22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
|
[lib.mem.ptr(uint8)] {ptr = [&uint8](secret.ptr), ct = secret.ct},
[lib.mem.ptr( int8)] {ptr = out, ct = len},
&hash[0])
ptr = ptr + lib.math.shorthand.gen(lib.math.truncate64(hash, [hash.type.N]), ptr)
return ptr - out
end
terra m.cookie_interpret(secret: lib.mem.ptr(int8), c: lib.mem.ptr(int8), now: uint64): uint64 -- returns either 0 or a valid authid
var authid_sz = lib.str.cspan(c.ptr, lib.str.lit '.', c.ct)
if authid_sz == 0 then return 0 end
if authid_sz + 1 > c.ct then return 0 end
var time_sz = lib.str.cspan(c.ptr+authid_sz+1, lib.str.lit '.', c.ct - (authid_sz+1))
if time_sz == 0 then return 0 end
if (authid_sz + time_sz + 2) > c.ct then return 0 end
var hash_sz = c.ct - (authid_sz + time_sz + 2)
var knownhash: uint8[lib.crypt.algsz.sha256]
lib.crypt.hmac(lib.crypt.alg.sha256,
[lib.mem.ptr(uint8)] {ptr = [&uint8](secret.ptr), ct = secret.ct},
[lib.mem.ptr( int8)] {ptr = c.ptr, ct = c.ct - hash_sz},
&knownhash[0])
var authid, authok = lib.math.shorthand.parse(c.ptr, authid_sz)
var time, timeok = lib.math.shorthand.parse(c.ptr + authid_sz + 1, time_sz)
var hash, hashok = lib.math.shorthand.parse(c.ptr + c.ct - hash_sz, hash_sz)
if not (timeok and authok and hashok) then return 0 end
if lib.math.truncate64(knownhash, [knownhash.type.N]) ~= hash then return 0 end
if now - time > m.maxage then return 0 end
return authid
end
return m
|
|
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
|
[lib.mem.ptr(uint8)] {ptr = [&uint8](secret.ptr), ct = secret.ct},
[lib.mem.ptr( int8)] {ptr = out, ct = len},
&hash[0])
ptr = ptr + lib.math.shorthand.gen(lib.math.truncate64(hash, [hash.type.N]), ptr)
return ptr - out
end
terra m.cookie_interpret(secret: lib.mem.ptr(int8), c: lib.mem.ptr(int8), now: uint64) -- returns either 0,0 or a valid {authid, timepoint}
var authid_sz = lib.str.cspan(c.ptr, lib.str.lit '.', c.ct)
if authid_sz == 0 then return 0,0 end
if authid_sz + 1 > c.ct then return 0,0 end
var time_sz = lib.str.cspan(c.ptr+authid_sz+1, lib.str.lit '.', c.ct - (authid_sz+1))
if time_sz == 0 then return 0,0 end
if (authid_sz + time_sz + 2) > c.ct then return 0,0 end
var hash_sz = c.ct - (authid_sz + time_sz + 2)
var knownhash: uint8[lib.crypt.algsz.sha256]
lib.crypt.hmac(lib.crypt.alg.sha256,
[lib.mem.ptr(uint8)] {ptr = [&uint8](secret.ptr), ct = secret.ct},
[lib.mem.ptr( int8)] {ptr = c.ptr, ct = c.ct - hash_sz},
&knownhash[0])
var authid, authok = lib.math.shorthand.parse(c.ptr, authid_sz)
var time, timeok = lib.math.shorthand.parse(c.ptr + authid_sz + 1, time_sz)
var hash, hashok = lib.math.shorthand.parse(c.ptr + c.ct - hash_sz, hash_sz)
if not (timeok and authok and hashok) then return 0,0 end
if lib.math.truncate64(knownhash, [knownhash.type.N]) ~= hash then return 0,0 end
if now - time > m.maxage then return 0,0 end
return authid, time
end
return m
|