Mercurial Hosting > luan

annotate src/luan/host/Util.luan @ 1472:60f6741f000a

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
base64_encode
author Franklin Schmidt <fschmidt@gmail.com>
date Fri, 17 Apr 2020 11:16:38 -0600
parents 732b5de211fc
children 04615093b19d
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
1181
51d1342e25ad luanhost password handling
Franklin Schmidt <fschmidt@gmail.com>
parents:
diff changeset
1 local Luan = require "luan:Luan.luan"
51d1342e25ad luanhost password handling
Franklin Schmidt <fschmidt@gmail.com>
parents:
diff changeset
2 local error = Luan.error
51d1342e25ad luanhost password handling
Franklin Schmidt <fschmidt@gmail.com>
parents:
diff changeset
3 local do_file = Luan.do_file or error()
1210
3db95cc00d09 luanhost - add digest authentication
Franklin Schmidt <fschmidt@gmail.com>
parents: 1190
diff changeset
4 local ipairs = Luan.ipairs or error()
1190
Franklin Schmidt <fschmidt@gmail.com>
parents: 1181
diff changeset
5 local stringify = Luan.stringify or error()
1181
51d1342e25ad luanhost password handling
Franklin Schmidt <fschmidt@gmail.com>
parents:
diff changeset
6 local Io = require "luan:Io.luan"
51d1342e25ad luanhost password handling
Franklin Schmidt <fschmidt@gmail.com>
parents:
diff changeset
7 local String = require "luan:String.luan"
51d1342e25ad luanhost password handling
Franklin Schmidt <fschmidt@gmail.com>
parents:
diff changeset
8 local lower = String.lower or error()
1210
3db95cc00d09 luanhost - add digest authentication
Franklin Schmidt <fschmidt@gmail.com>
parents: 1190
diff changeset
9 local format = String.format or error()
3db95cc00d09 luanhost - add digest authentication
Franklin Schmidt <fschmidt@gmail.com>
parents: 1190
diff changeset
10 local Binary = require "luan:Binary.luan"
3db95cc00d09 luanhost - add digest authentication
Franklin Schmidt <fschmidt@gmail.com>
parents: 1190
diff changeset
11 local bytes = Binary.byte or error()
1472
60f6741f000a base64_encode
Franklin Schmidt <fschmidt@gmail.com>
parents: 1418
diff changeset
12 local base64_encode = Binary.base64_encode or error()
1418
732b5de211fc add Hosted.luan
Franklin Schmidt <fschmidt@gmail.com>
parents: 1416
diff changeset
13 local Hosted = require "luan:host/Hosted.luan"
1394
8fe777ba5045 change postgres password
Franklin Schmidt <fschmidt@gmail.com>
parents: 1384
diff changeset
14 local Sql = require "luan:sql/Sql.luan"
8fe777ba5045 change postgres password
Franklin Schmidt <fschmidt@gmail.com>
parents: 1384
diff changeset
15 local database = Sql.database or error()
8fe777ba5045 change postgres password
Franklin Schmidt <fschmidt@gmail.com>
parents: 1384
diff changeset
16 local Logging = require "luan:logging/Logging.luan"
8fe777ba5045 change postgres password
Franklin Schmidt <fschmidt@gmail.com>
parents: 1384
diff changeset
17 local logger = Logging.logger "Util"
1181
51d1342e25ad luanhost password handling
Franklin Schmidt <fschmidt@gmail.com>
parents:
diff changeset
18
1353
8d95711f6615 replace java() with require "java"
Franklin Schmidt <fschmidt@gmail.com>
parents: 1210
diff changeset
19 require "java"
1181
51d1342e25ad luanhost password handling
Franklin Schmidt <fschmidt@gmail.com>
parents:
diff changeset
20 local MessageDigest = require "java:java.security.MessageDigest"
