rename accountopt.[ch] to purpleaccountoption.[ch]

[pidgin-git.git] / libpurple / protocols / oscar / family_auth.c

/*
 * Purple's oscar protocol plugin
 * This file is the legal property of its developers.
 * Please see the AUTHORS file distributed alongside this file.
 *
 * This library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2 of the License, or (at your option) any later version.
 *
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with this library; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02111-1301  USA
*/

/*
 * Family 0x0017 - Authentication.
 *
 * Deals with the authorizer for SNAC-based login, and also old-style
 * non-SNAC login.
 *
 */

#include "oscar.h"
#include "oscarcommon.h"

#include <ctype.h>

/* #define USE_XOR_FOR_ICQ */

#ifdef USE_XOR_FOR_ICQ
/**
 * Encode a password using old XOR method
 *
 * This takes a const pointer to a (null terminated) string
 * containing the unencoded password.  It also gets passed
 * an already allocated buffer to store the encoded password.
 * This buffer should be the exact length of the password without
 * the null.  The encoded password buffer /is not %NULL terminated/.
 *
 * The encoding_table seems to be a fixed set of values.  We'll
 * hope it doesn't change over time!
 *
 * This is only used for the XOR method, not the better MD5 method.
 *
 * @param password Incoming password.
 * @param encoded Buffer to put encoded password.
 */
static int
aim_encode_password(const char *password, guint8 *encoded)
{
        guint8 encoding_table[] = {
                0xf3, 0x26, 0x81, 0xc4,
                0x39, 0x86, 0xdb, 0x92,
                0x71, 0xa3, 0xb9, 0xe6,
                0x53, 0x7a, 0x95, 0x7c
        };
        unsigned int i;

        for (i = 0; i < strlen(password); i++)
                encoded[i] = (password[i] ^ encoding_table[i]);

        return 0;
}
#endif

#ifdef USE_OLD_MD5
static int
aim_encode_password_md5(const char *password, size_t password_len, const char *key, guint8 *digest)
{
        GChecksum *hash;
        gsize digest_len = 16;

        hash = g_checksum_new(G_CHECKSUM_MD5);
        g_checksum_update(hash, (const guchar *)key, -1);
        g_checksum_update(hash, (const guchar *)password, password_len);
        g_checksum_update(hash, (const guchar *)AIM_MD5_STRING, -1);
        g_checksum_get_digest(hash, digest, &digest_len);
        g_checksum_free(hash);

        return 0;
}
#else
static int
aim_encode_password_md5(const char *password, size_t password_len, const char *key, guint8 *digest)
{
        GChecksum *hash;
        guchar passdigest[16];
        gsize digest_len = 16;

        hash = g_checksum_new(G_CHECKSUM_MD5);
        g_checksum_update(hash, (const guchar *)password, password_len);
        g_checksum_get_digest(hash, passdigest, &digest_len);
        g_checksum_reset(hash);

        g_checksum_update(hash, (const guchar *)key, -1);
        g_checksum_update(hash, passdigest, digest_len);
        g_checksum_update(hash, (const guchar *)AIM_MD5_STRING, -1);
        g_checksum_get_digest(hash, digest, &digest_len);
        g_checksum_free(hash);

        return 0;
}
#endif

#ifdef USE_XOR_FOR_ICQ
/*
 * Part two of the ICQ hack.  Note the ignoring of the key.
 */
static int
goddamnicq2(OscarData *od, FlapConnection *conn, const char *sn, const char *password, ClientInfo *ci)
{
        FlapFrame *frame;
        GSList *tlvlist = NULL;
        int passwdlen;
        guint8 *password_encoded;
        guint32 distrib;

        passwdlen = strlen(password);
        password_encoded = (guint8 *)g_malloc(passwdlen+1);
        if (passwdlen > MAXICQPASSLEN)
                passwdlen = MAXICQPASSLEN;

        frame = flap_frame_new(od, 0x01, 1152);

        aim_encode_password(password, password_encoded);

