); 125 return checkid_(mode_checkid_immediate,identity,return_to,trust_root,ext);
126 } 126 }
127 string consumer_t::checkid_setup(const string& identity,const string& return_to,const string& trust_root,extension_t *ext) { 127 string consumer_t::checkid_setup(const string& identity,const string& return_to,const string& trust_root,extension_t *ext) {
128 return checkid_(mode_checkid_setup,identity,return_to,trust_root,ext); 128 return checkid_(mode_checkid_setup,identity,return_to,trust_root,ext);
129 } 129 }
130 string consumer_t::checkid_(mode_t mode,const string& identity,const string& return_to,const string& trust_root,extension_t *ext) { 130 string consumer_t::checkid_(mode_t mode,const string& identity,const string& return_to,const string& trust_root,extension_t *ext) {
131 params_t p; 131 params_t p;
132 if(mode==mode_checkid_immediate) 132 if(mode==mode_checkid_immediate)
133 p["mode"]="checkid_immediate"; 133 p["mode"]="checkid_immediate";
134 else if(mode==mode_checkid_setup) 134 else if(mode==mode_checkid_setup)
135 p["mode"]="checkid_setup"; 135 p["mode"]="checkid_setup";
136 else 136 else
137 throw bad_input(OPKELE_CP_ "unknown checkid_* mode"); 137 throw bad_input(OPKELE_CP_ "unknown checkid_* mode");
138 string iurl = canonicalize(identity); 138 string iurl = canonicalize(identity);
139 string server, delegate; 139 string server, delegate;
140 retrieve_links(iurl,server,delegate); 140 retrieve_links(iurl,server,delegate);
141 p["identity"] = delegate.empty()?iurl:delegate; 141 p["identity"] = delegate.empty()?iurl:delegate;
142 if(!trust_root.empty()) 142 if(!trust_root.empty())
143 p["trust_root"] = trust_root; 143 p["trust_root"] = trust_root;
144 p["return_to"] = return_to; 144 p["return_to"] = return_to;
145 try { 145 try {
146 string ah = find_assoc(server)->handle(); 146 string ah = find_assoc(server)->handle();
147 p["assoc_handle"] = ah; 147 p["assoc_handle"] = ah;
148 }catch(failed_lookup& fl) { 148 }catch(failed_lookup& fl) {
149 string ah = associate(server)->handle(); 149 string ah = associate(server)->handle();
150 p["assoc_handle"] = ah; 150 p["assoc_handle"] = ah;
151 } 151 }
152 if(ext) ext->checkid_hook(p,identity); 152 if(ext) ext->checkid_hook(p,identity);
153 return p.append_query(server); 153 return p.append_query(server);
154 } 154 }
155 155
156 void consumer_t::id_res(const params_t& pin,const string& identity,extension_t *ext) { 156 void consumer_t::id_res(const params_t& pin,const string& identity,extension_t *ext) {
157 if(pin.has_param("openid.user_setup_url")) 157 if(pin.has_param("openid.user_setup_url"))
158 throw id_res_setup(OPKELE_CP_ "assertion failed, setup url provided",pin.get_param("openid.user_setup_url")); 158 throw id_res_setup(OPKELE_CP_ "assertion failed, setup url provided",pin.get_param("openid.user_setup_url"));
159 string server,delegate; 159 string server,delegate;
160 retrieve_links(identity.empty()?pin.get_param("openid.identity"):canonicalize(identity),server,delegate); 160 retrieve_links(identity.empty()?pin.get_param("openid.identity"):canonicalize(identity),server,delegate);
161 params_t ps; 161 params_t ps;
162 try { 162 try {
163 assoc_t assoc = retrieve_assoc(server,pin.get_param("openid.assoc_handle")); 163 assoc_t assoc = retrieve_assoc(server,pin.get_param("openid.assoc_handle"));
