summaryrefslogtreecommitdiffabout
path: root/lib
Unidiff
Diffstat (limited to 'lib') (more/less context) (ignore whitespace changes)
-rw-r--r--lib/Makefile.am11
-rw-r--r--lib/consumer.cc20
-rw-r--r--lib/discovery.cc446
-rw-r--r--lib/exception.cc22
-rw-r--r--lib/expat.cc96
-rw-r--r--lib/params.cc13
-rw-r--r--lib/secret.cc12
-rw-r--r--lib/sreg.cc2
-rw-r--r--lib/util.cc55
9 files changed, 629 insertions, 48 deletions
diff --git a/lib/Makefile.am b/lib/Makefile.am
index 0fe705a..989de28 100644
--- a/lib/Makefile.am
+++ b/lib/Makefile.am
@@ -1,16 +1,18 @@
1lib_LTLIBRARIES = libopkele.la 1lib_LTLIBRARIES = libopkele.la
2 2
3AM_CPPFLAGS = ${CPPFLAGS_DEBUG}
4DEFAULT_INCLUDES = -I${top_builddir}
3INCLUDES = \ 5INCLUDES = \
4 -I${top_srcdir}/include/ \ 6 -I${top_srcdir}/include/ \
5 ${KONFORKA_CFLAGS} \ 7 ${KONFORKA_CFLAGS} \
6 ${OPENSSL_CFLAGS} \ 8 ${OPENSSL_CFLAGS} \
7 ${LIBCURL_CPPFLAGS} \ 9 ${LIBCURL_CPPFLAGS} \
8 ${PCRE_CFLAGS} 10 ${PCRE_CFLAGS} ${EXPAT_CFLAGS} ${TIDY_CFLAGS}
9libopkele_la_LIBADD = \ 11libopkele_la_LIBADD = \
10 ${LIBCURL} \ 12 ${LIBCURL} \
11 ${PCRE_LIBS} \ 13 ${PCRE_LIBS} ${EXPAT_LIBS} \
12 ${OPENSSL_LIBS} \ 14 ${OPENSSL_LIBS} \
13 ${KONFORKA_LIBS} 15 ${KONFORKA_LIBS} ${TIDY_LIBS}
14 16
15libopkele_la_SOURCES = \ 17libopkele_la_SOURCES = \
16 params.cc \ 18 params.cc \
@@ -23,6 +25,7 @@ libopkele_la_SOURCES = \
23 extension.cc \ 25 extension.cc \
24 sreg.cc \ 26 sreg.cc \
25 extension_chain.cc \ 27 extension_chain.cc \
26 curl.cc 28 curl.cc expat.cc \
29 discovery.cc
27libopkele_la_LDFLAGS = \ 30libopkele_la_LDFLAGS = \
28 -version-info 2:0:0 31 -version-info 2:0:0
diff --git a/lib/consumer.cc b/lib/consumer.cc
index 9f7530f..3c3b4f8 100644
--- a/lib/consumer.cc
+++ b/lib/consumer.cc
@@ -17,25 +17,7 @@
17namespace opkele { 17namespace opkele {
18 using namespace std; 18 using namespace std;
19 using util::curl_t; 19 using util::curl_t;
20 20 using util::curl_pick_t;
21 template<int lim>
22 class curl_fetch_string_t : public curl_t {
23 public:
24 curl_fetch_string_t(CURL *c)
25 : curl_t(c) { }
26 ~curl_fetch_string_t() throw() { }
27
28 string response;
29
30 size_t write(void *p,size_t size,size_t nmemb) {
31 size_t bytes = size*nmemb;
32 size_t get = min(lim-response.length(),bytes);
33 response.append((const char *)p,get);
34 return get;
35 }
36 };
37
38 typedef curl_fetch_string_t<16384> curl_pick_t;
39 21
40 class pcre_matches_t { 22 class pcre_matches_t {
41 public: 23 public:
diff --git a/lib/discovery.cc b/lib/discovery.cc
new file mode 100644
index 0000000..d868308
--- a/dev/null
+++ b/lib/discovery.cc
@@ -0,0 +1,446 @@
1#include <list>
2#include <opkele/curl.h>
3#include <opkele/expat.h>
4#include <opkele/uris.h>
5#include <opkele/discovery.h>
6#include <opkele/exception.h>
7#include <opkele/util.h>
8#include <opkele/tidy.h>
9#include <opkele/debug.h>
10
11#include "config.h"
12
13#define XRDS_HEADER "X-XRDS-Location"
14#define CT_HEADER "Content-Type"
15
16namespace opkele {
17 using std::list;
18 using xrd::XRD_t;
19 using xrd::service_t;
20
21 static const char *whitespace = " \t\r\n";
22 static const char *i_leaders = "=@+$!(";
23 static const size_t max_html = 16384;
24
25 static inline bool is_qelement(const XML_Char *n,const char *qen) {
26 return !strcasecmp(n,qen);
27 }
28 static inline bool is_element(const XML_Char *n,const char *en) {
29 if(!strcasecmp(n,en)) return true;
30 int nl = strlen(n), enl = strlen(en);
31 if( (nl>=(enl+1)) && n[nl-enl-1]=='\t'
32 && !strcasecmp(&n[nl-enl],en) )
