Base code for registration

.gitignore

@@ -1 +1,2 @@
 env/
+.env

flaskapp.py

@@ -0,0 +1,46 @@
+from flask import Flask, render_template, url_for, request, redirect, flash
+from forms import RegistrationForm
+from irc_register import ircregister
+import os
+
+app = Flask(__name__)
+
+# to prevent CSRF attacks
+# KEEP SECRET
+app.config["SECRET_KEY"] = os.getenv("FLASK_CSRF_SECRET_KEY")
+webchat_url = os.getenv("WEBCHAT_URL")
+home_url = os.getenv("HOME_URL")
+
+# getting the remote ip of user can be highly specific to your environment
+# https://stackoverflow.com/questions/3759981/get-ip-address-of-visitors-using-flask-for-python
+
+user_ip = request.environ.get("HTTP_X_REAL_IP", request.remote_addr)
+
+@app.route("/register", methods=["GET", "POST"])
+def register():
+    form = RegistrationForm()
+    if request.method == "POST":
+        userip = user_ip
+        username = request.form.get("username")
+        password = request.form.get("password")
+
+        response = ircregister(userip, username, password)
+        if response == "disconnected":
+            flash("Server Unavailable")
+        elif response == "WebIRC bad password":
+            flash("Bad Config. Please contact server administrators")
+        elif response == "ERR_ERRONEUSNICKNAME":  # shouldn't happen if sanitized in the form
+            flash("Illegal Character in Username. Please choose a different one one.")
+        elif response == "ERR_NICKNAMEINUSE":
+            flash("Username already taken. Please choose a different one!")
+        elif response == "SUCCESS":
+            return redirect(webchat_url)
+        else:
+            return redirect(home_url)
+    elif request.method == "GET":
+        return render_template('register.xhtml', title='Register', form=form)
+
+
+
+if __name__ == '__main__':
+    app.run(debug=True)

forms.py

@@ -0,0 +1,10 @@
+from flask_wtf import FlaskForm
+from wtforms import StringField, PasswordField, SubmitField
+from wtforms.validators import DataRequired, Length, EqualTo
+
+
+class RegistrationForm(FlaskForm):
+    username = StringField('Username', validators=[DataRequired(), Length(min=1, max=32)])
+    password = PasswordField('Password', validators=[DataRequired()])
+    confirm_password = PasswordField('Confirm Password', validators=[DataRequired(), EqualTo('password')])
+    submit = SubmitField('Register')

irc_register.py

@@ -1,4 +1,76 @@
-import irctokens, socket
+import irctokens
+import socket
+import os
 
-def ircregister(userip, webircpass, username, password, email):
+webircpass = os.getenv("WEBIRC_PASS")
-    pass
+
+def ircregister(userip, username, password, email="*"):
+
+    d = irctokens.StatefulDecoder()
+    e = irctokens.StatefulEncoder()
+    s = socket.socket()
+
+    # Here we assume using this only on localhost i.e. loopback
+    s.connect(("127.0.0.1", 6667))
+
+    # define the send function
+    def _send(line):
+        print(f"> {line.format()}")
+        e.push(line)
+        while e.pending():
+            e.pop(s.send(e.pending()))
+
+    # Registering connection
+    
+    # WEBIRC
+    _send(irctokens.build("WEBIRC", [ webircpass, "WebregGateway", userip, userip, "secure"]))
+
+    # Check for "ERROR :Invalid WebIRC password"
+    # Should all of this this be under a try except block?
+    lines = d.push(s.recv(1024))
+    if lines == None:
+        print("!disconnected")
+        return "disconnected"
+    elif lines.command == "ERROR" and lines.params == "Invalid WebIRC password":
+        return "WebIRC bad password"
+    
+    # Inform the server that we support
+    # CAP 3.2
+    _send(irctokens.build("CAP", ["LS", "302"]))
+
+    # REGISTER can be attempted before-connect if server supports
+    # but if the server responds with the corresponding FAIL we
+    # need to try again. We can also handle email-required using
+    # the same keys. How to access these key-value pairs?
+    # reference: https://github.com/ProgVal/ircv3-specifications/blob/register/extensions/account-registration.md#commands
+    
+    # NICK and USER
+    _send(irctokens.build("USER", ["u", "0", "*", username]))
+    _send(irctokens.build("NICK", [username]))
+
+    # go through all cases
+
+    while True:
+        for line in lines:
+            print(f"< {line.format()}")
+            if line.command == "432":
+                return "ERR_ERRONEUSNICKNAME"
+            elif line.command == "433":
+                return "ERR_NICKNAMEINUSE"
+            _send(irctokens.build("CAP", ["REQ", "draft/account-registration"]))
+            if line.command == "CAP" and line.params == ["*", "NAK", "draft/account-registration"]:
+                return "cap refused"
+            elif line.command == "CAP" and line.params == ["*", "ACK", "draft/account-registration"]:
+                to_send = irctokens.build("CAP", ["END"])
+                _send(to_send)
+            if line.command == "PING":
+                to_send = irctokens.build("PONG", [line.params[0]])
+                _send(to_send)
+            if line.command == "001":
+                # assuming no verif reqd.
+                to_send = irctokens.build("REGISTER", ["*", email, password])
+                _send(to_send)
+            if line.command == "REGISTER" and ("SUCCESS" in line.params):
+                to_send = irctokens.build("QUIT")
+                _send(to_send)
+                return "SUCCESS"

templates/register.xhtml

@@ -0,0 +1,27 @@
+<!DOCTYPE html>
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en">
+    <head>
+        <meta charset="UTF-8"/>
+        <!-- <meta http-equiv="X-UA-Compatible" content="IE=edge">
+        <meta name="viewport" content="width=device-width, initial-scale=1.0"> -->
+        <title>Register</title>
+    </head>
+    <body>
+        {% for message in get_flashed_messages() %}
+            {{ message }}
+        {% endfor %}
+        <form method="POST" action="/register">
+            {{ form.hidden_tag() }}
+            <fieldset>
+                <legend>Sign Up</legend>
+                {{ form.username.label }}
+                {{ form.username }}
+                {{ form.password.label }}
+                {{ form.password }}
+                {{ form.confirm_password.label }}
+                {{ form.confirm_password }}
+            </fieldset>
+            {{ form.submit }}
+        </form>
+    </body>
+</html>