164 const string& sigenc = pin.get_param("openid.sig"); 164 const string& sigenc = pin.get_param("openid.sig");
165 vector<unsigned char> sig; 165 vector<unsigned char> sig;
166 util::decode_base64(sigenc,sig); 166 util::decode_base64(sigenc,sig);
167 const string& slist = pin.get_param("openid.signed"); 167 const string& slist = pin.get_param("openid.signed");
168 string kv; 168 string kv;
169 string::size_type p = 0; 169 string::size_type p = 0;
170 while(true) { 170 while(true) {
171 string::size_type co = slist.find(',',p); 171 string::size_type co = slist.find(',',p);
172 string f = (co==string::npos)?slist.substr(p):slist.substr(p,co-p); 172 string f = (co==string::npos)?slist.substr(p):slist.substr(p,co-p);
173 kv += f; 173 kv += f;
174 kv += ':'; 174 kv += ':';
175 f.insert(0,"openid."); 175 f.insert(0,"openid.");
176 kv += pin.get_param(f); 176 kv += pin.get_param(f);
177 kv += '\n'; 177 kv += '\n';
178 if(ext) ps[f.substr(sizeof("openid.")-1)] = pin.get_param(f); 178 if(ext) ps[f.substr(sizeof("openid.")-1)] = pin.get_param(f);
179 if(co==string::npos) 179 if(co==string::npos)
180 break; 180 break;
181 p = co+1; 181 p = co+1;
182 } 182 }
183 secret_t secret = assoc->secret(); 183 secret_t secret = assoc->secret();
184 unsigned int md_len = 0; 184 unsigned int md_len = 0;
185 unsigned char *md = HMAC( 185 unsigned char *md = HMAC(
186 EVP_sha1(), 186 EVP_sha1(),
187 &(secret.front()),secret.size(), 187 &(secret.front()),secret.size(),
188 (const unsigned char *)kv.data(),kv.length(), 188 (const unsigned char *)kv.data(),kv.length(),
189 0,&md_len); 189 0,&md_len);
190 if(sig.size()!=md_len || memcmp(&(sig.front()),md,md_len)) 190 if(sig.size()!=md_len || memcmp(&(sig.front()),md,md_len))
191 throw id_res_mismatch(OPKELE_CP_ "signature mismatch"); 191 throw id_res_mismatch(OPKELE_CP_ "signature mismatch");
192 }catch(failed_lookup& e) { /* XXX: more specific? */ 192 }catch(failed_lookup& e) { /* XXX: more specific? */
193 const string& slist = pin.get_param("openid.signed"); 193 const string& slist = pin.get_param("openid.signed");
194 string::size_type pp = 0; 194 string::size_type pp = 0;
195 params_t p; 195 params_t p;
196 while(true) { 196 while(true) {
197 string::size_type co = slist.find(',',pp); 197 string::size_type co = slist.find(',',pp);
198 string f = "openid."; 198 string f = "openid.";
199 f += (co==string::npos)?slist.substr(pp):slist.substr(pp,co-pp); 199 f += (co==string::npos)?slist.substr(pp):slist.substr(pp,co-pp);
200 p[f] = pin.get_param(f); 200 p[f] = pin.get_param(f);
201 if(co==string::npos) 201 if(co==string::npos)
202 break; 202 break;
203 pp = co+1; 203 pp = co+1;
204 } 204 }
205 p["openid.assoc_handle"] = pin.get_param("openid.assoc_handle"); 205 p["openid.assoc_handle"] = pin.get_param("openid.assoc_handle");
206 p["openid.sig"] = pin.get_param("openid.sig"); 206 p["openid.sig"] = pin.get_param("openid.sig");
207 p["openid.signed"] = pin.get_param("openid.signed"); 207 p["openid.signed"] = pin.get_param("openid.signed");
208 try { 208 try {
209 string ih = pin.get_param("openid.invalidate_handle"); 209 string ih = pin.get_param("openid.invalidate_handle");
210 p["openid.invalidate_handle"] = ih; 210 p["openid.invalidate_handle"] = ih;
