/* ====================================================================
 * Copyright (c) 1995 The Apache Group.  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer. 
 *
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in
 *    the documentation and/or other materials provided with the
 *    distribution.
 *
 * 3. All advertising materials mentioning features or use of this
 *    software must display the following acknowledgment:
 *    "This product includes software developed by the Apache Group
 *    for use in the Apache HTTP server project (http://www.apache.org/)."
 *
 * 4. The names "Apache Server" and "Apache Group" must not be used to
 *    endorse or promote products derived from this software without
 *    prior written permission.
 *
 * 5. Redistributions of any form whatsoever must retain the following
 *    acknowledgment:
 *    "This product includes software developed by the Apache Group
 *    for use in the Apache HTTP server project (http://www.apache.org/)."
 *
 * THIS SOFTWARE IS PROVIDED BY THE APACHE GROUP ``AS IS'' AND ANY
 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE APACHE GROUP OR
 * IT'S CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 * OF THE POSSIBILITY OF SUCH DAMAGE.
 * ====================================================================
 *
 * This software consists of voluntary contributions made by many
 * individuals on behalf of the Apache Group and was originally based
 * on public domain software written at the National Center for
 * Supercomputing Applications, University of Illinois, Urbana-Champaign.
 * For more information on the Apache Group and the Apache HTTP server
 * project, please see <http://www.apache.org/>.
 *
 */


/*
 * http_auth: authentication
 * 
 * Rob McCool & Brian Behlendorf.
 * 
 * Adapted to Shambhala by rst.
 *
 * Version 0.5 May 1996
 *
 * Brutally raped by Dirk.vanGulik@jrc.it to
 * 
 * Adapted to allow anonymous logins, just like with Anon-FTP, when
 * one gives the magic user name 'anonymous' and ones email address
 * as the password.
 *
 * Just add the following tokes to your <directory> setup:
 * 
 * Anonymous 			magic-user-id [magic-user-id]...
 *
 * Anonymous_MustGiveEmail	[ on | off ] default = off
 * Anonymous_LogEmail		[ on | off ] default = on
 * Anonymous_VerifyEmail	[ on | off ] default = off
 * Anonymous_NoUserId		[ on | off ] default = off
 * Anonymous_Authorative        [ on | off ] default = off
 *
 * The magic user id is something like 'anonymous', it is NOT case sensitive. 
 * 
 * The MustGiveEmail flag can be used to force users to enter something
 * in the password field (like an email address). Default is off.
 *
 * Furthermore the 'NoUserID' flag can be set to allow completely empty
 * usernames in as well; this can be is convenient as a single return
 * in broken GUIs like W95 is often given by the user. The Default is off.
 *
 * Dirk.vanGulik@jrc.it; http://ewse.ceo.org; http://me-www.jrc.it/~dirkx
 * 
 */

#include "httpd.h"
#include "http_config.h"
#include "http_core.h"
#include "http_log.h"
#include "http_protocol.h"

typedef struct auth_anon {
    char *password;
    struct auth_anon * next;
    } auth_anon;

typedef struct  {

    auth_anon *auth_anon_passwords;
    int   auth_anon_nouserid;
    int   auth_anon_logemail;
    int   auth_anon_verifyemail;
    int   auth_anon_mustemail;
    int   auth_anon_authorative;

} anon_auth_config_rec;

void *create_anon_auth_dir_config (pool *p, char *d)
{
    anon_auth_config_rec * sec = (anon_auth_config_rec *) 
	pcalloc (p, sizeof(anon_auth_config_rec));

    if (!sec) return NULL; /* no memory... */

    /* just to illustrate the defaults really. */
    sec -> auth_anon_passwords 		=NULL;

    sec -> auth_anon_nouserid 		=0;
    sec -> auth_anon_logemail		=1;
    sec -> auth_anon_verifyemail	=0;
    sec -> auth_anon_mustemail		=1;
    sec -> auth_anon_authorative        =0;
    return sec;
}

char *anon_set_passwd_flag (cmd_parms *cmd, 
	anon_auth_config_rec *sec, int arg) {
    sec->auth_anon_mustemail=arg;
    return NULL;
}

char *anon_set_userid_flag (cmd_parms *cmd, 
	anon_auth_config_rec *sec, int arg) {
    sec->auth_anon_nouserid=arg;
    return NULL;
}
char *anon_set_logemail_flag (cmd_parms *cmd, 
	anon_auth_config_rec *sec, int arg) {
    sec->auth_anon_logemail=arg;
    return NULL;
}
char *anon_set_verifyemail_flag (cmd_parms *cmd, 
	anon_auth_config_rec *sec, int arg) {
    sec->auth_anon_verifyemail=arg;
    return NULL;
}
char *anon_set_authorative_flag (cmd_parms *cmd, 
	anon_auth_config_rec *sec, int arg) {
    sec->auth_anon_authorative=arg;
    return NULL;
}

char *anon_set_string_slots (cmd_parms *cmd, 
	anon_auth_config_rec *sec, char *arg) {
  
    auth_anon 	* first;

    if (!(*arg))
      return "Anonymous string cannot be empty, use Anonymous_NoUserId instead";