51d1342e25ad luanhost password handling
Franklin Schmidt <fschmidt@gmail.com>
parents:
diff changeset
21
51d1342e25ad luanhost password handling
Franklin Schmidt <fschmidt@gmail.com>
parents:
diff changeset
22
51d1342e25ad luanhost password handling
Franklin Schmidt <fschmidt@gmail.com>
parents:
diff changeset
23 local Util = {}
51d1342e25ad luanhost password handling
Franklin Schmidt <fschmidt@gmail.com>
parents:
diff changeset
24
51d1342e25ad luanhost password handling
Franklin Schmidt <fschmidt@gmail.com>
parents:
diff changeset
25 function Util.read_password(domain)
51d1342e25ad luanhost password handling
Franklin Schmidt <fschmidt@gmail.com>
parents:
diff changeset
26 domain = lower(domain)
1418
732b5de211fc add Hosted.luan
Franklin Schmidt <fschmidt@gmail.com>
parents: 1416
diff changeset
27 return do_file(Hosted.sites_dir..domain.."/info.luan").password or error()
1181
51d1342e25ad luanhost password handling
Franklin Schmidt <fschmidt@gmail.com>
parents:
diff changeset
28 end
51d1342e25ad luanhost password handling
Franklin Schmidt <fschmidt@gmail.com>
parents:
diff changeset
29
1210
3db95cc00d09 luanhost - add digest authentication
Franklin Schmidt <fschmidt@gmail.com>
parents: 1190
diff changeset
30 local function basic_authentication(dir,password)
1181
51d1342e25ad luanhost password handling
Franklin Schmidt <fschmidt@gmail.com>
parents:
diff changeset
31 local sha1 = MessageDigest.getInstance("SHA1").digest(password.getBytes())
1472
60f6741f000a base64_encode
Franklin Schmidt <fschmidt@gmail.com>
parents: 1418
diff changeset
32 local encoded = base64_encode(sha1)
1382
Franklin Schmidt <fschmidt@gmail.com>
parents: 1353
diff changeset
33 local file = Io.schemes.file(dir.."/password.nginx")
Franklin Schmidt <fschmidt@gmail.com>
parents: 1353
diff changeset
34 file.delete()
1384
f5368cd8c056 remove template expressions and String.concat
Franklin Schmidt <fschmidt@gmail.com>
parents: 1382
diff changeset
35 file.write_text("admin:{SHA}"..encoded.."\n")
1181
51d1342e25ad luanhost password handling
Franklin Schmidt <fschmidt@gmail.com>
parents:
diff changeset
36 end
51d1342e25ad luanhost password handling
Franklin Schmidt <fschmidt@gmail.com>
parents:
diff changeset
37
1210
3db95cc00d09 luanhost - add digest authentication
Franklin Schmidt <fschmidt@gmail.com>
parents: 1190
diff changeset
38 local function digest_authentication(dir,password)
3db95cc00d09 luanhost - add digest authentication
Franklin Schmidt <fschmidt@gmail.com>
parents: 1190
diff changeset
39 local s = "admin:Restricted:"..password
3db95cc00d09 luanhost - add digest authentication
Franklin Schmidt <fschmidt@gmail.com>
parents: 1190
diff changeset
40 local md5 = MessageDigest.getInstance("MD5").digest(s.getBytes())
3db95cc00d09 luanhost - add digest authentication
Franklin Schmidt <fschmidt@gmail.com>
parents: 1190
diff changeset
41 md5 = {bytes(md5,1,#md5)}
3db95cc00d09 luanhost - add digest authentication
Franklin Schmidt <fschmidt@gmail.com>
parents: 1190
diff changeset
42 local encoded = ""
3db95cc00d09 luanhost - add digest authentication
Franklin Schmidt <fschmidt@gmail.com>
parents: 1190
diff changeset
43 for _, n in ipairs(md5) do
3db95cc00d09 luanhost - add digest authentication
Franklin Schmidt <fschmidt@gmail.com>
parents: 1190
diff changeset
