Contents

require 'openssl'

module Artaius
  module Plugins
    # The plugin handles authentication via CHALLENGEAUTH. It requires two
    # parameters: username and password of the bot. For details go here:
    # http://www.quakenet.org/development/challengeauth/
    class Identify
      include Cinch::Plugin

      set :required_options, [:username, :password]

      # Internal: Q bot of QuakeNet. Nine times out of ten you write him a PM.
      Q = '[e-mail]'


      listen_to :connect,
                 method: :send_challenge

      # Internal: Identify a bot with Q.
      #
      # Returns nothing.
      def send_challenge(m)
        debug I18n.identify.send_challenge
        User(Q).privmsg('CHALLENGE')
      end

      match /^CHALLENGE (.+?) (.+)$/,
            method:     :challengeauth,
            use_prefix:  false,
            use_suffix:  false,
            react_on:   :notice

      # Internal: Authenticate bot with safe CHALLENGEAUTH method.
      #
      # m         - The recieved message.
      # challenge - The CHALLENGE parameter, given by Q bot.
      #
      # Returns nothing.
      def challengeauth(m, challenge)
        # Q is the only trusted user.
        return unless m.user && m.user.nick == 'Q'

        debug I18n.identify.challenge(challenge)

        username = config[:username].irc_downcase(:rfc1459)
        password = config[:password][0, 10]

        sha256 = OpenSSL::Digest::SHA256.new
        key = sha256.hexdigest("#{ username }:#{ sha256.hexdigest(password) }")
        response = OpenSSL::HMAC.hexdigest('SHA256', key, challenge)
        User(Q).privmsg("CHALLENGEAUTH #{ username } #{ response } HMAC-SHA-256")
      end
    end
  end
end

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
artaius-0.2.1	lib/artaius/plugins/identify.rb
artaius-0.2.0	lib/artaius/plugins/identify.rb