        distrib = oscar_get_ui_info_int(
                        od->icq ? "prpl-icq-distid" : "prpl-aim-distid",
                        ci->distrib);

        byte_stream_put32(&frame->data, 0x00000001); /* FLAP Version */
        aim_tlvlist_add_str(&tlvlist, 0x0001, sn);
        aim_tlvlist_add_raw(&tlvlist, 0x0002, passwdlen, password_encoded);

        if (ci->clientstring != NULL)
                aim_tlvlist_add_str(&tlvlist, 0x0003, ci->clientstring);
        else {
                gchar *clientstring = oscar_get_clientstring();
                aim_tlvlist_add_str(&tlvlist, 0x0003, clientstring);
                g_free(clientstring);
        }
        aim_tlvlist_add_16(&tlvlist, 0x0016, (guint16)ci->clientid);
        aim_tlvlist_add_16(&tlvlist, 0x0017, (guint16)ci->major);
        aim_tlvlist_add_16(&tlvlist, 0x0018, (guint16)ci->minor);
        aim_tlvlist_add_16(&tlvlist, 0x0019, (guint16)ci->point);
        aim_tlvlist_add_16(&tlvlist, 0x001a, (guint16)ci->build);
        aim_tlvlist_add_32(&tlvlist, 0x0014, distrib); /* distribution chan */
        aim_tlvlist_add_str(&tlvlist, 0x000f, ci->lang);
        aim_tlvlist_add_str(&tlvlist, 0x000e, ci->country);

        aim_tlvlist_write(&frame->data, &tlvlist);

        g_free(password_encoded);
        aim_tlvlist_free(tlvlist);

        flap_connection_send(conn, frame);

        return 0;
}
#endif

/*
 * Subtype 0x0002
 *
 * This is the initial login request packet.
 *
 * NOTE!! If you want/need to make use of the aim_sendmemblock() function,
 * then the client information you send here must exactly match the
 * executable that you're pulling the data from.
 *
 * Java AIM 1.1.19:
 *   clientstring = "AOL Instant Messenger (TM) version 1.1.19 for Java built 03/24/98, freeMem 215871 totalMem 1048567, i686, Linus, #2 SMP Sun Feb 11 03:41:17 UTC 2001 2.4.1-ac9, IBM Corporation, 1.1.8, 45.3, Tue Mar 27 12:09:17 PST 2001"
 *   clientid = 0x0001
 *   major  = 0x0001
 *   minor  = 0x0001
 *   point = (not sent)
 *   build  = 0x0013
 *   unknown= (not sent)
 *
 * AIM for Linux 1.1.112:
 *   clientstring = "AOL Instant Messenger (SM)"
 *   clientid = 0x1d09
 *   major  = 0x0001
 *   minor  = 0x0001
 *   point = 0x0001
 *   build  = 0x0070
 *   unknown= 0x0000008b
 *   serverstore = 0x01
 *
 * @param truncate_pass Truncate the password to 8 characters.  This
 *        usually happens for AOL accounts.  We are told that we
 *        should truncate it if the 0x0017/0x0007 SNAC contains
 *        a TLV of type 0x0026 with data 0x0000.
 * @param allow_multiple_logins Allow multiple logins? If TRUE, the AIM
 *        server will prompt the user when multiple logins occur. If
 *        FALSE, existing connections (on other clients) will be
 *        disconnected automatically as we connect.
 */
int
aim_send_login(OscarData *od, FlapConnection *conn, const char *sn, const char *password, gboolean truncate_pass, ClientInfo *ci, const char *key, gboolean allow_multiple_logins)
{
        FlapFrame *frame;
        GSList *tlvlist = NULL;
        guint8 digest[16];
        aim_snacid_t snacid;
        size_t password_len;
        guint32 distrib;

        if (!ci || !sn || !password)
                return -EINVAL;