44 encoded = encoded..format("%02x",n)
3db95cc00d09 luanhost - add digest authentication
Franklin Schmidt <fschmidt@gmail.com>
parents: 1190
diff changeset
45 end
1382
Franklin Schmidt <fschmidt@gmail.com>
parents: 1353
diff changeset
46 local file = Io.schemes.file(dir.."/password.nginx")
Franklin Schmidt <fschmidt@gmail.com>
parents: 1353
diff changeset
47 file.delete()
1384
f5368cd8c056 remove template expressions and String.concat
Franklin Schmidt <fschmidt@gmail.com>
parents: 1382
diff changeset
48 file.write_text("admin:Restricted:"..encoded.."\n")
1210
3db95cc00d09 luanhost - add digest authentication
Franklin Schmidt <fschmidt@gmail.com>
parents: 1190
diff changeset
49 end
3db95cc00d09 luanhost - add digest authentication
Franklin Schmidt <fschmidt@gmail.com>
parents: 1190
diff changeset
50
1394
8fe777ba5045 change postgres password
Franklin Schmidt <fschmidt@gmail.com>
parents: 1384
diff changeset
51 function Util.set_password(domain,password)
1418
732b5de211fc add Hosted.luan
Franklin Schmidt <fschmidt@gmail.com>
parents: 1416
diff changeset
52 local dir = Hosted.sites_dir..lower(domain)
1382
Franklin Schmidt <fschmidt@gmail.com>
parents: 1353
diff changeset
53 local file = Io.schemes.file(dir.."/info.luan")
Franklin Schmidt <fschmidt@gmail.com>
parents: 1353
diff changeset
54 file.delete()
1384
f5368cd8c056 remove template expressions and String.concat
Franklin Schmidt <fschmidt@gmail.com>
parents: 1382
diff changeset
55 file.write_text("return "..stringify{password=password}.."\n")
1210
3db95cc00d09 luanhost - add digest authentication
Franklin Schmidt <fschmidt@gmail.com>
parents: 1190
diff changeset
56 digest_authentication(dir,password)
1396
a5f61890ad84 add check_postgres_password
Franklin Schmidt <fschmidt@gmail.com>
parents: 1394
diff changeset
57 end
1394
8fe777ba5045 change postgres password
Franklin Schmidt <fschmidt@gmail.com>
parents: 1384
diff changeset
58
1396
a5f61890ad84 add check_postgres_password
Franklin Schmidt <fschmidt@gmail.com>
parents: 1394
diff changeset
59 local fn = Luan.load_file("file:postgres.luan") or error()
a5f61890ad84 add check_postgres_password
Franklin Schmidt <fschmidt@gmail.com>
parents: 1394
diff changeset
60 local pg_admin = fn()
a5f61890ad84 add check_postgres_password
Franklin Schmidt <fschmidt@gmail.com>
parents: 1394
diff changeset
61
a5f61890ad84 add check_postgres_password
Franklin Schmidt <fschmidt@gmail.com>
parents: 1394
diff changeset
62 function Util.set_postgres_password(domain,password)
a5f61890ad84 add check_postgres_password
Franklin Schmidt <fschmidt@gmail.com>
parents: 1394
diff changeset
63 if pg_admin == nil then
1394
8fe777ba5045 change postgres password
Franklin Schmidt <fschmidt@gmail.com>
parents: 1384
diff changeset
64 return
8fe777ba5045 change postgres password
Franklin Schmidt <fschmidt@gmail.com>
parents: 1384
diff changeset
65 end
1396
a5f61890ad84 add check_postgres_password
Franklin Schmidt <fschmidt@gmail.com>
parents: 1394
diff changeset
66 local db = database(pg_admin)
1407
1979cff9aad2 add sql/Web_query
Franklin Schmidt <fschmidt@gmail.com>
parents: 1396
diff changeset
67 local exists = db.query("select rolname from pg_roles where rolname=?",domain).results() ~= nil;
1394
8fe777ba5045 change postgres password
Franklin Schmidt <fschmidt@gmail.com>
parents: 1384
