src/core/http-conn.c

   1 /**
   2  * @file http-conn.c
   3  *
   4  * pidgin-sipe
   5  *
   6  * Copyright (C) 2010 SIPE Project <http://sipe.sourceforge.net/>
   7  * Copyright (C) 2009 pier11 <pier11@operamail.com>
   8  *
   9  *
  10  * This program is free software; you can redistribute it and/or modify
  11  * it under the terms of the GNU General Public License as published by
  12  * the Free Software Foundation; either version 2 of the License, or
  13  * (at your option) any later version.
  14  *
  15  * This program is distributed in the hope that it will be useful,
  16  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  17  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  18  * GNU General Public License for more details.
  19  *
  20  * You should have received a copy of the GNU General Public License
  21  * along with this program; if not, write to the Free Software
  22  * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
  23  */
  24
  25 /**
  26  * Operates with HTTPS connection.
  27  * Support Negotiate (Windows only) and NTLM authentications, redirect, cookie, GET/POST.
  28 */
  29
  30 #ifdef HAVE_CONFIG_H
  31 #include "config.h"
  32 #endif
  33
  34 #include <stdlib.h>
  35 #include <string.h>
  36
  37 #include <glib.h>
  38
  39 #include "http-conn.h"
  40 #include "sipmsg.h"
  41 #include "sip-sec.h"
  42 #include "sipe-backend.h"
  43 #include "sipe-core.h"
  44 #include "sipe-core-private.h"
  45 #include "sipe-utils.h"
  46
  47 /**
  48  * HTTP header
  49  * @param method (%s)           Ex.: GET or POST
  50  * @param url (%s)              Ex.: /EWS/Exchange.asmx
  51  * @param host (%s)             Ex.: cosmo-ocs-r2.cosmo.local
  52  */
  53 #define HTTP_CONN_HEADER \
  54 "%s %s HTTP/1.1\r\n"\
  55 "Host: %s\r\n"\
  56 "User-Agent: Sipe/" PACKAGE_VERSION "\r\n"
  57
  58
  59 struct http_conn_struct {
  60         struct sipe_core_public *sipe_public;
  61
  62         /* GET, POST */
  63         char *method;
  64         guint conn_type;
  65         gboolean allow_redirect;
  66         char *host;
  67         guint port;
  68         char *url;
  69         char *body;
  70         char *content_type;
  71         HttpConnAuth *auth;
  72         HttpConnCallback callback;
  73         void *data;
  74
  75         struct sipe_transport_connection *conn;
  76
  77         SipSecContext sec_ctx;
  78         int retries;
  79
  80         HttpSession *http_session;
  81
  82         /* if server sends "Connection: close" header */
  83         gboolean closed;
  84         HttpConn* do_close;
  85 };
  86 #define HTTP_CONN ((HttpConn *) conn->user_data)
  87
  88 struct http_session_struct {
  89         char *cookie;
  90 };
  91
  92 static HttpConn*
  93 http_conn_clone(HttpConn* http_conn)
  94 {
  95         HttpConn *res = g_new0(HttpConn, 1);
  96
  97         res->http_session = http_conn->http_session;
  98         res->method = g_strdup(http_conn->method);
  99         res->conn_type = http_conn->conn_type;
 100         res->allow_redirect = http_conn->allow_redirect;
 101         res->host = g_strdup(http_conn->host);
 102         res->port = http_conn->port;
 103         res->url = g_strdup(http_conn->url);
 104         res->body = g_strdup(http_conn->body);
 105         res->content_type = g_strdup(http_conn->content_type);
 106         res->auth = http_conn->auth;
 107         res->callback = http_conn->callback;
 108         res->data = http_conn->data;
 109
 110         res->conn = http_conn->conn;
 111         res->sec_ctx = http_conn->sec_ctx;
 112         res->retries = http_conn->retries;
 113
 114         res->do_close = NULL;
 115
 116         return res;
 117 }
 118
 119 void
 120 http_conn_free(HttpConn* http_conn)
 121 {
 122         if (!http_conn) return;
 123
 124         /* don't free "http_conn->http_session" - client should do */
 125         g_free(http_conn->method);
 126         g_free(http_conn->host);
 127         g_free(http_conn->url);
 128         g_free(http_conn->body);
 129         g_free(http_conn->content_type);
 130
 131         if (http_conn->sec_ctx) {
 132                 sip_sec_destroy_context(http_conn->sec_ctx);
 133         }
 134
 135         g_free(http_conn);
 136 }
 137
 138 gboolean
 139 http_conn_is_closed(HttpConn *http_conn)
 140 {
 141         return http_conn->closed;
 142 }
 143
 144 HttpSession *
 145 http_conn_session_create()
 146 {
 147         HttpSession *res = g_new0(HttpSession, 1);
 148         return res;
 149 }
 150
 151 void
 152 http_conn_session_free(HttpSession *http_session)
 153 {
 154         if (!http_session) return;
 155
 156         g_free(http_session->cookie);
 157         g_free(http_session);
 158 }
 159
 160 void
