From 2b091fa7070483c59fe82a1991bc3e28c0b3b932 Mon Sep 17 00:00:00 2001
From: Nathan Woodburn <github@nathan.woodburn.au>
Date: Fri, 7 Mar 2025 15:14:34 +1100
Subject: [PATCH] feat: Add signature based login
---
main.py | 52 ++++++++++++++++++++++++++++++++++------------------
1 file changed, 34 insertions(+), 18 deletions(-)
diff --git a/main.py b/main.py
index eb8909d..24b43da 100644
--- a/main.py
+++ b/main.py
@@ -512,29 +512,45 @@ def auth_get():
if 'username' not in request.args:
return redirect('/?error=Failed to login&reason=No username')
- if 'token' not in request.args:
+ username = request.args['username']
+
+ if 'token' not in request.args and 'signature' not in request.args:
return redirect('/?error=Failed to login&reason=No token')
- username = request.args['username']
- token = request.args['token']
+ if 'token' in request.args:
+ token = request.args['token']
- # Check if user is valid
- r = requests.get(f'https://login.hns.au/auth/user?token={token}')
- if r.status_code != 200:
- print(r.text,flush=True)
- return redirect('/?error=Failed to login&reason=Failed to connect to HNS Login')
- try:
+ # Check if user is valid
+ r = requests.get(f'https://login.hns.au/auth/user?token={token}')
+ if r.status_code != 200:
+ print(r.text,flush=True)
+ return redirect('/?error=Failed to login&reason=Failed to connect to HNS Login')
+ try:
+ r = r.json()
+ except:
+ print(r.text,flush=True)
+ return redirect('/?error=Failed to login&reason=Failed to connect to HNS Login')
+
+ if 'error' in r:
+ return redirect('/?error=Failed to login&reason=' + r['error'])
+
+ if r['username'] != username:
+ return redirect('/?error=Failed to login&reason=Username mismatch')
+
+ else: # Signature based login
+ signature = request.args['signature']
+ r = requests.post(f'http://x:{HSD_API}@{HSD_IP}:{HSD_PORT}', json={
+ 'method': 'verifymessagewithname',
+ 'params': [username, signature, "hns-links"]
+ })
+ if r.status_code != 200:
+ return jsonify({'error': 'Failed to connect to HSD',"success":False}), 500
r = r.json()
- except:
- print(r.text,flush=True)
- return redirect('/?error=Failed to login&reason=Failed to connect to HNS Login')
+ if 'result' not in r:
+ return jsonify({'error': 'Failed to verify signature',"success":False}), 400
+ if r['result'] != True:
+ return jsonify({'error': 'Failed to verify signature',"success":False}), 400
- if 'error' in r:
- return redirect('/?error=Failed to login&reason=' + r['error'])
-
- if r['username'] != username:
- return redirect('/?error=Failed to login&reason=Username mismatch')
-
auth_cookie = secrets.token_hex(12 // 2)
cookies.append({'name': username, 'cookie': auth_cookie})