mateamt/src/Model/Auth.hs

132 lines
3.1 KiB
Haskell
Raw Normal View History

2019-04-21 15:27:15 +00:00
{-# LANGUAGE DeriveGeneric #-}
{-# LANGUAGE OverloadedStrings #-}
module Model.Auth where
import GHC.Generics
import Control.Arrow ((<<<))
2019-05-06 21:41:05 +00:00
import Control.Monad.IO.Class (liftIO)
import Control.Monad.Reader (ask)
2019-05-08 23:24:58 +00:00
import Control.Concurrent.STM
2019-04-21 15:27:15 +00:00
import Data.Profunctor.Product (p3)
import qualified Database.PostgreSQL.Simple as PGS
import Data.Text (Text)
2019-05-08 23:24:58 +00:00
import qualified Data.Set as S
2019-05-06 21:41:05 +00:00
2019-04-21 15:27:15 +00:00
import Data.Time.Calendar (Day)
2019-05-08 23:24:58 +00:00
import Data.Time.Clock
2019-04-21 15:27:15 +00:00
import Data.ByteString (ByteString)
2019-05-06 21:41:05 +00:00
import Data.ByteString.Random
2019-04-21 15:27:15 +00:00
import Data.Maybe (fromMaybe)
import Opaleye
import qualified Opaleye.Constant as C
-- internal imports
import Types.Auth
2019-05-06 21:41:05 +00:00
import Types.Reader
2019-04-21 15:27:15 +00:00
import Model.User
initToken :: PGS.Query
initToken = "create table if not exists \"token\" (token_string bytea not null primary key, token_user integer not null, token_expiry timestamptz not null)"
tokenTable :: Table
( Field SqlBytea
, Field SqlInt4
, Field SqlTimestamptz
)
( Field SqlBytea
, Field SqlInt4
, Field SqlTimestamptz
)
tokenTable = table "token" (
p3
( tableField "token_string"
, tableField "token_user"
, tableField "token_expiry"
)
)
getUserAuthInfo
:: PGS.Connection
-> Int
2019-05-06 21:41:05 +00:00
-> MateHandler AuthInfo
2019-05-08 23:24:58 +00:00
getUserAuthInfo id = do
conn <- rsConnection <$> ask
2019-05-06 21:41:05 +00:00
users <- liftIO $ runSelect conn (
2019-04-21 15:27:15 +00:00
keepWhen (\(uid, _, _, _, _, _, _, _, _) ->
uid .== C.constant id) <<< queryTable userTable
2019-05-08 23:24:58 +00:00
) :: MateHandler
2019-04-21 15:27:15 +00:00
[ ( Int
, Text
, Int
, Day
, Maybe Text
, Maybe Int
, ByteString
, Maybe ByteString
, Maybe Int
)
]
2019-05-06 21:41:05 +00:00
head <$> mapM (\(i1, i2, i3, i4, i5, i6, i7, i8, i9) ->
AuthInfo (AuthSalt i7) (toEnum $ fromMaybe 0 i9) <$> newTicket id
2019-04-21 15:27:15 +00:00
)
users
2019-05-06 21:41:05 +00:00
2019-05-08 23:24:58 +00:00
checkTicket
:: Ticket
-> AuthHash
-> MateHandler Token
generateToken (Ticket _ id exp) hash = do
conn <- rsConnection <$> ask
users <- liftIO $ runSelect conn (
keepWhen (\(uid, _, _, _, _, _, _, _, _) ->
uid .== C.cinstant id) <<< queryTable userTable
) :: MateHandler
[ ( Int
, Text
, Int
, Day
, Maybe Text
, Maybe Int
, ByteString
, Maybe ByteString
, Maybe Int
)
]
let userHash = head $ map (\(i1, i2, i3, i4, i5, i6, i7, i8, i9) -> i8)
2019-05-06 21:41:05 +00:00
newTicket :: Int -> MateHandler AuthTicket
newTicket id = do
store <- rsTicketStore <$> ask
rand <- liftIO $ random 23
2019-05-08 23:24:58 +00:00
later <- liftIO $ (addUTCTime (23/60) <$> getCurrentTime)
let ticket = Ticket
{ ticketId = AuthTicket rand
2019-05-06 21:41:05 +00:00
, ticketUser = id
, ticketExpiry = later
}
2019-05-08 23:24:58 +00:00
liftIO $ atomically $ modifyTVar store (\s -> S.insert ticket s)
return (AuthTicket rand)
processAuthRequest
:: AuthRequest
-> MateHandler AuthResult
processAuthRequest (AuthRequest aticket hash) = do
store <- (liftIO . readTVarIO) <$> rsTicketStore <$> ask
let mticket = S.filter (\st -> ticketId st == aticket) store
case toList mticket of
[ticket] -> checkTicket ticket hash
_ -> return Denied