module Network.Pusher.Internal.Auth
( AuthString
, AuthSignature
, authenticatePresence
, authenticatePresenceWithEncoder
, authenticatePrivate, makeQS
) where
import Data.Monoid ((<>))
import Data.Text.Encoding (encodeUtf8)
import GHC.Exts (sortWith)
import qualified Data.Aeson as A
#if MIN_VERSION_aeson(1,0,0)
import qualified Data.Aeson.Text as A
#else
import qualified Data.Aeson.Encode as A
#endif
import qualified Data.ByteString as B
import qualified Data.ByteString.Base16 as B16
import qualified Data.Text as T
import qualified Data.Text.Lazy as TL
import qualified Data.Text.Lazy.Builder as TL
import qualified Crypto.Hash.MD5 as MD5
import qualified Crypto.Hash.SHA256 as SHA256
import qualified Crypto.MAC.HMAC as HMAC
import Network.Pusher.Data
( AppKey
, AppSecret
, Channel
, Credentials(..)
, SocketID
, renderChannel
)
import Network.Pusher.Internal.HTTP (RequestQueryString)
import Network.Pusher.Internal.Util (show')
makeQS
:: AppKey
-> AppSecret
-> T.Text
-> T.Text
-> RequestQueryString
-> B.ByteString
-> Int
-> RequestQueryString
makeQS appKey appSecret method path params body ts =
let
allParams = sortWith fst $ params ++
[ ("auth_key", appKey)
, ("auth_timestamp", show' ts)
, ("auth_version", "1.0")
, ("body_md5", B16.encode (MD5.hash body))
]
authSig = authSignature appSecret $ B.intercalate "\n"
[ encodeUtf8 method
, encodeUtf8 path
, formQueryString allParams
]
in
("auth_signature", authSig) : allParams
formQueryString :: RequestQueryString -> B.ByteString
formQueryString =
B.intercalate "&" . map (\(a, b) -> a <> "=" <> b)
type AuthString = B.ByteString
type AuthSignature = B.ByteString
authSignature :: AppSecret -> AuthString -> AuthSignature
authSignature appSecret authString =
B16.encode $ HMAC.hmac SHA256.hash 64 appSecret authString
authenticatePrivate
:: Credentials
-> SocketID
-> Channel
-> AuthSignature
authenticatePrivate cred socketID channel =
let
sig = authSignature
(credentialsAppSecret cred)
(encodeUtf8 $ socketID <> ":" <> renderChannel channel)
in
credentialsAppKey cred <> ":" <> sig
authenticatePresence
:: A.ToJSON a
=> Credentials
-> SocketID
-> Channel
-> a
-> AuthSignature
authenticatePresence =
authenticatePresenceWithEncoder
(TL.toStrict . TL.toLazyText . A.encodeToTextBuilder . A.toJSON)
authenticatePresenceWithEncoder
:: (a -> T.Text)
-> Credentials
-> SocketID
-> Channel
-> a
-> AuthSignature
authenticatePresenceWithEncoder userEncoder cred socketID channel userData =
let
authString =
encodeUtf8 $ socketID <> ":" <> renderChannel channel <> ":" <> userEncoder userData
sig = authSignature (credentialsAppSecret cred) authString
in
credentialsAppKey cred <> ":" <> sig