138 lines
5.0 KiB
Java
138 lines
5.0 KiB
Java
/*
|
|
* mxisd - Matrix Identity Server Daemon
|
|
* Copyright (C) 2017 Maxime Dor
|
|
*
|
|
* https://max.kamax.io/
|
|
*
|
|
* This program is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU Affero General Public License as
|
|
* published by the Free Software Foundation, either version 3 of the
|
|
* License, or (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU Affero General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Affero General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
package io.kamax.mxisd.backend.ldap;
|
|
|
|
import io.kamax.mxisd.config.MatrixConfig;
|
|
import io.kamax.mxisd.config.ldap.LdapConfig;
|
|
import io.kamax.mxisd.exception.InternalServerError;
|
|
import io.kamax.mxisd.lookup.SingleLookupReply;
|
|
import io.kamax.mxisd.lookup.SingleLookupRequest;
|
|
import io.kamax.mxisd.lookup.ThreePidMapping;
|
|
import io.kamax.mxisd.lookup.provider.IThreePidProvider;
|
|
import org.apache.directory.api.ldap.model.cursor.CursorException;
|
|
import org.apache.directory.api.ldap.model.cursor.CursorLdapReferralException;
|
|
import org.apache.directory.api.ldap.model.cursor.EntryCursor;
|
|
import org.apache.directory.api.ldap.model.entry.Entry;
|
|
import org.apache.directory.api.ldap.model.exception.LdapException;
|
|
import org.apache.directory.api.ldap.model.message.SearchScope;
|
|
import org.apache.directory.ldap.client.api.LdapConnection;
|
|
import org.slf4j.Logger;
|
|
import org.slf4j.LoggerFactory;
|
|
import org.springframework.stereotype.Component;
|
|
|
|
import java.io.IOException;
|
|
import java.util.ArrayList;
|
|
import java.util.List;
|
|
import java.util.Optional;
|
|
|
|
@Component
|
|
public class LdapThreePidProvider extends LdapGenericBackend implements IThreePidProvider {
|
|
|
|
private Logger log = LoggerFactory.getLogger(LdapThreePidProvider.class);
|
|
|
|
public LdapThreePidProvider(LdapConfig cfg, MatrixConfig mxCfg) {
|
|
super(cfg, mxCfg);
|
|
}
|
|
|
|
@Override
|
|
public boolean isEnabled() {
|
|
return getCfg().isEnabled();
|
|
}
|
|
|
|
@Override
|
|
public boolean isLocal() {
|
|
return true;
|
|
}
|
|
|
|
@Override
|
|
public int getPriority() {
|
|
return 20;
|
|
}
|
|
|
|
private Optional<String> lookup(LdapConnection conn, String medium, String value) {
|
|
Optional<String> queryOpt = getCfg().getIdentity().getQuery(medium);
|
|
if (!queryOpt.isPresent()) {
|
|
log.warn("{} is not a configured 3PID type for LDAP lookup", medium);
|
|
return Optional.empty();
|
|
}
|
|
|
|
String searchQuery = queryOpt.get().replaceAll(getCfg().getIdentity().getToken(), value);
|
|
try (EntryCursor cursor = conn.search(getBaseDn(), searchQuery, SearchScope.SUBTREE, getUidAtt())) {
|
|
while (cursor.next()) {
|
|
Entry entry = cursor.get();
|
|
log.info("Found possible match, DN: {}", entry.getDn().getName());
|
|
|
|
Optional<String> data = getAttribute(entry, getUidAtt());
|
|
if (!data.isPresent()) {
|
|
continue;
|
|
}
|
|
|
|
log.info("DN {} is a valid match", entry.getDn().getName());
|
|
return Optional.of(buildMatrixIdFromUid(data.get()));
|
|
}
|
|
} catch (CursorLdapReferralException e) {
|
|
log.warn("3PID {} is only available via referral, skipping", value);
|
|
} catch (IOException | LdapException | CursorException e) {
|
|
throw new InternalServerError(e);
|
|
}
|
|
|
|
return Optional.empty();
|
|
}
|
|
|
|
@Override
|
|
public Optional<SingleLookupReply> find(SingleLookupRequest request) {
|
|
log.info("Performing LDAP lookup {} of type {}", request.getThreePid(), request.getType());
|
|
|
|
try (LdapConnection conn = getConn()) {
|
|
bind(conn);
|
|
return lookup(conn, request.getType(), request.getThreePid()).map(id -> new SingleLookupReply(request, id));
|
|
} catch (LdapException | IOException e) {
|
|
throw new InternalServerError(e);
|
|
}
|
|
}
|
|
|
|
@Override
|
|
public List<ThreePidMapping> populate(List<ThreePidMapping> mappings) {
|
|
log.info("Looking up {} mappings", mappings.size());
|
|
List<ThreePidMapping> mappingsFound = new ArrayList<>();
|
|
|
|
try (LdapConnection conn = getConn()) {
|
|
bind(conn);
|
|
|
|
for (ThreePidMapping mapping : mappings) {
|
|
try {
|
|
lookup(conn, mapping.getMedium(), mapping.getValue()).ifPresent(id -> {
|
|
mapping.setMxid(id);
|
|
mappingsFound.add(mapping);
|
|
});
|
|
} catch (IllegalArgumentException e) {
|
|
log.warn("{} is not a supported 3PID type for LDAP lookup", mapping.getMedium());
|
|
}
|
|
}
|
|
} catch (LdapException | IOException e) {
|
|
throw new InternalServerError(e);
|
|
}
|
|
|
|
return mappingsFound;
|
|
}
|
|
|
|
}
|