src/lib-imap-urlauth/imap-urlauth-backend.c

	imap-urlauth-backend.c revision 7b9197b917d6f546bfea70ba8a443e61de90242a
/* Copyright (c) 2013 Dovecot authors, see the included COPYING file */

#include "lib.h"
#include "buffer.h"
#include "hex-binary.h"
#include "randgen.h"
#include "mail-user.h"
#include "mail-storage.h"
#include "mailbox-list-iter.h"
#include "imap-urlauth-private.h"
#include "imap-urlauth-backend.h"

#define IMAP_URLAUTH_KEY MAILBOX_ATTRIBUTE_PREFIX_DOVECOT"imap-urlauth"

int imap_urlauth_backend_get_mailbox_key(struct mailbox *box, bool create,
                     unsigned char mailbox_key_r[IMAP_URLAUTH_KEY_LEN],
                     const char **error_r,
                     enum mail_error *error_code_r)
{
    struct mail_user *user = mail_storage_get_user(mailbox_get_storage(box));
    struct mail_attribute_value urlauth_key;
    const char *mailbox_key_hex = NULL;
    buffer_t key_buf;
    int ret;

    *error_r = "Internal server error";
    *error_code_r = MAIL_ERROR_TEMP;

    ret = mailbox_attribute_get(box, MAIL_ATTRIBUTE_TYPE_PRIVATE,
                    IMAP_URLAUTH_KEY, &urlauth_key);
    if (ret < 0)
        return -1;

    if (user->mail_debug) {
        i_debug("imap-urlauth: %skey found for mailbox %s",
            (ret > 0 ? "" : "no "), mailbox_get_vname(box));
    }

    if (ret == 0) {
        if (!create)
            return 0;

        /* create new key */
        random_fill(mailbox_key_r, IMAP_URLAUTH_KEY_LEN);
        mailbox_key_hex = binary_to_hex(mailbox_key_r,
                        IMAP_URLAUTH_KEY_LEN);
        ret = mailbox_attribute_set(box, MAIL_ATTRIBUTE_TYPE_PRIVATE,
                        IMAP_URLAUTH_KEY, mailbox_key_hex);
        if (ret < 0)
            return -1;
        if (user->mail_debug) {
            i_debug("imap-urlauth: created key for mailbox %s",
                mailbox_get_vname(box));
        }
    } else {
        /* read existing key */
        buffer_create_from_data(&key_buf, mailbox_key_r,
                    IMAP_URLAUTH_KEY_LEN);
        mailbox_key_hex = urlauth_key.value;
        if (strlen(mailbox_key_hex) != 2*IMAP_URLAUTH_KEY_LEN ||
            hex_to_binary(mailbox_key_hex, &key_buf) < 0 ||
            key_buf.used != IMAP_URLAUTH_KEY_LEN) {
            i_error("imap-urlauth: key found for mailbox %s is invalid",
                mailbox_get_vname(box));
            return -1;
        }
        memcpy(mailbox_key_r, key_buf.data, IMAP_URLAUTH_KEY_LEN);
    }
    return 1;
}

int imap_urlauth_backend_reset_mailbox_key(struct mailbox *box)
{
    return mailbox_attribute_unset(box, MAIL_ATTRIBUTE_TYPE_PRIVATE,
                       IMAP_URLAUTH_KEY) < 0 ? -1 : 1;
}

int imap_urlauth_backend_reset_all_keys(struct mail_user *user)
{
    const char *const patterns[] = { "*", NULL };
    struct mailbox_list_iterate_context *iter;
    const struct mailbox_info *info;
    struct mailbox *box;
    int ret = 0;

    iter = mailbox_list_iter_init_namespaces(user->namespaces, patterns,
                         MAIL_NAMESPACE_TYPE_MASK_ALL,
                         MAILBOX_LIST_ITER_NO_AUTO_BOXES |
                         MAILBOX_LIST_ITER_SKIP_ALIASES |
                         MAILBOX_LIST_ITER_RETURN_NO_FLAGS);
    while ((info = mailbox_list_iter_next(iter)) != NULL) {
        box = mailbox_alloc(info->ns->list, info->vname, 0);
        if (mailbox_attribute_unset(box, MAIL_ATTRIBUTE_TYPE_PRIVATE,
                        IMAP_URLAUTH_KEY) < 0)
            ret = -1;
        mailbox_free(&box);
    }
    if (mailbox_list_iter_deinit(&iter) < 0)
        ret = -1;
    return ret;
}