211 }catch(failed_lookup& fl) { } 211 }catch(failed_lookup& fl) { }
212 try { 212 try {
213 check_authentication(server,p); 213 check_authentication(server,p);
214 }catch(failed_check_authentication& fca) { 214 }catch(failed_check_authentication& fca) {
215 throw id_res_failed(OPKELE_CP_ "failed to check_authentication()"); 215 throw id_res_failed(OPKELE_CP_ "failed to check_authentication()");
216 } 216 }
217 } 217 }
218 if(ext) ext->id_res_hook(pin,ps,identity); 218 if(ext) ext->id_res_hook(pin,ps,identity);
219 } 219 }
220 220
221 void consumer_t::check_authentication(const string& server,const params_t& p) { 221 void consumer_t::check_authentication(const string& server,const params_t& p) {
222 string request = "openid.mode=check_authentication"; 222 string request = "openid.mode=check_authentication";
223 for(params_t::const_iterator i=p.begin();i!=p.end();++i) { 223 for(params_t::const_iterator i=p.begin();i!=p.end();++i) {
224 if(i->first!="openid.mode") { 224 if(i->first!="openid.mode") {
225 request += '&'; 225 request += '&';
226 request += i->first; 226 request += i->first;
227 request += '='; 227 request += '=';
228 request += util::url_encode(i->second); 228 request += util::url_encode(i->second);
229 } 229 }
230 } 230 }
231 curl_t curl = curl_easy_init(); 231 curl_t curl = curl_easy_init();
232 if(!curl) 232 if(!curl)
233 throw exception_curl(OPKELE_CP_ "failed to curl_easy_init()"); 233 throw exception_curl(OPKELE_CP_ "failed to curl_easy_init()");
234 string response; 234 string response;
235 CURLcode r; 235 CURLcode r;
236 (r=curl_misc_sets(curl)) 236 (r=curl_misc_sets(curl))
237 || (r=curl_easy_setopt(curl,CURLOPT_URL,server.c_str())) 237 || (r=curl_easy_setopt(curl,CURLOPT_URL,server.c_str()))
238 || (r=curl_easy_setopt(curl,CURLOPT_POST,1)) 238 || (r=curl_easy_setopt(curl,CURLOPT_POST,1))
239 || (r=curl_easy_setopt(curl,CURLOPT_POSTFIELDS,request.data())) 239 || (r=curl_easy_setopt(curl,CURLOPT_POSTFIELDS,request.data()))
240 || (r=curl_easy_setopt(curl,CURLOPT_POSTFIELDSIZE,request.length())) 240 || (r=curl_easy_setopt(curl,CURLOPT_POSTFIELDSIZE,request.length()))
241 || (r=curl_easy_setopt(curl,CURLOPT_WRITEFUNCTION,_curl_tostring)) 241 || (r=curl_easy_setopt(curl,CURLOPT_WRITEFUNCTION,_curl_tostring))
242 || (r=curl_easy_setopt(curl,CURLOPT_WRITEDATA,&response)) 242 || (r=curl_easy_setopt(curl,CURLOPT_WRITEDATA,&response))
243 ; 243 ;
244 if(r) 244 if(r)
245 throw exception_curl(OPKELE_CP_ "failed to curl_easy_setopt()",r); 245 throw exception_curl(OPKELE_CP_ "failed to curl_easy_setopt()",r);
246 if(r=curl_easy_perform(curl)) 246 if(r=curl_easy_perform(curl))
247 throw exception_curl(OPKELE_CP_ "failed to curl_easy_perform()",r); 247 throw exception_curl(OPKELE_CP_ "failed to curl_easy_perform()",r);
248 params_t pp; pp.parse_keyvalues(response); 248 params_t pp; pp.parse_keyvalues(response);
249 if(pp.has_param("invalidate_handle")) 249 if(pp.has_param("invalidate_handle"))
250 invalidate_assoc(server,pp.get_param("invalidate_handle")); 250 invalidate_assoc(server,pp.get_param("invalidate_handle"));
251 if(pp.has_param("is_valid")) { 251 if(pp.has_param("is_valid")) {
252 if(pp.get_param("is_valid")=="true") 252 if(pp.get_param("is_valid")=="true")
253 return; 253 return;