33 return true;
34 return false;
35 }
36
37 static long element_priority(const XML_Char **a) {
38 for(;*a;++a)
39 if(!strcasecmp(*(a++),"priority")) {
40 long rv;
41 return (sscanf(*a,"%ld",&rv)==1)?rv:-1;
42 }
43 return -1;
44 }
45
46 class idigger_t : public util::curl_t, public util::expat_t {
47 public:
48 string xri_proxy;
49
50 enum {
51 xmode_html = 1, xmode_xrd = 2
52 };
53 int xmode;
54
55 string xrds_location;
56 string http_content_type;
57 service_t html_openid1;
58 service_t html_openid2;
59 string cdata_buf;
60 long status_code;
61 string status_string;
62
63 typedef list<string> pt_stack_t;
64 pt_stack_t pt_stack;
65 int skipping;
66 bool parser_choked;
67 string save_html;
68
69 XRD_t *xrd;
70 service_t *xrd_service;
71 string* cdata;
72
73 idigger_t()
74 : util::curl_t(easy_init()),
75 util::expat_t(0),
76 xri_proxy(XRI_PROXY_URL) {
77 CURLcode r;
78 (r=misc_sets())
79 || (r=set_write())
80 || (r=set_header())
81 ;
82 if(r)
83 throw exception_curl(OPKELE_CP_ "failed to set curly options",r);
84 }
85 ~idigger_t() throw() { }
86
87 void discover(idiscovery_t& result,const string& identity) {
88 result.clear();
89 string::size_type fsc = identity.find_first_not_of(whitespace);
90 if(fsc==string::npos)
91 throw bad_input(OPKELE_CP_ "whtiespace-only identity");
92 string::size_type lsc = identity.find_last_not_of(whitespace);
93 assert(lsc!=string::npos);
94 if(!strncasecmp(identity.c_str()+fsc,"xri://",sizeof("xri://")-1))
95 fsc += sizeof("xri://")-1;
96 if((fsc+1)>=lsc)
97 throw bad_input(OPKELE_CP_ "not a character of importance in identity");
98 string id(identity,fsc,lsc-fsc+1);
99 if(strchr(i_leaders,id[0])) {
100 result.normalized_id = id;
101 result.xri_identity = true;
102 /* TODO: further canonicalize xri identity? Like folding case or whatever... */
103 discover_at(
104 result,
105 xri_proxy + util::url_encode(id)+
106 "?_xrd_r=application/xrd+xml;sep=false", xmode_xrd);
107 if(status_code!=100)
108 throw failed_xri_resolution(OPKELE_CP_
109 "XRI resolution failed with '"+status_string+"' message",status_code);
110 if(result.xrd.canonical_ids.empty())
111 throw opkele::failed_discovery(OPKELE_CP_ "No CanonicalID for XRI identity found");
112 result.canonicalized_id = result.xrd.canonical_ids.begin()->second;
113 }else{
114 result.xri_identity = false;
115 if(id.find("://")==string::npos)
116 id.insert(0,"http://");
117 string::size_type fp = id.find('#');
118 if(fp!=string::npos) {
119 string::size_type qp = id.find('?');
120 if(qp==string::npos || qp<fp)
121 id.erase(fp);
122 else if(qp>fp)
123 id.erase(fp,qp-fp);
124 }
125 result.normalized_id = util::rfc_3986_normalize_uri(id);
126 discover_at(result,id,xmode_html|xmode_xrd);
127 const char * eu = 0;
128 CURLcode r = easy_getinfo(CURLINFO_EFFECTIVE_URL,&eu);
129 if(r)
130 throw exception_curl(OPKELE_CP_ "failed to get CURLINFO_EFFECTIVE_URL",r);
131 result.canonicalized_id = util::rfc_3986_normalize_uri(eu); /* XXX: strip fragment part? */
132 if(xrds_location.empty()) {
133 html2xrd(result.xrd);
134 }else{
135 discover_at(result,xrds_location,xmode_xrd);
136 if(result.xrd.empty())
137 html2xrd(result.xrd);
138 }
139 }
140 }
141
142 void discover_at(idiscovery_t& result,const string& url,int xm) {
143 CURLcode r = easy_setopt(CURLOPT_URL,url.c_str());
144 if(r)
145 throw exception_curl(OPKELE_CP_ "failed to set culry urlie",r);
146
147 http_content_type.clear();
148 xmode = xm;
149 prepare_to_parse();
150 if(xmode&xmode_html) {
