beenull/sftpgo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Support multiple public keys

Browse source 
This will parse the public key field as a newline delimited list of public keys.

Return (valid) result on first match.
This commit is contained in:
Jo Vandeginste 2019-07-31 13:42:58 +02:00 committed by drakkan
parent 99e89f59c9
commit c752dd8e81
2 changed files with 20 additions and 16 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
dataprovider/dataprovider.go
View file

@ -234,11 +234,14 @@ func validateUser(user *User) error {
user.Password = pwd
}
if len(user.PublicKey) > 0 {
_, _, _, _, err := ssh.ParseAuthorizedKey([]byte(user.PublicKey))
if err != nil {
return err
for i, k := range strings.Split(user.PublicKey, "\n") {
_, _, _, _, err := ssh.ParseAuthorizedKey([]byte(k))
if err != nil {
return &ValidationError{err: fmt.Sprintf("Could not parse key nr. %d: %s", i, err)}
}
}
}
return nil
}

27
dataprovider/sqlcommon.go
View file

@ -73,20 +73,21 @@ func sqlCommonValidateUserAndPubKey(username string, pubKey string) (User, error
logger.Warn(logSender, "error authenticating user: %v, error: %v", username, err)
return user, err
}
if len(user.PublicKey) > 0 {
storedPubKey, _, _, _, err := ssh.ParseAuthorizedKey([]byte(user.PublicKey))
if err != nil {
logger.Warn(logSender, "error parsing stored public key for user %v: %v", username, err)
return user, err
}
if string(storedPubKey.Marshal()) != pubKey {
err = errors.New("Invalid credentials")
return user, err
}
} else {
err = errors.New("Invalid credentials")
if len(user.PublicKey) == 0 {
return user, errors.New("Invalid credentials")
}
return user, err
for i, k := range strings.Split(user.PublicKey, "\n") {
storedPubKey, _, _, _, err := ssh.ParseAuthorizedKey([]byte(k))
if err != nil {
logger.Warn(logSender, "error parsing stored public key %d for user %v: %v", i, username, err)
return user, err
}
if string(storedPubKey.Marshal()) == pubKey {
return user, nil
}
}
return user, errors.New("Invalid credentials")
}
func sqlCommonGetUserByID(ID int64) (User, error) {