254 }else if(pp.has_param("lifetime")) { 254 }else if(pp.has_param("lifetime")) {
255 if(util::string_to_long(pp.get_param("lifetime"))) 255 if(util::string_to_long(pp.get_param("lifetime")))
256 return; 256 return;
257 } 257 }
258 throw failed_check_authentication(OPKELE_CP_ "failed to verify response"); 258 throw failed_check_authentication(OPKELE_CP_ "failed to verify response");
259 } 259 }
260 260
261 void consumer_t::retrieve_links(const string& url,string& server,string& delegate) { 261 void consumer_t::retrieve_links(const string& url,string& server,string& delegate) {
262 server.erase(); 262 server.erase();
263 delegate.erase(); 263 delegate.erase();
264 curl_t curl = curl_easy_init(); 264 curl_t curl = curl_easy_init();
265 if(!curl) 265 if(!curl)
266 throw exception_curl(OPKELE_CP_ "failed to curl_easy_init()"); 266 throw exception_curl(OPKELE_CP_ "failed to curl_easy_init()");
267 string html; 267 string html;
268 CURLcode r; 268 CURLcode r;
269 (r=curl_misc_sets(curl)) 269 (r=curl_misc_sets(curl))
270 || (r=curl_easy_setopt(curl,CURLOPT_URL,url.c_str())) 270 || (r=curl_easy_setopt(curl,CURLOPT_URL,url.c_str()))
271 || (r=curl_easy_setopt(curl,CURLOPT_WRITEFUNCTION,_curl_tostring)) 271 || (r=curl_easy_setopt(curl,CURLOPT_WRITEFUNCTION,_curl_tostring))
272 || (r=curl_easy_setopt(curl,CURLOPT_WRITEDATA,&html)) 272 || (r=curl_easy_setopt(curl,CURLOPT_WRITEDATA,&html))
273 ; 273 ;
274 if(r) 274 if(r)
275 throw exception_curl(OPKELE_CP_ "failed to curl_easy_setopt()",r); 275 throw exception_curl(OPKELE_CP_ "failed to curl_easy_setopt()",r);
276 r = curl_easy_perform(curl); 276 r = curl_easy_perform(curl);
277 if(r && r!=CURLE_WRITE_ERROR) 277 if(r && r!=CURLE_WRITE_ERROR)
278 throw exception_curl(OPKELE_CP_ "failed to curl_easy_perform()",r); 278 throw exception_curl(OPKELE_CP_ "failed to curl_easy_perform()",r);
279 pcrepp::Pcre bre("<body\\b",PCRE_CASELESS); 279 pcrepp::Pcre bre("<body\\b",PCRE_CASELESS);
280 // strip out everything past body 280 // strip out everything past body
281 if(bre.search(html)) 281 if(bre.search(html))
282 html.erase(bre.get_match_start()); 282 html.erase(bre.get_match_start());
283 pcrepp::Pcre hdre("<head[^>]*>",PCRE_CASELESS); 283 pcrepp::Pcre hdre("<head[^>]*>",PCRE_CASELESS);
284 if(!hdre.search(html)) 284 if(!hdre.search(html))
285 throw bad_input(OPKELE_CP_ "failed to find head"); 285 throw bad_input(OPKELE_CP_ "failed to find head");
286 html.erase(0,hdre.get_match_end()+1); 286 html.erase(0,hdre.get_match_end()+1);
287 pcrepp::Pcre lre("<link\\b([^>]+)>",PCRE_CASELESS), 287 pcrepp::Pcre lre("<link\\b([^>]+)>",PCRE_CASELESS),
288 rre("\\brel=['\"]([^'\"]+)['\"]",PCRE_CASELESS), 288 rre("\\brel=['\"]([^'\"]+)['\"]",PCRE_CASELESS),
289 hre("\\bhref=['\"]([^'\"]+)['\"]",PCRE_CASELESS); 289 hre("\\bhref=['\"]([^'\"]+)['\"]",PCRE_CASELESS);
290 while(lre.search(html)) { 290 while(lre.search(html)) {
291 string attrs = lre[0]; 291 string attrs = lre[0];
292 html.erase(0,lre.get_match_end()+1); 292 html.erase(0,lre.get_match_end()+1);
293 if(!(rre.search(attrs)&&hre.search(attrs))) 293 if(!(rre.search(attrs)&&hre.search(attrs)))
294 continue; 294 continue;
295 if(rre[0]=="openid.server") { 295 if(rre[0]=="openid.server") {
296 server = hre[0]; 296 server = hre[0];
297 if(!delegate.empty()) 297 if(!delegate.empty())
