Mercurial > prosody-modules
comparison mod_register_web/mod_register_web.lua @ 653:c08b0e4b7b38
mod_register_web: Extremely rough web registration page, with captcha
| author | Matthew Wild <mwild1@gmail.com> |
|---|---|
| date | Sun, 29 Apr 2012 17:36:31 +0100 |
| parents | |
| children | 03595194075a |
comparison
equal
deleted
inserted
replaced
| 652:3e6f43ab7e22 | 653:c08b0e4b7b38 |
|---|---|
| 1 local captcha_options = module:get_option("captcha_options", {}); | |
| 2 | |
| 3 function generate_captcha(display_options) | |
| 4 return (([[ | |
| 5 <script type="text/javascript" | |
| 6 src="http://www.google.com/recaptcha/api/challenge?k=$$recaptcha_public_key$$"> | |
| 7 </script> | |
| 8 <noscript> | |
| 9 <iframe src="http://www.google.com/recaptcha/api/noscript?k=$$recaptcha_public_key$$$$recaptcha_display_error$$" | |
| 10 height="300" width="500" frameborder="0"></iframe><br> | |
| 11 <textarea name="recaptcha_challenge_field" rows="3" cols="40"> | |
| 12 </textarea> | |
| 13 <input type="hidden" name="recaptcha_response_field" | |
| 14 value="manual_challenge"> | |
| 15 </noscript> | |
| 16 ]]):gsub("$$([^$]+)$%$", setmetatable({ | |
| 17 recaptcha_display_error = display_options and display_options.recaptcha_error | |
| 18 and ("&error="..display_options.recaptcha_error) or ""; | |
| 19 }, { | |
| 20 __index = function (t, k) | |
| 21 if captcha_options[k] then return captcha_options[k]; end | |
| 22 module:log("error", "Missing parameter from captcha_options: %s", k); | |
| 23 end }) | |
| 24 )); | |
| 25 end | |
| 26 | |
| 27 function generate_page(event, display_options) | |
| 28 local request = event.request; | |
| 29 return [[<!DOCTYPE html> | |
| 30 <html><body> | |
| 31 <h1>XMPP Account Registration</h1> | |
| 32 <form action="]]..request.path..[[" method="POST">]] | |
| 33 ..("<p>%s</p>\n"):format((display_options or {}).register_error or "").. | |
| 34 [[ <table> | |
| 35 <tr> | |
| 36 <td>Username:</td> | |
| 37 <td><input type="text" name="username">@server</td> | |
| 38 </tr> | |
| 39 <tr> | |
| 40 <td>Password:</td> | |
| 41 <td><input type="password" name="password"></td> | |
| 42 </tr> | |
| 43 <tr> | |
| 44 <td colspan='2'>]]..generate_captcha(display_options)..[[</td> | |
| 45 </tr> | |
| 46 </table> | |
| 47 <input type="submit" value="Register!"> | |
| 48 </form> | |
| 49 </body></html>]]; | |
| 50 end | |
| 51 | |
| 52 function register_user(form) | |
| 53 if usermanager.user_exists(form.username, module.host) then | |
| 54 return nil, "user-exists"; | |
| 55 end | |
| 56 return usermanager.create_user(form.username, form.password, module.host); | |
| 57 end | |
| 58 | |
| 59 function generate_success(event, form) | |
| 60 return [[<!DOCTYPE html> | |
| 61 <html><body><p>Registration succeeded! Your account is <pre>]] | |
| 62 ..form.username.."@"..module.host.. | |
| 63 [[</pre> - happy chatting!</p></body></html>]]; | |
| 64 end | |
| 65 | |
| 66 function generate_register_response(event, form, ok, err) | |
| 67 local message; | |
| 68 if ok then | |
| 69 return generate_success(event, form); | |
| 70 else | |
| 71 return generate_page(event, { register_error = err }); | |
| 72 end | |
| 73 end | |
| 74 | |
| 75 function handle_form(event) | |
| 76 local request, response = event.request, event.response; | |
| 77 local form = http.formdecode(request.body); | |
| 78 http.request("http://www.google.com/recaptcha/api/verify", { | |
| 79 body = http.formencode { | |
| 80 privatekey = captcha_options.recaptcha_private_key; | |
| 81 remoteip = request.conn:ip(); | |
| 82 challenge = form.recaptcha_challenge_field; | |
| 83 response = form.recaptcha_response_field; | |
| 84 }; | |
| 85 }, function (verify_result, code) | |
| 86 local verify_ok, verify_err = verify_result:match("^([^\n]+)\n([^\n]+)"); | |
| 87 if verify_ok == "true" then | |
| 88 local register_ok, register_err = register_user(form); | |
| 89 response:send(generate_register_response(event, form, register_ok, register_err)); | |
| 90 else | |
| 91 response:send(generate_page(event, { register_error = verify_err })); | |
| 92 end | |
| 93 end); | |
| 94 return true; -- Leave connection open until we respond above | |
| 95 end | |
| 96 | |
| 97 module:provides("http", { | |
| 98 route = { | |
| 99 GET = generate_page; | |
| 100 POST = handle_form; | |
| 101 }; | |
| 102 }); |
