forked-synapse/synapse/rest/register.py

# -*- coding: utf-8 -*-
# Copyright 2014 OpenMarket Ltd
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

"""This module contains REST servlets to do with registration: /register"""
from twisted.internet import defer

from synapse.api.errors import SynapseError, Codes
from synapse.api.constants import LoginType
from base import RestServlet, client_path_pattern

import json
import urllib


class RegisterRestServlet(RestServlet):
    PATTERN = client_path_pattern("/register$")

    def on_GET(self, request):
        return (200, {
            "flows": [
                {
                    "type": LoginType.RECAPTCHA,
                    "stages": ([LoginType.RECAPTCHA, LoginType.EMAIL_IDENTITY,
                        LoginType.PASSWORD])
                },
                {
                    "type": LoginType.RECAPTCHA,
                    "stages": [LoginType.RECAPTCHA, LoginType.PASSWORD]
                },
            ]
        })

    @defer.inlineCallbacks
    def on_POST(self, request):
        register_json = _parse_json(request)

        session = (register_json["session"] if "session" in register_json
                  else None)
        try:
            login_type = register_json["type"]
            stages = {
                LoginType.RECAPTCHA: self._do_recaptcha,
                LoginType.PASSWORD: self._do_password,
                LoginType.EMAIL_IDENTITY: self._do_email_identity
            }

            session_info = None
            if session:
                session_info = self._get_session_info(session)

            response = yield stages[login_type](register_json, session_info)
            defer.returnValue((200, response))
        except KeyError:
            raise SynapseError(400, "Bad login type.")


        desired_user_id = None
        password = None

        if "password" in register_json:
            password = register_json["password"].encode("utf-8")

        if ("user_id" in register_json and
                type(register_json["user_id"]) == unicode):
            desired_user_id = register_json["user_id"].encode("utf-8")
            if urllib.quote(desired_user_id) != desired_user_id:
                raise SynapseError(
                    400,
                    "User ID must only contain characters which do not " +
                    "require URL encoding.")

        threepidCreds = None
        if 'threepidCreds' in register_json:
            threepidCreds = register_json['threepidCreds']

        captcha = {}
        if self.hs.config.enable_registration_captcha:
            challenge = None
            user_response = None
            try:
                captcha_type = register_json["captcha"]["type"]
                if captcha_type != "m.login.recaptcha":
                    raise SynapseError(400, "Sorry, only m.login.recaptcha " +
                                       "requests are supported.")
                challenge = register_json["captcha"]["challenge"]
                user_response = register_json["captcha"]["response"]
            except KeyError:
                raise SynapseError(400, "Captcha response is required",
                                   errcode=Codes.CAPTCHA_NEEDED)

            # TODO determine the source IP : May be an X-Forwarding-For header depending on config
            ip_addr = request.getClientIP()
            if self.hs.config.captcha_ip_origin_is_x_forwarded:
                # use the header
                if request.requestHeaders.hasHeader("X-Forwarded-For"):
                    ip_addr = request.requestHeaders.getRawHeaders(
                        "X-Forwarded-For")[0]

            captcha = {
                "ip": ip_addr,
                "private_key": self.hs.config.recaptcha_private_key,
                "challenge": challenge,
                "response": user_response
            }


        handler = self.handlers.registration_handler
        (user_id, token) = yield handler.register(
            localpart=desired_user_id,
            password=password,
            threepidCreds=threepidCreds,
            captcha_info=captcha)

        result = {
            "user_id": user_id,
            "access_token": token,
            "home_server": self.hs.hostname,
        }
        defer.returnValue(
            (200, result)
        )

    def on_OPTIONS(self, request):
        return (200, {})

    def _get_session_info(self, session_id):
        pass

    def _do_recaptcha(self, register_json, session):
        pass

    def _do_email_identity(self, register_json, session):
        pass

    def _do_password(self, register_json, session):
        pass


def _parse_json(request):
    try:
        content = json.loads(request.content.read())
        if type(content) != dict:
            raise SynapseError(400, "Content must be a JSON object.")
        return content
    except ValueError:
        raise SynapseError(400, "Content not JSON.")

def register_servlets(hs, http_server):
    RegisterRestServlet(hs).register(http_server)