51 lines
2.5 KiB
Rust
51 lines
2.5 KiB
Rust
use echo_api::Store;
|
|
use echo_api::{Sender, ServiceCtx};
|
|
|
|
// GROUP <account> <password>: link your current nick to an existing account, so
|
|
// you can identify to it under this nick too.
|
|
pub fn handle(me: &str, from: &Sender, args: &[&str], ctx: &mut ServiceCtx, db: &mut dyn Store) {
|
|
let (Some(&account), Some(&password)) = (args.get(1), args.get(2)) else {
|
|
ctx.notice(me, from.uid, "Syntax: GROUP <account> <password>");
|
|
return;
|
|
};
|
|
// Throttle + record the attempt like IDENTIFY, or GROUP is an unthrottled
|
|
// password-guessing oracle against any account (and each ~1s verify blocks the
|
|
// engine). Also feeds the auth audit feed.
|
|
if let Some(secs) = db.auth_lockout(account) {
|
|
ctx.notice(me, from.uid, format!("Too many failed attempts. Please wait {secs}s and try again."));
|
|
return;
|
|
}
|
|
let Some(canonical) = db.authenticate(account, password).map(str::to_string) else {
|
|
db.note_auth(account, false);
|
|
ctx.auth_report(false, Some(account), "NickServ GROUP", from.uid, Some("bad password"));
|
|
ctx.notice(me, from.uid, "Invalid account or password.");
|
|
return;
|
|
};
|
|
db.note_auth(account, true);
|
|
if db.account(from.nick).is_some() {
|
|
ctx.notice(me, from.uid, format!("\x02{}\x02 is itself a registered account.", from.nick));
|
|
return;
|
|
}
|
|
// Guard the namespace like REGISTER does: grouping RESERVES from.nick (SET KILL
|
|
// enforces it), so a look-alike or FORBIDden nick must not be groupable, and one
|
|
// account can't squat an unbounded number of nicks (each grows the log forever).
|
|
if db.confusable_check_enabled() {
|
|
if let Some(reason) = echo_api::confusable_reason(from.nick) {
|
|
ctx.notice(me, from.uid, reason);
|
|
return;
|
|
}
|
|
}
|
|
if db.is_forbidden(echo_api::ForbidKind::Nick, from.nick).is_some() {
|
|
ctx.notice(me, from.uid, format!("The nick \x02{}\x02 is reserved and can't be grouped.", from.nick));
|
|
return;
|
|
}
|
|
const MAX_GROUPED: usize = 25;
|
|
if db.grouped_nicks(&canonical).len() >= MAX_GROUPED {
|
|
ctx.notice(me, from.uid, format!("\x02{canonical}\x02 already has the maximum of {MAX_GROUPED} grouped nicks."));
|
|
return;
|
|
}
|
|
match db.group_nick(from.nick, &canonical) {
|
|
Ok(()) => ctx.notice(me, from.uid, format!("Your nick \x02{}\x02 is now grouped to \x02{canonical}\x02.", from.nick)),
|
|
Err(_) => ctx.notice(me, from.uid, "Sorry, that didn't work. Please try again in a moment."),
|
|
}
|
|
}
|