authentication is now in an own npm package
This commit is contained in:
@@ -1,78 +0,0 @@
|
||||
module.exports = function(config) {
|
||||
|
||||
var authentication;
|
||||
|
||||
if (config) {
|
||||
|
||||
authentication = function (username, password, success, fail) {
|
||||
|
||||
console.log("...try: ", username);
|
||||
const crypto = require('crypto');
|
||||
if (config.passwords && config.passwords[username]) {
|
||||
console.log("...check hash");
|
||||
if (crypto.getHashes().indexOf(config.passwords[username][0])>=0) {
|
||||
if (crypto.createHash(config.passwords[username][0]).update(password, 'utf8').digest('hex') === config.passwords[username][1]) {
|
||||
success(username);
|
||||
return;
|
||||
} else {
|
||||
fail(username);
|
||||
return;
|
||||
}
|
||||
} else {
|
||||
console.log("**** HASH NOT FOUND ****");
|
||||
console.log(config.passwords[username][0]);
|
||||
console.log(crypto.getHashes());
|
||||
fail(username);
|
||||
return;
|
||||
}
|
||||
}
|
||||
if (config.ldap) try {
|
||||
console.log("...check ldap");
|
||||
var LdapAuth = require('ldapauth');
|
||||
var auth = new LdapAuth(config.ldap);
|
||||
auth.once('connect', function () {
|
||||
try {
|
||||
auth.authenticate(username, password, function(err, usr) {
|
||||
auth.close(function(err) {})
|
||||
if (err) {
|
||||
console.log("**** ERROR: LDAP Authentication failed:", err);
|
||||
fail(username);
|
||||
return;
|
||||
}
|
||||
console.log("**** SUCCESS: LDAP Authentication:");
|
||||
success(username);
|
||||
return;
|
||||
});
|
||||
} catch (e) {
|
||||
console.log("**** Error: LDAP failed: ", e, e.stack);
|
||||
fail(username);
|
||||
}
|
||||
return; // need to block here!
|
||||
});
|
||||
} catch (e) {
|
||||
console.log("**** Error: LDAP failed: ", e, e.stack);
|
||||
fail(username);
|
||||
return;
|
||||
}
|
||||
if (config.unrestricted)
|
||||
success(username);
|
||||
else
|
||||
fail(username);
|
||||
return;
|
||||
}
|
||||
|
||||
} else {
|
||||
|
||||
authentication = function (username, password, success, fail) {
|
||||
console.log('**** Error: no access configuraion. To allow any user, add:')
|
||||
console.log(' "restrict": {');
|
||||
console.log(' "unrestricted": true');
|
||||
console.log(' }');
|
||||
fail(username);
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
return authentication;
|
||||
|
||||
}
|
@@ -10,6 +10,7 @@
|
||||
"pty.js": "~0.3.0",
|
||||
"async": "~1.5.2",
|
||||
"socketio-auth": "0.0.5",
|
||||
"authentication.js": ">=0.0.2",
|
||||
"ldapauth": "git+https://github.com/DimensionSoftware/node-ldapauth.git"
|
||||
},
|
||||
"description": "@DESCRIPTION@",
|
||||
|
Reference in New Issue
Block a user