#include #include #include #include #include #include "../util.hpp" #include "../sock/socket_session.hpp" #include "usr.hpp" #include "user_session_handler.hpp" namespace net = boost::asio; namespace beast = boost::beast; using tcp = net::ip::tcp; using error = boost::system::error_code; namespace usr { /** * This gets hit every time a client connects to HP via the public port (configured in contract config). */ void user_session_handler::on_connect(sock::socket_session *session) { std::cout << "User client connected " << session->address_ << ":" << session->port_ << std::endl; // As a soon as a user conntects, we issue them a challenge message. We remember the // challenge we issued and later verifies the user's response with it. std::string msg; std::string challengeb64; usr::create_user_challenge(msg, challengeb64); // We init the session unique id to associate with the challenge. session->init_uniqueid(); // Create an entry in pending_challenges for later tracking upon challenge response. usr::pending_challenges[session->uniqueid_] = challengeb64; // TODO: This needs to be reviewed to optimise passing the message. session->send(std::make_shared(msg)); // Set the challenge-issued flag to help later checks in on_message. session->flags_.set(util::SESSION_FLAG::USER_CHALLENGE_ISSUED); } /** * This gets hit every time we receive some data from a client connected to the HP public port. */ void user_session_handler::on_message(sock::socket_session *session, const std::string &message) { // First check whether this session is pending challenge. // Meaning we have previously issued a challenge to the client, if (session->flags_[util::SESSION_FLAG::USER_CHALLENGE_ISSUED]) { // The received message must be the challenge response. We need to verify it. auto itr = usr::pending_challenges.find(session->uniqueid_); if (itr != usr::pending_challenges.end()) { std::string userpubkey; std::string_view original_challenge = itr->second; if (usr::verify_user_challenge_response(userpubkey, message, original_challenge) == 0) { // Challenge verification successful. // Promote the connection from pending-challenges to authenticated users. session->flags_.reset(util::SESSION_FLAG::USER_CHALLENGE_ISSUED); // Clear challenge-issued flag session->flags_.set(util::SESSION_FLAG::USER_AUTHED); // Set the user-authed flag usr::pending_challenges.erase(session->uniqueid_); // Remove the stored challenge usr::add_user(session->uniqueid_, userpubkey); // Add the user to the global authed user list std::cout << "User connection " << session->uniqueid_ << " authenticated.\n"; return; } else { std::cout << "Challenge verification failed " << session->uniqueid_ << std::endl; } } } // Check whether this session belongs to an authenticated (challenge-verified) user. else if (session->flags_[util::SESSION_FLAG::USER_AUTHED]) { // Check whether this user is among authenticated users // and perform authenticated msg processing. auto itr = usr::users.find(session->uniqueid_); if (itr != usr::users.end()) { // This is an authed user. // Write the message to the user input pipe. SC will read from this pipe when it executes. const util::contract_user &user = itr->second; write(user.inpipe[1], message.data(), message.length()); std::cout << "User " << user.pubkeyb64 << " wrote " << message.length() << " bytes to contract input.\n"; return; } } // If for any reason we reach this point, we should drop the connection. session->close(); std::cout << "Dropped the user connection " << session->address_ << ":" << session->port_ << std::endl; } /** * This gets hit every time a client disconnects from the HP public port. */ void user_session_handler::on_close(sock::socket_session *session) { // Cleanup any resources related to this session. // Session is awaiting challenge response. if (session->flags_[util::SESSION_FLAG::USER_CHALLENGE_ISSUED]) { usr::pending_challenges.erase(session->uniqueid_); } // Session belongs to an authed user. else if (session->flags_[util::SESSION_FLAG::USER_AUTHED]) { usr::remove_user(session->uniqueid_); } std::cout << "User disconnected " << session->uniqueid_ << std::endl; } } // namespace usr