1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
|
-- Prosody IM
-- Copyright (C) 2008-2010 Matthew Wild
-- Copyright (C) 2008-2010 Waqas Hussain
-- Copyright (C) 2014 Daurnimator
--
-- This project is MIT/X11 licensed. Please see the
-- COPYING file in the source package for more information.
--
local st = require "util.stanza";
local function get_password(room)
return room._data.password;
end
local function set_password(room, password)
if password == "" then password = nil; end
if room._data.password == password then return false; end
room._data.password = password;
return true;
end
module:hook("muc-disco#info", function(event)
event.reply:tag("feature", {var = get_password(event.room) and "muc_passwordprotected" or "muc_unsecured"}):up();
end);
module:hook("muc-config-form", function(event)
table.insert(event.form, {
name = "muc#roomconfig_roomsecret";
type = "text-private";
label = "Password";
value = get_password(event.room) or "";
});
end, 90-2);
module:hook("muc-config-submitted/muc#roomconfig_roomsecret", function(event)
if set_password(event.room, event.value) then
event.status_codes["104"] = true;
end
end);
-- Don't allow anyone to join room unless they provide the password
module:hook("muc-occupant-pre-join", function(event)
local room, stanza = event.room, event.stanza;
if not get_password(room) then return end
local muc_x = stanza:get_child("x", "http://jabber.org/protocol/muc");
if not muc_x then return end
local password = muc_x:get_child_text("password", "http://jabber.org/protocol/muc");
if not password or password == "" then password = nil; end
if get_password(room) ~= password then
local from, to = stanza.attr.from, stanza.attr.to;
module:log("debug", "%s couldn't join due to invalid password: %s", from, to);
local reply = st.error_reply(stanza, "auth", "not-authorized"):up();
reply.tags[1].attr.code = "401";
event.origin.send(reply:tag("x", {xmlns = "http://jabber.org/protocol/muc"}));
return true;
end
end, -20);
-- Add password to outgoing invite
module:hook("muc-invite", function(event)
local password = get_password(event.room);
if password then
local x = event.stanza:get_child("x", "http://jabber.org/protocol/muc#user");
x:tag("password"):text(password):up();
end
end);
module:hook("muc-room-pre-create", function (event)
local stanza, room = event.stanza, event.room;
local muc_x = stanza:get_child("x", "http://jabber.org/protocol/muc");
if not muc_x then return end
local password = muc_x:get_child_text("password", "http://jabber.org/protocol/muc");
set_password(room, password);
end);
return {
get = get_password;
set = set_password;
};
|