151 xrds_location.clear();
152 save_html.clear();
153 save_html.reserve(max_html);
154 }
155 xrd = &result.xrd;
156
157 r = easy_perform();
158 if(r && r!=CURLE_WRITE_ERROR)
159 throw exception_curl(OPKELE_CP_ "failed to perform curly request",r);
160
161 if(!parser_choked) {
162 parse(0,0,true);
163 }else{
164 /* TODO: do not bother if we've seen xml */
165 try {
166 util::tidy_doc_t td = util::tidy_doc_t::create();
167 if(!td)
168 throw exception_tidy(OPKELE_CP_ "failed to create htmltidy document");
169#ifndef NDEBUG
170 td.opt_set(TidyQuiet,false);
171 td.opt_set(TidyShowWarnings,false);
172#endif /* NDEBUG */
173 td.opt_set(TidyForceOutput,true);
174 td.opt_set(TidyXhtmlOut,true);
175 td.opt_set(TidyDoctypeMode,TidyDoctypeOmit);
176 td.opt_set(TidyMark,false);
177 if(td.parse_string(save_html)<=0)
178 throw exception_tidy(OPKELE_CP_ "tidy failed to parse document");
179 if(td.clean_and_repair()<=0)
180 throw exception_tidy(OPKELE_CP_ "tidy failed to clean and repair");
181 util::tidy_buf_t tide;
182 if(td.save_buffer(tide)<=0)
183 throw exception_tidy(OPKELE_CP_ "tidy failed to save buffer");
184 prepare_to_parse();
185 parse(tide.c_str(),tide.size(),true);
186 }catch(exception_tidy& et) { }
187 }
188 save_html.clear();
189 }
190
191 void prepare_to_parse() {
192 (*(expat_t*)this) = parser_create_ns();
193 set_user_data(); set_element_handler();
194 set_character_data_handler();
195
196 if(xmode&xmode_html) {
197 html_openid1.clear(); html_openid2.clear();
198 parser_choked = false;
199 }
200
201 cdata = 0; xrd_service = 0; skipping = 0;
202 status_code = 100; status_string.clear();
203 }
204
205 void html2xrd(XRD_t& x) {
206 if(!html_openid1.uris.empty()) {
207 html_openid1.types.insert(STURI_OPENID11);
208 x.services.add(-1,html_openid1);
209 }
210 if(!html_openid2.uris.empty()) {
211 html_openid2.types.insert(STURI_OPENID20);
212 x.services.add(-1,html_openid2);
213 }
214 }
215
216 size_t write(void *p,size_t s,size_t nm) {
217 /* TODO: limit total size */
218 size_t bytes = s*nm;
219 const char *inbuf = (const char*)p;
220 if(xmode&xmode_html) {
221 size_t mbts = save_html.capacity()-save_html.size();
222 size_t bts = 0;
223 if(mbts>0) {
224 bts = (bytes>mbts)?mbts:bytes;
225 save_html.append(inbuf,bts);
226 }
227 if(skipping<0) return bts;
228 }
229 if(skipping<0) return 0;
230 bool rp = parse(inbuf,bytes,false);
231 if(!rp) {
232 parser_choked = true;
233 skipping = -1;
234 if(!(xmode&xmode_html))
235 bytes = 0;
236 }
237 return bytes;
238 }
239 size_t header(void *p,size_t s,size_t nm) {
240 size_t bytes = s*nm;
241 const char *h = (const char*)p;
242 const char *colon = (const char*)memchr(p,':',bytes);
243 const char *space = (const char*)memchr(p,' ',bytes);
244 if(space && ( (!colon) || space<colon ) ) {
245 xrds_location.clear(); http_content_type.clear();
246 }else if(colon) {
247 const char *hv = ++colon;
248 int hnl = colon-h;
249 int rb;
250 for(rb = bytes-hnl-1;rb>0 && isspace(*hv);++hv,--rb);
251 while(rb>0 && isspace(hv[rb-1])) --rb;
252 if(rb) {
253 if( (hnl>=sizeof(XRDS_HEADER))
254 && !strncasecmp(h,XRDS_HEADER":",
255 sizeof(XRDS_HEADER)) ) {
256 xrds_location.assign(hv,rb);
257 }else if( (hnl>=sizeof(CT_HEADER))
258 && !strncasecmp(h,CT_HEADER":",
259 sizeof(CT_HEADER)) ) {
260 const char *sc = (const char*)memchr(
261 hv,';',rb);
262 http_content_type.assign(hv,sc?(sc-hv):rb);
263 }
264 }
265 }
266 return curl_t::header(p,s,nm);
267 }
268
269 void start_element(const XML_Char *n,const XML_Char **a) {