 161 http_conn_auth_free(struct http_conn_auth* auth)
 162 {
 163         g_free(auth->domain);
 164         g_free(auth->user);
 165         g_free(auth->password);
 166         g_free(auth);
 167 }
 168
 169 void
 170 http_conn_set_close(HttpConn* http_conn)
 171 {
 172         http_conn->do_close = http_conn;
 173 }
 174
 175 static void
 176 http_conn_close(HttpConn *http_conn, const char *message)
 177 {
 178         SIPE_DEBUG_INFO("http_conn_close: closing http connection: %s", message ? message : "");
 179
 180         g_return_if_fail(http_conn);
 181
 182         sipe_backend_transport_disconnect(http_conn->conn);
 183         http_conn_free(http_conn);
 184 }
 185
 186 /**
 187  * Extracts host, port and relative url
 188  * Ex. url: https://machine.domain.Contoso.com/EWS/Exchange.asmx
 189  *
 190  * Allocates memory, must be g_free'd.
 191  */
 192 static void
 193 http_conn_parse_url(const char *url,
 194                     char **host,
 195                     guint *port,
 196                     char **rel_url)
 197 {
 198         char **parts = g_strsplit(url, "://", 2);
 199         char *no_proto;
 200         guint port_tmp;
 201         char *tmp;
 202         char *host_port;
 203
 204         if(!parts) {
 205                 return;
 206         } else if(!parts[0]) {
 207                 g_strfreev(parts);
 208                 return;
 209         }
 210
 211         no_proto = parts[1] ? g_strdup(parts[1]) : g_strdup(parts[0]);
 212         port_tmp = sipe_strequal(parts[0], "https") ? 443 : 80;
 213         g_strfreev(parts);
 214
 215         if(!no_proto) {
 216                 return;
 217         }
 218
 219         tmp = strstr(no_proto, "/");
 220         if (tmp && rel_url) *rel_url = g_strdup(tmp);
 221         host_port = tmp ? g_strndup(no_proto, tmp - no_proto) : g_strdup(no_proto);
 222         g_free(no_proto);
 223
 224         if(!host_port) {
 225                 return;
 226         }
 227
 228         parts = g_strsplit(host_port, ":", 2);
 229
 230         if(parts) {
 231                 if (host) *host = g_strdup(parts[0]);
 232                 if(parts[0]) {
 233                         port_tmp = parts[1] ? (guint) atoi(parts[1]) : port_tmp;
 234                 }
 235                 if (port) *port = port_tmp;
 236                 g_strfreev(parts);
 237         }
 238
 239         g_free(host_port);
 240 }
 241
 242 static void http_conn_error(struct sipe_transport_connection *conn,
 243                             const gchar *msg)
 244 {
 245         HttpConn *http_conn = HTTP_CONN;
 246         if (http_conn->callback) {
 247                 (*http_conn->callback)(HTTP_CONN_ERROR, NULL, NULL, http_conn, http_conn->data);
 248         }
 249         http_conn_close(http_conn, msg);
 250 }
 251
 252 static void http_conn_send0(HttpConn *http_conn,
 253                             const char *authorization);
 254 static void http_conn_connected(struct sipe_transport_connection *conn)
 255 {
 256         http_conn_send0(HTTP_CONN, NULL);
 257 }
 258
 259 static void http_conn_input(struct sipe_transport_connection *conn);
 260 static struct sipe_transport_connection *http_conn_setup(HttpConn *http_conn,
 261                                                          struct sipe_core_public *sipe_public,
 262                                                          guint type,
 263                                                          const gchar *host,
 264                                                          guint port) {
 265         sipe_connect_setup setup = {
 266                 type,
 267                 host,
 268                 port,
 269                 http_conn,
 270                 http_conn_connected,
 271                 http_conn_input,
 272                 http_conn_error
 273         };
 274         return(sipe_backend_transport_connect(sipe_public, &setup));
 275 }
 276
 277 HttpConn *
 278 http_conn_create(struct sipe_core_public *sipe_public,
 279                  HttpSession *http_session,
 280                  const char *method,
 281                  guint conn_type,
 282                  gboolean allow_redirect,
 283                  const char *full_url,
 284                  const char *body,
 285                  const char *content_type,
 286                  HttpConnAuth *auth,
 287                  HttpConnCallback callback,
 288                  void *data)
 289 {
 290         HttpConn *http_conn;
 291         struct sipe_transport_connection *conn;
 292         gchar *host, *url;
 293         guint port;
 294
 295         if (!full_url || (strlen(full_url) == 0)) {
 296                 SIPE_DEBUG_INFO_NOFORMAT("no URL supplied!");
 297                 return NULL;
 298         }
 299
