mirror of
https://github.com/maubot/maubot
synced 2025-08-29 02:10:38 +00:00
76 lines
2.3 KiB
Python
76 lines
2.3 KiB
Python
# maubot - A plugin-based Matrix bot system.
|
|
# Copyright (C) 2022 Tulir Asokan
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU Affero General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU Affero General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU Affero General Public License
|
|
# along with this program. If not, see <https://www.gnu.org/licenses/>.
|
|
from __future__ import annotations
|
|
|
|
from time import time
|
|
|
|
from aiohttp import web
|
|
|
|
from mautrix.types import UserID
|
|
from mautrix.util.signed_token import sign_token, verify_token
|
|
|
|
from .base import get_config, routes
|
|
from .responses import resp
|
|
|
|
|
|
def is_valid_token(token: str) -> bool:
|
|
data = verify_token(get_config()["server.unshared_secret"], token)
|
|
if not data:
|
|
return False
|
|
return get_config().is_admin(data.get("user_id", None))
|
|
|
|
|
|
def create_token(user: UserID) -> str:
|
|
return sign_token(
|
|
get_config()["server.unshared_secret"],
|
|
{
|
|
"user_id": user,
|
|
"created_at": int(time()),
|
|
},
|
|
)
|
|
|
|
|
|
def get_token(request: web.Request) -> str:
|
|
token = request.headers.get("Authorization", "")
|
|
if not token or not token.startswith("Bearer "):
|
|
token = request.query.get("access_token", "")
|
|
else:
|
|
token = token[len("Bearer ") :]
|
|
return token
|
|
|
|
|
|
def check_token(request: web.Request) -> web.Response | None:
|
|
token = get_token(request)
|
|
if not token:
|
|
return resp.no_token
|
|
elif not is_valid_token(token):
|
|
return resp.invalid_token
|
|
return None
|
|
|
|
|
|
@routes.post("/auth/ping")
|
|
async def ping(request: web.Request) -> web.Response:
|
|
token = get_token(request)
|
|
if not token:
|
|
return resp.no_token
|
|
|
|
data = verify_token(get_config()["server.unshared_secret"], token)
|
|
if not data:
|
|
return resp.invalid_token
|
|
user = data.get("user_id", None)
|
|
if not get_config().is_admin(user):
|
|
return resp.invalid_token
|
|
return resp.pong(user, get_config()["api_features"])
|