270 if(skipping<0) return;
271 if(skipping) {
272 if(xmode&xmode_html)
273 html_start_element(n,a);
274 ++skipping; return;
275 }
276 if(pt_stack.empty()) {
277 if(is_qelement(n,NSURI_XRDS "\tXRDS"))
278 return;
279 if(is_qelement(n,NSURI_XRD "\tXRD")) {
280 assert(xrd);
281 xrd->clear();
282 pt_stack.push_back(n);
283 }else if(xmode&xmode_html) {
284 html_start_element(n,a);
285 }else{
286 skipping = -1;
287 }
288 }else{
289 int pt_s = pt_stack.size();
290 if(pt_s==1) {
291 if(is_qelement(n,NSURI_XRD "\tCanonicalID")) {
292 assert(xrd);
293 cdata = &(xrd->canonical_ids.add(element_priority(a),string()));
294 }else if(is_qelement(n,NSURI_XRD "\tLocalID")) {
295 assert(xrd);
296 cdata = &(xrd->local_ids.add(element_priority(a),string()));
297 }else if(is_qelement(n,NSURI_XRD "\tProviderID")) {
298 assert(xrd);
299 cdata = &(xrd->provider_id);
300 }else if(is_qelement(n,NSURI_XRD "\tService")) {
301 assert(xrd);
302 xrd_service = &(xrd->services.add(element_priority(a),
303 service_t()));
304 pt_stack.push_back(n);
305 }else if(is_qelement(n,NSURI_XRD "\tStatus")) {
306 for(;*a;) {
307 if(!strcasecmp(*(a++),"code")) {
308 if(sscanf(*(a++),"%ld",&status_code)==1 && status_code!=100) {
309 cdata = &status_string;
310 pt_stack.push_back(n);
311 break;
312 }
313 }
314 }
315 }else if(is_qelement(n,NSURI_XRD "\tExpires")) {
316 assert(xrd);
317 cdata_buf.clear();
318 cdata = &cdata_buf;
319 }else if(xmode&xmode_html) {
320 html_start_element(n,a);
321 }else{
322 skipping = 1;
323 }
324 }else if(pt_s==2) {
325 if(is_qelement(pt_stack.back().c_str(), NSURI_XRD "\tService")) {
326 if(is_qelement(n,NSURI_XRD "\tType")) {
327 assert(xrd); assert(xrd_service);
328 cdata_buf.clear();
329 cdata = &cdata_buf;
330 }else if(is_qelement(n,NSURI_XRD "\tURI")) {
331 assert(xrd); assert(xrd_service);
332 cdata = &(xrd_service->uris.add(element_priority(a),string()));
333 }else if(is_qelement(n,NSURI_XRD "\tLocalID")
334 || is_qelement(n,NSURI_OPENID10 "\tDelegate") ) {
335 assert(xrd); assert(xrd_service);
336 cdata = &(xrd_service->local_ids.add(element_priority(a),string()));
337 }else if(is_qelement(n,NSURI_XRD "\tProviderID")) {
338 assert(xrd); assert(xrd_service);
339 cdata = &(xrd_service->provider_id);
340 }else{
341 skipping = 1;
342 }
343 }else
344 skipping = 1;
345 }else if(xmode&xmode_html) {
346 html_start_element(n,a);
347 }else{
348 skipping = 1;
349 }
350 }
351 }
352 void end_element(const XML_Char *n) {
353 if(skipping<0) return;
354 if(skipping) {
355 --skipping; return;
356 }
357 if(is_qelement(n,NSURI_XRD "\tType")) {
358 assert(xrd); assert(xrd_service); assert(cdata==&cdata_buf);
359 xrd_service->types.insert(cdata_buf);
360 }else if(is_qelement(n,NSURI_XRD "\tService")) {
361 assert(xrd); assert(xrd_service);
362 assert(!pt_stack.empty());
363 assert(pt_stack.back()==(NSURI_XRD "\tService"));
364 pt_stack.pop_back();
365 xrd_service = 0;
366 }else if(is_qelement(n,NSURI_XRD "\tStatus")) {
367 assert(xrd);
368 if(is_qelement(pt_stack.back().c_str(),n)) {
369 assert(cdata==&status_string);
370 pt_stack.pop_back();
371 if(status_code!=100)
372 skipping = -1;
373 }
374 }else if(is_qelement(n,NSURI_XRD "\tExpires")) {
375 assert(xrd);
376 xrd->expires = util::w3c_to_time(cdata_buf);
377 }else if((xmode&xmode_html) && is_element(n,"head")) {
378 skipping = -1;
379 }
380 cdata = 0;
381 }
382 void character_data(const XML_Char *s,int l) {
383 if(skipping) return;
384 if(cdata) cdata->append(s,l);
385 }
