text: /*
   * ws protocol handler plugin for "generic sessions"
   *
   * Copyright (C) 2010-2016 Andy Green <andy@warmcat.com>
   *
   * This program is free software; you can redistribute it and/or
   * modify it under the terms of the GNU Lesser General Public
   * License as published by the Free Software Foundation:
   * version 2.1 of the License.
   *
   * This library is distributed in the hope that it will be useful,
   * but WITHOUT ANY WARRANTY; without even the implied warranty of
   * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
   * General Public License for more details.
   *
   * You should have received a copy of the GNU General Public
   * License along with this library; if not, write to the Free Software
   * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
   * MA  02110-1301  USA
   */
  
  #define LWS_DLL
  #define LWS_INTERNAL
  #include "../lib/libwebsockets.h"
  
  #include <sqlite3.h>
  #include <string.h>
  
  #define LWSGS_VERIFIED_ACCEPTED 100
  
  enum {
  	FGS_USERNAME,
  	FGS_PASSWORD,
  	FGS_PASSWORD2,
  	FGS_EMAIL,
  	FGS_REGISTER,
  	FGS_GOOD,
  	FGS_BAD,
  	FGS_REG_GOOD,
  	FGS_REG_BAD,
  	FGS_ADMIN,
  	FGS_FORGOT,
  	FGS_FORGOT_GOOD,
  	FGS_FORGOT_BAD,
  	FGS_FORGOT_POST_GOOD,
  	FGS_FORGOT_POST_BAD,
  	FGS_CHANGE,
  	FGS_CURPW,
  	FGS_DELETE,
  };
  
  struct lwsgs_user {
  	char username[32];
  	char ip[16];
  	lwsgw_hash pwhash;
  	lwsgw_hash pwsalt;
  	lwsgw_hash token;
  	time_t created;
  	time_t last_forgot_validated;
  	char email[100];
  	int verified;
  };
  
  struct per_vhost_data__gs {
  	struct lws_email email;
  	struct lwsgs_user u;
  	struct lws_context *context;
  	char session_db[256];
  	char admin_user[32];
  	char confounder[32];
  	char email_contact_person[128];
  	char email_title[128];
  	char email_template[128];
  	char email_confirm_url[128];
  	lwsgw_hash admin_password_sha1;
  	sqlite3 *pdb;
  	int timeout_idle_secs;
  	int timeout_absolute_secs;
  	int timeout_anon_absolute_secs;
  	int timeout_email_secs;
  	time_t last_session_expire;
  	char email_inited;
  };
  
  struct per_session_data__gs {
  	struct lws_spa *spa;
  	lwsgw_hash login_session;
  	lwsgw_hash delete_session;
  	unsigned int login_expires;
  	char onward[256];
  	char result[500 + LWS_PRE];
  	char urldec[500 + LWS_PRE];
  	int result_len;
  	char ip[46];
  	struct lws_process_html_state phs;
  	int spos;
  
  	unsigned int logging_out:1;
  };
  
  /* utils.c */
  
  int
  lwsgs_lookup_callback_user(void *priv, int cols, char **col_val,
  			   char **col_name);
  void
  lwsgw_cookie_from_session(lwsgw_hash *sid, time_t expires, char **p, char *end);
  int
  lwsgs_get_sid_from_wsi(struct lws *wsi, lwsgw_hash *sid);
  int
  lwsgs_lookup_session(struct per_vhost_data__gs *vhd,
  		     const lwsgw_hash *sid, char *username, int len);
  int
  lwsgs_get_auth_level(struct per_vhost_data__gs *vhd,
  		     const char *username);
  int
  lwsgs_check_credentials(struct per_vhost_data__gs *vhd,
  			const char *username, const char *password);
  void
  sha1_to_lwsgw_hash(unsigned char *hash, lwsgw_hash *shash);
  unsigned int
  lwsgs_now_secs(void);
  int
  lwsgw_check_admin(struct per_vhost_data__gs *vhd,
  		  const char *username, const char *password);
  int
  lwsgs_hash_password(struct per_vhost_data__gs *vhd,
  		    const char *password, struct lwsgs_user *u);
  int
  lwsgs_new_session_id(struct per_vhost_data__gs *vhd,
  		     lwsgw_hash *sid, const char *username, int exp);
  int
  lwsgs_lookup_user(struct per_vhost_data__gs *vhd,
  		  const char *username, struct lwsgs_user *u);
  int
  lwsgw_update_session(struct per_vhost_data__gs *vhd,
  		     lwsgw_hash *hash, const char *user);
  int
  lwsgw_expire_old_sessions(struct per_vhost_data__gs *vhd);
  
  
  /* handlers.c */
  
  int
  lwsgs_handler_confirm(struct per_vhost_data__gs *vhd, struct lws *wsi,
  		      struct per_session_data__gs *pss);
  int
  lwsgs_handler_forgot(struct per_vhost_data__gs *vhd, struct lws *wsi,
  		     struct per_session_data__gs *pss);
  int
  lwsgs_handler_check(struct per_vhost_data__gs *vhd, struct lws *wsi,
  		      struct per_session_data__gs *pss);
  int
  lwsgs_handler_change_password(struct per_vhost_data__gs *vhd, struct lws *wsi,
  			      struct per_session_data__gs *pss);
  int
  lwsgs_handler_forgot_pw_form(struct per_vhost_data__gs *vhd, struct lws *wsi,
  			     struct per_session_data__gs *pss);
  int
  lwsgs_handler_register_form(struct per_vhost_data__gs *vhd, struct lws *wsi,
  			     struct per_session_data__gs *pss);
  
  