#ifdef USE_XOR_FOR_ICQ
        /* If we're signing on an ICQ account then use the older, XOR login method */
        if (aim_snvalid_icq(sn))
                return goddamnicq2(od, conn, sn, password, ci);
#endif

        frame = flap_frame_new(od, 0x02, 1152);

        snacid = aim_cachesnac(od, SNAC_FAMILY_AUTH, 0x0002, 0x0000, NULL, 0);
        aim_putsnac(&frame->data, SNAC_FAMILY_AUTH, 0x0002, snacid);

        aim_tlvlist_add_str(&tlvlist, 0x0001, sn);

        /* Truncate ICQ and AOL passwords, if necessary */
        password_len = strlen(password);
        if (oscar_util_valid_name_icq(sn) && (password_len > MAXICQPASSLEN))
                password_len = MAXICQPASSLEN;
        else if (truncate_pass && password_len > 8)
                password_len = 8;

        aim_encode_password_md5(password, password_len, key, digest);

        distrib = oscar_get_ui_info_int(
                        od->icq ? "prpl-icq-distid" : "prpl-aim-distid",
                        ci->distrib);

        aim_tlvlist_add_raw(&tlvlist, 0x0025, 16, digest);

#ifndef USE_OLD_MD5
        aim_tlvlist_add_noval(&tlvlist, 0x004c);
#endif

        if (ci->clientstring != NULL)
                aim_tlvlist_add_str(&tlvlist, 0x0003, ci->clientstring);
        else {
                gchar *clientstring = oscar_get_clientstring();
                aim_tlvlist_add_str(&tlvlist, 0x0003, clientstring);
                g_free(clientstring);
        }
        aim_tlvlist_add_16(&tlvlist, 0x0016, (guint16)ci->clientid);
        aim_tlvlist_add_16(&tlvlist, 0x0017, (guint16)ci->major);
        aim_tlvlist_add_16(&tlvlist, 0x0018, (guint16)ci->minor);
        aim_tlvlist_add_16(&tlvlist, 0x0019, (guint16)ci->point);
        aim_tlvlist_add_16(&tlvlist, 0x001a, (guint16)ci->build);
        aim_tlvlist_add_32(&tlvlist, 0x0014, distrib);
        aim_tlvlist_add_str(&tlvlist, 0x000f, ci->lang);
        aim_tlvlist_add_str(&tlvlist, 0x000e, ci->country);

        /*
         * If set, old-fashioned buddy lists will not work. You will need
         * to use SSI.
         */
        aim_tlvlist_add_8(&tlvlist, 0x004a, (allow_multiple_logins ? 0x01 : 0x03));

        aim_tlvlist_write(&frame->data, &tlvlist);

        aim_tlvlist_free(tlvlist);

        flap_connection_send(conn, frame);

        return 0;
}

/*
 * This is sent back as a general response to the login command.
 * It can be either an error or a success, depending on the
 * presence of certain TLVs.
 *
 * The client should check the value passed as errorcode. If
 * its nonzero, there was an error.
 */
static int
parse(OscarData *od, FlapConnection *conn, aim_module_t *mod, FlapFrame *frame, aim_modsnac_t *snac, ByteStream *bs)
{
        GSList *tlvlist;
        aim_rxcallback_t userfunc;
        struct aim_authresp_info *info;
        int ret = 0;

        info = g_new0(struct aim_authresp_info, 1);

        /*
         * Read block of TLVs.  All further data is derived
         * from what is parsed here.
         */
        tlvlist = aim_tlvlist_read(bs);

        /*
         * No matter what, we should have a username.
         */
        if (aim_tlv_gettlv(tlvlist, 0x0001, 1)) {
                info->bn = aim_tlv_getstr(tlvlist, 0x0001, 1);
                purple_connection_set_display_name(od->gc, info->bn);
        }

        /*
         * Check for an error code.  If so, we should also
         * have an error url.
         */
        if (aim_tlv_gettlv(tlvlist, 0x0008, 1))
                info->errorcode = aim_tlv_get16(tlvlist, 0x0008, 1);
        if (aim_tlv_gettlv(tlvlist, 0x0004, 1))
                info->errorurl = aim_tlv_getstr(tlvlist, 0x0004, 1);