386
387 void html_start_element(const XML_Char *n,const XML_Char **a) {
388 if(is_element(n,"meta")) {
389 bool heq = false;
390 string l;
391 for(;*a;a+=2) {
392 if(!( strcasecmp(a[0],"http-equiv")
393 || strcasecmp(a[1],XRDS_HEADER) ))
394 heq = true;
395 else if(!strcasecmp(a[0],"content"))
396 l.assign(a[1]);
397 }
398 if(heq)
399 xrds_location = l;
400 }else if(is_element(n,"link")) {
401 string rels;
402 string href;
403 for(;*a;a+=2) {
404 if( !strcasecmp(a[0],"rel") ) {
405 rels.assign(a[1]);
406 }else if( !strcasecmp(a[0],"href") ) {
407 const char *ns = a[1];
408 for(;*ns && isspace(*ns);++ns);
409 href.assign(ns);
410 string::size_type lns=href.find_last_not_of(whitespace);
411 href.erase(lns+1);
412 }
413 }
414 for(string::size_type ns=rels.find_first_not_of(whitespace);
415 ns!=string::npos; ns=rels.find_first_not_of(whitespace,ns)) {
416 string::size_type s = rels.find_first_of(whitespace,ns);
417 string rel;
418 if(s==string::npos) {
419 rel.assign(rels,ns,string::npos);
420 ns = string::npos;
421 }else{
422 rel.assign(rels,ns,s-ns);
423 ns = s;
424 }
425 if(rel=="openid.server")
426 html_openid1.uris.add(-1,href);
427 else if(rel=="openid.delegate")
428 html_openid1.local_ids.add(-1,href);
429 else if(rel=="openid2.provider")
430 html_openid2.uris.add(-1,href);
431 else if(rel=="openid2.local_id")
432 html_openid2.local_ids.add(-1,href);
433 }
434 }else if(is_element(n,"body")) {
435 skipping = -1;
436 }
437 }
438
439 };
440
441 void idiscover(idiscovery_t& result,const string& identity) {
442 idigger_t idigger;
443 idigger.discover(result,identity);
444 }
445
446}
diff --git a/lib/exception.cc b/lib/exception.cc
index 510982e..e32594b 100644
--- a/lib/exception.cc
+++ b/lib/exception.cc
@@ -1,17 +1,33 @@
1#include <openssl/err.h> 1#include <openssl/err.h>
2#include <curl/curl.h> 2#include <curl/curl.h>
3#include <opkele/exception.h> 3#include <opkele/exception.h>
4#include <opkele/debug.h>
4 5
5namespace opkele { 6namespace opkele {
6 7
7# ifndef OPKELE_HAVE_KONFORKA 8# ifndef OPKELE_HAVE_KONFORKA
8 9
10 exception::exception(const string& w)
11 : _what(w)
12 {
13 DOUT_("throwing exception(\""<<w<<"\")");
14 }
15
9 exception::~exception() throw() { 16 exception::~exception() throw() {
10 } 17 }
11 const char *exception::what() const throw() { 18 const char *exception::what() const throw() {
12 return _what.c_str(); 19 return _what.c_str();
13 } 20 }
21
22# else
14 23
24 exception::exception(const string& fi,const string& fu,int l,const string& w)
25 : konforka::exception(fi,fu,l,w)
26 {
27 DOUT_("throwing exception(\""<<w<<"\")");
28 DOUT_(" from "<<fi<<':'<<fu<<':'<<l);
29 }
30
15# endif 31# endif
16 32
17 exception_openssl::exception_openssl(OPKELE_E_PARS) 33 exception_openssl::exception_openssl(OPKELE_E_PARS)
@@ -26,4 +42,10 @@ namespace opkele {
26 : exception_network(OPKELE_E_CONS_ w+" ["+curl_easy_strerror(e)+']'), 42 : exception_network(OPKELE_E_CONS_ w+" ["+curl_easy_strerror(e)+']'),
27 _error(e), _curl_string(curl_easy_strerror(e)) { } 43 _error(e), _curl_string(curl_easy_strerror(e)) { }
28 44
45 exception_tidy::exception_tidy(OPKELE_E_PARS)
46 : exception(OPKELE_E_CONS), _rc(0) { }
47 exception_tidy::exception_tidy(OPKELE_E_PARS,int r)
48 : exception(OPKELE_E_CONS),
49 _rc(r) { }
50
29} 51}
diff --git a/lib/expat.cc b/lib/expat.cc
new file mode 100644
index 0000000..fa6fdde
--- a/dev/null
+++ b/lib/expat.cc
@@ -0,0 +1,96 @@
1#include <opkele/expat.h>
2
3namespace opkele {
4
5 namespace util {