 300         http_conn_parse_url(full_url, &host, &port, &url);
 301         http_conn = g_new0(HttpConn, 1);
 302         conn = http_conn_setup(http_conn, sipe_public, conn_type, host, port);
 303         if (!conn) {
 304                 g_free(http_conn);
 305                 g_free(host);
 306                 g_free(url);
 307                 return NULL;
 308         }
 309
 310         http_conn->sipe_public = sipe_public;
 311         conn->user_data = http_conn;
 312
 313         http_conn->http_session = http_session;
 314         http_conn->method = g_strdup(method);
 315         http_conn->conn_type = conn_type;
 316         http_conn->allow_redirect = allow_redirect;
 317         http_conn->host = host;
 318         http_conn->port = port;
 319         http_conn->url = url;
 320         http_conn->body = g_strdup(body);
 321         http_conn->content_type = g_strdup(content_type);
 322         http_conn->auth = auth;
 323         http_conn->callback = callback;
 324         http_conn->data = data;
 325         http_conn->conn = conn;
 326
 327         return http_conn;
 328 }
 329
 330 /* Data part */
 331 static void
 332 http_conn_send0(HttpConn *http_conn,
 333                 const char *authorization)
 334 {
 335         GString *outstr = g_string_new("");
 336
 337         g_string_append_printf(outstr, HTTP_CONN_HEADER,
 338                                 http_conn->method ? http_conn->method : "GET",
 339                                 http_conn->url,
 340                                 http_conn->host);
 341         if (sipe_strequal(http_conn->method, "POST")) {
 342                 g_string_append_printf(outstr, "Content-Length: %d\r\n",
 343                         http_conn->body ? (int)strlen(http_conn->body) : 0);
 344
 345                 g_string_append_printf(outstr, "Content-Type: %s\r\n",
 346                         http_conn->content_type ? http_conn->content_type : "text/plain");
 347         }
 348         if (http_conn->http_session && http_conn->http_session->cookie) {
 349                 g_string_append_printf(outstr, "Cookie: %s\r\n", http_conn->http_session->cookie);
 350         }
 351         if (authorization) {
 352                 g_string_append_printf(outstr, "Authorization: %s\r\n", authorization);
 353         }
 354         g_string_append_printf(outstr, "\r\n%s", http_conn->body ? http_conn->body : "");
 355
 356         sipe_backend_transport_message(http_conn->conn, outstr->str);
 357         g_string_free(outstr, TRUE);
 358 }
 359
 360 void
 361 http_conn_send( HttpConn *http_conn,
 362                 const char *method,
 363                 const char *full_url,
 364                 const char *body,
 365                 const char *content_type,
 366                 HttpConnCallback callback,
 367                 void *data)
 368 {
 369         if (!http_conn) {
 370                 SIPE_DEBUG_INFO_NOFORMAT("http_conn_send: NULL http_conn, exiting.");
 371                 return;
 372         }
 373
 374         g_free(http_conn->method);
 375         g_free(http_conn->url);
 376         g_free(http_conn->body);
 377         g_free(http_conn->content_type);
 378         http_conn->method = g_strdup(method);
 379         http_conn_parse_url(full_url, NULL, NULL, &http_conn->url);
 380         http_conn->body = g_strdup(body);
 381         http_conn->content_type = g_strdup(content_type);
 382         http_conn->callback = callback;
 383         http_conn->data = data;
 384
 385         http_conn_send0(http_conn, NULL);
 386 }
 387
 388 static void
 389 http_conn_process_input_message(HttpConn *http_conn,
 390                                 struct sipmsg *msg)
 391 {
 392         /* Redirect */
 393         if ((msg->response == 300 ||
 394              msg->response == 301 ||
 395              msg->response == 302 ||
 396              msg->response == 307) &&
 397              http_conn->allow_redirect)
 398         {
 399                 const char *location = sipmsg_find_header(msg, "Location");
 400
 401                 SIPE_DEBUG_INFO("http_conn_process_input_message: Redirect to: %s", location ? location : "");
 402
 403                 http_conn->do_close = http_conn_clone(http_conn);
 404                 http_conn->sec_ctx = NULL;
 405
 406                 g_free(http_conn->host);
 407                 g_free(http_conn->url);
 408                 http_conn_parse_url(location, &http_conn->host, &http_conn->port, &http_conn->url);
 409                 http_conn->conn = http_conn_setup(http_conn,
 410                                                   http_conn->sipe_public,
 411                                                   http_conn->conn_type,
 412                                                   http_conn->host,