        /*
         * BOS server address.
         */
        if (aim_tlv_gettlv(tlvlist, 0x0005, 1))
                info->bosip = aim_tlv_getstr(tlvlist, 0x0005, 1);

        /*
         * Authorization cookie.
         */
        if (aim_tlv_gettlv(tlvlist, 0x0006, 1)) {
                aim_tlv_t *tmptlv;

                tmptlv = aim_tlv_gettlv(tlvlist, 0x0006, 1);
                if (tmptlv != NULL)
                {
                        info->cookielen = tmptlv->length;
                        info->cookie = tmptlv->value;
                }
        }

        /*
         * The email address attached to this account
         *   Not available for ICQ or @mac.com logins.
         *   If you receive this TLV, then you are allowed to use
         *   family 0x0018 to check the status of your email.
         * XXX - Not really true!
         */
        if (aim_tlv_gettlv(tlvlist, 0x0011, 1))
                info->email = aim_tlv_getstr(tlvlist, 0x0011, 1);

        /*
         * The registration status.  (Not real sure what it means.)
         *   Not available for ICQ or @mac.com logins.
         *
         *   1 = No disclosure
         *   2 = Limited disclosure
         *   3 = Full disclosure
         *
         * This has to do with whether your email address is available
         * to other users or not.  AFAIK, this feature is no longer used.
         *
         * Means you can use the admin family? (0x0007)
         *
         */
        if (aim_tlv_gettlv(tlvlist, 0x0013, 1))
                info->regstatus = aim_tlv_get16(tlvlist, 0x0013, 1);

        if (aim_tlv_gettlv(tlvlist, 0x0040, 1))
                info->latestbeta.build = aim_tlv_get32(tlvlist, 0x0040, 1);
        if (aim_tlv_gettlv(tlvlist, 0x0041, 1))
                info->latestbeta.url = aim_tlv_getstr(tlvlist, 0x0041, 1);
        if (aim_tlv_gettlv(tlvlist, 0x0042, 1))
                info->latestbeta.info = aim_tlv_getstr(tlvlist, 0x0042, 1);
        if (aim_tlv_gettlv(tlvlist, 0x0043, 1))
                info->latestbeta.name = aim_tlv_getstr(tlvlist, 0x0043, 1);

        if (aim_tlv_gettlv(tlvlist, 0x0044, 1))
                info->latestrelease.build = aim_tlv_get32(tlvlist, 0x0044, 1);
        if (aim_tlv_gettlv(tlvlist, 0x0045, 1))
                info->latestrelease.url = aim_tlv_getstr(tlvlist, 0x0045, 1);
        if (aim_tlv_gettlv(tlvlist, 0x0046, 1))
                info->latestrelease.info = aim_tlv_getstr(tlvlist, 0x0046, 1);
        if (aim_tlv_gettlv(tlvlist, 0x0047, 1))
                info->latestrelease.name = aim_tlv_getstr(tlvlist, 0x0047, 1);

        /*
         * URL to change password.
         */
        if (aim_tlv_gettlv(tlvlist, 0x0054, 1))
                info->chpassurl = aim_tlv_getstr(tlvlist, 0x0054, 1);

        od->authinfo = info;

        if ((userfunc = aim_callhandler(od, snac ? snac->family : SNAC_FAMILY_AUTH, snac ? snac->subtype : 0x0003)))
                ret = userfunc(od, conn, frame, info);

        aim_tlvlist_free(tlvlist);

