RLGWebD: rlgwebd.js comparison

comparison rlgwebd.js @ 39:e8ac0e3d2614

RLG-Web: separate logging in and starting a game. The user now logs in with a username and password, receiving a token which is then used for any actions requiring authentication. Starting a game is one such action. Games use a different set of id keys. This allows users to supply their passwords once and then play any number of successive games. Also, newly registered users do not need to supply their passwords again.

author	John "Elwin" Edwards <elwin@sdf.org>
date	Thu, 07 Jun 2012 15:43:06 -0700
parents	353be34de307
children	f7116eb3f791

comparison

equal deleted inserted replaced

-:b06a14876645
+:e8ac0e3d2614
 var dropToUID = 501;
 var dropToGID = 501;
 var serveStaticRoot = "/var/www/"; // inside the chroot
 var playtimeout = 3600000; // Idle time before games are autosaved, in ms
-/* Global state */
+/* Data on the games available. */
-var sessions = {};
-var allowlogin = true;
 var games = {
 "rogue3": {
 "name": "Rogue V3",
 "uname": "rogue3",
 "path": "/bin/rogue3"
 "uname": "srogue",
 "path": "/bin/srogue"
 }
 };
+/* Global state */
+var logins = {};
+var sessions = {};
+var allowlogin = true;
 /* Constructor for TermSessions.  Note that it opens the terminal and
 * adds itself to the sessions dict. It currently assumes the user has
 * been authenticated.
 */
 function TermSession(game, user, files, dims) {
 return null;
 }
 this.player = user;
 /* This order seems to best avoid race conditions... */
 this.alive = false;
-this.sessid = randkey();
+this.sessid = randkey(2);
 while (this.sessid in sessions) {
-this.sessid = randkey();
+this.sessid = randkey(2);
 }
 /* Grab a spot in the sessions table. */
 sessions[this.sessid] = this;
 /* State for messaging. */
 this.nsend = 0;
 sd = dd.toISOString();
 sd = sd.slice(0, sd.indexOf("."));
 return sd.replace("T", ".");
 }
-function randkey() {
+function randkey(words) {
-rnum = Math.floor(Math.random() * 65536 * 65536);
+if (!words || !(words > 0))
-hexstr = rnum.toString(16);
+words = 1;
-while (hexstr.length < 8)
+function rand32() {
-hexstr = "0" + hexstr;
+rnum = Math.floor(Math.random() * 65536 * 65536);
-return hexstr;
+hexstr = rnum.toString(16);
+while (hexstr.length < 8)
+hexstr = "0" + hexstr;
+return hexstr;
+}
+var key = "";
+for (var i = 0; i < words; i++)
+key += rand32();
+return key;
 }
 function tslog() {
 arguments[0] = new Date().toISOString() + ": " + String(arguments[0]);
 console.log.apply(console, arguments);
 function login(req, res, formdata) {
 if (!allowlogin) {
 sendError(res, 6, null);
 return;
 }
-if (!("game" in formdata)) {
+if (!("name" in formdata)) {
-sendError(res, 2, "No game specified.");
-return;
-}
-else if (!("name" in formdata)) {
 sendError(res, 2, "Username not given.");
 return;
 }
 else if (!("pw" in formdata)) {
 sendError(res, 2, "Password not given.");
 return;
 }
-var username = formdata["name"];
+var username = String(formdata["name"]);
-var password = formdata["pw"];
+var password = String(formdata["pw"]);
+function checkit(code, signal) {
+/* Checks the exit status, see sqlickrypt.c for details. */
+if (code != 0) {
+sendError(res, 3);
+if (code == 1)
+tslog("Password check failed for user %s", username);
+else if (code == 2)
+tslog("Attempted login by nonexistent user %s", username);
+else
+tslog("Login failed: sqlickrypt error %d", code);
+return;
+}
+var lkey = randkey(2);
+while (lkey in logins)
+lkey = randkey(2);
+logins[lkey] = {"name": username, "ts": new Date()};
+res.writeHead(200, {'Content-Type': 'application/json'});
+var reply = {"t": "l", "k": lkey, "u": username};
+res.write(JSON.stringify(reply));
+res.end();
+tslog("%s has logged in (key %s)", username, lkey);
+return;
+}
+/* Launch the sqlickrypt utility to check the password. */
+var pwchecker = child_process.spawn("/bin/sqlickrypt", ["check"]);
+pwchecker.on("exit", checkit);
+pwchecker.stdin.end(username + '\n' + password + '\n', "utf8");
+return;
+}
+function startgame(req, res, formdata) {
+if (!allowlogin) {
+sendError(res, 6, null);
+return;
+}
+if (!("key" in formdata)) {
+sendError(res, 2, "No key given.");
+return;
+}
+else if (!("game" in formdata)) {
+sendError(res, 2, "No game specified.");
+return;
+}
+var lkey = String(formdata["key"]);
+if (!(lkey in logins)) {
+sendError(res, 1, null);
+return;
+}
+else {
+logins[lkey].ts = new Date();
+}
+var username = logins[lkey].name;
 var gname = formdata["game"];
 var dims = [formdata["h"], formdata["w"]];
 if (!(gname in games)) {
 sendError(res, 2, "No such game: " + gname);
 tslog("Request for nonexistant game \"%s\"", gname);
 return;
 }
+// check for an existing game
 var progressdir = "/dgldir/inprogress-" + games[gname].uname;
+fs.readdir(progressdir, function(err, files) {
-// This sets up the game once starting is approved.
+if (!err) {
 function startgame() {