    /* squeeze in a record */
    first = sec->auth_anon_passwords;
       
    if (
	(!(sec->auth_anon_passwords=(auth_anon *) palloc(cmd -> pool, sizeof(auth_anon)))) ||
	(!(sec->auth_anon_passwords->password = pstrdup(cmd -> pool, arg)))
       ) return "Failed to claim memory for an anonymous password...";

    /* and repair the next */
    sec->auth_anon_passwords->next = first;

    return NULL;
}

command_rec anon_auth_cmds[] = {
{ "Anonymous", anon_set_string_slots,
    NULL,OR_AUTHCFG, ITERATE, NULL },
{ "Anonymous_MustGiveEmail", anon_set_passwd_flag, NULL, OR_AUTHCFG, FLAG, 
	"Limited to 'on' or 'off'" },
{ "Anonymous_NoUserId", anon_set_userid_flag, NULL, OR_AUTHCFG, FLAG, 
	"Limited to 'on' or 'off'" },
{ "Anonymous_VerifyEmail", anon_set_verifyemail_flag, NULL, OR_AUTHCFG, FLAG, 
	"Limited to 'on' or 'off'" },
{ "Anonymous_LogEmail", anon_set_logemail_flag, NULL, OR_AUTHCFG, FLAG, 
	"Limited to 'on' or 'off'" },
{ "Anonymous_Authorative", anon_set_authorative_flag, NULL, OR_AUTHCFG, FLAG, 
	"Limited to 'on' or 'off'" },

{ NULL }
};

module anon_auth_module;

int anon_authenticate_basic_user (request_rec *r)
{
    anon_auth_config_rec *sec =
      (anon_auth_config_rec *)get_module_config (r->per_dir_config,
						&anon_auth_module);
    conn_rec *c = r->connection;
    char *send_pw;
    char errstr[MAX_STRING_LEN];
    int res=DECLINED;
    

    if ((res=get_basic_auth_pw (r,&send_pw)))
	return res;

    /* Ignore if we are not configured */
    if (!sec->auth_anon_passwords) return DECLINED;

    /* Do we allow an empty userID and/or is it the magic one
     */
    
    if ( (!(c->user[0])) && (sec->auth_anon_nouserid) ) {
      res=OK;
    } else {
      auth_anon *p=sec->auth_anon_passwords;
      res=DECLINED;
      while ((res == DECLINED) && (p !=NULL)) {
	if (!(strcasecmp(c->user,p->password)))
	  res=OK;
	p=p->next;
      };
    };
    if (
	/* username is OK */
	(res == OK) &&
	/* password been filled out ? */ 
	( (!sec->auth_anon_mustemail) || strlen(send_pw)  ) &&
	/* does the password look like an email address ? */
	( (!sec->auth_anon_verifyemail) || 
	     (strpbrk("@",send_pw) != NULL) || 
	     (strpbrk(".",send_pw) != NULL) 
	  ) 
	) {
      if (sec->auth_anon_logemail) {
	sprintf(errstr,"Anonymous: Passwd <%s> Accepted", 
			send_pw ? send_pw : "\'none\'");
	log_error (errstr, r->server );
      };
      return OK;
    } else {
        if (sec->auth_anon_authorative) {
	sprintf(errstr,"Anonymous: Authorative, Passwd <%s> not accepted",
		send_pw ? send_pw : "\'none\'");
	log_error(errstr,r->server);
	return AUTH_REQUIRED;
	};

	return DECLINED;
    };
     

   return DECLINED;
}
    
int check_anon_access (request_rec *r) {

    conn_rec *c = r->connection;
    anon_auth_config_rec *sec =
      (anon_auth_config_rec *)get_module_config (r->per_dir_config,
						&anon_auth_module);
	
/*
    if (!sec->auth_anon) return DECLINED;

    if ( strcasecmp(r->connection->user,sec->auth_anon ))
     	return DECLINED;

   return OK;
*/
   return DECLINED;
}
 

module anon_auth_module = {
   STANDARD_MODULE_STUFF,
   NULL,			/* initializer */
   create_anon_auth_dir_config,	/* dir config creater */
   NULL,			/* dir merger ensure strictness */
   NULL,			/* server config */
   NULL,			/* merge server config */
   anon_auth_cmds,		/* command table */
   NULL,			/* handlers */
   NULL,			/* filename translation */
   anon_authenticate_basic_user,/* check_user_id */
   check_anon_access,		/* check auth */
   NULL,			/* check access */
   NULL,			/* type_checker */
   NULL,			/* fixups */
   NULL				/* logger */
};