long road to auth

Author: KlonD90

lib/connection.js

@@ -5,6 +5,15 @@ var _ = require('underscore');
 var EventEmitter = require('events');
 var msgpack = require('msgpack');
 var vow = require('vow');
+var crypto = require('crypto');
+var shasum = crypto.createHash('sha1');
+var xor = require('bitwise-xor');
+
+var shatransform = function(t){
+    var sha1 = crypto.createHash('sha1');
+    sha1.update(t);
+    return sha1.digest();
+};
 
 var states = {
     CONNECTING: 0,
@@ -70,6 +79,8 @@ TarantoolConnection.prototype.onData = function(data){
                     i--;
                 }
             }
+            console.log('connect data', data, data.toString(), data.slice(64, 108).toString(), data.length);
+            this.salt = data.slice(64, 108).toString('utf8');
             this.state = states.CONNECTED;
             break;
         case states.CONNECTED:
@@ -148,13 +159,13 @@ TarantoolConnection.prototype._processResponse = function(buffer){
         })[0];
         var dfd = task[2];
         if (success)
-            dfd.resolve(this._processResponseBody(task[0], obj[1]));
+            dfd.resolve(this._processResponseBody(task[0], obj[1][tarantoolConstants.KeysCode.data]));
         else
-            dfd.reject(obj[1]);
+            dfd.reject(obj[1][tarantoolConstants.KeysCode.e]);
     } catch(e){
         console.log(e, e.stack);
     }
-}
+};
 
 TarantoolConnection.prototype._processResponseBody = function(cmd, data){
     return data;
@@ -219,10 +230,79 @@ TarantoolConnection.prototype.select = function(spaceId, indexId, limit, offset,
     console.log(body, msgpack.unpack(body));
     console.log(buffered);
     this._request(header, body);
-    this.commandsQueue.push([tarantoolConstants.RequestCode.rqPing, reqId, dfd]);
+    this.commandsQueue.push([tarantoolConstants.RequestCode.rqSelect, reqId, dfd]);
+    return dfd.promise();
+};
+
+
+TarantoolConnection.prototype.insert = function(spaceId, tuple){
+    var dfd = vow.defer();
+    if (Array.isArray(tuple)){
+        console.log('start ping');
+        var reqId = requestId.getId();
+        var header = this._header(tarantoolConstants.RequestCode.rqInsert, reqId);
+        console.log('header', header);
+        var buffered = {
+            spaceId: msgpack.pack(spaceId),
+            tuple: msgpack.pack(tuple)
+        };
+        var body = Buffer.concat([new Buffer([0x82,tarantoolConstants.KeysCode.space_id]), buffered.spaceId,
+            new Buffer([tarantoolConstants.KeysCode.tuple]), buffered.tuple]);
+        console.log(body, msgpack.unpack(body));
+        console.log(buffered);
+        this._request(header, body);
+        this.commandsQueue.push([tarantoolConstants.RequestCode.rqInsert, reqId, dfd]);
+    }
+    else
+        dfd.reject(new Error('need array'));
     return dfd.promise();
 };
 
+TarantoolConnection.prototype.auth = function(username, password){
+    try{
+        var dfd = vow.defer();
+        console.log('auth');
+        var reqId = requestId.getId();
+        var header = this._header(tarantoolConstants.RequestCode.rqAuth, reqId);
+        var buffered = {
+            username: msgpack.pack(username)
+        };
+
+        var body = Buffer.concat([new Buffer([0x82, tarantoolConstants.KeysCode.username]), buffered.username,
+            new Buffer([0x21, 0x92]), tarantoolConstants.passEnter,
+            msgpack.pack(scramble(password, this.salt).toString('ascii'))]);
+        console.log(body, msgpack.unpack(body));
+        console.log(buffered, msgpack.pack(scramble(password, this.salt)));
+        this._request(header, body);
+        this.commandsQueue.push([tarantoolConstants.RequestCode.rqAuth, reqId, dfd]);
+        return dfd.promise();
+    } catch(e){
+        console.log(e);
+    }
+
+};
+
+function scramble(password, salt){
+    var encSalt = new Buffer(salt, 'base64').toString('ascii');
+    console.log('encSalt', encSalt);
+    var step1 = shatransform(password);
+    console.log('step1',step1, step1.length);
+    var step2 = shatransform(step1);
+    var step3 = shatransform(salt, step2);
+    console.log(password, step1, step2, step3, salt);
+    console.log('salt', salt);
+    var scramble = xor(step1, step3).toString('ascii');
+    console.log('scramble', step1.length, step2.length, scramble, scramble.length);
+    return scramble;
+}
+
+function myXor(l, r){
+    var x = [];
+    for (var i=0; i<l.length; i++)
+        x.push(l[i] ^ r[i]);
+    return new Buffer(x);
+}
+
 
 TarantoolConnection.prototype._header = function(command, reqId){
     try {
@@ -248,7 +328,6 @@ TarantoolConnection.prototype._request = function(header, body){
     } catch (e){
         console.log(e, e.stack);
     }
-
 };
 
 TarantoolConnection.prototype.destroy = function(interupt){

lib/const.js

@@ -1,3 +1,4 @@
+var msgpack = require('msgpack');
 // i steal it from go
 const RequestCode = {
 	rqSelect: 0x01,
@@ -56,7 +57,8 @@ const ExportPackage = {
 	OkCode: OkCode,
 	NetErrCode: NetErrCode,
 	TimeoutErrCode: TimeoutErrCode,
-	PacketLengthBytes: 5
+	PacketLengthBytes: 5,
+	passEnter: msgpack.pack('chap-sha1')
 };
 
 module.exports = ExportPackage;

package.json

@@ -22,6 +22,7 @@
   },
   "homepage": "https://github.com/KlonD90/node-tarantool-driver",
   "dependencies": {
+    "bitwise-xor": "0.0.0",
     "msgpack5": "^2.0.0",
     "underscore": "^1.8.3",
     "vow": "^0.4.9"