gitinfo/plugins/weblogin.pm

use Digest::SHA qw(sha1_hex);
{
	on_load => sub {
		my $heap = \%BotIrc::heap;
		$heap->{websessions} = {};
		my $ws = $heap->{websessions};
		$heap->{websessions_cleanup} = sub {
			for (keys %$ws) {
				next if time() - $ws->{$_}{last_used} < $BotIrc::config->{http_sessionpurge}
			}
		};
	},
	before_unload => sub {
		delete $BotIrc::heap{websessions};
	},
	control_commands => {
		login => sub {
			my ($client, $data, @args) = @_;
			my $heap = $BotIrc::heap{websessions};
			if (!exists $heap->{$args[0]}) {
				BotCtl::send($client, "invalid");
				return;
			}
			my $session = $heap->{$args[0]};
			if (time() - $session->{last_used} > $BotIrc::config->{http_sessionexpire}) {
				BotCtl::send($client, "expired");
				delete $heap->{$args[0]};
				return;
			}
			BotCtl::set_level($data, $session->{username});
			$data->{session_id} = $args[0];
			$session->{last_used} = time();
			BotCtl::send($client, "ok", $session->{username});
		},
		logout => sub {
			if (!exists $data->{session_id}) {
				BotCtl::send($client, "invalid");
				return;
			}
			delete $heap->{$data->{session_id}};
			delete $data->{session_id};
			BotCtl::set_level($data, "!guest");
			BotCtl::send($client, "ok");
		},
	},
	irc_commands => {
		weblogin => sub {
			my ($source, $targets, $args, $account) = @_;
			BotIrc::check_ctx(authed => 1, wisdom_public => 0) or return;

			# evil!
			my $auth = sha1_hex("$account:$$:".int(rand(1_000_000)).":".time());
			$BotIrc::heap{websessions}{$auth} = {
				username	=> lc($account),
				last_used	=> time()
			};
			BotIrc::send_wisdom("Please go to $BotIrc::config->{http_loginurl}$auth to log in (session cookies must be allowed).");
		},
	},
};