Jean
8ed1a9ab70
Services no longer receive the concrete account store. on_command now takes &mut dyn Store + &dyn NetView (both defined in fedserv-api); the engine's Db and Network implement them. Reads hand back plain views (AccountView, ChannelView, ...) carrying only non-secret fields, so the event log, gossip, and credential material (password hash, SCRAM verifiers) are unreachable from a module. All command modules ported; behaviour unchanged.
33 lines
1.5 KiB
Rust
33 lines
1.5 KiB
Rust
use crate::engine::db::Store;
|
|
use crate::engine::service::{Sender, ServiceCtx};
|
|
use crate::engine::state::NetView;
|
|
|
|
// GHOST/RECOVER <nick> [password]: rename off a session using a nick you own,
|
|
// either by being identified to its account or giving that account's password.
|
|
pub fn handle(me: &str, guest_nick: &str, guest_seq: &mut u32, from: &Sender, args: &[&str], ctx: &mut ServiceCtx, net: &dyn NetView, db: &dyn Store) {
|
|
let Some(&target) = args.get(1) else {
|
|
ctx.notice(me, from.uid, "Syntax: GHOST <nick> [password]");
|
|
return;
|
|
};
|
|
let Some(account) = db.resolve_account(target).map(str::to_string) else {
|
|
ctx.notice(me, from.uid, format!("\x02{target}\x02 isn't registered."));
|
|
return;
|
|
};
|
|
let owns = from.account == Some(account.as_str()) || args.get(2).is_some_and(|pw| db.authenticate(target, pw).is_some());
|
|
if !owns {
|
|
ctx.notice(me, from.uid, format!("Access denied. Identify to \x02{account}\x02 or give its password."));
|
|
return;
|
|
}
|
|
let Some(ghost) = net.uid_by_nick(target).map(str::to_string) else {
|
|
ctx.notice(me, from.uid, format!("Nobody is using \x02{target}\x02."));
|
|
return;
|
|
};
|
|
if ghost == from.uid {
|
|
ctx.notice(me, from.uid, "That's you.");
|
|
return;
|
|
}
|
|
let guest = format!("{guest_nick}{guest_seq}");
|
|
*guest_seq = guest_seq.wrapping_add(1);
|
|
ctx.force_nick(&ghost, &guest);
|
|
ctx.notice(me, from.uid, format!("\x02{target}\x02 has been freed."));
|
|
}
|