1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
|
/****************************************************************************
**
** Copyright (C) 2015 The Qt Company Ltd.
** Contact: http://www.qt.io/licensing/
**
** This file is part of the Qt Messaging Framework.
**
** $QT_BEGIN_LICENSE:LGPL21$
** Commercial License Usage
** Licensees holding valid commercial Qt licenses may use this file in
** accordance with the commercial license agreement provided with the
** Software or, alternatively, in accordance with the terms contained in
** a written agreement between you and The Qt Company. For licensing terms
** and conditions see http://www.qt.io/terms-conditions. For further
** information use the contact form at http://www.qt.io/contact-us.
**
** GNU Lesser General Public License Usage
** Alternatively, this file may be used under the terms of the GNU Lesser
** General Public License version 2.1 or version 3 as published by the Free
** Software Foundation and appearing in the file LICENSE.LGPLv21 and
** LICENSE.LGPLv3 included in the packaging of this file. Please review the
** following information to ensure the GNU Lesser General Public License
** requirements will be met: https://www.gnu.org/licenses/lgpl.html and
** http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html.
**
** As a special exception, The Qt Company gives you certain additional
** rights. These rights are described in The Qt Company LGPL Exception
** version 1.1, included in the file LGPL_EXCEPTION.txt in this package.
**
** $QT_END_LICENSE$
**
****************************************************************************/
#include "qmailauthenticator.h"
#include "qmailnamespace.h"
#include <qmailserviceconfiguration.h>
#include <qcryptographichash.h>
#include <qbytearray.h>
// cram-md5 helper code
static QByteArray xorArray(const QByteArray input, char c)
{
QByteArray result;
for (int i = 0; i < input.size(); ++i) {
result += (input[i] ^ c);
}
return result;
}
static QByteArray cramMd5Response(const QByteArray &nonce, const QByteArray &name, const QByteArray &password)
{
char opad(0x5c);
char ipad(0x36);
QByteArray result = name + " ";
QCryptographicHash hash(QCryptographicHash::Md5);
QCryptographicHash hash1(QCryptographicHash::Md5);
QCryptographicHash hash2(QCryptographicHash::Md5);
QByteArray passwordPad(password);
if (passwordPad.size() > 64) {
hash.addData(passwordPad);
passwordPad = hash.result();
}
while (passwordPad.size() < 64)
passwordPad.append(char(0));
hash1.addData(xorArray(passwordPad, ipad));
hash1.addData(nonce);
hash2.addData(xorArray(passwordPad, opad));
hash2.addData(hash1.result());
result.append(hash2.result().toHex());
return result;
}
// end cram-md5 helper code
/*!
\class QMailAuthenticator
\ingroup libmessageserver
\preliminary
\brief The QMailAuthenticator class provides a customization point
where authentication services can be supplied to the messageserver.
QMailAuthenticator provides a simple interface for handling authentication
exchanges between the messageserver and external services. Protocol plugins
operating within the messageserver should use the QMailAuthenticator interface
to request the authentication type they should use, and to resolve any
challenges required by the external server during the authentication
process.
*/
/*!
Returns true if the protocol should immediately switch to using TLS encryption;
otherwise returns false.
The use of encryption may be preferred depending on the service whose configuration
is described by \a svcCfg, and the service's reported \a capabilities.
*/
bool QMailAuthenticator::useEncryption(const QMailAccountConfiguration::ServiceConfiguration &svcCfg, const QStringList &capabilities)
{
Q_UNUSED(svcCfg)
Q_UNUSED(capabilities)
return false;
}
/*!
Returns the authentication string that should be used to initiate an authentication
attempt for the service whose configuration is described by \a svcCfg. The preferred
authentication method may depend upon the service's reported \a capabilities.
*/
QByteArray QMailAuthenticator::getAuthentication(const QMailAccountConfiguration::ServiceConfiguration &svcCfg, const QStringList &capabilities)
{
Q_UNUSED(capabilities)
QMailServiceConfiguration configuration(svcCfg);
if (configuration.value(QLatin1String("authentication")) == QString::number(QMail::CramMd5Mechanism))
return "CRAM-MD5";
// Unknown service type and/or authentication type
return QByteArray();
}
/*!
Returns the response string that should be reported as the response to a
service's \a challenge, for the the service desribed by \a svcCfg.
If the protocol invoking the challenge-response resolution requires
encoding for the challenge-response tokens (such as Base64), the challenge
should be decoded before invocation, and the result should be encoded for
transmission.
*/
QByteArray QMailAuthenticator::getResponse(const QMailAccountConfiguration::ServiceConfiguration &svcCfg, const QByteArray &challenge)
{
QMailServiceConfiguration configuration(svcCfg);
if (!configuration.value(QLatin1String("smtpusername")).isEmpty()
&& (configuration.value(QLatin1String("authentication")) == QString::number(QMail::CramMd5Mechanism))) {
// SMTP server CRAM-MD5 authentication
return cramMd5Response(challenge, configuration.value(QLatin1String("smtpusername")).toUtf8(),
QByteArray::fromBase64(configuration.value(QLatin1String("smtppassword")).toUtf8()));
} else if (configuration.value(QLatin1String("authentication")) == QString::number(QMail::CramMd5Mechanism)) {
// IMAP/POP server CRAM-MD5 authentication
return cramMd5Response(challenge, configuration.value(QLatin1String("username")).toUtf8(),
QByteArray::fromBase64(configuration.value(QLatin1String("password")).toUtf8()));
}
// Unknown service type and/or authentication type
return QByteArray();
}
|