6
7 expat_t::~expat_t() throw() {
8 if(_x)
9 XML_ParserFree(_x);
10 }
11
12 expat_t& expat_t::operator=(XML_Parser x) {
13 if(_x)
14 XML_ParserFree(_x);
15 _x = x;
16 }
17
18 static void _start_element(void* ud,const XML_Char *n,const XML_Char **a) {
19 ((expat_t*)ud)->start_element(n,a);
20 }
21 static void _end_element(void *ud,const XML_Char *n) {
22 ((expat_t*)ud)->end_element(n);
23 }
24
25 void expat_t::set_element_handler() {
26 assert(_x);
27 XML_SetElementHandler(_x,_start_element,_end_element);
28 }
29
30 static void _character_data(void *ud,const XML_Char *s,int l) {
31 ((expat_t*)ud)->character_data(s,l);
32 }
33
34 void expat_t::set_character_data_handler() {
35 assert(_x);
36 XML_SetCharacterDataHandler(_x,_character_data);
37 }
38
39 static void _processing_instruction(void *ud,const XML_Char *t,const XML_Char *d) {
40 ((expat_t*)ud)->processing_instruction(t,d);
41 }
42
43 void expat_t::set_processing_instruction_handler() {
44 assert(_x);
45 XML_SetProcessingInstructionHandler(_x,_processing_instruction);
46 }
47
48 static void _comment(void *ud,const XML_Char *d) {
49 ((expat_t*)ud)->comment(d);
50 }
51
52 void expat_t::set_comment_handler() {
53 assert(_x);
54 XML_SetCommentHandler(_x,_comment);
55 }
56
57 static void _start_cdata_section(void *ud) {
58 ((expat_t*)ud)->start_cdata_section();
59 }
60 static void _end_cdata_section(void *ud) {
61 ((expat_t*)ud)->end_cdata_section();
62 }
63
64 void expat_t::set_cdata_section_handler() {
65 assert(_x);
66 XML_SetCdataSectionHandler(_x,_start_cdata_section,_end_cdata_section);
67 }
68
69 static void _default_handler(void *ud,const XML_Char *s,int l) {
70 ((expat_t*)ud)->default_handler(s,l);
71 }
72
73 void expat_t::set_default_handler() {
74 assert(_x);
75 XML_SetDefaultHandler(_x,_default_handler);
76 }
77 void expat_t::set_default_handler_expand() {
78 assert(_x);
79 XML_SetDefaultHandlerExpand(_x,_default_handler);
80 }
81
82 static void _start_namespace_decl(void *ud,const XML_Char *p,const XML_Char *u) {
83 ((expat_t*)ud)->start_namespace_decl(p,u);
84 }
85 static void _end_namespace_decl(void *ud,const XML_Char *p) {
86 ((expat_t*)ud)->end_namespace_decl(p);
87 }
88
89 void expat_t::set_namespace_decl_handler() {
90 assert(_x);
91 XML_SetNamespaceDeclHandler(_x,_start_namespace_decl,_end_namespace_decl);
92 }
93
94 }
95
96}
diff --git a/lib/params.cc b/lib/params.cc
index ea86d3a..7a572c1 100644
--- a/lib/params.cc
+++ b/lib/params.cc
@@ -99,6 +99,19 @@ namespace opkele {
99 return rv; 99 return rv;
100 } 100 }
101 101
102 string params_t::query_string(const char *prefix) const {
103 string rv;
104 for(const_iterator i=begin();i!=end();++i) {
105 if(!rv.empty())
106 rv += '&';
107 rv += prefix;
108 rv += i->first;
109 rv += '=';
110 rv += util::url_encode(i->second);
111 }
112 return rv;
113 }
114
102 ostream& operator << (ostream& o,const params_t& p) { 115 ostream& operator << (ostream& o,const params_t& p) {
103 for(params_t::const_iterator i=p.begin();i!=p.end();++i) 116 for(params_t::const_iterator i=p.begin();i!=p.end();++i)
104 o << i->first << ':' << i->second << '\n'; 117 o << i->first << ':' << i->second << '\n';
diff --git a/lib/secret.cc b/lib/secret.cc
index 632a2ca..d538890 100644
--- a/lib/secret.cc
+++ b/lib/secret.cc
@@ -14,31 +14,27 @@ namespace opkele {
14 } 14 }
15 }; 15 };
16 16
17 void secret_t::enxor_to_base64(const unsigned char *key_sha1,string& rv) const { 17 void secret_t::enxor_to_base64(const unsigned char *key_d,string& rv) const {
