akkoma/lib/pleroma/web/mongooseim/mongoose_im_controller.ex

62 lines
1.6 KiB
Elixir
Raw Normal View History

# Pleroma: A lightweight social networking server
2020-03-03 22:44:49 +00:00
# Copyright © 2017-2020 Pleroma Authors <https://pleroma.social/>
# SPDX-License-Identifier: AGPL-3.0-only
defmodule Pleroma.Web.MongooseIM.MongooseIMController do
use Pleroma.Web, :controller
alias Comeonin.Pbkdf2
alias Pleroma.Plugs.RateLimiter
alias Pleroma.Repo
2019-05-17 16:32:30 +00:00
alias Pleroma.User
2019-11-11 12:13:06 +00:00
plug(RateLimiter, [name: :authentication] when action in [:user_exists, :check_password])
plug(RateLimiter, [name: :authentication, params: ["user"]] when action == :check_password)
def user_exists(conn, %{"user" => username}) do
with %User{} <- Repo.get_by(User, nickname: username, local: true) do
conn
|> json(true)
else
_ ->
conn
|> put_status(:not_found)
|> json(false)
end
end
def check_password(conn, %{"user" => username, "pass" => password}) do
2020-04-27 15:55:33 +00:00
user = Repo.get_by(User, nickname: username, local: true)
case User.account_status(user) do
:deactivated ->
conn
2020-04-27 15:55:33 +00:00
|> put_status(:not_found)
|> json(false)
2020-04-27 15:55:33 +00:00
:confirmation_pending ->
conn
|> put_status(:not_found)
|> json(false)
2020-04-27 15:55:33 +00:00
_ ->
with %User{password_hash: password_hash} <-
user,
true <- Pbkdf2.checkpw(password, password_hash) do
conn
|> json(true)
else
false ->
conn
|> put_status(:forbidden)
|> json(false)
_ ->
conn
|> put_status(:not_found)
|> json(false)
end
end
end
end