 413                                                   http_conn->port);
 414         }
 415         /* Authentication required */
 416         else if (msg->response == 401) {
 417                 char *ptmp;
 418 #ifdef _WIN32
 419 #ifdef HAVE_LIBKRB5
 420                 char *tmp;
 421 #endif
 422 #endif
 423                 guint auth_type;
 424                 const char *auth_name;
 425                 char *authorization;
 426                 char *output_toked_base64;
 427                 int use_sso = !http_conn->auth || (http_conn->auth && !http_conn->auth->user);
 428                 long ret = -1;
 429
 430                 http_conn->retries++;
 431                 if (http_conn->retries > 2) {
 432                         if (http_conn->callback) {
 433                                 (*http_conn->callback)(HTTP_CONN_ERROR_FATAL, NULL, NULL, http_conn, http_conn->data);
 434                         }
 435                         SIPE_DEBUG_INFO_NOFORMAT("http_conn_process_input_message: Authentication failed");
 436                         http_conn_set_close(http_conn);
 437                         return;
 438                 }
 439
 440                 ptmp = sipmsg_find_auth_header(msg, "NTLM");
 441                 auth_type = AUTH_TYPE_NTLM;
 442                 auth_name = "NTLM";
 443 #ifdef _WIN32
 444 #ifdef HAVE_LIBKRB5
 445                 tmp = sipmsg_find_auth_header(msg, "Negotiate");
 446                 if (tmp && http_conn->auth && http_conn->auth->use_negotiate) {
 447                         ptmp = tmp;
 448                         auth_type = AUTH_TYPE_NEGOTIATE;
 449                         auth_name = "Negotiate";
 450                 }
 451 #endif
 452 #endif
 453                 if (!ptmp) {
 454                         SIPE_DEBUG_INFO("http_conn_process_input_message: Only %s supported in the moment, exiting",
 455 #ifdef _WIN32
 456 #ifdef HAVE_LIBKRB5
 457                                 "NTLM and Negotiate authentications are"
 458 #else /* !HAVE_LIBKRB5 */
 459                                 "NTLM authentication is"
 460 #endif /* HAVE_LIBKRB5 */
 461 #else /* !_WIN32 */
 462                                 "NTLM authentication is"
 463 #endif /* _WIN32 */
 464
 465                         );
 466                 }
 467
 468                 if (!http_conn->sec_ctx) {
 469                         http_conn->sec_ctx =
 470                                 sip_sec_create_context(auth_type,
 471                                                        use_sso,
 472                                                        1,
 473                                                        http_conn->auth && http_conn->auth->domain ? http_conn->auth->domain : "",
 474                                                        http_conn->auth ? http_conn->auth->user : NULL,
 475                                                        http_conn->auth ? http_conn->auth->password : NULL);
 476                 }
 477
 478                 if (http_conn->sec_ctx) {
 479                         char **parts = g_strsplit(ptmp, " ", 0);
 480                         char *spn = g_strdup_printf("HTTP/%s", http_conn->host);
 481                         ret = sip_sec_init_context_step(http_conn->sec_ctx,
 482                                                         spn,
 483                                                         parts[1],
 484                                                         &output_toked_base64,
 485                                                         NULL);
 486                         g_free(spn);
 487                         g_strfreev(parts);
 488                 }
 489
 490                 if (ret < 0) {
 491                         if (http_conn->callback) {
 492                                 (*http_conn->callback)(HTTP_CONN_ERROR_FATAL, NULL, NULL, http_conn, http_conn->data);
 493                         }
 494                         SIPE_DEBUG_INFO_NOFORMAT("http_conn_process_input_message: Failed to initialize security context");
 495                         http_conn_set_close(http_conn);
 496                         return;
 497                 }
 498
 499                 authorization = g_strdup_printf("%s %s", auth_name, output_toked_base64 ? output_toked_base64 : "");
 500                 g_free(output_toked_base64);
 501
 502                 http_conn_send0(http_conn, authorization);
 503                 g_free(authorization);
 504         }
 505         /* Other response */
 506         else {
 507                 const char *set_cookie_hdr;
 508                 const char *content_type = sipmsg_find_header(msg, "Content-Type");
 509                 http_conn->retries = 0;
 510
 511                 /* Set cookies.