18 if(size()!=20)
19 throw bad_input(OPKELE_CP_ "wrong secret size");
20 vector<unsigned char> tmp; 18 vector<unsigned char> tmp;
21 transform( 19 transform(
22 begin(), end(), 20 begin(), end(),
23 key_sha1, 21 key_d,
24 back_insert_iterator<vector<unsigned char> >(tmp), 22 back_insert_iterator<vector<unsigned char> >(tmp),
25 bitwise_xor<unsigned char,unsigned char,unsigned char>() ); 23 bitwise_xor<unsigned char,unsigned char,unsigned char>() );
26 rv = util::encode_base64(&(tmp.front()),tmp.size()); 24 rv = util::encode_base64(&(tmp.front()),tmp.size());
27 } 25 }
28 26
29 void secret_t::enxor_from_base64(const unsigned char *key_sha1,const string& b64) { 27 void secret_t::enxor_from_base64(const unsigned char *key_d,const string& b64) {
30 clear(); 28 clear();
31 util::decode_base64(b64,*this); 29 util::decode_base64(b64,*this);
32 transform( 30 transform(
33 begin(), end(), 31 begin(), end(),
34 key_sha1, 32 key_d,
35 begin(), 33 begin(),
36 bitwise_xor<unsigned char,unsigned char,unsigned char>() ); 34 bitwise_xor<unsigned char,unsigned char,unsigned char>() );
37 } 35 }
38 36
39 void secret_t::to_base64(string& rv) const { 37 void secret_t::to_base64(string& rv) const {
40 if(size()!=20)
41 throw bad_input(OPKELE_CP_ "wrong secret size");
42 rv = util::encode_base64(&(front()),size()); 38 rv = util::encode_base64(&(front()),size());
43 } 39 }
44 40
diff --git a/lib/sreg.cc b/lib/sreg.cc
index 60dc691..03edf57 100644
--- a/lib/sreg.cc
+++ b/lib/sreg.cc
@@ -1,5 +1,6 @@
1#include <opkele/exception.h> 1#include <opkele/exception.h>
2#include <opkele/sreg.h> 2#include <opkele/sreg.h>
3#include <opkele/uris.h>
3#include <algorithm> 4#include <algorithm>
4 5
5namespace opkele { 6namespace opkele {
@@ -39,6 +40,7 @@ namespace opkele {
39 fo += f->fieldname; 40 fo += f->fieldname;
40 } 41 }
41 } 42 }
43 p["ns.sreg"] = OIURI_SREG11;
42 if(!fr.empty()) p["sreg.required"]=fr; 44 if(!fr.empty()) p["sreg.required"]=fr;
43 if(!fo.empty()) p["sreg.optional"]=fo; 45 if(!fo.empty()) p["sreg.optional"]=fo;
44 if(!policy_url.empty()) p["sreg.policy_url"]=policy_url; 46 if(!policy_url.empty()) p["sreg.policy_url"]=policy_url;
diff --git a/lib/util.cc b/lib/util.cc
index 416e2cc..a9b9bed 100644
--- a/lib/util.cc
+++ b/lib/util.cc
@@ -114,22 +114,32 @@ namespace opkele {
114 } 114 }
115 115
116 time_t w3c_to_time(const string& w) { 116 time_t w3c_to_time(const string& w) {
117 int fraction;
117 struct tm tm_t; 118 struct tm tm_t;
118 memset(&tm_t,0,sizeof(tm_t)); 119 memset(&tm_t,0,sizeof(tm_t));
119 if( 120 if( (
121 sscanf(
122 w.c_str(),
123 "%04d-%02d-%02dT%02d:%02d:%02dZ",
124 &tm_t.tm_year,&tm_t.tm_mon,&tm_t.tm_mday,
125 &tm_t.tm_hour,&tm_t.tm_min,&tm_t.tm_sec
126 ) != 6
127 ) && (
120 sscanf( 128 sscanf(
121 w.c_str(), 129 w.c_str(),
122 "%04d-%02d-%02dT%02d:%02d:%02dZ", 130 "%04d-%02d-%02dT%02d:%02d:%02d.%03dZ",
123 &tm_t.tm_year,&tm_t.tm_mon,&tm_t.tm_mday, 131 &tm_t.tm_year,&tm_t.tm_mon,&tm_t.tm_mday,
124 &tm_t.tm_hour,&tm_t.tm_min,&tm_t.tm_sec 132 &tm_t.tm_hour,&tm_t.tm_min,&tm_t.tm_sec,
125 ) != 6 ) 133 &fraction
134 ) != 7
135 ) )
126 throw failed_conversion(OPKELE_CP_ "failed to sscanf()"); 136 throw failed_conversion(OPKELE_CP_ "failed to sscanf()");
127 tm_t.tm_mon--; 137 tm_t.tm_mon--;
128 tm_t.tm_year-=1900; 138 tm_t.tm_year-=1900;
129 time_t rv = mktime(&tm_t); 139 time_t rv = mktime(&tm_t);
130 if(rv==(time_t)-1) 140 if(rv==(time_t)-1)
