/* Copyright (C) 2002-2003 Timo Sirainen */

#include "config.h"
#undef HAVE_CONFIG_H

#ifdef PASSDB_PASSWD_FILE

#include "common.h"
#include "passdb.h"
#include "passwd-file.h"

#include "hex-binary.h"
#include "md5.h"
#include "mycrypt.h"

struct passwd_file *passdb_pwf = NULL;

static enum passdb_result
passwd_file_verify_plain(const char *user, const char *realm,
			 const char *password)
{
	struct passwd_user *pu;
	unsigned char digest[16];
	const char *str;

	pu = passwd_file_lookup_user(passdb_pwf, user, realm);
	if (pu == NULL)
		return PASSDB_RESULT_USER_UNKNOWN;

	switch (pu->password_type) {
	case PASSWORD_NONE:
		return PASSDB_RESULT_PASSWORD_MISMATCH;

	case PASSWORD_DES:
		if (strcmp(mycrypt(password, pu->password), pu->password) == 0)
			return PASSDB_RESULT_OK;

		if (verbose) {
			i_info("passwd-file(%s): DES password mismatch",
			       pu->user_realm);
		}
		return PASSDB_RESULT_PASSWORD_MISMATCH;

	case PASSWORD_MD5:
		md5_get_digest(password, strlen(password), digest);
		str = binary_to_hex(digest, sizeof(digest));

		if (strcmp(str, pu->password) == 0)
			return PASSDB_RESULT_OK;

		if (verbose) {
			i_info("passwd-file(%s): MD5 password mismatch",
			       pu->user_realm);
		}
		return PASSDB_RESULT_PASSWORD_MISMATCH;

	case PASSWORD_DIGEST_MD5:
		/* user:realm:passwd */
		str = t_strconcat(t_strcut(pu->user_realm, '@'), ":",
				  pu->realm == NULL ? "" : pu->realm,  ":",
				  password, NULL);

		md5_get_digest(str, strlen(str), digest);
		str = binary_to_hex(digest, sizeof(digest));

		if (strcmp(str, pu->password) == 0)
			return PASSDB_RESULT_OK;

		if (verbose) {
			i_info("passwd-file(%s): DIGEST-MD5 password mismatch",
			       pu->user_realm);
		}
		return PASSDB_RESULT_PASSWORD_MISMATCH;
	}

	i_unreached();
}

static const char *
passwd_file_lookup_credentials(const char *user, const char *realm,
			       enum passdb_credentials credentials)
{
	struct passwd_user *pu;

	pu = passwd_file_lookup_user(passdb_pwf, user, realm);
	if (pu == NULL)
		return NULL;

	if (pu->password_type == PASSWORD_NONE) {
		if (verbose)
			i_info("passwd-file(%s): No password", pu->user_realm);
		return NULL;
	}

	switch (credentials) {
	case PASSDB_CREDENTIALS_DIGEST_MD5:
		if (pu->password_type == PASSWORD_DIGEST_MD5)
			return pu->password;

		if (verbose) {
			i_info("passwd-file(%s): No DIGEST-MD5 password",
			       pu->user_realm);
		}
		return NULL;
	default:
		if (verbose) {
			i_info("passwd-file(%s): Unsupported credentials %u",
			       pu->user_realm, (unsigned int)credentials);
		}
		return NULL;
	}
}

static void passwd_file_init(const char *args)
{
	if (userdb_pwf != NULL && strcmp(userdb_pwf->path, args) == 0) {
		passdb_pwf = userdb_pwf;
                passdb_pwf->refcount++;
	} else {
		passdb_pwf = passwd_file_parse(args);
	}
}

static void passwd_file_deinit(void)
{
	passwd_file_unref(passdb_pwf);
}

struct passdb_module passdb_passwd_file = {
	passwd_file_init,
	passwd_file_deinit,

	passwd_file_verify_plain,
	passwd_file_lookup_credentials
};

#endif