298 break; 298 break;
299 }else if(rre[0]=="openid.delegate") { 299 }else if(rre[0]=="openid.delegate") {
300 delegate = hre[0]; 300 delegate = hre[0];
301 if(!server.empty()) 301 if(!server.empty())
302 break; 302 break;
303 } 303 }
304 } 304 }
305 if(server.empty()) 305 if(server.empty())
306 throw failed_assertion(OPKELE_CP_ "The location has no openid.server declaration"); 306 throw failed_assertion(OPKELE_CP_ "The location has no openid.server declaration");
307 } 307 }
308 308
309 assoc_t consumer_t::find_assoc(const string& server) { 309 assoc_t consumer_t::find_assoc(const string& server) {
310 throw failed_lookup(OPKELE_CP_ "no find_assoc() provided"); 310 throw failed_lookup(OPKELE_CP_ "no find_assoc() provided");
311 } 311 }
312 312
313 string consumer_t::canonicalize(const string& url) { 313 string consumer_t::normalize(const string& url) {
314 string rv = url; 314 string rv = url;
315 // strip leading and trailing spaces 315 // strip leading and trailing spaces
316 string::size_type i = rv.find_first_not_of(" \t\r\n"); 316 string::size_type i = rv.find_first_not_of(" \t\r\n");
317 if(i==string::npos) 317 if(i==string::npos)
318 throw bad_input(OPKELE_CP_ "empty URL"); 318 throw bad_input(OPKELE_CP_ "empty URL");
319 if(i) 319 if(i)
320 rv.erase(0,i); 320 rv.erase(0,i);
321 i = rv.find_last_not_of(" \t\r\n"); 321 i = rv.find_last_not_of(" \t\r\n");
322 assert(i!=string::npos); 322 assert(i!=string::npos);
323 if(i<(rv.length()-1)) 323 if(i<(rv.length()-1))
324 rv.erase(i+1); 324 rv.erase(i+1);
325 // add missing http:// 325 // add missing http://
326 i = rv.find("://"); 326 i = rv.find("://");
327 if(i==string::npos) { // primitive. but do we need more? 327 if(i==string::npos) { // primitive. but do we need more?
328 rv.insert(0,"http://"); 328 rv.insert(0,"http://");
329 i = sizeof("http://")-1; 329 i = sizeof("http://")-1;
330 }else{ 330 }else{
331 i += sizeof("://")-1; 331 i += sizeof("://")-1;
332 } 332 }
333 string::size_type qm = rv.find('?',i); 333 string::size_type qm = rv.find('?',i);
334 string::size_type sl = rv.find('/',i); 334 string::size_type sl = rv.find('/',i);
335 if(qm!=string::npos) { 335 if(qm!=string::npos) {
336 if(sl==string::npos || sl>qm) 336 if(sl==string::npos || sl>qm)
337 rv.insert(qm,1,'/'); 337 rv.insert(qm,1,'/');
338 }else{ 338 }else{
339 if(sl==string::npos) 339 if(sl==string::npos)
340 rv += '/'; 340 rv += '/';
341 } 341 }
342 return rv; 342 return rv;
343 } 343 }
344 344
345 string consumer_t::canonicalize(const string& url) {
346 string rv = normalize(url);
347 curl_t curl = curl_easy_init();
348 if(!curl)
349 throw exception_curl(OPKELE_CP_ "failed to curl_easy_init()");
350 string html;
351 CURLcode r;
352 (r=curl_misc_sets(curl))
353 || (r=curl_easy_setopt(curl,CURLOPT_URL,rv.c_str()))
354 || (r=curl_easy_setopt(curl,CURLOPT_NOBODY,1))
355 ;
356 if(r)
357 throw exception_curl(OPKELE_CP_ "failed to curl_easy_setopt()",r);
358 r = curl_easy_perform(curl);
359 if(r)
360 throw exception_curl(OPKELE_CP_ "failed to curl_easy_perform()",r);
361 const char *eu = 0;
362 r = curl_easy_getinfo(curl,CURLINFO_EFFECTIVE_URL,&eu);
363 if(r)
364 throw exception_curl(OPKELE_CP_ "failed to curl_easy_getinfo(..CURLINFO_EFFECTIVE_URL..)",r);
365 rv = eu;
366 return normalize(rv);
367 }
368
345} 369}