131 throw failed_conversion(OPKELE_CP_ "failed to mktime()"); 141 throw failed_conversion(OPKELE_CP_ "failed to mktime()");
132 return rv; 142 return rv-timezone;
133 } 143 }
134 144
135 /* 145 /*
@@ -164,7 +174,7 @@ namespace opkele {
164 /* 174 /*
165 * Normalize URL according to the rules, described in rfc 3986, section 6 175 * Normalize URL according to the rules, described in rfc 3986, section 6
166 * 176 *
167 * - uppercase hext triplets (e.g. %ab -> %AB) 177 * - uppercase hex triplets (e.g. %ab -> %AB)
168 * - lowercase scheme and host 178 * - lowercase scheme and host
169 * - decode %-encoded characters, specified as unreserved in rfc 3986, section 2.3, 179 * - decode %-encoded characters, specified as unreserved in rfc 3986, section 2.3,
170 * that is - [:alpha:][:digit:]._~- 180 * that is - [:alpha:][:digit:]._~-
@@ -173,30 +183,40 @@ namespace opkele {
173 * - if there's no path component, add '/' 183 * - if there's no path component, add '/'
174 */ 184 */
175 string rfc_3986_normalize_uri(const string& uri) { 185 string rfc_3986_normalize_uri(const string& uri) {
186 static const char *whitespace = " \t\r\n";
176 string rv; 187 string rv;
177 string::size_type colon = uri.find(':'); 188 string::size_type ns = uri.find_first_not_of(whitespace);
189 if(ns==string::npos)
190 throw bad_input(OPKELE_CP_ "Can't normalize empty URI");
191 string::size_type colon = uri.find(':',ns);
178 if(colon==string::npos) 192 if(colon==string::npos)
179 throw bad_input(OPKELE_CP_ "No scheme specified in URI"); 193 throw bad_input(OPKELE_CP_ "No scheme specified in URI");
180 transform( 194 transform(
181 uri.begin(), uri.begin()+colon+1, 195 uri.begin()+ns, uri.begin()+colon+1,
182 back_inserter(rv), ::tolower ); 196 back_inserter(rv), ::tolower );
183 bool s; 197 bool s;
184 if(rv=="http:") 198 string::size_type ul = uri.find_last_not_of(whitespace)+1;
185 s = false;
186 else if(rv=="https:")
187 s = true;
188 else
189 throw not_implemented(OPKELE_CP_ "Only http(s) URIs can be normalized here");
190 string::size_type ul = uri.length();
191 if(ul <= (colon+3)) 199 if(ul <= (colon+3))
192 throw bad_input(OPKELE_CP_ "Unexpected end of URI being normalized encountered"); 200 throw bad_input(OPKELE_CP_ "Unexpected end of URI being normalized encountered");
193 if(uri[colon+1]!='/' || uri[colon+2]!='/') 201 if(uri[colon+1]!='/' || uri[colon+2]!='/')
194 throw bad_input(OPKELE_CP_ "Unexpected input in URI being normalized after scheme component"); 202 throw bad_input(OPKELE_CP_ "Unexpected input in URI being normalized after scheme component");
203 if(rv=="http:")
204 s = false;
205 else if(rv=="https:")
206 s = true;
207 else{
208 /* TODO: support more schemes.
209 * e.g. xri. How do we normalize
210 * xri?
211 */
212 rv.append(uri,colon+1,ul-colon-1);
213 return rv;
214 }
195 rv += "//"; 215 rv += "//";
196 string::size_type interesting = uri.find_first_of(":/#?",colon+3); 216 string::size_type interesting = uri.find_first_of(":/#?",colon+3);
197 if(interesting==string::npos) { 217 if(interesting==string::npos) {
198 transform( 218 transform(
199 uri.begin()+colon+3,uri.end(), 219 uri.begin()+colon+3,uri.begin()+ul,
200 back_inserter(rv), ::tolower ); 220 back_inserter(rv), ::tolower );
201 rv += '/'; return rv; 221 rv += '/'; return rv;
202 } 222 }
@@ -285,7 +305,8 @@ namespace opkele {
285 } 305 }
286 } 306 }
287 if(!pseg.empty()) { 307 if(!pseg.empty()) {
288 rv += '/'; rv += pseg; 308 if(!qf) rv += '/';
309 rv += pseg;
289 } 310 }
290 return rv; 311 return rv;
291 } 312 }