88 lines
2.1 KiB
Bash
Executable File
88 lines
2.1 KiB
Bash
Executable File
#!/bin/bash
|
|
# account.sh - account and session mgmt
|
|
|
|
|
|
# register(username, password)
|
|
function register() {
|
|
local username=$(echo -ne $(sed -E "s/ /_/g;s/\:/\-/g;s/\%/\\x/g" <<< "$1"))
|
|
|
|
if [[ $(grep "$username:" secret/users.dat) != '' ]]; then
|
|
reason="This user already exists!"
|
|
return 1
|
|
fi
|
|
|
|
local salt=$(dd if=/dev/urandom bs=256 count=1 | sha1sum | cut -c 1-16)
|
|
local hash=$(echo -n $2$salt | sha256sum | cut -c 1-64)
|
|
local token=$(dd if=/dev/urandom bs=32 count=1 | sha1sum | cut -c 1-40)
|
|
set_cookie_permanent "sh_session" $token
|
|
set_cookie_permanent "username" $username
|
|
|
|
echo "$username:$hash:$salt:$token" >> secret/users.dat
|
|
}
|
|
|
|
# login(username, password)
|
|
function login() {
|
|
local username=$(echo -ne $(sed -E 's/%/\\x/g' <<< "$1"))
|
|
IFS=':'
|
|
local user=($(grep -P "$username:" secret/users.dat))
|
|
unset IFS
|
|
if [[ $(echo -n $2${user[2]} | sha256sum | cut -c 1-64 ) == "${user[1]}" ]]; then
|
|
set_cookie_permanent "sh_session" "${user[3]}"
|
|
set_cookie_permanent "username" "$username"
|
|
return 0
|
|
else
|
|
remove_cookie "sh_session"
|
|
remove_cookie "username"
|
|
reason="Invalid credentials!!11"
|
|
return 1
|
|
fi
|
|
}
|
|
|
|
# login_simple(base64)
|
|
function login_simple() {
|
|
local data=$(base64 -d <<< "$3")
|
|
local password=$(sed -E 's/^(.*)\://' <<< "$data")
|
|
local login=$(sed -E 's/\:(.*)$//' <<< "$data")
|
|
|
|
IFS=':'
|
|
local user=($(grep "$login:" secret/users.dat))
|
|
unset IFS
|
|
if [[ $(echo -n $password${user[2]} | sha256sum | cut -c 1-64 ) == ${user[1]} ]]; then
|
|
r[authorized]=true
|
|
else
|
|
r[authorized]=false
|
|
fi
|
|
}
|
|
|
|
# logout()
|
|
function logout() {
|
|
remove_cookie "sh_session"
|
|
remove_cookie "username"
|
|
}
|
|
|
|
# session_verify(session)
|
|
function session_verify() {
|
|
if [[ $(grep ":$1" secret/users.dat) != '' && $1 != '' ]]; then
|
|
return 0
|
|
else
|
|
return 1
|
|
fi
|
|
}
|
|
|
|
# session_get_username(session)
|
|
function session_get_username() {
|
|
[[ "$1" == "" ]] && return
|
|
|
|
IFS=':'
|
|
local data=($(grep ":$1$" secret/users.dat))
|
|
unset IFS
|
|
echo ${data[0]}
|
|
}
|
|
|
|
# THIS FUNCTION IS DANGEROUS
|
|
# delete_account(username)
|
|
function delete_account() {
|
|
[[ "$1" == "" ]] && return
|
|
sed -i "s/^$1:.*//;/^$/d" secret/users.dat
|
|
}
|