        return ret;
}

#ifdef USE_XOR_FOR_ICQ
/*
 * Subtype 0x0007 (kind of) - Send a fake type 0x0007 SNAC to the client
 *
 * This is a bit confusing.
 *
 * Normal SNAC login goes like this:
 *   - connect
 *   - server sends flap version
 *   - client sends flap version
 *   - client sends username (17/6)
 *   - server sends hash key (17/7)
 *   - client sends auth request (17/2 -- aim_send_login)
 *   - server yells
 *
 * XOR login (for ICQ) goes like this:
 *   - connect
 *   - server sends flap version
 *   - client sends auth request which contains flap version (aim_send_login)
 *   - server yells
 *
 * For the client API, we make them implement the most complicated version,
 * and for the simpler version, we fake it and make it look like the more
 * complicated process.
 *
 * This is done by giving the client a faked key, just so we can convince
 * them to call aim_send_login right away, which will detect the session
 * flag that says this is XOR login and ignore the key, sending an ICQ
 * login request instead of the normal SNAC one.
 *
 * As soon as AOL makes ICQ log in the same way as AIM, this is /gone/.
 */
static int
goddamnicq(OscarData *od, FlapConnection *conn, const char *sn)
{
        FlapFrame frame;
        aim_rxcallback_t userfunc;

        if ((userfunc = aim_callhandler(od, SNAC_FAMILY_AUTH, 0x0007)))
                userfunc(od, conn, &frame, "");

        return 0;
}
#endif

/*
 * Subtype 0x0006
 *
 * In AIM 3.5 protocol, the first stage of login is to request login from the
 * Authorizer, passing it the username for verification.  If the name is
 * invalid, a 0017/0003 is spit back, with the standard error contents.  If
 * valid, a 0017/0007 comes back, which is the signal to send it the main
 * login command (0017/0002).
 *
 */
int
aim_request_login(OscarData *od, FlapConnection *conn, const char *sn)
{
        FlapFrame *frame;
        aim_snacid_t snacid;
        GSList *tlvlist = NULL;

        if (!od || !conn || !sn)
                return -EINVAL;

#ifdef USE_XOR_FOR_ICQ
        if (aim_snvalid_icq(sn))
                return goddamnicq(od, conn, sn);
#endif

        frame = flap_frame_new(od, 0x02, 10+2+2+strlen(sn)+8);

        snacid = aim_cachesnac(od, SNAC_FAMILY_AUTH, 0x0006, 0x0000, NULL, 0);
        aim_putsnac(&frame->data, SNAC_FAMILY_AUTH, 0x0006, snacid);

        aim_tlvlist_add_str(&tlvlist, 0x0001, sn);

        /* Tell the server we support SecurID logins. */
        aim_tlvlist_add_noval(&tlvlist, 0x004b);

        /* Unknown.  Sent in recent WinAIM clients.*/
        aim_tlvlist_add_noval(&tlvlist, 0x005a);

        aim_tlvlist_write(&frame->data, &tlvlist);
        aim_tlvlist_free(tlvlist);

        flap_connection_send(conn, frame);

        return 0;
}

/*
 * Subtype 0x0007
 *
 * Middle handler for 0017/0007 SNACs.  Contains the auth key prefixed
 * by only its length in a two byte word.
 *
 * Calls the client, which should then use the value to call aim_send_login.
 *
 */
static int
keyparse(OscarData *od, FlapConnection *conn, aim_module_t *mod, FlapFrame *frame, aim_modsnac_t *snac, ByteStream *bs)
{
        int keylen;
        char *keystr;
        GSList *tlvlist;
        gboolean truncate_pass;
        PurpleConnection *gc;
        PurpleAccount *account;
        ClientInfo aiminfo = CLIENTINFO_PURPLE_AIM;
        ClientInfo icqinfo = CLIENTINFO_PURPLE_ICQ;

        gc = od->gc;
        account = purple_connection_get_account(gc);

        keylen = byte_stream_get16(bs);
        keystr = byte_stream_getstr(bs, keylen);
        if (!g_utf8_validate(keystr, -1, NULL)) {
                purple_debug_warning("oscar", "Received SNAC %04hx/%04hx with "
                                "invalid UTF-8 keystr.\n", snac->family, snac->subtype);
                purple_connection_error(gc, PURPLE_CONNECTION_ERROR_OTHER_ERROR,
                                _("Received unexpected response from server"));
                g_free(keystr);
                return 1;
        }

        tlvlist = aim_tlvlist_read(bs);

        /*
         * If the truncate_pass TLV exists then we should truncate the
         * user's password to 8 characters.  This flag is sent to us
         * when logging in with an AOL user's username.
         */
        truncate_pass = aim_tlv_gettlv(tlvlist, 0x0026, 1) != NULL;