diff changeset
68 --logger.info("exists "..exists)
8fe777ba5045 change postgres password
Franklin Schmidt <fschmidt@gmail.com>
parents: 1384
diff changeset
69 if exists then
8fe777ba5045 change postgres password
Franklin Schmidt <fschmidt@gmail.com>
parents: 1384
diff changeset
70 db.update( [[alter role "]]..domain..[[" with encrypted password ']]..password..[[']] )
8fe777ba5045 change postgres password
Franklin Schmidt <fschmidt@gmail.com>
parents: 1384
diff changeset
71 end
8fe777ba5045 change postgres password
Franklin Schmidt <fschmidt@gmail.com>
parents: 1384
diff changeset
72 db.close()
1210
3db95cc00d09 luanhost - add digest authentication
Franklin Schmidt <fschmidt@gmail.com>
parents: 1190
diff changeset
73 end
3db95cc00d09 luanhost - add digest authentication
Franklin Schmidt <fschmidt@gmail.com>
parents: 1190
diff changeset
74
1396
a5f61890ad84 add check_postgres_password
Franklin Schmidt <fschmidt@gmail.com>
parents: 1394
diff changeset
75 function Util.check_postgres_password(domain,password)
a5f61890ad84 add check_postgres_password
Franklin Schmidt <fschmidt@gmail.com>
parents: 1394
diff changeset
76 if pg_admin == nil then
a5f61890ad84 add check_postgres_password
Franklin Schmidt <fschmidt@gmail.com>
parents: 1394
diff changeset
77 return
a5f61890ad84 add check_postgres_password
Franklin Schmidt <fschmidt@gmail.com>
parents: 1394
diff changeset
78 end
1416
db57d562c4bd add Http.is_hosted
Franklin Schmidt <fschmidt@gmail.com>
parents: 1407
diff changeset
79 local db = database(pg_admin)
db57d562c4bd add Http.is_hosted
Franklin Schmidt <fschmidt@gmail.com>
parents: 1407
diff changeset
80 local exists = db.query("select rolname from pg_roles where rolname=?",domain).results() ~= nil;
1396
a5f61890ad84 add check_postgres_password
Franklin Schmidt <fschmidt@gmail.com>
parents: 1394
diff changeset
81 db.close()
1416
db57d562c4bd add Http.is_hosted
Franklin Schmidt <fschmidt@gmail.com>
parents: 1407
diff changeset
82 if exists then
db57d562c4bd add Http.is_hosted
Franklin Schmidt <fschmidt@gmail.com>
parents: 1407
diff changeset
83 db = database{
db57d562c4bd add Http.is_hosted
Franklin Schmidt <fschmidt@gmail.com>
parents: 1407
diff changeset
84 class = "org.postgresql.Driver"
db57d562c4bd add Http.is_hosted
Franklin Schmidt <fschmidt@gmail.com>
parents: 1407
diff changeset
85 url = "jdbc:postgresql://localhost:5432/"..domain
db57d562c4bd add Http.is_hosted
Franklin Schmidt <fschmidt@gmail.com>
parents: 1407
diff changeset
86 user = domain
db57d562c4bd add Http.is_hosted
Franklin Schmidt <fschmidt@gmail.com>
parents: 1407
diff changeset
87 password = password
db57d562c4bd add Http.is_hosted
Franklin Schmidt <fschmidt@gmail.com>
parents: 1407
diff changeset
88 }
db57d562c4bd add Http.is_hosted
Franklin Schmidt <fschmidt@gmail.com>
parents: 1407
diff changeset
89 db.close()
db57d562c4bd add Http.is_hosted
Franklin Schmidt <fschmidt@gmail.com>
parents: 1407
diff changeset
90 end
1396
a5f61890ad84 add check_postgres_password
Franklin Schmidt <fschmidt@gmail.com>
parents: 1394
diff changeset
91 end
a5f61890ad84 add check_postgres_password
Franklin Schmidt <fschmidt@gmail.com>
parents: 1394
diff changeset
92
1181
51d1342e25ad luanhost password handling
Franklin Schmidt <fschmidt@gmail.com>
parents:
diff changeset
93 return Util