add recv_coa

which is a copy of authorize

diff --git a/src/modules/rlm_rest/rest.h b/src/modules/rlm_rest/rest.h
index 2ac3798c51136d66d9fe240ed68c781b29a40466..a9bb36d5150e612d9639c82cc77f1b6678b0017a 100644 (file)
--- a/src/modules/rlm_rest/rest.h
+++ b/src/modules/rlm_rest/rest.h
@@ -161,6 +161,9 @@ typedef struct rlm_rest_t {
        rlm_rest_section_t      checksimul;     //!< Configuration specific to simultaneous session
                                                //!< checking.
        rlm_rest_section_t      post_auth;      //!< Configuration specific to Post-auth
+#ifdef WITH_COA
+       rlm_rest_section_t      recv_coa;               //!< Configuration specific to recv-coa
+#endif
 } rlm_rest_t;
 
 /*

diff --git a/src/modules/rlm_rest/rlm_rest.c b/src/modules/rlm_rest/rlm_rest.c
index ca224898d67a7e74b6c4f0d07e39fc65243faf59..60d602fc23003e915aa51eb456f98fcf2edd1238 100644 (file)
--- a/src/modules/rlm_rest/rlm_rest.c
+++ b/src/modules/rlm_rest/rlm_rest.c
@@ -652,6 +652,97 @@ finish:
        return rcode;
 }
 
+#ifdef WITH_COA
+/*
+ *     Create the set of attribute-value pairs to check and reply
+ *     with for this user from the database.
+ */
+static rlm_rcode_t CC_HINT(nonnull) mod_recv_coa(void *instance, REQUEST *request)
+{
+       rlm_rest_t *inst = instance;
+       rlm_rest_section_t *section = &inst->recv_coa;
+
+       void *handle;
+       int hcode;
+       int rcode = RLM_MODULE_OK;
+       int ret;
+
+       if (!section->name) return RLM_MODULE_NOOP;
+
+       handle = fr_connection_get(inst->pool);
+       if (!handle) return RLM_MODULE_FAIL;
+
+       ret = rlm_rest_perform(instance, section, handle, request, NULL, NULL);
+       if (ret < 0) {
+               rcode = RLM_MODULE_FAIL;
+               goto finish;
+       }
+
+       hcode = rest_get_handle_code(handle);
+       switch (hcode) {
+       case 404:
+       case 410:
+               rcode = RLM_MODULE_NOTFOUND;
+               break;
+
+       case 403:
+               rcode = RLM_MODULE_USERLOCK;
+               break;
+
+       case 401:
+               /*
+                *      Attempt to parse content if there was any.
+                */
+               ret = rest_response_decode(inst, section, request, handle);
+               if (ret < 0) {
+                       rcode = RLM_MODULE_FAIL;
+                       break;
+               }
+
+               rcode = RLM_MODULE_REJECT;
+               break;
+
+       case 204:
+               rcode = RLM_MODULE_OK;
+               break;
+
+       default:
+               /*
+                *      Attempt to parse content if there was any.
+                */
+               if ((hcode >= 200) && (hcode < 300)) {
+                       ret = rest_response_decode(inst, section, request, handle);
+                       if (ret < 0)       rcode = RLM_MODULE_FAIL;
+                       else if (ret == 0) rcode = RLM_MODULE_OK;
+                       else               rcode = RLM_MODULE_UPDATED;
+                       break;
+               } else if (hcode < 500) {
+                       rcode = RLM_MODULE_INVALID;
+               } else {
+                       rcode = RLM_MODULE_FAIL;
+               }
+       }
+
+finish:
+       switch (rcode) {
+       case RLM_MODULE_INVALID:
+       case RLM_MODULE_FAIL:
+       case RLM_MODULE_USERLOCK:
+               rest_response_error(request, handle);
+               break;
+
+       default:
+               break;
+       }
+
+       rlm_rest_cleanup(instance, section, handle);
+
+       fr_connection_release(inst->pool, handle);
+
+       return rcode;
+}
+#endif
+
 static int parse_sub_section(CONF_SECTION *parent, rlm_rest_section_t *config, rlm_components_t comp)
 {
        CONF_SECTION *cs;
@@ -824,6 +915,10 @@ static int mod_instantiate(CONF_SECTION *conf, void *instance)
                (parse_sub_section(conf, &inst->authenticate, MOD_AUTHENTICATE) < 0) ||
                (parse_sub_section(conf, &inst->accounting, MOD_ACCOUNTING) < 0) ||
 
+#ifdef WITH_COA
+               (parse_sub_section(conf, &inst->recv_coa, MOD_RECV_COA) < 0) ||
+#endif
+
 /* @todo add behaviour for checksimul */
 /*             (parse_sub_section(conf, &inst->checksimul, MOD_SESSION) < 0) || */
                (parse_sub_section(conf, &inst->post_auth, MOD_POST_AUTH) < 0))
@@ -885,6 +980,9 @@ module_t rlm_rest = {
                [MOD_AUTHENTICATE]      = mod_authenticate,
                [MOD_AUTHORIZE]         = mod_authorize,
                [MOD_ACCOUNTING]        = mod_accounting,
-               [MOD_POST_AUTH]         = mod_post_auth
+               [MOD_POST_AUTH]         = mod_post_auth,
+#ifdef WITH_COA
+               [MOD_RECV_COA]          = mod_recv_coa
+#endif
        },
 };