        /* XXX - When GiantGrayPanda signed on AIM I got a thing asking me to register
         * for the netscape network.  This SNAC had a type 0x0058 TLV with length 10.
         * Data is 0x0007 0004 3e19 ae1e 0006 0004 0000 0005 */

        aim_send_login(od, conn, purple_account_get_username(account),
                        purple_connection_get_password(gc), truncate_pass,
                        od->icq ? &icqinfo : &aiminfo, keystr,
                        purple_account_get_bool(account, "allow_multiple_logins", OSCAR_DEFAULT_ALLOW_MULTIPLE_LOGINS));

        purple_connection_update_progress(gc,
                        _("Password sent"), 2, OSCAR_CONNECT_STEPS);

        g_free(keystr);
        aim_tlvlist_free(tlvlist);

        return 1;
}

/**
 * Subtype 0x000a
 *
 * Receive SecurID request.
 */
static int
got_securid_request(OscarData *od, FlapConnection *conn, aim_module_t *mod, FlapFrame *frame, aim_modsnac_t *snac, ByteStream *bs)
{
        int ret = 0;
        aim_rxcallback_t userfunc;

        if ((userfunc = aim_callhandler(od, snac->family, snac->subtype)))
                ret = userfunc(od, conn, frame);

        return ret;
}

/**
 * Subtype 0x000b
 *
 * Send SecurID response.
 */
int
aim_auth_securid_send(OscarData *od, const char *securid)
{
        FlapConnection *conn;
        FlapFrame *frame;
        int len;

        if (!od || !(conn = flap_connection_getbytype_all(od, SNAC_FAMILY_AUTH)) || !securid)
                return -EINVAL;

        len = strlen(securid);

        frame = flap_frame_new(od, 0x02, 10+2+len);

        /* aim_snacid_t snacid = */ aim_cachesnac(od, SNAC_FAMILY_AUTH, SNAC_SUBTYPE_AUTH_SECURID_RESPONSE, 0x0000, NULL, 0);
        aim_putsnac(&frame->data, SNAC_FAMILY_AUTH, SNAC_SUBTYPE_AUTH_SECURID_RESPONSE, 0);

        byte_stream_put16(&frame->data, len);
        byte_stream_putstr(&frame->data, securid);

        flap_connection_send(conn, frame);

        return 0;
}

static void
auth_shutdown(OscarData *od, aim_module_t *mod)
{
        if (od->authinfo != NULL)
        {
                g_free(od->authinfo->bn);
                g_free(od->authinfo->bosip);
                g_free(od->authinfo->errorurl);
                g_free(od->authinfo->email);
                g_free(od->authinfo->chpassurl);
                g_free(od->authinfo->latestrelease.name);
                g_free(od->authinfo->latestrelease.url);
                g_free(od->authinfo->latestrelease.info);
                g_free(od->authinfo->latestbeta.name);
                g_free(od->authinfo->latestbeta.url);
                g_free(od->authinfo->latestbeta.info);
                g_free(od->authinfo);
        }
}

static int
snachandler(OscarData *od, FlapConnection *conn, aim_module_t *mod, FlapFrame *frame, aim_modsnac_t *snac, ByteStream *bs)
{
        if (snac->subtype == 0x0003)
                return parse(od, conn, mod, frame, snac, bs);
        else if (snac->subtype == 0x0007)
                return keyparse(od, conn, mod, frame, snac, bs);
        else if (snac->subtype == 0x000a)
                return got_securid_request(od, conn, mod, frame, snac, bs);

        return 0;
}

int
auth_modfirst(OscarData *od, aim_module_t *mod)
{
        mod->family = SNAC_FAMILY_AUTH;
        mod->version = 0x0000;
        mod->flags = 0;
        strncpy(mod->name, "auth", sizeof(mod->name));
        mod->snachandler = snachandler;
        mod->shutdown = auth_shutdown;

        return 0;
}