AccountsDatabase.h

/*
 *  Phusion Passenger - http://www.modrails.com/
 *  Copyright (c) 2010 Phusion
 *
 *  "Phusion Passenger" is a trademark of Hongli Lai & Ninh Bui.
 *
 *  Permission is hereby granted, free of charge, to any person obtaining a copy
 *  of this software and associated documentation files (the "Software"), to deal
 *  in the Software without restriction, including without limitation the rights
 *  to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 *  copies of the Software, and to permit persons to whom the Software is
 *  furnished to do so, subject to the following conditions:
 *
 *  The above copyright notice and this permission notice shall be included in
 *  all copies or substantial portions of the Software.
 *
 *  THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 *  IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 *  FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 *  AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 *  LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 *  OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 *  THE SOFTWARE.
 */
#ifndef _PASSENGER_ACCOUNTS_DATABASE_H_
#define _PASSENGER_ACCOUNTS_DATABASE_H_

#include <string>
#include <map>
#include <boost/thread.hpp>
#include <boost/shared_ptr.hpp>
#include "Account.h"
#include "ServerInstanceDir.h"
#include "StaticString.h"

/* This source file follows the security guidelines written in Account.h. */

namespace Passenger {

using namespace std;
using namespace boost;

class AccountsDatabase;
typedef shared_ptr<AccountsDatabase> AccountsDatabasePtr;


class AccountsDatabase {
private:
        mutable boost::mutex lock;
        map<string, AccountPtr> accounts;
        unsigned int uniqueNumber;
        
public:
        static AccountsDatabasePtr createDefault(const ServerInstanceDir::GenerationPtr &generation,
                                                 bool userSwitching, const string &defaultUser,
                                                 const string &defaultGroup);
        
        AccountsDatabase() {
                uniqueNumber = 0;
        }
        
        unsigned int size() const {
                lock_guard<boost::mutex> l(lock);
                return accounts.size();
        }
        
        vector<string> listUsernames() const {
                map<string, AccountPtr>::const_iterator it;
                vector<string> result;
                
                for (it = accounts.begin(); it != accounts.end(); it++) {
                        result.push_back(it->second->getUsername());
                }
                return result;
        }
        
        AccountPtr add(const string &username, const string &passwordOrHash, bool hashGiven, int rights = Account::ALL) {
                AccountPtr account(new Account(username, passwordOrHash, hashGiven, rights));
                lock_guard<boost::mutex> l(lock);
                accounts[username] = account;
                return account;
        }
        
        const AccountPtr get(const string &username) const {
                lock_guard<boost::mutex> l(lock);
                map<string, AccountPtr>::const_iterator it = accounts.find(username);
                if (it == accounts.end()) {
                        return AccountPtr();
                } else {
                        return it->second;
                }
        }
        
        AccountPtr authenticate(const string &username, const StaticString &userSuppliedPassword) const {
                lock_guard<boost::mutex> l(lock);
                map<string, AccountPtr>::const_iterator it = accounts.find(username);
                if (it == accounts.end()) {
                        return AccountPtr();
                } else {
                        AccountPtr account = it->second;
                        if (account->checkPasswordOrHash(userSuppliedPassword)) {
                                return account;
                        } else {
                                return AccountPtr();
                        }
                }
        }
        
        bool remove(const string &username) {
                lock_guard<boost::mutex> l(lock);
                map<string, AccountPtr>::iterator it = accounts.find(username);
                if (it == accounts.end()) {
                        return false;
                } else {
                        accounts.erase(it);
                        return true;
                }
        }
        
        unsigned int getUniqueNumber() {
                lock_guard<boost::mutex> l(lock);
                unsigned int result = uniqueNumber;
                uniqueNumber++;
                return result;
        }
};

} // namespace Passenger

#endif /* _PASSENGER_ACCOUNTS_DATABASE_H_ */

---