 512                  * Set-Cookie: RMID=732423sdfs73242; expires=Fri, 31-Dec-2010 23:59:59 GMT; path=/; domain=.example.net
 513                  */
 514                 if (http_conn->http_session && (set_cookie_hdr = sipmsg_find_header(msg, "Set-Cookie"))) {
 515                         char **parts;
 516                         char *tmp;
 517                         int i;
 518
 519                         g_free(http_conn->http_session->cookie);
 520                         http_conn->http_session->cookie = NULL;
 521
 522                         parts = g_strsplit(set_cookie_hdr, ";", 0);
 523                         for (i = 0; parts[i]; i++) {
 524                                 if (!strstr(parts[i], "path=") &&
 525                                     !strstr(parts[i], "domain=") &&
 526                                     !strstr(parts[i], "expires=") &&
 527                                     !strstr(parts[i], "secure"))
 528                                 {
 529                                         tmp = http_conn->http_session->cookie;
 530                                         http_conn->http_session->cookie = !tmp ?
 531                                                 g_strdup(parts[i]) :
 532                                                 g_strconcat(http_conn->http_session->cookie, ";", parts[i], NULL);
 533                                         g_free(tmp);
 534                                 }
 535                         }
 536                         g_strfreev(parts);
 537                         SIPE_DEBUG_INFO("http_conn_process_input_message: Set cookie: %s",
 538                                 http_conn->http_session->cookie ? http_conn->http_session->cookie : "");
 539                 }
 540
 541                 if (http_conn->callback) {
 542                         (*http_conn->callback)(msg->response, msg->body, content_type, http_conn, http_conn->data);
 543                 }
 544         }
 545 }
 546
 547 static void http_conn_input(struct sipe_transport_connection *conn)
 548 {
 549         HttpConn *http_conn = HTTP_CONN;
 550         char *cur = conn->buffer;
 551
 552         /* according to the RFC remove CRLF at the beginning */
 553         while (*cur == '\r' || *cur == '\n') {
 554                 cur++;
 555         }
 556         if (cur != conn->buffer)
 557                 sipe_utils_shrink_buffer(conn, cur);
 558
 559         while ((cur = strstr(conn->buffer, "\r\n\r\n")) != NULL) {
 560                 struct sipmsg *msg;
 561                 char *tmp;
 562                 guint remainder;
 563                 time_t currtime = time(NULL);
 564                 cur += 2;
 565                 cur[0] = '\0';
 566                 SIPE_DEBUG_INFO("received - %s******\n%s\n******", ctime(&currtime), tmp = fix_newlines(conn->buffer));
 567                 g_free(tmp);
 568
 569                 msg = sipmsg_parse_header(conn->buffer);
 570                 cur[0] = '\r';
 571                 cur += 2;
 572                 remainder = conn->buffer_used - (cur - conn->buffer);
 573                 if (msg && remainder >= (guint) msg->bodylen) {
 574                         char *dummy = g_malloc(msg->bodylen + 1);
 575                         memcpy(dummy, cur, msg->bodylen);
 576                         dummy[msg->bodylen] = '\0';
 577                         msg->body = dummy;
 578                         cur += msg->bodylen;
 579                         sipe_utils_shrink_buffer(conn, cur);
 580                 } else {
 581                         if (msg){
 582                                 SIPE_DEBUG_INFO("process_input: body too short (%d < %d, strlen %d) - ignoring message", remainder, msg->bodylen, (int)strlen(conn->buffer));
 583                                 sipmsg_free(msg);
 584                         }
 585                         return;
 586                 }
 587
 588                 if (msg->body) {
 589                         SIPE_DEBUG_INFO("body:\n%s", msg->body);
 590                 }
 591
 592                 /* important to set before callback call */
 593                 if (sipe_strcase_equal(sipmsg_find_header(msg, "Connection"), "close")) {
 594                         http_conn->closed = TRUE;
 595                 }
 596
 597                 http_conn_process_input_message(http_conn, msg);
 598
 599                 sipmsg_free(msg);
 600         }
 601
 602         if (http_conn->closed) {
 603                 http_conn_close(http_conn->do_close, "Server closed connection");
 604         } else if (http_conn->do_close) {
 605                 http_conn_close(http_conn->do_close, "User initiated");
 606         }
 607 }
 608
 609 /*
 610   Local Variables:
 611   mode: c
 612   c-file-style: "bsd"
 613   indent-tabs-mode: t
 614   tab-width: 8
 615   End:
 616 */