1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586 |
- /*
- * Copyright (c) Contributors, http://opensimulator.org/
- * See CONTRIBUTORS.TXT for a full list of copyright holders.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted provided that the following conditions are met:
- * * Redistributions of source code must retain the above copyright
- * notice, this list of conditions and the following disclaimer.
- * * Redistributions in binary form must reproduce the above copyright
- * notice, this list of conditions and the following disclaimer in the
- * documentation and/or other materials provided with the distribution.
- * * Neither the name of the OpenSimulator Project nor the
- * names of its contributors may be used to endorse or promote products
- * derived from this software without specific prior written permission.
- *
- * THIS SOFTWARE IS PROVIDED BY THE DEVELOPERS ``AS IS'' AND ANY
- * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
- * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
- * DISCLAIMED. IN NO EVENT SHALL THE CONTRIBUTORS BE LIABLE FOR ANY
- * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
- * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
- * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
- * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
- * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
- * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
- */
- using System;
- using System.Collections.Generic;
- using OpenMetaverse;
- using OpenSim.Services.Interfaces;
- using log4net;
- using Nini.Config;
- using System.Reflection;
- using OpenSim.Data;
- using OpenSim.Framework;
- using OpenSim.Framework.Console;
- namespace OpenSim.Services.AuthenticationService
- {
- // Generic Authentication service used for identifying
- // and authenticating principals.
- // Principals may be clients acting on users' behalf,
- // or any other components that need
- // verifiable identification.
- //
- public class PasswordAuthenticationService :
- AuthenticationServiceBase, IAuthenticationService
- {
- private static readonly ILog m_log =
- LogManager.GetLogger(
- MethodBase.GetCurrentMethod().DeclaringType);
-
- public PasswordAuthenticationService(IConfigSource config) :
- base(config)
- {
- }
- public string Authenticate(UUID principalID, string password, int lifetime)
- {
- AuthenticationData data = m_Database.Get(principalID);
- if (data != null && data.Data != null)
- {
- if (!data.Data.ContainsKey("passwordHash") ||
- !data.Data.ContainsKey("passwordSalt"))
- {
- return String.Empty;
- }
- string hashed = Util.Md5Hash(password + ":" +
- data.Data["passwordSalt"].ToString());
- m_log.DebugFormat("[PASS AUTH]: got {0}; hashed = {1}; stored = {2}", password, hashed, data.Data["passwordHash"].ToString());
- if (data.Data["passwordHash"].ToString() == hashed)
- {
- return GetToken(principalID, lifetime);
- }
- }
- m_log.DebugFormat("[AUTH SERVICE]: PrincipalID {0} or its data not found", principalID);
- return String.Empty;
- }
- }
- }
|