Method verifyToken

plugins/plugin_utils/plugin_HTTP.cpp:337–397

}

bool BZFSHTTPAuth::verifyToken(const HTTPRequest& request, HTTPReply& reply) {
  // build up the groups list
  std::string token, user;
  request.getParam("token", token);
  request.getParam("user", user);

  std::vector<std::string> groups;

  std::map<int, std::vector<std::string> >::iterator itr = authLevels.begin();

  while (itr != authLevels.end()) {
    for (size_t i = 0; i < itr->second.size(); i++) {
      std::string& perm = itr->second[i];

      std::vector<std::string> groupsWithPerm;

      if (compare_nocase(perm, "ADMIN") == 0) {
        groupsWithPerm = findGroupsWithAdmin();
      }
      else {
        groupsWithPerm = findGroupsWithPerm(perm);
      }

      // only add groups that are not in the list yet
      for (size_t g = 0; g < groupsWithPerm.size(); g++) {
        if (std::find(groups.begin(), groups.end(), groupsWithPerm[g]) == groups.end()) {
          groups.push_back(groupsWithPerm[g]);
        }
      }
    }
    itr++;
  }

  PendingTokenTask* task = new PendingTokenTask;

  if (!user.size() || !token.size()) {
    reply.body += "Invalid response";
    reply.docType = HTTPReply::eText;
    return true;
  }
  task->requestID = request.requestID;
  task->URL = "http://my.bzflag.org/db/";
  task->URL += "?action=CHECKTOKENS&checktokens=" + url_encode(user);
  if (!ipIsLocal(request.ip)) {
    task->URL += "@" + request.ip;
  }
  task->URL += "%3D" + token;

  task->URL += "&groups=";
  for (size_t g = 0; g < groups.size(); g++) {
    task->URL += groups[g];
    if (g + 1 < groups.size()) {
      task->URL += "%0D%0A";
    }
  }

  // give the task to bzfs and let it do it, when it's done it'll be processed
  bz_addURLJob(task->URL.c_str(), task);