fedserv/echo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Derive registration credentials off-thread; rate-limit REGISTER; constant-time SCRAM compare

Browse source
This commit is contained in:
Jean Chevronnet 2026-07-12 02:31:52 +00:00
parent 496c0f99a6
commit 9a918839fe
No known key found for this signature in database
10 changed files with 214 additions and 36 deletions
Download patch file Download diff file Expand all files Collapse all files

18
src/services/nickserv.rs
View file

@ -1,5 +1,6 @@
use crate::engine::db::{Db, RegError};
use crate::engine::db::Db;
use crate::engine::service::{Sender, Service, ServiceCtx};
use crate::proto::RegReply;
pub struct NickServ {
pub uid: String,
@ -26,15 +27,12 @@ impl Service for NickServ {
return;
};
let email = args.get(2).map(|s| s.to_string());
match db.register(from.nick, password, email) {
Ok(()) => {
// Registering identifies you to the nick right away (drives 900).
ctx.login(from.uid, from.nick);
ctx.notice(me, from.uid, format!("Nickname \x02{}\x02 is now registered.", from.nick));
}
Err(RegError::Exists) => ctx.notice(me, from.uid, format!("Nickname \x02{}\x02 is already registered.", from.nick)),
Err(RegError::Internal) => ctx.notice(me, from.uid, "Registration failed, please try again later."),
}
// The engine derives the password off-thread, commits, and answers.
ctx.defer_register(from.nick, *password, email, RegReply::NickServ {
agent: me.to_string(),
uid: from.uid.to_string(),
nick: from.nick.to_string(),
});
}
Some("IDENTIFY") => {
let Some(password) = args.get(1) else {